[2011/04/20 16:10:13.608736, 2, pid=27181] lib/interface.c:340(add_interface) added interface eth0 ip=fe80::201:2ff:fea4:d6f9%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: [2011/04/20 16:10:13.609070, 2, pid=27181] lib/interface.c:340(add_interface) added interface eth0 ip=192.168.70.5 bcast=192.168.70.255 netmask=255.255.255.0 [2011/04/20 16:10:13.609178, 5, pid=27181] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 235680 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 0 [2011/04/20 16:10:13.609667, 5, pid=27181] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 235680 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 0 [2011/04/20 16:10:13.610093, 10, pid=27181] smbd/process.c:694(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2011/04/20 16:10:50.703459, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2008 [2011/04/20 16:10:50.703652, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7d8 [2011/04/20 16:10:50.703769, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 572 of length 2012 (0 toread) [2011/04/20 16:10:50.703837, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.703877, 5, pid=27181] lib/util.c:627(show_msg) size=2008 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=36608 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1924 (0x784) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1924 (0x784) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=1941 [2011/04/20 16:10:50.711748, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 84 07 00 00 1F 02 00 ........ ........ [0020] 00 6C 07 00 00 00 00 45 00 10 D1 E2 00 14 00 00 .l.....E ..Ñâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 B4 06 00 00 98 D2 E2 00 B4 06 00 .....´.. ..Òâ.´.. [0070] 00 5C 00 5C 00 73 00 65 00 72 00 76 00 65 00 72 .\.\.s.e .r.v.e.r [0080] 00 64 00 61 00 74 00 69 00 5C 00 74 00 75 00 6E .d.a.t.i .\.t.u.n [0090] 00 69 00 6E 00 67 00 00 00 00 00 00 00 00 00 00 .i.n.g.. ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 01 04 00 06 DC 00 D8 05 53 FF 81 03 01 00 0B .....Ü.Ø .Sÿ..... [00C0] 00 9A 0B 34 08 64 00 01 00 0F 00 58 02 02 00 01 ...4.d.. ...X.... [00D0] 00 58 02 03 00 01 00 41 00 34 00 00 00 00 00 00 .X.....A .4...... [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [0130] 00 02 00 00 00 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 50 52 49 ........ .....PRI [0150] 56 E2 30 00 00 00 00 00 00 00 00 00 00 00 00 00 Vâ0..... ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 18 00 00 00 00 00 10 27 10 27 10 ........ ....'.'. [01B0] 27 00 00 10 27 00 00 00 00 00 00 00 00 B8 02 8C '...'... .....¸.. [01C0] 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ........ ........ [01E0] 00 4C 00 10 00 50 34 03 00 28 88 04 00 00 00 00 .L...P4. .(...... [01F0] 00 00 00 00 00 01 00 01 00 00 00 00 00 00 00 00 ........ ........ [2011/04/20 16:10:50.714429, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:50.714517, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:50.714584, 5, pid=27181] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-2943704632-3037471470-1787688681-11452 contains 22 SIDs SID[ 0]: S-1-5-21-2943704632-3037471470-1787688681-11452 SID[ 1]: S-1-5-21-2943704632-3037471470-1787688681-11453 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2943704632-3037471470-1787688681-513 SID[ 6]: S-1-5-21-2943704632-3037471470-1787688681-11001 SID[ 7]: S-1-5-21-2943704632-3037471470-1787688681-11163 SID[ 8]: S-1-5-21-2943704632-3037471470-1787688681-11461 SID[ 9]: S-1-5-21-2943704632-3037471470-1787688681-11273 SID[ 10]: S-1-5-32-545 SID[ 11]: S-1-22-1-21452 SID[ 12]: S-1-22-2-21453 SID[ 13]: S-1-22-2-10034 SID[ 14]: S-1-22-2-10035 SID[ 15]: S-1-22-2-10003 SID[ 16]: S-1-22-2-10513 SID[ 17]: S-1-22-2-21001 SID[ 18]: S-1-22-2-21163 SID[ 19]: S-1-22-2-21461 SID[ 20]: S-1-22-2-21273 SID[ 21]: S-1-22-2-10032 SE_PRIV 0x0 0x0 0x0 0x0 [2011/04/20 16:10:50.715317, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 21452 Primary group is 21453 and contains 10 supplementary groups Group[ 0]: 21453 Group[ 1]: 10034 Group[ 2]: 10035 Group[ 3]: 10003 Group[ 4]: 10513 Group[ 5]: 21001 Group[ 6]: 21163 Group[ 7]: 21461 Group[ 8]: 21273 Group[ 9]: 10032 [2011/04/20 16:10:50.715670, 5, pid=27181] smbd/uid.c:354(change_to_user) change_to_user uid=(0,21452) gid=(0,21453) [2011/04/20 16:10:50.723810, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1924 params=0 setup=2 [2011/04/20 16:10:50.723921, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:50.723981, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:50.734463, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:50.743867, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:50.743953, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:50.744040, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1924 [2011/04/20 16:10:50.744118, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1924 [2011/04/20 16:10:50.744228, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1924 [2011/04/20 16:10:50.744292, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1924, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:50.744354, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:50.744463, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:50.744521, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1908 [2011/04/20 16:10:50.744594, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0784 000a auth_len : 0000 000c call_id : 0000021f [2011/04/20 16:10:50.749170, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:50.749251, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:50.749315, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:50.749373, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:50.749432, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1908, incoming data = 1908 [2011/04/20 16:10:50.749500, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:50.749570, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:50.749636, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000021f [2011/04/20 16:10:50.749963, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:50.750123, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:50.755821, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1908 [2011/04/20 16:10:50.755974, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:50.756046, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:50.756138, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:50.756203, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.756243, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=36608 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:50.756722, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 1F 02 00 ....#... . ...... [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:50.757242, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 102 [2011/04/20 16:10:50.757334, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x66 [2011/04/20 16:10:50.757396, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 573 of length 106 (0 toread) [2011/04/20 16:10:50.757459, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.757498, 5, pid=27181] lib/util.c:627(show_msg) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=36673 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=19 [2011/04/20 16:10:50.758506, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 73 00 70 00 6F 00 6F 00 6C 00 73 00 73 .\.s.p.o .o.l.s.s [0010] 00 00 00 ... [2011/04/20 16:10:50.758691, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBntcreateX (pid 27181) conn 0xb9222800 [2011/04/20 16:10:50.758757, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:50.758845, 10, pid=27181] smbd/nttrans.c:498(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = spoolss [2011/04/20 16:10:50.758938, 4, pid=27181] smbd/nttrans.c:283(nt_open_pipe) nt_open_pipe: Opening pipe \spoolss. [2011/04/20 16:10:50.759015, 5, pid=27181] smbd/files.c:119(file_new) allocated file structure 3098, fnum = 7194 (2 used) [2011/04/20 16:10:50.759107, 4, pid=27181] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p) Create pipe requested \spoolss [2011/04/20 16:10:50.759191, 10, pid=27181] rpc_server/srv_lsa_hnd.c:131(init_pipe_handle_list) init_pipe_handles: pipe_handles ref count = 2 for pipe \spoolss [2011/04/20 16:10:50.759746, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.759861, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:50.759924, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.759986, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:50.760045, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:50.760195, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:50.760271, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:50.760368, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username msansuini, was [2011/04/20 16:10:50.760440, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain DOMINIOCSA, was [2011/04/20 16:10:50.760502, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username msansuini, was [2011/04/20 16:10:50.760564, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name Monia Sansuini, was [2011/04/20 16:10:50.760680, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\192.168.70.2\msansuini, was [2011/04/20 16:10:50.760744, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive o:, was NULL [2011/04/20 16:10:50.760807, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script netlogon.bat, was [2011/04/20 16:10:50.760871, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2011/04/20 16:10:50.760934, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:50.760998, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.761074, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:50.761138, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.761200, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:50.761258, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:50.761378, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:50.761454, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:50.761521, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-0 [2011/04/20 16:10:50.761592, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-0 from rid 0 [2011/04/20 16:10:50.761704, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-2943704632-3037471470-1787688681-11453 [2011/04/20 16:10:50.761780, 4, pid=27181] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p) Created internal pipe \spoolss (pipes_open=0) [2011/04/20 16:10:50.761856, 5, pid=27181] smbd/nttrans.c:372(do_ntcreate_pipe_open) do_ntcreate_pipe_open: open pipe = \spoolss [2011/04/20 16:10:50.762175, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:50.762266, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:50.762328, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 574 of length 184 (0 toread) [2011/04/20 16:10:50.762389, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.762428, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=36736 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=113 [2011/04/20 16:10:50.763104, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 21 02 00 ........ .`...!.. [0020] 00 48 00 00 00 00 00 01 00 10 D1 E2 00 14 00 00 .H...... ..Ñâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:50.764004, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:50.764084, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:50.764175, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:50.764247, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:50.764305, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:50.764366, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:50.764427, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:50.764490, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:50.764554, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:50.764619, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:50.764679, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:50.764742, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:50.764805, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:50.764864, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:50.764923, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:50.764987, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000221 [2011/04/20 16:10:50.765319, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:50.765379, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:50.765445, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:50.765504, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:50.765564, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:50.765629, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:50.765706, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:50.765911, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000221 [2011/04/20 16:10:50.766286, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:50.766492, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:50.766609, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:50.766741, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:50.766811, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:50.766902, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:50.766965, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.767004, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=36736 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:50.767482, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 21 02 00 ....#... . ...!.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:50.767988, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 136 [2011/04/20 16:10:50.768080, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x88 [2011/04/20 16:10:50.768161, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 575 of length 140 (0 toread) [2011/04/20 16:10:50.768223, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.768261, 5, pid=27181] lib/util.c:627(show_msg) size=136 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=36801 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7194 (0x1C1A) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 72 (0x48) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=73 [2011/04/20 16:10:50.768823, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 20 02 00 î....... .H... .. [0010] 00 B8 10 B8 10 F0 53 00 00 01 00 00 00 00 00 01 .¸.¸.ðS. ........ [0020] 00 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 89 .xV4.4.Í «ï..#Eg. [0030] AB 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 «.....]. .ë.É..è. [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2011/04/20 16:10:50.769240, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBwriteX (pid 27181) conn 0xb9222800 [2011/04/20 16:10:50.769306, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:50.769373, 6, pid=27181] smbd/pipes.c:291(reply_pipe_write_and_X) reply_pipe_write_and_X: 1c1a name: spoolss len: 72 [2011/04/20 16:10:50.769566, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 72 [2011/04/20 16:10:50.769632, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 72 [2011/04/20 16:10:50.769692, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2011/04/20 16:10:50.769810, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:50.769876, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:50.769936, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 56 [2011/04/20 16:10:50.769994, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2011/04/20 16:10:50.770058, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000220 [2011/04/20 16:10:50.770391, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:50.770452, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 11, flags = 3 [2011/04/20 16:10:50.770515, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:50.770574, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 56 [2011/04/20 16:10:50.770632, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 [2011/04/20 16:10:50.770696, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 11 [2011/04/20 16:10:50.770773, 5, pid=27181] rpc_server/srv_pipe.c:1642(api_pipe_bind_req) api_pipe_bind_req: decode request. 1642 [2011/04/20 16:10:50.770845, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_rb [2011/04/20 16:10:50.770908, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 0008 num_contexts: 01 000c context_id : 0000 000e num_transfer_syntaxes: 01 [2011/04/20 16:10:50.771116, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 00000f smb_io_rpc_iface [2011/04/20 16:10:50.771179, 7, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_uuid uuid 0010 data : 12345678 0014 data : 1234 0016 data : abcd 0018 data : ef 00 001a data : 01 23 45 67 89 ab 0020 version: 00000001 [2011/04/20 16:10:50.771406, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_rpc_iface [2011/04/20 16:10:50.771468, 7, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_uuid uuid 0024 data : 8a885d04 0028 data : 1ceb 002a data : 11c9 002c data : 9f e8 002e data : 08 00 2b 10 48 60 0034 version: 00000002 [2011/04/20 16:10:50.771746, 3, pid=27181] rpc_server/srv_pipe.c:1668(api_pipe_bind_req) api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss [2011/04/20 16:10:50.771811, 5, pid=27181] rpc_server/srv_pipe.c:1718(api_pipe_bind_req) api_pipe_bind_req: make response. 1718 [2011/04/20 16:10:50.771872, 3, pid=27181] rpc_server/srv_pipe.c:998(check_bind_req) check_bind_req for \spoolss checking lsarpc checking winreg checking initshutdown checking dssetup checking wkssvc checking svcctl checking ntsvcs checking netlogon checking netdfs checking srvsvc checking spoolss [2011/04/20 16:10:50.772152, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_ba [2011/04/20 16:10:50.772248, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 [2011/04/20 16:10:50.772386, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000008 smb_io_rpc_addr_str 0008 len: 000e 000a str: \PIPE\spoolss. [2011/04/20 16:10:50.772531, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_results 0018 num_results: 01 001c result : 0000 001e reason : 0000 [2011/04/20 16:10:50.772669, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000020 smb_io_rpc_iface [2011/04/20 16:10:50.772732, 7, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000020 smb_io_uuid uuid 0020 data : 8a885d04 0024 data : 1ceb 0026 data : 11c9 0028 data : 9f e8 002a data : 08 00 2b 10 48 60 0030 version: 00000002 [2011/04/20 16:10:50.772958, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000220 [2011/04/20 16:10:50.773292, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 56 [2011/04/20 16:10:50.773394, 3, pid=27181] smbd/pipes.c:352(pipe_write_andx_done) writeX-IPC nwritten=72 [2011/04/20 16:10:50.774595, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 59 [2011/04/20 16:10:50.774702, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x3b [2011/04/20 16:10:50.774764, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 576 of length 63 (0 toread) [2011/04/20 16:10:50.774825, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.774864, 5, pid=27181] lib/util.c:627(show_msg) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=36865 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7194 (0x1C1A) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2011/04/20 16:10:50.775392, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBreadX (pid 27181) conn 0xb9222800 [2011/04/20 16:10:50.775457, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:50.784256, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:50.784557, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2011/04/20 16:10:50.784709, 3, pid=27181] smbd/pipes.c:462(pipe_read_andx_done) readX-IPC min=1024 max=1024 nread=68 [2011/04/20 16:10:50.790578, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:50.790682, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:50.790744, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 577 of length 292 (0 toread) [2011/04/20 16:10:50.790805, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.790844, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=36929 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=221 [2011/04/20 16:10:50.791505, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 20 02 00 ........ .Ì... .. [0020] 00 B4 00 00 00 00 00 45 00 40 6F E2 00 14 00 00 .´.....E .@oâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 76 01 1C 00 00 ........ .Øüv.... [0080] 00 D0 B9 A6 00 34 FD 76 01 28 0A 00 00 03 00 00 .й¦.4ýv .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:50.792692, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:50.792759, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:50.792848, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:50.792921, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:50.792980, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:50.793041, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:50.793100, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:50.793165, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:50.793229, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:50.793295, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:50.793356, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:50.793419, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:50.793484, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:50.793543, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:50.793602, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:50.793666, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000220 [2011/04/20 16:10:50.793999, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:50.794095, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:50.794159, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:50.794218, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:50.794277, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:50.794341, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:50.794403, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 000000b4 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:50.794547, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 73 [2011/04/20 16:10:50.794677, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:50.794748, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:50.794821, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:50.795991, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:50.803804, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:50.803951, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[10] [0000] 00 00 00 00 50 00 00 00 00 00 00 00 AE 4D 6A E9 ....P... ....®Mjé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:50.804129, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:50.804211, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:50.804345, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:45 2011 [2011/04/20 16:10:50.804546, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:50 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:50.805609, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 10 printer handles active [2011/04/20 16:10:50.805704, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 50 00 00 00 00 00 00 00 AE 4D 6A E9 ....P... ....®Mjé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:50.805888, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 50 00 00 00 00 00 00 00 AE 4D 6A E9 ....P... ....®Mjé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:50.806067, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:50.943210, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:50.943375, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:50.943452, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:50.943521, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.943610, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:50.943673, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.943797, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:50.943857, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:50.944050, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:50.944118, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:50.944181, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:50.944243, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:50.944311, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:50.944420, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:50.944485, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:50.944551, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:50.944616, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:50.944692, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:50.944760, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:50.944828, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:50.944891, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:50.944952, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:50.945013, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:50.945152, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:50.945278, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:50.945354, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.945422, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:50.945497, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:50.945606, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:50.945670, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:50.945731, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:50.945793, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:50.945851, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:50.945964, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:50.946036, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.946121, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:50.946182, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:50.946260, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:50.954116, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:50.954256, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:50.954319, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:50.954381, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:50.954441, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:50.954568, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:50.954641, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.954733, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:50.954797, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:50.954859, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:50.954928, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:50.954997, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:50.955094, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:50.955158, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:50.955224, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:50.955349, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:50.955430, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:50.955497, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:50.955566, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:50.955631, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:50.955745, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:50.955809, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:50.955868, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:50.955986, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:50.956059, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:50.956127, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:50.956200, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:50.956307, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:50.956411, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:50.956504, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:50.969930, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:50.970056, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:50.970121, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000050-0000-0000-ae4d-6ae92d6a0000 result : WERR_OK [2011/04/20 16:10:50.981514, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:50.981649, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:50.981717, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:50.981841, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:50.981916, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:50.981988, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000220 [2011/04/20 16:10:50.982371, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:50.982560, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:50.982624, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.982664, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=36929 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:50.983142, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 20 02 00 ........ .0... .. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 50 00 00 ........ .....P.. [0020] 00 00 00 00 00 AE 4D 6A E9 2D 6A 00 00 00 00 00 .....®Mj é-j..... [0030] 00 . [2011/04/20 16:10:50.984905, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 164 [2011/04/20 16:10:50.985017, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa4 [2011/04/20 16:10:50.985080, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 578 of length 168 (0 toread) [2011/04/20 16:10:50.985141, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:50.985179, 5, pid=27181] lib/util.c:627(show_msg) size=164 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=36993 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 80 (0x50) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 80 (0x50) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=97 [2011/04/20 16:10:50.985782, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 50 00 00 00 22 02 00 ........ .P...".. [0020] 00 38 00 00 00 00 00 1A 00 00 00 00 00 50 00 00 .8...... .....P.. [0030] 00 00 00 00 00 AE 4D 6A E9 2D 6A 00 00 09 00 00 .....®Mj é-j..... [0040] 00 00 00 00 00 09 00 00 00 43 00 68 00 61 00 6E ........ .C.h.a.n [0050] 00 67 00 65 00 49 00 64 00 00 00 6E 00 04 00 00 .g.e.I.d ...n.... [0060] 00 . [2011/04/20 16:10:50.986340, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:50.986406, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:50.986496, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=80 params=0 setup=2 [2011/04/20 16:10:50.986568, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:50.986626, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:50.986687, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:50.986748, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:50.986812, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:50.986876, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 80 [2011/04/20 16:10:50.986941, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:50.987052, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:50.987116, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 80, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:50.987180, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:50.987239, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 64 [2011/04/20 16:10:50.987298, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 64 [2011/04/20 16:10:50.987361, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0050 000a auth_len : 0000 000c call_id : 00000222 [2011/04/20 16:10:50.987740, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:50.987802, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:50.987866, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:50.987924, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 64 [2011/04/20 16:10:50.987983, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 64, incoming data = 64 [2011/04/20 16:10:50.988046, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:50.988108, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000038 0004 context_id: 0000 0006 opnum : 001a [2011/04/20 16:10:50.988248, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:50.988315, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:50.988384, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1a - api_rpcTNP: rpc command: SPOOLSS_GETPRINTERDATA [2011/04/20 16:10:50.988455, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[26].fn == 0xb7202a70 [2011/04/20 16:10:50.988988, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_GetPrinterData: struct spoolss_GetPrinterData in: struct spoolss_GetPrinterData handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000050-0000-0000-ae4d-6ae92d6a0000 value_name : 'ChangeId' offered : 0x00000004 (4) [2011/04/20 16:10:51.005300, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 50 00 00 00 00 00 00 00 AE 4D 6A E9 ....P... ....®Mjé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:51.005525, 4, pid=27181] rpc_server/srv_spoolss_nt.c:8624(_spoolss_GetPrinterDataEx) _spoolss_GetPrinterDataEx [2011/04/20 16:10:51.005587, 10, pid=27181] rpc_server/srv_spoolss_nt.c:8627(_spoolss_GetPrinterDataEx) _spoolss_GetPrinterDataEx: key => [PrinterDriverData], value => [ChangeId] [2011/04/20 16:10:51.005652, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 50 00 00 00 00 00 00 00 AE 4D 6A E9 ....P... ....®Mjé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:51.005883, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:51.006005, 10, pid=27181] printing/nt_printing.c:4549(get_a_printer_internal) get_a_printer: [tuning] level 2 [2011/04/20 16:10:51.006209, 8, pid=27181] printing/nt_printing.c:2727(unpack_devicemode) Unpacked devicemode [\\SERVERDATI\tuning](Letter) [2011/04/20 16:10:51.006282, 10, pid=27181] printing/nt_printing.c:2766(add_new_printer_key) add_new_printer_key: Inserted new data key [PrinterDriverData] [2011/04/20 16:10:51.006346, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [PrinterDriverData:TrayFormSize], len: 4 [2011/04/20 16:10:51.006415, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [PrinterDriverData:TrayFormTable], len: 68 [2011/04/20 16:10:51.006482, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [PrinterDriverData:Meta Printer Driver Name], len: 21 [2011/04/20 16:10:51.006553, 10, pid=27181] printing/nt_printing.c:2766(add_new_printer_key) add_new_printer_key: Inserted new data key [DsSpooler] [2011/04/20 16:10:51.006615, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:printerName], len: 14 [2011/04/20 16:10:51.006682, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:serverName], len: 22 [2011/04/20 16:10:51.006750, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:shortServerName], len: 22 [2011/04/20 16:10:51.006817, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:uNCName], len: 40 [2011/04/20 16:10:51.006958, 9, pid=27181] printing/nt_printing.c:4011(get_a_printer_2) Unpacked printer [tuning] name [\\serverdati\tuning] running driver [RICOH Aficio 3232C PS] [2011/04/20 16:10:51.007117, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_GetPrinterData: struct spoolss_GetPrinterData out: struct spoolss_GetPrinterData type : * type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0xc8 (200) [1] : 0xd8 (216) [2] : 0xb4 (180) [3] : 0x23 (35) needed : * needed : 0x00000004 (4) result : WERR_OK [2011/04/20 16:10:51.008180, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:51.008270, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:51.008336, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 64 [2011/04/20 16:10:51.008458, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:51.008525, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 20. [2011/04/20 16:10:51.008597, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000222 [2011/04/20 16:10:51.008921, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000014 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:51.009169, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..44] (align 0) [2011/04/20 16:10:51.009237, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:51.009278, 5, pid=27181] lib/util.c:627(show_msg) size=100 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=36993 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 44 (0x2C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2011/04/20 16:10:51.009816, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 00 00 00 22 02 00 ........ .,...".. [0010] 00 14 00 00 00 00 00 00 00 04 00 00 00 04 00 00 ........ ........ [0020] 00 C8 D8 B4 23 04 00 00 00 00 00 00 00 .ÈØ´#... ..... [2011/04/20 16:10:52.537448, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2008 [2011/04/20 16:10:52.537624, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7d8 [2011/04/20 16:10:52.537689, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 579 of length 2012 (0 toread) [2011/04/20 16:10:52.537750, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.537789, 5, pid=27181] lib/util.c:627(show_msg) size=2008 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37057 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1924 (0x784) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1924 (0x784) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1941 [2011/04/20 16:10:52.538393, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 84 07 00 00 23 02 00 ........ .....#.. [0020] 00 6C 07 00 00 00 00 45 00 B0 CB E2 00 14 00 00 .l.....E .°Ëâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 B4 06 00 00 80 E0 E2 00 B4 06 00 .....´.. ..àâ.´.. [0070] 00 5C 00 5C 00 73 00 65 00 72 00 76 00 65 00 72 .\.\.s.e .r.v.e.r [0080] 00 64 00 61 00 74 00 69 00 5C 00 74 00 75 00 6E .d.a.t.i .\.t.u.n [0090] 00 69 00 6E 00 67 00 00 00 00 00 00 00 00 00 00 .i.n.g.. ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 01 04 00 06 DC 00 D8 05 53 FF 81 03 01 00 0B .....Ü.Ø .Sÿ..... [00C0] 00 9A 0B 34 08 64 00 01 00 0F 00 58 02 02 00 01 ...4.d.. ...X.... [00D0] 00 58 02 03 00 01 00 41 00 34 00 00 00 00 00 00 .X.....A .4...... [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [0130] 00 02 00 00 00 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 50 52 49 ........ .....PRI [0150] 56 E2 30 00 00 00 00 00 00 00 00 00 00 00 00 00 Vâ0..... ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 18 00 00 00 00 00 10 27 10 27 10 ........ ....'.'. [01B0] 27 00 00 10 27 00 00 00 00 00 00 00 00 B8 02 8C '...'... .....¸.. [01C0] 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ........ ........ [01E0] 00 4C 00 10 00 50 34 03 00 28 88 04 00 00 00 00 .L...P4. .(...... [01F0] 00 00 00 00 00 01 00 01 00 00 00 00 00 00 00 00 ........ ........ [2011/04/20 16:10:52.541108, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.541184, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.541293, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1924 params=0 setup=2 [2011/04/20 16:10:52.541367, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.541424, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.541485, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.541544, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.541607, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.541674, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1924 [2011/04/20 16:10:52.541739, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1924 [2011/04/20 16:10:52.541800, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1924 [2011/04/20 16:10:52.541863, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1924, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.541928, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.541987, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:52.542045, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1908 [2011/04/20 16:10:52.542110, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0784 000a auth_len : 0000 000c call_id : 00000223 [2011/04/20 16:10:52.542438, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.542499, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.542567, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.542625, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:52.542683, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1908, incoming data = 1908 [2011/04/20 16:10:52.542748, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.542810, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000076c 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:52.542994, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.543060, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.543129, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:52.543201, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:52.543331, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x000006b4 (1716) devmode : * devmode: struct spoolss_DeviceMode devicename : '\\serverdati\tuning' specversion : DMSPEC_NT4_AND_ABOVE (1025) driverversion : 0x0600 (1536) size : 0x00dc (220) __driverextra_length : 0x05d8 (1496) fields : 0x0381ff53 (58851155) 1: DEVMODE_ORIENTATION 1: DEVMODE_PAPERSIZE 0: DEVMODE_PAPERLENGTH 0: DEVMODE_PAPERWIDTH 1: DEVMODE_SCALE 0: DEVMODE_POSITION 1: DEVMODE_NUP 1: DEVMODE_COPIES 1: DEVMODE_DEFAULTSOURCE 1: DEVMODE_PRINTQUALITY 1: DEVMODE_COLOR 1: DEVMODE_DUPLEX 1: DEVMODE_YRESOLUTION 1: DEVMODE_TTOPTION 1: DEVMODE_COLLATE 1: DEVMODE_FORMNAME 0: DEVMODE_LOGPIXELS 0: DEVMODE_BITSPERPEL 0: DEVMODE_PELSWIDTH 0: DEVMODE_PELSHEIGHT 0: DEVMODE_DISPLAYFLAGS 0: DEVMODE_DISPLAYFREQUENCY 1: DEVMODE_ICMMETHOD 1: DEVMODE_ICMINTENT 1: DEVMODE_MEDIATYPE 0: DEVMODE_DITHERTYPE 0: DEVMODE_PANNINGWIDTH 0: DEVMODE_PANNINGHEIGHT orientation : DMORIENT_PORTRAIT (1) papersize : DMPAPER_A5 (11) paperlength : 0x0b9a (2970) paperwidth : 0x0834 (2100) scale : 0x0064 (100) copies : 0x0001 (1) defaultsource : DMBIN_FORMSOURCE (15) printquality : UNKNOWN_ENUM_VALUE (600) color : DMRES_COLOR (2) duplex : DMDUP_SIMPLEX (1) yresolution : 0x0258 (600) ttoption : DMTT_SUBDEV (3) collate : DMCOLLATE_TRUE (1) formname : 'A4' logpixels : 0x0000 (0) bitsperpel : 0x00000000 (0) pelswidth : 0x00000000 (0) pelsheight : 0x00000000 (0) displayflags : DMNUP_SYSTEM (1) displayfrequency : 0x00000000 (0) icmmethod : DMICMMETHOD_NONE (1) icmintent : DMICM_CONTRAST (2) mediatype : UNKNOWN_ENUM_VALUE (256) dithertype : UNKNOWN_ENUM_VALUE (0) reserved1 : 0x00000000 (0) reserved2 : 0x00000000 (0) panningwidth : 0x00000000 (0) panningheight : 0x00000000 (0) driverextra_data : DATA_BLOB length=1496 [2011/04/20 16:10:52.546046, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 00 PRIVâ0.. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 27 ........ .......' [0060] 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 00 .'.'...' ........ [0070] B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 00 ¸....... ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ........ ........ [0090] 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 00 ....L... P4..(... [00A0] 00 00 00 00 00 00 00 00 01 00 01 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 84 E0 5A 4E ........ .....àZN [00C0] 1C 00 00 00 00 00 00 00 01 00 FF 00 00 00 FF 00 ........ ..ÿ...ÿ. [00D0] 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ........ ........ [00E0] 00 00 00 00 02 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 02 00 01 00 03 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 B8 02 00 00 53 4D 54 4A 00 00 00 00 ....¸... SMTJ.... [02E0] 10 00 A8 02 52 00 49 00 43 00 4F 00 48 00 20 00 ..¨.R.I. C.O.H. . [02F0] 41 00 66 00 69 00 63 00 69 00 6F 00 20 00 33 00 A.f.i.c. i.o. .3. [0300] 32 00 33 00 32 00 43 00 20 00 50 00 53 00 00 00 2.3.2.C. .P.S... [0310] 52 65 73 6F 6C 75 74 69 6F 6E 00 36 30 30 64 70 Resoluti on.600dp [0320] 69 00 52 49 50 61 70 65 72 50 6F 6C 69 63 79 00 i.RIPape rPolicy. [0330] 50 72 6F 6D 70 74 55 73 65 72 00 50 61 67 65 53 PromptUs er.PageS [0340] 69 7A 65 00 41 34 00 50 61 67 65 52 65 67 69 6F ize.A4.P ageRegio [0350] 6E 00 00 49 6E 70 75 74 53 6C 6F 74 00 2A 55 73 n..Input Slot.*Us [0360] 65 46 6F 72 6D 54 72 61 79 54 61 62 6C 65 00 4C eFormTra yTable.L [0370] 65 61 64 69 6E 67 45 64 67 65 00 00 44 75 70 6C eadingEd ge..Dupl [0380] 65 78 00 4E 6F 6E 65 00 52 49 43 6F 6C 6C 61 74 ex.None. RICollat [0390] 65 00 46 61 6C 73 65 00 52 49 50 72 69 6E 74 4D e.False. RIPrintM [03A0] 6F 64 65 00 30 72 68 69 74 00 43 6F 6C 6F 72 4D ode.0rhi t.ColorM [03B0] 6F 64 65 6C 00 43 4D 59 4B 00 52 50 53 42 69 74 odel.CMY K.RPSBit [03C0] 73 50 65 72 50 69 78 65 6C 00 32 42 69 74 73 50 sPerPixe l.2BitsP [03D0] 65 72 50 69 78 65 6C 00 52 69 6D 61 67 65 73 6D erPixel. Rimagesm [03E0] 00 4F 66 66 00 52 50 53 52 47 42 63 6F 72 72 65 .Off.RPS RGBcorre [03F0] 63 74 00 44 65 74 61 69 6C 42 72 69 67 68 74 00 ct.Detai lBright. [0400] 52 50 53 43 6F 6C 6F 72 52 65 6E 64 44 69 63 74 RPSColor RendDict [0410] 00 41 75 74 6F 00 52 50 53 43 6F 6C 6F 72 53 65 .Auto.RP SColorSe [0420] 70 00 4E 4F 53 45 50 41 52 41 54 45 00 52 50 53 p.NOSEPA RATE.RPS [0430] 44 69 74 68 65 72 54 79 70 65 00 41 75 74 6F 00 DitherTy pe.Auto. [0440] 52 50 53 42 6C 61 63 6B 4D 6F 64 65 00 47 72 61 RPSBlack Mode.Gra [0450] 79 00 52 50 53 42 6C 61 63 6B 4F 76 65 72 50 72 y.RPSBla ckOverPr [0460] 69 6E 74 00 46 61 6C 73 65 00 52 63 6D 79 6B 73 int.Fals e.Rcmyks [0470] 69 6D 75 6C 61 74 69 6F 6E 00 4F 66 66 00 4D 65 imulatio n.Off.Me [0480] 64 69 61 54 79 70 65 00 50 6C 61 69 6E 00 4F 75 diaType. Plain.Ou [0490] 74 70 75 74 42 69 6E 00 44 65 66 61 75 6C 74 00 tputBin. Default. [04A0] 53 74 61 70 6C 65 4C 6F 63 61 74 69 6F 6E 00 4E StapleLo cation.N [04B0] 6F 6E 65 00 52 49 57 61 74 65 72 6D 61 72 6B 00 one.RIWa termark. [04C0] 4F 66 66 00 52 49 57 4D 54 65 78 74 00 43 6F 6E Off.RIWM Text.Con [04D0] 66 69 64 65 6E 74 69 61 6C 00 52 49 77 6D 46 6F fidentia l.RIwmFo [04E0] 6E 74 00 48 65 6C 76 65 74 69 63 61 42 00 52 49 nt.Helve ticaB.RI [04F0] 77 6D 53 69 7A 65 00 33 36 00 52 49 77 6D 41 6E wmSize.3 6.RIwmAn [0500] 67 6C 65 00 34 35 44 65 67 00 52 49 77 6D 54 65 gle.45De g.RIwmTe [0510] 78 74 53 74 79 6C 65 00 47 72 61 79 00 00 00 00 xtStyle. Gray.... [0520] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0530] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0560] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 00 00 00 00 4C 00 00 00 ........ ....L... [0590] 45 42 44 41 45 42 44 41 00 00 00 00 00 00 00 00 EBDAEBDA ........ [05A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 ........ access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:52.554363, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:52.554453, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[11] [0000] 00 00 00 00 51 00 00 00 00 00 00 00 AE 4D 6C E9 ....Q... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.554627, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:52.554710, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:52.554846, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:50 2011 [2011/04/20 16:10:52.554953, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:52 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:52.555118, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 11 printer handles active [2011/04/20 16:10:52.555181, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 51 00 00 00 00 00 00 00 AE 4D 6C E9 ....Q... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.555360, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 51 00 00 00 00 00 00 00 AE 4D 6C E9 ....Q... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.555538, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.557221, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:52.557379, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:52.557496, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:52.557568, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.557657, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.557721, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.557783, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.557842, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.558023, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.558093, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.558155, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.558217, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.558284, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.558380, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.558445, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.558511, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.558575, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.558651, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.558718, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.558787, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.558851, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.558912, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.558973, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.559031, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.559144, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.559216, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.559284, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.559358, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.559462, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.559525, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.559586, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.559648, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.559776, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.559940, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:52.560015, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.560086, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:52.560159, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:52.560231, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:52.560411, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.560481, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.560542, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.560602, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.560660, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.560770, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.560842, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.560944, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.561008, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.561070, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.561131, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.561200, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.561288, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.561354, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.561420, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.561484, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.561560, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.561628, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.561695, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.561759, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.561820, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.561882, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.561940, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.562050, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.562123, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.562245, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.562322, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.562426, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:52.562532, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.562626, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:52.562796, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:52.562865, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:52.562929, 5, pid=27181] rpc_server/srv_spoolss_nt.c:1521(convert_devicemode) convert_devicemode: allocating a generic devmode [2011/04/20 16:10:52.563020, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000051-0000-0000-ae4d-6ce92d6a0000 result : WERR_OK [2011/04/20 16:10:52.563303, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.563413, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.563482, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1908 [2011/04/20 16:10:52.563620, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.563758, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.563833, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000223 [2011/04/20 16:10:52.564157, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.564342, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.564406, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.564445, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37057 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.564923, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 23 02 00 ........ .0...#.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 51 00 00 ........ .....Q.. [0020] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 00 00 00 .....®Ml é-j..... [0030] 00 . [2011/04/20 16:10:52.565593, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:52.565689, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:52.565750, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 580 of length 292 (0 toread) [2011/04/20 16:10:52.565811, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.565850, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37120 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=221 [2011/04/20 16:10:52.566590, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 24 02 00 ........ .Ì...$.. [0020] 00 B4 00 00 00 00 00 45 00 30 CD E2 00 14 00 00 .´.....E .0Íâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 76 01 1C 00 00 ........ .Øüv.... [0080] 00 D0 B9 A6 00 34 FD 76 01 28 0A 00 00 03 00 00 .й¦.4ýv .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:52.567785, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.567855, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.567946, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:52.568018, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.568076, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.568138, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.568199, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:52.568263, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:52.568329, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:52.568393, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:52.568453, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:52.568518, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.568581, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.568640, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.568749, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:52.568814, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000224 [2011/04/20 16:10:52.569145, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.569206, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.569271, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.569330, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.569389, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:52.569452, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:52.569520, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:52.569584, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000224 [2011/04/20 16:10:52.569913, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.570074, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:52.570189, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:52.570303, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.570372, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:52.570463, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:52.570526, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.570565, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37120 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:52.571042, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 24 02 00 ....#... . ...$.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:52.571477, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:52.571611, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:52.571673, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 581 of length 204 (0 toread) [2011/04/20 16:10:52.571807, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.571846, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37185 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=133 [2011/04/20 16:10:52.572581, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 25 02 00 ........ .t...%.. [0020] 00 5C 00 00 00 00 00 1A 00 00 00 00 00 51 00 00 .\...... .....Q.. [0030] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 1B 00 00 .....®Ml é-j..... [0040] 00 00 00 00 00 1B 00 00 00 50 00 72 00 69 00 6E ........ .P.r.i.n [0050] 00 74 00 50 00 72 00 6F 00 63 00 43 00 61 00 70 .t.P.r.o .c.C.a.p [0060] 00 73 00 5F 00 4E 00 54 00 20 00 45 00 4D 00 46 .s._.N.T . .E.M.F [0070] 00 20 00 31 00 2E 00 30 00 30 00 38 00 00 00 00 . .1...0 .0.8.... [0080] 00 00 00 00 00 ..... [2011/04/20 16:10:52.573307, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.573374, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.573459, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:52.573531, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.573589, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.573650, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.573709, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.573773, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.573837, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:52.573901, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:52.573961, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:52.574024, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.574087, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.574146, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:52.574205, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:52.574268, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 00000225 [2011/04/20 16:10:52.574635, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.574695, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.574758, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.574817, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:52.574876, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:52.574941, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.575002, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000005c 0004 context_id: 0000 0006 opnum : 001a [2011/04/20 16:10:52.575143, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.575209, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.575278, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1a - api_rpcTNP: rpc command: SPOOLSS_GETPRINTERDATA [2011/04/20 16:10:52.575349, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[26].fn == 0xb7202a70 [2011/04/20 16:10:52.575438, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_GetPrinterData: struct spoolss_GetPrinterData in: struct spoolss_GetPrinterData handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000051-0000-0000-ae4d-6ce92d6a0000 value_name : 'PrintProcCaps_NT EMF 1.008' offered : 0x00000000 (0) [2011/04/20 16:10:52.575794, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 51 00 00 00 00 00 00 00 AE 4D 6C E9 ....Q... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.575982, 4, pid=27181] rpc_server/srv_spoolss_nt.c:8624(_spoolss_GetPrinterDataEx) _spoolss_GetPrinterDataEx [2011/04/20 16:10:52.576044, 10, pid=27181] rpc_server/srv_spoolss_nt.c:8627(_spoolss_GetPrinterDataEx) _spoolss_GetPrinterDataEx: key => [PrinterDriverData], value => [PrintProcCaps_NT EMF 1.008] [2011/04/20 16:10:52.576108, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 51 00 00 00 00 00 00 00 AE 4D 6C E9 ....Q... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.576288, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.576406, 10, pid=27181] printing/nt_printing.c:4549(get_a_printer_internal) get_a_printer: [tuning] level 2 [2011/04/20 16:10:52.576592, 8, pid=27181] printing/nt_printing.c:2727(unpack_devicemode) Unpacked devicemode [\\SERVERDATI\tuning](Letter) [2011/04/20 16:10:52.576664, 10, pid=27181] printing/nt_printing.c:2766(add_new_printer_key) add_new_printer_key: Inserted new data key [PrinterDriverData] [2011/04/20 16:10:52.576729, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [PrinterDriverData:TrayFormSize], len: 4 [2011/04/20 16:10:52.576796, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [PrinterDriverData:TrayFormTable], len: 68 [2011/04/20 16:10:52.576864, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [PrinterDriverData:Meta Printer Driver Name], len: 21 [2011/04/20 16:10:52.576983, 10, pid=27181] printing/nt_printing.c:2766(add_new_printer_key) add_new_printer_key: Inserted new data key [DsSpooler] [2011/04/20 16:10:52.577047, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:printerName], len: 14 [2011/04/20 16:10:52.577113, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:serverName], len: 22 [2011/04/20 16:10:52.577180, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:shortServerName], len: 22 [2011/04/20 16:10:52.577247, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:uNCName], len: 40 [2011/04/20 16:10:52.577377, 9, pid=27181] printing/nt_printing.c:4011(get_a_printer_2) Unpacked printer [tuning] name [\\serverdati\tuning] running driver [RICOH Aficio 3232C PS] [2011/04/20 16:10:52.577447, 8, pid=27181] printing/nt_printing.c:3565(get_printer_data) get_printer_data: Attempting to lookup key => [PrinterDriverData], value => [PrintProcCaps_NT EMF 1.008] [2011/04/20 16:10:52.577527, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_GetPrinterData: struct spoolss_GetPrinterData out: struct spoolss_GetPrinterData type : * type : REG_NONE (0) data : * data: ARRAY(0) needed : * needed : 0x00000000 (0) result : WERR_BADFILE [2011/04/20 16:10:52.577830, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.577905, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.577969, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:52.578082, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.578148, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 16. [2011/04/20 16:10:52.578220, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0028 000a auth_len : 0000 000c call_id : 00000225 [2011/04/20 16:10:52.578542, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000010 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.578727, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..40] (align 0) [2011/04/20 16:10:52.578791, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.578830, 5, pid=27181] lib/util.c:627(show_msg) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37185 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2011/04/20 16:10:52.579308, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 28 00 00 00 25 02 00 ........ .(...%.. [0010] 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 02 00 00 00 ........ . [2011/04/20 16:10:52.579838, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:52.579987, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:52.580049, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 582 of length 184 (0 toread) [2011/04/20 16:10:52.580110, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.580149, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37248 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=113 [2011/04/20 16:10:52.580948, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 26 02 00 ........ .`...&.. [0020] 00 48 00 00 00 00 00 01 00 30 CD E2 00 14 00 00 .H...... .0Íâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:52.581593, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.581659, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.581750, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:52.581821, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.581879, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.581940, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.582001, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:52.582065, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:52.582129, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:52.582195, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:52.582255, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:52.582318, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.582380, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.582439, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:52.582498, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:52.582561, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000226 [2011/04/20 16:10:52.582929, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.582992, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.583052, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.583110, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:52.583168, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:52.583231, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:52.583299, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:52.583363, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000226 [2011/04/20 16:10:52.583743, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.583906, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:52.584021, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:52.584136, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.584204, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:52.584294, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:52.584357, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.584396, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37248 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:52.584873, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 26 02 00 ....#... . ...&.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:52.585296, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:52.585379, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:52.585440, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 583 of length 132 (0 toread) [2011/04/20 16:10:52.585501, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.585539, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37313 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:52.586186, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 27 02 00 ........ .,...'.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 51 00 00 ........ .....Q.. [0030] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 .....®Ml é-j.. [2011/04/20 16:10:52.586536, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.586602, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.586683, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:52.586755, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.586813, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.586874, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.586934, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.586997, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.587061, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:52.587125, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:52.587184, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:52.587247, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.587311, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.587370, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.587429, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:52.587492, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000227 [2011/04/20 16:10:52.587870, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.587932, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.587995, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.588053, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.588112, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:52.588175, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.588237, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:52.588424, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.588492, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.588560, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:52.588630, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:52.588702, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000051-0000-0000-ae4d-6ce92d6a0000 [2011/04/20 16:10:52.588953, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 51 00 00 00 00 00 00 00 AE 4D 6C E9 ....Q... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.589146, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 51 00 00 00 00 00 00 00 AE 4D 6C E9 ....Q... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.589329, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 51 00 00 00 00 00 00 00 AE 4D 6C E9 ....Q... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.589509, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:52.589585, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:52.589846, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.589914, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.589976, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:52.590077, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.590141, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.590212, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000227 [2011/04/20 16:10:52.590533, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.590714, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.590778, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.590817, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37313 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.591339, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 27 02 00 ........ .0...'.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:52.594724, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2008 [2011/04/20 16:10:52.594844, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7d8 [2011/04/20 16:10:52.594907, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 584 of length 2012 (0 toread) [2011/04/20 16:10:52.594968, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.595007, 5, pid=27181] lib/util.c:627(show_msg) size=2008 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37377 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1924 (0x784) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1924 (0x784) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1941 [2011/04/20 16:10:52.595608, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 84 07 00 00 28 02 00 ........ .....(.. [0020] 00 6C 07 00 00 00 00 45 00 30 CC E2 00 14 00 00 .l.....E .0Ìâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 B4 06 00 00 D8 10 E3 00 B4 06 00 .....´.. .Ø.ã.´.. [0070] 00 5C 00 5C 00 73 00 65 00 72 00 76 00 65 00 72 .\.\.s.e .r.v.e.r [0080] 00 64 00 61 00 74 00 69 00 5C 00 74 00 75 00 6E .d.a.t.i .\.t.u.n [0090] 00 69 00 6E 00 67 00 00 00 00 00 00 00 00 00 00 .i.n.g.. ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 01 04 00 06 DC 00 D8 05 53 FF 81 03 01 00 0B .....Ü.Ø .Sÿ..... [00C0] 00 9A 0B 34 08 64 00 01 00 0F 00 58 02 02 00 01 ...4.d.. ...X.... [00D0] 00 58 02 03 00 01 00 41 00 34 00 00 00 00 00 00 .X.....A .4...... [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [0130] 00 02 00 00 00 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 50 52 49 ........ .....PRI [0150] 56 E2 30 00 00 00 00 00 00 00 00 00 00 00 00 00 Vâ0..... ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 18 00 00 00 00 00 10 27 10 27 10 ........ ....'.'. [01B0] 27 00 00 10 27 00 00 00 00 00 00 00 00 B8 02 8C '...'... .....¸.. [01C0] 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ........ ........ [01E0] 00 4C 00 10 00 50 34 03 00 28 88 04 00 00 00 00 .L...P4. .(...... [01F0] 00 00 00 00 00 01 00 01 00 00 00 00 00 00 00 00 ........ ........ [2011/04/20 16:10:52.598390, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.598470, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.598575, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1924 params=0 setup=2 [2011/04/20 16:10:52.598648, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.598705, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.598766, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.598826, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.598889, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.598955, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1924 [2011/04/20 16:10:52.599021, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1924 [2011/04/20 16:10:52.599081, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1924 [2011/04/20 16:10:52.599144, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1924, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.599208, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.599267, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:52.599325, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1908 [2011/04/20 16:10:52.599389, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0784 000a auth_len : 0000 000c call_id : 00000228 [2011/04/20 16:10:52.599767, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.599829, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.599896, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.599955, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:52.600013, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1908, incoming data = 1908 [2011/04/20 16:10:52.600085, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.600146, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000076c 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:52.600292, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.600356, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.600463, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:52.600535, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:52.600669, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x000006b4 (1716) devmode : * devmode: struct spoolss_DeviceMode devicename : '\\serverdati\tuning' specversion : DMSPEC_NT4_AND_ABOVE (1025) driverversion : 0x0600 (1536) size : 0x00dc (220) __driverextra_length : 0x05d8 (1496) fields : 0x0381ff53 (58851155) 1: DEVMODE_ORIENTATION 1: DEVMODE_PAPERSIZE 0: DEVMODE_PAPERLENGTH 0: DEVMODE_PAPERWIDTH 1: DEVMODE_SCALE 0: DEVMODE_POSITION 1: DEVMODE_NUP 1: DEVMODE_COPIES 1: DEVMODE_DEFAULTSOURCE 1: DEVMODE_PRINTQUALITY 1: DEVMODE_COLOR 1: DEVMODE_DUPLEX 1: DEVMODE_YRESOLUTION 1: DEVMODE_TTOPTION 1: DEVMODE_COLLATE 1: DEVMODE_FORMNAME 0: DEVMODE_LOGPIXELS 0: DEVMODE_BITSPERPEL 0: DEVMODE_PELSWIDTH 0: DEVMODE_PELSHEIGHT 0: DEVMODE_DISPLAYFLAGS 0: DEVMODE_DISPLAYFREQUENCY 1: DEVMODE_ICMMETHOD 1: DEVMODE_ICMINTENT 1: DEVMODE_MEDIATYPE 0: DEVMODE_DITHERTYPE 0: DEVMODE_PANNINGWIDTH 0: DEVMODE_PANNINGHEIGHT orientation : DMORIENT_PORTRAIT (1) papersize : DMPAPER_A5 (11) paperlength : 0x0b9a (2970) paperwidth : 0x0834 (2100) scale : 0x0064 (100) copies : 0x0001 (1) defaultsource : DMBIN_FORMSOURCE (15) printquality : UNKNOWN_ENUM_VALUE (600) color : DMRES_COLOR (2) duplex : DMDUP_SIMPLEX (1) yresolution : 0x0258 (600) ttoption : DMTT_SUBDEV (3) collate : DMCOLLATE_TRUE (1) formname : 'A4' logpixels : 0x0000 (0) bitsperpel : 0x00000000 (0) pelswidth : 0x00000000 (0) pelsheight : 0x00000000 (0) displayflags : DMNUP_SYSTEM (1) displayfrequency : 0x00000000 (0) icmmethod : DMICMMETHOD_NONE (1) icmintent : DMICM_CONTRAST (2) mediatype : UNKNOWN_ENUM_VALUE (256) dithertype : UNKNOWN_ENUM_VALUE (0) reserved1 : 0x00000000 (0) reserved2 : 0x00000000 (0) panningwidth : 0x00000000 (0) panningheight : 0x00000000 (0) driverextra_data : DATA_BLOB length=1496 [2011/04/20 16:10:52.603139, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 00 PRIVâ0.. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 27 ........ .......' [0060] 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 00 .'.'...' ........ [0070] B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 00 ¸....... ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ........ ........ [0090] 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 00 ....L... P4..(... [00A0] 00 00 00 00 00 00 00 00 01 00 01 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 84 E0 5A 4E ........ .....àZN [00C0] 1C 00 00 00 00 00 00 00 01 00 FF 00 00 00 FF 00 ........ ..ÿ...ÿ. [00D0] 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ........ ........ [00E0] 00 00 00 00 02 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 02 00 01 00 03 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 B8 02 00 00 53 4D 54 4A 00 00 00 00 ....¸... SMTJ.... [02E0] 10 00 A8 02 52 00 49 00 43 00 4F 00 48 00 20 00 ..¨.R.I. C.O.H. . [02F0] 41 00 66 00 69 00 63 00 69 00 6F 00 20 00 33 00 A.f.i.c. i.o. .3. [0300] 32 00 33 00 32 00 43 00 20 00 50 00 53 00 00 00 2.3.2.C. .P.S... [0310] 52 65 73 6F 6C 75 74 69 6F 6E 00 36 30 30 64 70 Resoluti on.600dp [0320] 69 00 52 49 50 61 70 65 72 50 6F 6C 69 63 79 00 i.RIPape rPolicy. [0330] 50 72 6F 6D 70 74 55 73 65 72 00 50 61 67 65 53 PromptUs er.PageS [0340] 69 7A 65 00 41 34 00 50 61 67 65 52 65 67 69 6F ize.A4.P ageRegio [0350] 6E 00 00 49 6E 70 75 74 53 6C 6F 74 00 2A 55 73 n..Input Slot.*Us [0360] 65 46 6F 72 6D 54 72 61 79 54 61 62 6C 65 00 4C eFormTra yTable.L [0370] 65 61 64 69 6E 67 45 64 67 65 00 00 44 75 70 6C eadingEd ge..Dupl [0380] 65 78 00 4E 6F 6E 65 00 52 49 43 6F 6C 6C 61 74 ex.None. RICollat [0390] 65 00 46 61 6C 73 65 00 52 49 50 72 69 6E 74 4D e.False. RIPrintM [03A0] 6F 64 65 00 30 72 68 69 74 00 43 6F 6C 6F 72 4D ode.0rhi t.ColorM [03B0] 6F 64 65 6C 00 43 4D 59 4B 00 52 50 53 42 69 74 odel.CMY K.RPSBit [03C0] 73 50 65 72 50 69 78 65 6C 00 32 42 69 74 73 50 sPerPixe l.2BitsP [03D0] 65 72 50 69 78 65 6C 00 52 69 6D 61 67 65 73 6D erPixel. Rimagesm [03E0] 00 4F 66 66 00 52 50 53 52 47 42 63 6F 72 72 65 .Off.RPS RGBcorre [03F0] 63 74 00 44 65 74 61 69 6C 42 72 69 67 68 74 00 ct.Detai lBright. [0400] 52 50 53 43 6F 6C 6F 72 52 65 6E 64 44 69 63 74 RPSColor RendDict [0410] 00 41 75 74 6F 00 52 50 53 43 6F 6C 6F 72 53 65 .Auto.RP SColorSe [0420] 70 00 4E 4F 53 45 50 41 52 41 54 45 00 52 50 53 p.NOSEPA RATE.RPS [0430] 44 69 74 68 65 72 54 79 70 65 00 41 75 74 6F 00 DitherTy pe.Auto. [0440] 52 50 53 42 6C 61 63 6B 4D 6F 64 65 00 47 72 61 RPSBlack Mode.Gra [0450] 79 00 52 50 53 42 6C 61 63 6B 4F 76 65 72 50 72 y.RPSBla ckOverPr [0460] 69 6E 74 00 46 61 6C 73 65 00 52 63 6D 79 6B 73 int.Fals e.Rcmyks [0470] 69 6D 75 6C 61 74 69 6F 6E 00 4F 66 66 00 4D 65 imulatio n.Off.Me [0480] 64 69 61 54 79 70 65 00 50 6C 61 69 6E 00 4F 75 diaType. Plain.Ou [0490] 74 70 75 74 42 69 6E 00 44 65 66 61 75 6C 74 00 tputBin. Default. [04A0] 53 74 61 70 6C 65 4C 6F 63 61 74 69 6F 6E 00 4E StapleLo cation.N [04B0] 6F 6E 65 00 52 49 57 61 74 65 72 6D 61 72 6B 00 one.RIWa termark. [04C0] 4F 66 66 00 52 49 57 4D 54 65 78 74 00 43 6F 6E Off.RIWM Text.Con [04D0] 66 69 64 65 6E 74 69 61 6C 00 52 49 77 6D 46 6F fidentia l.RIwmFo [04E0] 6E 74 00 48 65 6C 76 65 74 69 63 61 42 00 52 49 nt.Helve ticaB.RI [04F0] 77 6D 53 69 7A 65 00 33 36 00 52 49 77 6D 41 6E wmSize.3 6.RIwmAn [0500] 67 6C 65 00 34 35 44 65 67 00 52 49 77 6D 54 65 gle.45De g.RIwmTe [0510] 78 74 53 74 79 6C 65 00 47 72 61 79 00 00 00 00 xtStyle. Gray.... [0520] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0530] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0560] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 00 00 00 00 4C 00 00 00 ........ ....L... [0590] 45 42 44 41 45 42 44 41 00 00 00 00 00 00 00 00 EBDAEBDA ........ [05A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 ........ access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:52.611357, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:52.611438, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[11] [0000] 00 00 00 00 52 00 00 00 00 00 00 00 AE 4D 6C E9 ....R... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.611613, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:52.611734, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:52.611871, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:52 2011 [2011/04/20 16:10:52.611976, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:52 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:52.612138, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 11 printer handles active [2011/04/20 16:10:52.612201, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 52 00 00 00 00 00 00 00 AE 4D 6C E9 ....R... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.612382, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 52 00 00 00 00 00 00 00 AE 4D 6C E9 ....R... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.612561, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.614213, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:52.614371, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:52.614435, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:52.614505, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.614593, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.614714, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.614778, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.614837, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.615020, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.615090, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.615153, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.615215, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.615282, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.615378, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.615442, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.615508, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.615573, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.615650, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.615796, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.615867, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.615931, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.615993, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.616054, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.616112, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.616230, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.616305, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.616373, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.616446, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.616552, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.616615, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.616676, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.616738, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.616796, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.616903, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:52.616976, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.617094, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:52.617155, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:52.617225, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:52.617407, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.617478, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.617540, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.617601, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.617659, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.617770, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.617842, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.617930, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.618010, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.618072, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.618132, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.618198, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.618283, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.618347, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.618412, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.618476, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.618551, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.618617, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.618682, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.618749, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.618809, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.618870, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.618930, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.619038, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.619112, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.619180, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.619252, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.619404, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:52.619514, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.619609, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:52.619851, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:52.619926, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:52.619990, 5, pid=27181] rpc_server/srv_spoolss_nt.c:1521(convert_devicemode) convert_devicemode: allocating a generic devmode [2011/04/20 16:10:52.620064, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000052-0000-0000-ae4d-6ce92d6a0000 result : WERR_OK [2011/04/20 16:10:52.620354, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.620468, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.620537, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1908 [2011/04/20 16:10:52.620660, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.620726, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.620798, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000228 [2011/04/20 16:10:52.621122, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.621305, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.621369, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.621408, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37377 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.621887, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 28 02 00 ........ .0...(.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 52 00 00 ........ .....R.. [0020] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 00 00 00 .....®Ml é-j..... [0030] 00 . [2011/04/20 16:10:52.622456, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:52.622546, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:52.622662, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 585 of length 292 (0 toread) [2011/04/20 16:10:52.622725, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.622764, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37440 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=221 [2011/04/20 16:10:52.624074, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 29 02 00 ........ .Ì...).. [0020] 00 B4 00 00 00 00 00 45 00 70 EB E1 00 14 00 00 .´.....E .pëá.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 76 01 1C 00 00 ........ .Øüv.... [0080] 00 D0 B9 A6 00 34 FD 76 01 28 0A 00 00 03 00 00 .й¦.4ýv .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:52.625226, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.625293, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.625383, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:52.625456, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.625514, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.625576, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.625635, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:52.625700, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:52.625765, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:52.625831, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:52.625892, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:52.625956, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.626019, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.626078, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.626137, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:52.626201, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000229 [2011/04/20 16:10:52.626573, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.626634, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.626696, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.626756, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.626814, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:52.626878, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:52.626947, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:52.627012, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000229 [2011/04/20 16:10:52.627343, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.627505, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:52.627619, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:52.627788, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.627860, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:52.627950, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:52.628014, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.628053, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37440 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:52.628530, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 29 02 00 ....#... . ...).. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:52.628960, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:52.629047, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:52.629109, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 586 of length 204 (0 toread) [2011/04/20 16:10:52.629170, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.629256, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37505 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=133 [2011/04/20 16:10:52.629860, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 2A 02 00 ........ .t...*.. [0020] 00 5C 00 00 00 00 00 1A 00 00 00 00 00 52 00 00 .\...... .....R.. [0030] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 1B 00 00 .....®Ml é-j..... [0040] 00 00 00 00 00 1B 00 00 00 50 00 72 00 69 00 6E ........ .P.r.i.n [0050] 00 74 00 50 00 72 00 6F 00 63 00 43 00 61 00 70 .t.P.r.o .c.C.a.p [0060] 00 73 00 5F 00 4E 00 54 00 20 00 45 00 4D 00 46 .s._.N.T . .E.M.F [0070] 00 20 00 31 00 2E 00 30 00 30 00 38 00 00 00 74 . .1...0 .0.8...t [0080] 00 00 00 00 00 ..... [2011/04/20 16:10:52.630715, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.630787, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.630873, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:52.630944, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.631002, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.631063, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.631123, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.631187, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.631250, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:52.631315, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:52.631375, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:52.631438, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.631502, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.631560, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:52.631619, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:52.631731, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 0000022a [2011/04/20 16:10:52.632062, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.632123, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.632234, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.632293, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:52.632352, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:52.632415, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.632476, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000005c 0004 context_id: 0000 0006 opnum : 001a [2011/04/20 16:10:52.632619, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.632686, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.632755, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1a - api_rpcTNP: rpc command: SPOOLSS_GETPRINTERDATA [2011/04/20 16:10:52.632826, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[26].fn == 0xb7202a70 [2011/04/20 16:10:52.632915, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_GetPrinterData: struct spoolss_GetPrinterData in: struct spoolss_GetPrinterData handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000052-0000-0000-ae4d-6ce92d6a0000 value_name : 'PrintProcCaps_NT EMF 1.008' offered : 0x00000000 (0) [2011/04/20 16:10:52.633214, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 52 00 00 00 00 00 00 00 AE 4D 6C E9 ....R... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.633400, 4, pid=27181] rpc_server/srv_spoolss_nt.c:8624(_spoolss_GetPrinterDataEx) _spoolss_GetPrinterDataEx [2011/04/20 16:10:52.633462, 10, pid=27181] rpc_server/srv_spoolss_nt.c:8627(_spoolss_GetPrinterDataEx) _spoolss_GetPrinterDataEx: key => [PrinterDriverData], value => [PrintProcCaps_NT EMF 1.008] [2011/04/20 16:10:52.633526, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 52 00 00 00 00 00 00 00 AE 4D 6C E9 ....R... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.633708, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.633825, 10, pid=27181] printing/nt_printing.c:4549(get_a_printer_internal) get_a_printer: [tuning] level 2 [2011/04/20 16:10:52.634013, 8, pid=27181] printing/nt_printing.c:2727(unpack_devicemode) Unpacked devicemode [\\SERVERDATI\tuning](Letter) [2011/04/20 16:10:52.634085, 10, pid=27181] printing/nt_printing.c:2766(add_new_printer_key) add_new_printer_key: Inserted new data key [PrinterDriverData] [2011/04/20 16:10:52.634150, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [PrinterDriverData:TrayFormSize], len: 4 [2011/04/20 16:10:52.634219, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [PrinterDriverData:TrayFormTable], len: 68 [2011/04/20 16:10:52.634287, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [PrinterDriverData:Meta Printer Driver Name], len: 21 [2011/04/20 16:10:52.634357, 10, pid=27181] printing/nt_printing.c:2766(add_new_printer_key) add_new_printer_key: Inserted new data key [DsSpooler] [2011/04/20 16:10:52.634420, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:printerName], len: 14 [2011/04/20 16:10:52.634486, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:serverName], len: 22 [2011/04/20 16:10:52.634600, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:shortServerName], len: 22 [2011/04/20 16:10:52.634669, 8, pid=27181] printing/nt_printing.c:3652(unpack_values) specific: [DsSpooler:uNCName], len: 40 [2011/04/20 16:10:52.634801, 9, pid=27181] printing/nt_printing.c:4011(get_a_printer_2) Unpacked printer [tuning] name [\\serverdati\tuning] running driver [RICOH Aficio 3232C PS] [2011/04/20 16:10:52.634872, 8, pid=27181] printing/nt_printing.c:3565(get_printer_data) get_printer_data: Attempting to lookup key => [PrinterDriverData], value => [PrintProcCaps_NT EMF 1.008] [2011/04/20 16:10:52.634954, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_GetPrinterData: struct spoolss_GetPrinterData out: struct spoolss_GetPrinterData type : * type : REG_NONE (0) data : * data: ARRAY(0) needed : * needed : 0x00000000 (0) result : WERR_BADFILE [2011/04/20 16:10:52.635261, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.635335, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.635401, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:52.635513, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.635578, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 16. [2011/04/20 16:10:52.635651, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0028 000a auth_len : 0000 000c call_id : 0000022a [2011/04/20 16:10:52.636183, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000010 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.636384, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..40] (align 0) [2011/04/20 16:10:52.636449, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.636488, 5, pid=27181] lib/util.c:627(show_msg) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37505 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2011/04/20 16:10:52.636967, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 28 00 00 00 2A 02 00 ........ .(...*.. [0010] 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 02 00 00 00 ........ . [2011/04/20 16:10:52.637401, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:52.637489, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:52.637551, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 587 of length 184 (0 toread) [2011/04/20 16:10:52.637611, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.637705, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37568 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=113 [2011/04/20 16:10:52.638311, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 2B 02 00 ........ .`...+.. [0020] 00 48 00 00 00 00 00 01 00 70 EB E1 00 14 00 00 .H...... .pëá.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:52.639144, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.639217, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.639306, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:52.639378, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.639436, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.639497, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.639558, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:52.639622, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:52.639735, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:52.639802, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:52.639863, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:52.639927, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.639989, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.640048, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:52.640107, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:52.640171, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 0000022b [2011/04/20 16:10:52.640503, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.640563, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.640624, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.640730, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:52.640790, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:52.640853, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:52.640921, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:52.640986, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000022b [2011/04/20 16:10:52.641317, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.641477, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:52.641593, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:52.641705, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.641772, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:52.641861, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:52.641925, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.641964, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37568 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:52.642447, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 2B 02 00 ....#... . ...+.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:52.642931, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:52.643021, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:52.643083, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 588 of length 132 (0 toread) [2011/04/20 16:10:52.643144, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.643183, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37633 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:52.643875, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 2C 02 00 ........ .,...,.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 52 00 00 ........ .....R.. [0030] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 .....®Ml é-j.. [2011/04/20 16:10:52.644228, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.644294, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.644379, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:52.644450, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.644508, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.644569, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.644629, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.644693, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.644756, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:52.644820, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:52.644880, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:52.644943, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.645006, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.645065, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.645123, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:52.645186, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 0000022c [2011/04/20 16:10:52.645516, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.645575, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.645638, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.645696, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.645755, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:52.645818, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.645879, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:52.646020, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.646087, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.646195, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:52.646269, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:52.646342, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000052-0000-0000-ae4d-6ce92d6a0000 [2011/04/20 16:10:52.646578, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 52 00 00 00 00 00 00 00 AE 4D 6C E9 ....R... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.646759, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 52 00 00 00 00 00 00 00 AE 4D 6C E9 ....R... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.646943, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 52 00 00 00 00 00 00 00 AE 4D 6C E9 ....R... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.647124, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:52.647199, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:52.647461, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.647530, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.647593, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:52.647747, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.647815, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.647887, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000022c [2011/04/20 16:10:52.648209, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.648392, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.648456, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.648495, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37633 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.649019, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 2C 02 00 ........ .0...,.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:52.652296, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:52.652414, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:52.652479, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 589 of length 2032 (0 toread) [2011/04/20 16:10:52.652540, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.652579, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37697 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1961 [2011/04/20 16:10:52.653182, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 2D 02 00 ........ .....-.. [0020] 00 80 07 00 00 00 00 45 00 48 FA E2 00 14 00 00 .......E .Húâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 70 71 E2 00 04 00 00 00 00 00 00 00 04 00 00 .pqâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 98 D2 E2 .R.A.W.. .´....Òâ [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 00 00 00 .u.n.i.n .g...... [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 00 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:52.655811, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.655883, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.655988, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:52.656062, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.656119, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.656181, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.656240, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.656304, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.656369, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:52.656433, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:52.656493, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:52.656557, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.656621, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.656680, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:52.656738, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:52.656803, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 0000022d [2011/04/20 16:10:52.657131, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.657191, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.657258, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.657316, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:52.657374, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:52.657440, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.657501, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000780 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:52.657646, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.657711, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.657780, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:52.657850, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:52.658027, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : * datatype : 'RAW' devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x000006b4 (1716) devmode : * devmode: struct spoolss_DeviceMode devicename : '\\serverdati\tuning' specversion : DMSPEC_NT4_AND_ABOVE (1025) driverversion : 0x0600 (1536) size : 0x00dc (220) __driverextra_length : 0x05d8 (1496) fields : 0x0380ff53 (58785619) 1: DEVMODE_ORIENTATION 1: DEVMODE_PAPERSIZE 0: DEVMODE_PAPERLENGTH 0: DEVMODE_PAPERWIDTH 1: DEVMODE_SCALE 0: DEVMODE_POSITION 1: DEVMODE_NUP 1: DEVMODE_COPIES 1: DEVMODE_DEFAULTSOURCE 1: DEVMODE_PRINTQUALITY 1: DEVMODE_COLOR 1: DEVMODE_DUPLEX 1: DEVMODE_YRESOLUTION 1: DEVMODE_TTOPTION 1: DEVMODE_COLLATE 0: DEVMODE_FORMNAME 0: DEVMODE_LOGPIXELS 0: DEVMODE_BITSPERPEL 0: DEVMODE_PELSWIDTH 0: DEVMODE_PELSHEIGHT 0: DEVMODE_DISPLAYFLAGS 0: DEVMODE_DISPLAYFREQUENCY 1: DEVMODE_ICMMETHOD 1: DEVMODE_ICMINTENT 1: DEVMODE_MEDIATYPE 0: DEVMODE_DITHERTYPE 0: DEVMODE_PANNINGWIDTH 0: DEVMODE_PANNINGHEIGHT orientation : DMORIENT_PORTRAIT (1) papersize : DMPAPER_A4 (9) paperlength : 0x0b9a (2970) paperwidth : 0x0834 (2100) scale : 0x0064 (100) copies : 0x0001 (1) defaultsource : DMBIN_FORMSOURCE (15) printquality : UNKNOWN_ENUM_VALUE (600) color : DMRES_COLOR (2) duplex : DMDUP_SIMPLEX (1) yresolution : 0x0258 (600) ttoption : DMTT_SUBDEV (3) collate : DMCOLLATE_FALSE (0) formname : 'A4' logpixels : 0x0000 (0) bitsperpel : 0x00000000 (0) pelswidth : 0x00000000 (0) pelsheight : 0x00000000 (0) displayflags : DMNUP_SYSTEM (1) displayfrequency : 0x00000000 (0) icmmethod : DMICMMETHOD_NONE (1) icmintent : DMICM_CONTRAST (2) mediatype : UNKNOWN_ENUM_VALUE (256) dithertype : UNKNOWN_ENUM_VALUE (0) reserved1 : 0x00000000 (0) reserved2 : 0x00000000 (0) panningwidth : 0x00000000 (0) panningheight : 0x00000000 (0) driverextra_data : DATA_BLOB length=1496 [2011/04/20 16:10:52.660714, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 00 PRIVâ0.. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 27 ........ .......' [0060] 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 00 .'.'...' ........ [0070] B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 00 ¸....... ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ........ ........ [0090] 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 00 ....L... P4..(... [00A0] 00 00 00 00 00 00 00 00 01 00 01 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 84 E0 5A 4E ........ .....àZN [00C0] 1C 00 00 00 00 00 00 00 01 00 FF 00 00 00 FF 00 ........ ..ÿ...ÿ. [00D0] 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ........ ........ [00E0] 00 00 00 00 02 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 02 00 01 00 03 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 B8 02 00 00 53 4D 54 4A 00 00 00 00 ....¸... SMTJ.... [02E0] 10 00 A8 02 52 00 49 00 43 00 4F 00 48 00 20 00 ..¨.R.I. C.O.H. . [02F0] 41 00 66 00 69 00 63 00 69 00 6F 00 20 00 33 00 A.f.i.c. i.o. .3. [0300] 32 00 33 00 32 00 43 00 20 00 50 00 53 00 00 00 2.3.2.C. .P.S... [0310] 52 65 73 6F 6C 75 74 69 6F 6E 00 36 30 30 64 70 Resoluti on.600dp [0320] 69 00 52 49 50 61 70 65 72 50 6F 6C 69 63 79 00 i.RIPape rPolicy. [0330] 50 72 6F 6D 70 74 55 73 65 72 00 50 61 67 65 53 PromptUs er.PageS [0340] 69 7A 65 00 41 34 00 50 61 67 65 52 65 67 69 6F ize.A4.P ageRegio [0350] 6E 00 00 49 6E 70 75 74 53 6C 6F 74 00 2A 55 73 n..Input Slot.*Us [0360] 65 46 6F 72 6D 54 72 61 79 54 61 62 6C 65 00 4C eFormTra yTable.L [0370] 65 61 64 69 6E 67 45 64 67 65 00 00 44 75 70 6C eadingEd ge..Dupl [0380] 65 78 00 4E 6F 6E 65 00 52 49 43 6F 6C 6C 61 74 ex.None. RICollat [0390] 65 00 46 61 6C 73 65 00 52 49 50 72 69 6E 74 4D e.False. RIPrintM [03A0] 6F 64 65 00 30 72 68 69 74 00 43 6F 6C 6F 72 4D ode.0rhi t.ColorM [03B0] 6F 64 65 6C 00 43 4D 59 4B 00 52 50 53 42 69 74 odel.CMY K.RPSBit [03C0] 73 50 65 72 50 69 78 65 6C 00 32 42 69 74 73 50 sPerPixe l.2BitsP [03D0] 65 72 50 69 78 65 6C 00 52 69 6D 61 67 65 73 6D erPixel. Rimagesm [03E0] 00 4F 66 66 00 52 50 53 52 47 42 63 6F 72 72 65 .Off.RPS RGBcorre [03F0] 63 74 00 44 65 74 61 69 6C 42 72 69 67 68 74 00 ct.Detai lBright. [0400] 52 50 53 43 6F 6C 6F 72 52 65 6E 64 44 69 63 74 RPSColor RendDict [0410] 00 41 75 74 6F 00 52 50 53 43 6F 6C 6F 72 53 65 .Auto.RP SColorSe [0420] 70 00 4E 4F 53 45 50 41 52 41 54 45 00 52 50 53 p.NOSEPA RATE.RPS [0430] 44 69 74 68 65 72 54 79 70 65 00 41 75 74 6F 00 DitherTy pe.Auto. [0440] 52 50 53 42 6C 61 63 6B 4D 6F 64 65 00 47 72 61 RPSBlack Mode.Gra [0450] 79 00 52 50 53 42 6C 61 63 6B 4F 76 65 72 50 72 y.RPSBla ckOverPr [0460] 69 6E 74 00 46 61 6C 73 65 00 52 63 6D 79 6B 73 int.Fals e.Rcmyks [0470] 69 6D 75 6C 61 74 69 6F 6E 00 4F 66 66 00 4D 65 imulatio n.Off.Me [0480] 64 69 61 54 79 70 65 00 50 6C 61 69 6E 00 4F 75 diaType. Plain.Ou [0490] 74 70 75 74 42 69 6E 00 44 65 66 61 75 6C 74 00 tputBin. Default. [04A0] 53 74 61 70 6C 65 4C 6F 63 61 74 69 6F 6E 00 4E StapleLo cation.N [04B0] 6F 6E 65 00 52 49 57 61 74 65 72 6D 61 72 6B 00 one.RIWa termark. [04C0] 4F 66 66 00 52 49 57 4D 54 65 78 74 00 43 6F 6E Off.RIWM Text.Con [04D0] 66 69 64 65 6E 74 69 61 6C 00 52 49 77 6D 46 6F fidentia l.RIwmFo [04E0] 6E 74 00 48 65 6C 76 65 74 69 63 61 42 00 52 49 nt.Helve ticaB.RI [04F0] 77 6D 53 69 7A 65 00 33 36 00 52 49 77 6D 41 6E wmSize.3 6.RIwmAn [0500] 67 6C 65 00 34 35 44 65 67 00 52 49 77 6D 54 65 gle.45De g.RIwmTe [0510] 78 74 53 74 79 6C 65 00 47 72 61 79 00 00 00 00 xtStyle. Gray.... [0520] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0530] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0560] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 00 00 00 00 4C 00 00 00 ........ ....L... [0590] 45 42 44 41 45 42 44 41 00 00 00 00 00 00 00 00 EBDAEBDA ........ [05A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 ........ access_mask : 0x00000008 (8) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 1: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:52.668937, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:52.669020, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[11] [0000] 00 00 00 00 53 00 00 00 00 00 00 00 AE 4D 6C E9 ....S... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.669195, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:52.669278, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:52.669414, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:52 2011 [2011/04/20 16:10:52.669522, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:52 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:52.669685, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 11 printer handles active [2011/04/20 16:10:52.669749, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 53 00 00 00 00 00 00 00 AE 4D 6C E9 ....S... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.669929, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 53 00 00 00 00 00 00 00 AE 4D 6C E9 ....S... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.670107, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.671823, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:52.671984, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:52.672048, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:52.672119, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.672208, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.672272, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.672335, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.672451, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.672636, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.672706, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.672769, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.672831, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.672899, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.672998, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.673063, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.673129, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.673194, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.673270, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.673338, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.673407, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.673470, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.673532, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.673593, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.673652, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.673767, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.673842, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.673909, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.673982, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.674088, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.674152, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.674213, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.674275, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.674333, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.674438, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:52.674510, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.674581, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:52.674641, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:52.674750, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:52.674929, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.674998, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.675060, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.675122, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.675180, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.675291, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.675363, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.675449, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.675511, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.675572, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.675648, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.675778, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.675868, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.675933, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.675998, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.676062, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.676136, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.676203, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.676270, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.676337, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.676398, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.676461, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.676519, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.676633, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.676706, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.676773, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.676847, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.676951, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:52.677054, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.677200, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:52.677370, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:52.677438, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:52.677503, 5, pid=27181] rpc_server/srv_spoolss_nt.c:1521(convert_devicemode) convert_devicemode: allocating a generic devmode [2011/04/20 16:10:52.677577, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000053-0000-0000-ae4d-6ce92d6a0000 result : WERR_OK [2011/04/20 16:10:52.677865, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.677976, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.678046, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:52.678188, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.678254, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.678326, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000022d [2011/04/20 16:10:52.678651, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.678834, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.678898, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.678937, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37697 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.679414, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 2D 02 00 ........ .0...-.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 53 00 00 ........ .....S.. [0020] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 00 00 00 .....®Ml é-j..... [0030] 00 . [2011/04/20 16:10:52.680124, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:52.680223, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:52.680285, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 590 of length 292 (0 toread) [2011/04/20 16:10:52.680346, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.680385, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37760 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=221 [2011/04/20 16:10:52.681027, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 2E 02 00 ........ .Ì...... [0020] 00 B4 00 00 00 00 00 45 00 48 CB E3 00 14 00 00 .´.....E .HËã.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 76 01 1C 00 00 ........ .Øüv.... [0080] 00 D0 B9 A6 00 34 FD 76 01 28 0A 00 00 03 00 00 .й¦.4ýv .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:52.682152, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.682219, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.682309, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:52.682381, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.682439, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.682501, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.682562, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:52.682626, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:52.682690, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:52.682755, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:52.682816, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:52.682879, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.682942, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.683000, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.683059, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:52.683123, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 0000022e [2011/04/20 16:10:52.683489, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.683550, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.683612, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.683671, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.683808, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:52.683873, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:52.683941, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:52.684006, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000022e [2011/04/20 16:10:52.684337, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.684497, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:52.684611, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:52.684726, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.684793, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:52.684883, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:52.684946, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.684985, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37760 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:52.685462, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 2E 02 00 ....#... . ...... [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:52.686873, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:52.686976, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:52.687039, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 591 of length 184 (0 toread) [2011/04/20 16:10:52.687100, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.687139, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37824 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=113 [2011/04/20 16:10:52.687854, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 2F 02 00 ........ .`.../.. [0020] 00 48 00 00 00 00 00 01 00 48 CB E3 00 14 00 00 .H...... .HËã.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:52.688493, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.688559, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.688647, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:52.688719, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.688777, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.688838, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.688898, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.688967, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.689031, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:52.689095, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:52.689155, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:52.689219, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.689283, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.689342, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:52.689400, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:52.689464, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 0000022f [2011/04/20 16:10:52.689797, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.689857, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.689920, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.689978, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:52.690037, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:52.690148, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.690211, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000048 0004 context_id: 0000 0006 opnum : 0001 [2011/04/20 16:10:52.690354, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.690420, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.690489, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTER [2011/04/20 16:10:52.690560, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[1].fn == 0xb7207b80 [2011/04/20 16:10:52.690644, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinter: struct spoolss_OpenPrinter in: struct spoolss_OpenPrinter printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ checking name: \\serverdati\tuning [2011/04/20 16:10:52.691141, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:52.691226, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[12] [0000] 00 00 00 00 54 00 00 00 00 00 00 00 AE 4D 6C E9 ....T... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.691402, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:52.691485, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:52.691615, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:52 2011 [2011/04/20 16:10:52.691771, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:52 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:52.691934, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 12 printer handles active [2011/04/20 16:10:52.691995, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 54 00 00 00 00 00 00 00 AE 4D 6C E9 ....T... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.692166, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 54 00 00 00 00 00 00 00 AE 4D 6C E9 ....T... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.692342, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.693960, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:52.694116, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:52.694236, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:52.694308, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.694394, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.694458, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.694520, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.694579, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.694755, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.694823, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.694885, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.694947, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.695015, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.695111, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.695176, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.695242, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.695307, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.695382, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.695449, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.695519, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.695583, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.695645, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.695776, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.695836, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.695956, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.696031, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.696099, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.696172, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.696280, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.696344, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.696406, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.696468, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.696527, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.696686, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:52.696761, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.697003, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:52.697067, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:52.697137, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:52.697326, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.697399, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.697461, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.697523, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.697581, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.697697, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.697770, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.697861, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.697925, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.697987, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.698049, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.698115, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.698205, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.698271, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.698336, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.698401, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.698476, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.698543, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.698609, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.698673, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.698735, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.698797, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.698855, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.698965, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.699037, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.699153, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.699229, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.699334, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:52.699440, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.699535, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:52.699802, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:52.699883, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:52.699948, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinter: struct spoolss_OpenPrinter out: struct spoolss_OpenPrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000054-0000-0000-ae4d-6ce92d6a0000 result : WERR_OK [2011/04/20 16:10:52.700218, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.700327, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.700395, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:52.700517, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.700583, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.700656, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000022f [2011/04/20 16:10:52.700980, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.701164, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.701378, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.701422, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37824 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.701902, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 2F 02 00 ........ .0.../.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 54 00 00 ........ .....T.. [0020] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 00 00 00 .....®Ml é-j..... [0030] 00 . [2011/04/20 16:10:52.702857, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:52.702999, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:52.703062, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 592 of length 132 (0 toread) [2011/04/20 16:10:52.703123, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.703269, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37889 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=61 [2011/04/20 16:10:52.703958, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 30 02 00 ........ .,...0.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 50 00 00 ........ .....P.. [0030] 00 00 00 00 00 AE 4D 6A E9 2D 6A 00 00 .....®Mj é-j.. [2011/04/20 16:10:52.704312, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.704379, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.704468, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:52.704540, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.704598, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.704660, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.704721, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:52.704785, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:52.704850, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:52.704916, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:52.704976, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:52.705040, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.705103, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.705162, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.705220, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:52.705284, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000230 [2011/04/20 16:10:52.705714, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.705782, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.705889, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.705950, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.706009, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:52.706072, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:52.706141, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:52.706205, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000230 [2011/04/20 16:10:52.706537, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.706697, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:52.706812, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:52.706930, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.706997, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:52.707086, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:52.707149, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.707188, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37889 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:52.707666, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 30 02 00 ....#... . ...0.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:52.708139, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:52.708226, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:52.708287, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 593 of length 132 (0 toread) [2011/04/20 16:10:52.708348, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.708387, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37952 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:52.709038, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 31 02 00 ........ .,...1.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 54 00 00 ........ .....T.. [0030] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 .....®Ml é-j.. [2011/04/20 16:10:52.709387, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.709453, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.709537, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:52.709608, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.709666, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.709727, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.709786, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.709850, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.709913, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:52.709978, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:52.710038, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:52.710100, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.710164, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.710223, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.710282, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:52.710344, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000231 [2011/04/20 16:10:52.710672, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.710732, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.710795, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.710853, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.710912, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:52.710975, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.711036, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:52.711178, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.711243, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.711349, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:52.711421, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:52.711494, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000054-0000-0000-ae4d-6ce92d6a0000 [2011/04/20 16:10:52.711779, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 54 00 00 00 00 00 00 00 AE 4D 6C E9 ....T... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.711956, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 54 00 00 00 00 00 00 00 AE 4D 6C E9 ....T... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.712137, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 54 00 00 00 00 00 00 00 AE 4D 6C E9 ....T... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.712315, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:52.712378, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:52.712646, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.712715, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.712778, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:52.712897, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.712964, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.713035, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000231 [2011/04/20 16:10:52.713356, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.713538, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.713601, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.713640, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=37952 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.714162, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 31 02 00 ........ .0...1.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:52.729222, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2008 [2011/04/20 16:10:52.729349, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7d8 [2011/04/20 16:10:52.729413, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 594 of length 2012 (0 toread) [2011/04/20 16:10:52.729474, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.729513, 5, pid=27181] lib/util.c:627(show_msg) size=2008 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38016 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1924 (0x784) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1924 (0x784) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1941 [2011/04/20 16:10:52.730118, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 84 07 00 00 32 02 00 ........ .....2.. [0020] 00 6C 07 00 00 00 00 45 00 B0 CB E2 00 14 00 00 .l.....E .°Ëâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 B4 06 00 00 18 0A E3 00 B4 06 00 .....´.. ...ã.´.. [0070] 00 5C 00 5C 00 73 00 65 00 72 00 76 00 65 00 72 .\.\.s.e .r.v.e.r [0080] 00 64 00 61 00 74 00 69 00 5C 00 74 00 75 00 6E .d.a.t.i .\.t.u.n [0090] 00 69 00 6E 00 67 00 00 00 00 00 00 00 00 00 00 .i.n.g.. ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 01 04 00 06 DC 00 D8 05 53 FF 81 03 01 00 0B .....Ü.Ø .Sÿ..... [00C0] 00 9A 0B 34 08 64 00 01 00 0F 00 58 02 02 00 01 ...4.d.. ...X.... [00D0] 00 58 02 03 00 01 00 41 00 34 00 00 00 00 00 00 .X.....A .4...... [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [0130] 00 02 00 00 00 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 50 52 49 ........ .....PRI [0150] 56 E2 30 00 00 00 00 00 00 00 00 00 00 00 00 00 Vâ0..... ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 18 00 00 00 00 00 10 27 10 27 10 ........ ....'.'. [01B0] 27 00 00 10 27 00 00 00 00 00 00 00 00 B8 02 8C '...'... .....¸.. [01C0] 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ........ ........ [01E0] 00 4C 00 10 00 50 34 03 00 28 88 04 00 00 00 00 .L...P4. .(...... [01F0] 00 00 00 00 00 01 00 01 00 00 00 00 00 00 00 00 ........ ........ [2011/04/20 16:10:52.732753, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.732824, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.732928, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1924 params=0 setup=2 [2011/04/20 16:10:52.733002, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.733059, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.733120, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.733180, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.733243, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.733310, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1924 [2011/04/20 16:10:52.733375, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1924 [2011/04/20 16:10:52.733435, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1924 [2011/04/20 16:10:52.733498, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1924, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.733563, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.733622, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:52.733680, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1908 [2011/04/20 16:10:52.733745, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0784 000a auth_len : 0000 000c call_id : 00000232 [2011/04/20 16:10:52.734074, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.734134, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.734201, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.734260, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:52.734318, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1908, incoming data = 1908 [2011/04/20 16:10:52.734383, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.734445, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000076c 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:52.734593, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.734657, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.734726, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:52.734797, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:52.734967, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x000006b4 (1716) devmode : * devmode: struct spoolss_DeviceMode devicename : '\\serverdati\tuning' specversion : DMSPEC_NT4_AND_ABOVE (1025) driverversion : 0x0600 (1536) size : 0x00dc (220) __driverextra_length : 0x05d8 (1496) fields : 0x0381ff53 (58851155) 1: DEVMODE_ORIENTATION 1: DEVMODE_PAPERSIZE 0: DEVMODE_PAPERLENGTH 0: DEVMODE_PAPERWIDTH 1: DEVMODE_SCALE 0: DEVMODE_POSITION 1: DEVMODE_NUP 1: DEVMODE_COPIES 1: DEVMODE_DEFAULTSOURCE 1: DEVMODE_PRINTQUALITY 1: DEVMODE_COLOR 1: DEVMODE_DUPLEX 1: DEVMODE_YRESOLUTION 1: DEVMODE_TTOPTION 1: DEVMODE_COLLATE 1: DEVMODE_FORMNAME 0: DEVMODE_LOGPIXELS 0: DEVMODE_BITSPERPEL 0: DEVMODE_PELSWIDTH 0: DEVMODE_PELSHEIGHT 0: DEVMODE_DISPLAYFLAGS 0: DEVMODE_DISPLAYFREQUENCY 1: DEVMODE_ICMMETHOD 1: DEVMODE_ICMINTENT 1: DEVMODE_MEDIATYPE 0: DEVMODE_DITHERTYPE 0: DEVMODE_PANNINGWIDTH 0: DEVMODE_PANNINGHEIGHT orientation : DMORIENT_PORTRAIT (1) papersize : DMPAPER_A5 (11) paperlength : 0x0b9a (2970) paperwidth : 0x0834 (2100) scale : 0x0064 (100) copies : 0x0001 (1) defaultsource : DMBIN_FORMSOURCE (15) printquality : UNKNOWN_ENUM_VALUE (600) color : DMRES_COLOR (2) duplex : DMDUP_SIMPLEX (1) yresolution : 0x0258 (600) ttoption : DMTT_SUBDEV (3) collate : DMCOLLATE_TRUE (1) formname : 'A4' logpixels : 0x0000 (0) bitsperpel : 0x00000000 (0) pelswidth : 0x00000000 (0) pelsheight : 0x00000000 (0) displayflags : DMNUP_SYSTEM (1) displayfrequency : 0x00000000 (0) icmmethod : DMICMMETHOD_NONE (1) icmintent : DMICM_CONTRAST (2) mediatype : UNKNOWN_ENUM_VALUE (256) dithertype : UNKNOWN_ENUM_VALUE (0) reserved1 : 0x00000000 (0) reserved2 : 0x00000000 (0) panningwidth : 0x00000000 (0) panningheight : 0x00000000 (0) driverextra_data : DATA_BLOB length=1496 [2011/04/20 16:10:52.737629, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 00 PRIVâ0.. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 27 ........ .......' [0060] 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 00 .'.'...' ........ [0070] B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 00 ¸....... ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ........ ........ [0090] 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 00 ....L... P4..(... [00A0] 00 00 00 00 00 00 00 00 01 00 01 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 84 E0 5A 4E ........ .....àZN [00C0] 1C 00 00 00 00 00 00 00 01 00 FF 00 00 00 FF 00 ........ ..ÿ...ÿ. [00D0] 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ........ ........ [00E0] 00 00 00 00 02 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 02 00 01 00 03 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 B8 02 00 00 53 4D 54 4A 00 00 00 00 ....¸... SMTJ.... [02E0] 10 00 A8 02 52 00 49 00 43 00 4F 00 48 00 20 00 ..¨.R.I. C.O.H. . [02F0] 41 00 66 00 69 00 63 00 69 00 6F 00 20 00 33 00 A.f.i.c. i.o. .3. [0300] 32 00 33 00 32 00 43 00 20 00 50 00 53 00 00 00 2.3.2.C. .P.S... [0310] 52 65 73 6F 6C 75 74 69 6F 6E 00 36 30 30 64 70 Resoluti on.600dp [0320] 69 00 52 49 50 61 70 65 72 50 6F 6C 69 63 79 00 i.RIPape rPolicy. [0330] 50 72 6F 6D 70 74 55 73 65 72 00 50 61 67 65 53 PromptUs er.PageS [0340] 69 7A 65 00 41 34 00 50 61 67 65 52 65 67 69 6F ize.A4.P ageRegio [0350] 6E 00 00 49 6E 70 75 74 53 6C 6F 74 00 2A 55 73 n..Input Slot.*Us [0360] 65 46 6F 72 6D 54 72 61 79 54 61 62 6C 65 00 4C eFormTra yTable.L [0370] 65 61 64 69 6E 67 45 64 67 65 00 00 44 75 70 6C eadingEd ge..Dupl [0380] 65 78 00 4E 6F 6E 65 00 52 49 43 6F 6C 6C 61 74 ex.None. RICollat [0390] 65 00 46 61 6C 73 65 00 52 49 50 72 69 6E 74 4D e.False. RIPrintM [03A0] 6F 64 65 00 30 72 68 69 74 00 43 6F 6C 6F 72 4D ode.0rhi t.ColorM [03B0] 6F 64 65 6C 00 43 4D 59 4B 00 52 50 53 42 69 74 odel.CMY K.RPSBit [03C0] 73 50 65 72 50 69 78 65 6C 00 32 42 69 74 73 50 sPerPixe l.2BitsP [03D0] 65 72 50 69 78 65 6C 00 52 69 6D 61 67 65 73 6D erPixel. Rimagesm [03E0] 00 4F 66 66 00 52 50 53 52 47 42 63 6F 72 72 65 .Off.RPS RGBcorre [03F0] 63 74 00 44 65 74 61 69 6C 42 72 69 67 68 74 00 ct.Detai lBright. [0400] 52 50 53 43 6F 6C 6F 72 52 65 6E 64 44 69 63 74 RPSColor RendDict [0410] 00 41 75 74 6F 00 52 50 53 43 6F 6C 6F 72 53 65 .Auto.RP SColorSe [0420] 70 00 4E 4F 53 45 50 41 52 41 54 45 00 52 50 53 p.NOSEPA RATE.RPS [0430] 44 69 74 68 65 72 54 79 70 65 00 41 75 74 6F 00 DitherTy pe.Auto. [0440] 52 50 53 42 6C 61 63 6B 4D 6F 64 65 00 47 72 61 RPSBlack Mode.Gra [0450] 79 00 52 50 53 42 6C 61 63 6B 4F 76 65 72 50 72 y.RPSBla ckOverPr [0460] 69 6E 74 00 46 61 6C 73 65 00 52 63 6D 79 6B 73 int.Fals e.Rcmyks [0470] 69 6D 75 6C 61 74 69 6F 6E 00 4F 66 66 00 4D 65 imulatio n.Off.Me [0480] 64 69 61 54 79 70 65 00 50 6C 61 69 6E 00 4F 75 diaType. Plain.Ou [0490] 74 70 75 74 42 69 6E 00 44 65 66 61 75 6C 74 00 tputBin. Default. [04A0] 53 74 61 70 6C 65 4C 6F 63 61 74 69 6F 6E 00 4E StapleLo cation.N [04B0] 6F 6E 65 00 52 49 57 61 74 65 72 6D 61 72 6B 00 one.RIWa termark. [04C0] 4F 66 66 00 52 49 57 4D 54 65 78 74 00 43 6F 6E Off.RIWM Text.Con [04D0] 66 69 64 65 6E 74 69 61 6C 00 52 49 77 6D 46 6F fidentia l.RIwmFo [04E0] 6E 74 00 48 65 6C 76 65 74 69 63 61 42 00 52 49 nt.Helve ticaB.RI [04F0] 77 6D 53 69 7A 65 00 33 36 00 52 49 77 6D 41 6E wmSize.3 6.RIwmAn [0500] 67 6C 65 00 34 35 44 65 67 00 52 49 77 6D 54 65 gle.45De g.RIwmTe [0510] 78 74 53 74 79 6C 65 00 47 72 61 79 00 00 00 00 xtStyle. Gray.... [0520] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0530] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0560] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 00 00 00 00 4C 00 00 00 ........ ....L... [0590] 45 42 44 41 45 42 44 41 00 00 00 00 00 00 00 00 EBDAEBDA ........ [05A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 ........ access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:52.745858, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:52.745949, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[12] [0000] 00 00 00 00 55 00 00 00 00 00 00 00 AE 4D 6C E9 ....U... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.746124, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:52.746212, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:52.746347, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:52 2011 [2011/04/20 16:10:52.746455, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:52 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:52.746778, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 12 printer handles active [2011/04/20 16:10:52.746849, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 55 00 00 00 00 00 00 00 AE 4D 6C E9 ....U... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.747030, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 55 00 00 00 00 00 00 00 AE 4D 6C E9 ....U... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.747207, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.748907, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:52.749065, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:52.749129, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:52.749201, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.749288, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.749352, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.749414, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.749534, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.749717, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.749786, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.749849, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.749910, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.749979, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.750073, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.750138, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.750204, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.750269, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.750347, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.750414, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.750483, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.750547, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.750609, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.750670, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.750729, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.750842, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.750914, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.750983, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.751056, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.751163, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.751226, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.751287, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.751349, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.751408, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.751514, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:52.751588, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.751659, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:52.751786, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:52.751903, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:52.752089, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.752159, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.752221, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.752283, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.752341, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.752453, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.752526, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.752614, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.752676, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.752738, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.752799, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.752866, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.752952, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.753016, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.753081, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.753145, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.753220, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.753286, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.753352, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.753415, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.753476, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.753537, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.753595, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.753704, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.753775, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.753862, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.753935, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.754039, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:52.754141, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.754279, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:52.754451, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:52.754520, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:52.754584, 5, pid=27181] rpc_server/srv_spoolss_nt.c:1521(convert_devicemode) convert_devicemode: allocating a generic devmode [2011/04/20 16:10:52.754659, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000055-0000-0000-ae4d-6ce92d6a0000 result : WERR_OK [2011/04/20 16:10:52.754945, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.755060, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.755129, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1908 [2011/04/20 16:10:52.755266, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.755331, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.755404, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000232 [2011/04/20 16:10:52.755811, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.756000, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.756064, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.756104, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38016 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.756581, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 32 02 00 ........ .0...2.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 55 00 00 ........ .....U.. [0020] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 00 00 00 .....®Ml é-j..... [0030] 00 . [2011/04/20 16:10:52.757140, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:52.757230, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:52.757293, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 595 of length 292 (0 toread) [2011/04/20 16:10:52.757353, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.757392, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38081 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=221 [2011/04/20 16:10:52.758287, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 33 02 00 ........ .Ì...3.. [0020] 00 B4 00 00 00 00 00 45 00 48 FA E2 00 14 00 00 .´.....E .Húâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 76 01 1C 00 00 ........ .Øüv.... [0080] 00 D0 B9 A6 00 34 FD 76 01 28 0A 00 00 03 00 00 .й¦.4ýv .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:52.759435, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.759501, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.759594, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:52.759666, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.759797, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.759860, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.759921, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:52.759986, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:52.760051, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:52.760116, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:52.760177, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:52.760240, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.760303, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.760362, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.760420, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:52.760484, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000233 [2011/04/20 16:10:52.760851, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.760912, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.760975, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.761034, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.761093, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:52.761157, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:52.761225, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:52.761289, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000233 [2011/04/20 16:10:52.761619, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.761780, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:52.761895, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:52.762013, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.762082, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:52.762171, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:52.762234, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.762273, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38081 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:52.762748, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 33 02 00 ....#... . ...3.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:52.763186, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:52.763273, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:52.763334, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 596 of length 132 (0 toread) [2011/04/20 16:10:52.763395, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.763434, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38144 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:52.764254, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 34 02 00 ........ .,...4.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 55 00 00 ........ .....U.. [0030] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 .....®Ml é-j.. [2011/04/20 16:10:52.764621, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.764687, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.764773, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:52.764844, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.764903, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.764964, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.765024, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.765088, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.765151, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:52.765216, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:52.765276, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:52.765339, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.765403, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.765462, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.765521, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:52.765584, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000234 [2011/04/20 16:10:52.765915, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.765975, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.766038, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.766096, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.766155, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:52.766219, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.766280, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:52.766470, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.766538, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.766606, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:52.766678, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:52.766751, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000055-0000-0000-ae4d-6ce92d6a0000 [2011/04/20 16:10:52.766987, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 55 00 00 00 00 00 00 00 AE 4D 6C E9 ....U... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.767176, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 55 00 00 00 00 00 00 00 AE 4D 6C E9 ....U... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.767357, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 55 00 00 00 00 00 00 00 AE 4D 6C E9 ....U... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.767538, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:52.767614, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:52.767930, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.768001, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.768065, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:52.768170, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.768236, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.768309, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000234 [2011/04/20 16:10:52.768630, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.768811, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.768875, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.768966, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38144 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.769442, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 34 02 00 ........ .0...4.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:52.769963, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 102 [2011/04/20 16:10:52.770049, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x66 [2011/04/20 16:10:52.770110, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 597 of length 106 (0 toread) [2011/04/20 16:10:52.770171, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.770209, 5, pid=27181] lib/util.c:627(show_msg) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38210 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=19 [2011/04/20 16:10:52.770965, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 73 00 70 00 6F 00 6F 00 6C 00 73 00 73 .\.s.p.o .o.l.s.s [0010] 00 00 00 ... [2011/04/20 16:10:52.771139, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBntcreateX (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.771204, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.771286, 10, pid=27181] smbd/nttrans.c:498(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = spoolss [2011/04/20 16:10:52.771366, 4, pid=27181] smbd/nttrans.c:283(nt_open_pipe) nt_open_pipe: Opening pipe \spoolss. [2011/04/20 16:10:52.771438, 5, pid=27181] smbd/files.c:119(file_new) allocated file structure 3099, fnum = 7195 (3 used) [2011/04/20 16:10:52.771523, 4, pid=27181] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p) Create pipe requested \spoolss [2011/04/20 16:10:52.771605, 10, pid=27181] rpc_server/srv_lsa_hnd.c:131(init_pipe_handle_list) init_pipe_handles: pipe_handles ref count = 3 for pipe \spoolss [2011/04/20 16:10:52.771765, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.771844, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.771906, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.771967, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.772026, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.772225, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.772302, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.772400, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username msansuini, was [2011/04/20 16:10:52.772465, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain DOMINIOCSA, was [2011/04/20 16:10:52.772527, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username msansuini, was [2011/04/20 16:10:52.772590, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name Monia Sansuini, was [2011/04/20 16:10:52.772654, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\192.168.70.2\msansuini, was [2011/04/20 16:10:52.772717, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive o:, was NULL [2011/04/20 16:10:52.772781, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script netlogon.bat, was [2011/04/20 16:10:52.772844, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2011/04/20 16:10:52.772908, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.772971, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.773047, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.773109, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.773170, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.773228, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.773340, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.773413, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.773480, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-0 [2011/04/20 16:10:52.773552, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-0 from rid 0 [2011/04/20 16:10:52.773656, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-2943704632-3037471470-1787688681-11453 [2011/04/20 16:10:52.773731, 4, pid=27181] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p) Created internal pipe \spoolss (pipes_open=0) [2011/04/20 16:10:52.773806, 5, pid=27181] smbd/nttrans.c:372(do_ntcreate_pipe_open) do_ntcreate_pipe_open: open pipe = \spoolss [2011/04/20 16:10:52.774097, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:52.774187, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:52.774249, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 598 of length 184 (0 toread) [2011/04/20 16:10:52.774310, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.774349, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38273 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=113 [2011/04/20 16:10:52.775250, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 36 02 00 ........ .`...6.. [0020] 00 48 00 00 00 00 00 01 00 48 FA E2 00 14 00 00 .H...... .Húâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:52.775962, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.776030, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.776119, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:52.776191, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.776250, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.776312, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.776372, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:52.776436, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:52.776501, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:52.776566, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:52.776626, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:52.776689, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.776752, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.776811, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:52.776869, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:52.776933, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000236 [2011/04/20 16:10:52.777264, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.777325, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.777386, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.777444, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:52.777503, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:52.777612, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:52.777682, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:52.777746, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000236 [2011/04/20 16:10:52.778075, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.778236, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:52.778351, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:52.778464, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.778531, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:52.778620, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:52.778683, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.778722, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38273 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:52.779200, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 36 02 00 ....#... . ...6.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:52.779632, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 136 [2011/04/20 16:10:52.779776, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x88 [2011/04/20 16:10:52.779839, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 599 of length 140 (0 toread) [2011/04/20 16:10:52.779899, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.779938, 5, pid=27181] lib/util.c:627(show_msg) size=136 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=38338 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7195 (0x1C1B) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 72 (0x48) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=73 [2011/04/20 16:10:52.780498, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 35 02 00 î....... .H...5.. [0010] 00 B8 10 B8 10 F0 53 00 00 01 00 00 00 00 00 01 .¸.¸.ðS. ........ [0020] 00 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 89 .xV4.4.Í «ï..#Eg. [0030] AB 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 «.....]. .ë.É..è. [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2011/04/20 16:10:52.780961, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBwriteX (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.781028, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.781097, 6, pid=27181] smbd/pipes.c:291(reply_pipe_write_and_X) reply_pipe_write_and_X: 1c1b name: spoolss len: 72 [2011/04/20 16:10:52.781162, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 72 [2011/04/20 16:10:52.781226, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 72 [2011/04/20 16:10:52.781286, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2011/04/20 16:10:52.781349, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.781413, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.781472, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 56 [2011/04/20 16:10:52.781531, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2011/04/20 16:10:52.781595, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000235 [2011/04/20 16:10:52.781925, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.781986, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 11, flags = 3 [2011/04/20 16:10:52.782049, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.782108, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 56 [2011/04/20 16:10:52.782166, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 [2011/04/20 16:10:52.782230, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 11 [2011/04/20 16:10:52.782304, 5, pid=27181] rpc_server/srv_pipe.c:1642(api_pipe_bind_req) api_pipe_bind_req: decode request. 1642 [2011/04/20 16:10:52.782366, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_rb [2011/04/20 16:10:52.782428, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 0008 num_contexts: 01 000c context_id : 0000 000e num_transfer_syntaxes: 01 [2011/04/20 16:10:52.782637, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 00000f smb_io_rpc_iface [2011/04/20 16:10:52.782700, 7, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_uuid uuid 0010 data : 12345678 0014 data : 1234 0016 data : abcd 0018 data : ef 00 001a data : 01 23 45 67 89 ab 0020 version: 00000001 [2011/04/20 16:10:52.782921, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_rpc_iface [2011/04/20 16:10:52.782983, 7, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_uuid uuid 0024 data : 8a885d04 0028 data : 1ceb 002a data : 11c9 002c data : 9f e8 002e data : 08 00 2b 10 48 60 0034 version: 00000002 [2011/04/20 16:10:52.783242, 3, pid=27181] rpc_server/srv_pipe.c:1668(api_pipe_bind_req) api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss [2011/04/20 16:10:52.783306, 5, pid=27181] rpc_server/srv_pipe.c:1718(api_pipe_bind_req) api_pipe_bind_req: make response. 1718 [2011/04/20 16:10:52.783367, 3, pid=27181] rpc_server/srv_pipe.c:998(check_bind_req) check_bind_req for \spoolss checking lsarpc checking winreg checking initshutdown checking dssetup checking wkssvc checking svcctl checking ntsvcs checking netlogon checking netdfs checking srvsvc checking spoolss [2011/04/20 16:10:52.783651, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_ba [2011/04/20 16:10:52.783761, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 [2011/04/20 16:10:52.783897, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000008 smb_io_rpc_addr_str 0008 len: 000e 000a str: \PIPE\spoolss. [2011/04/20 16:10:52.784031, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_results 0018 num_results: 01 001c result : 0000 001e reason : 0000 [2011/04/20 16:10:52.784167, 6, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000020 smb_io_rpc_iface [2011/04/20 16:10:52.784230, 7, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000020 smb_io_uuid uuid 0020 data : 8a885d04 0024 data : 1ceb 0026 data : 11c9 0028 data : 9f e8 002a data : 08 00 2b 10 48 60 0030 version: 00000002 [2011/04/20 16:10:52.784612, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000235 [2011/04/20 16:10:52.784946, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 56 [2011/04/20 16:10:52.785054, 3, pid=27181] smbd/pipes.c:352(pipe_write_andx_done) writeX-IPC nwritten=72 [2011/04/20 16:10:52.785272, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:52.785353, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:52.785415, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 600 of length 292 (0 toread) [2011/04/20 16:10:52.785475, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.785514, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38401 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=221 [2011/04/20 16:10:52.786214, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 37 02 00 ........ .Ì...7.. [0020] 00 B4 00 00 00 00 00 45 00 38 85 E2 00 14 00 00 .´.....E .8.â.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 18 01 1C 00 00 ........ .Øü..... [0080] 00 D0 B9 A6 00 34 FD 18 01 28 0A 00 00 03 00 00 .й¦.4ý. .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:52.787411, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.787477, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.787565, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:52.787637, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.787746, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.787809, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.787869, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.787933, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.787996, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:52.788061, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:52.788121, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:52.788184, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.788249, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.788308, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.788366, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:52.788430, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000237 [2011/04/20 16:10:52.788758, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.788818, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.788882, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.788941, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.789000, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:52.789063, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.789125, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 000000b4 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:52.789309, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.789377, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.789446, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:52.789518, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:52.789616, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:52.790517, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:52.790605, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[12] [0000] 00 00 00 00 56 00 00 00 00 00 00 00 AE 4D 6C E9 ....V... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.790782, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:52.790863, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:52.790993, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:52 2011 [2011/04/20 16:10:52.791095, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:52 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:52.791253, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 12 printer handles active [2011/04/20 16:10:52.791315, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 56 00 00 00 00 00 00 00 AE 4D 6C E9 ....V... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.791494, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 56 00 00 00 00 00 00 00 AE 4D 6C E9 ....V... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.791777, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.793403, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:52.793561, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:52.793625, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:52.793695, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.793783, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.793846, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.793909, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.793969, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.794144, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.794212, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.794274, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.794336, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.794404, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.794500, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.794565, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.794631, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.794697, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.794772, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.794840, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.794909, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.794971, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.795033, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.795094, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.795153, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.795269, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.795342, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.795409, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.795482, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.795651, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.795793, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.795855, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.795917, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.795976, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.796090, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:52.796165, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.796236, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:52.796296, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:52.796365, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:52.796541, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.796611, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.796673, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.796735, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.796793, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.796901, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.796974, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.797062, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.797124, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.797186, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.797247, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.797313, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.797399, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.797464, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.797528, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.797592, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.797667, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.797734, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.797800, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.797862, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.797924, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.798033, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.798093, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.798208, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.798279, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.798345, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.798417, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.798522, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:52.798623, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.798716, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:52.798903, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:52.798974, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:52.799038, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000056-0000-0000-ae4d-6ce92d6a0000 result : WERR_OK [2011/04/20 16:10:52.799311, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.799418, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.799489, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:52.799607, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.799672, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.799824, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000237 [2011/04/20 16:10:52.800149, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.800335, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.800399, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.800438, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38401 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.800974, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 37 02 00 ........ .0...7.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 56 00 00 ........ .....V.. [0020] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 00 00 00 .....®Ml é-j..... [0030] 00 . [2011/04/20 16:10:52.801606, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 59 [2011/04/20 16:10:52.801697, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x3b [2011/04/20 16:10:52.801758, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 601 of length 63 (0 toread) [2011/04/20 16:10:52.801819, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.801858, 5, pid=27181] lib/util.c:627(show_msg) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=38466 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7195 (0x1C1B) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2011/04/20 16:10:52.802388, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBreadX (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.802453, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.802530, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.802599, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2011/04/20 16:10:52.802693, 3, pid=27181] smbd/pipes.c:462(pipe_read_andx_done) readX-IPC min=1024 max=1024 nread=68 [2011/04/20 16:10:52.805321, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:52.805436, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:52.805499, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 602 of length 2032 (0 toread) [2011/04/20 16:10:52.805559, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.805599, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38530 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=1961 [2011/04/20 16:10:52.806207, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 35 02 00 ........ .....5.. [0020] 00 80 07 00 00 00 00 45 00 38 D0 E2 00 14 00 00 .......E .8Ðâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 D8 CE E2 00 04 00 00 00 00 00 00 00 04 00 00 .ØÎâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 C8 26 E3 .R.A.W.. .´...È&ã [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 00 00 00 .u.n.i.n .g...... [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 0B 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:52.808858, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.808930, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.809032, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:52.809105, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.809163, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.809224, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.809284, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:52.809347, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:52.809414, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:52.809479, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:52.809539, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:52.809603, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.809668, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.809726, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:52.809786, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:52.809850, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 00000235 [2011/04/20 16:10:52.810225, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.810286, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.810355, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.810413, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:52.810471, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:52.810537, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.810599, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000780 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:52.810744, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 73 [2011/04/20 16:10:52.810813, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.810883, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:52.810953, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:52.811086, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : * datatype : 'RAW' devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x000006b4 (1716) devmode : * devmode: struct spoolss_DeviceMode devicename : '\\serverdati\tuning' specversion : DMSPEC_NT4_AND_ABOVE (1025) driverversion : 0x0600 (1536) size : 0x00dc (220) __driverextra_length : 0x05d8 (1496) fields : 0x0380ff53 (58785619) 1: DEVMODE_ORIENTATION 1: DEVMODE_PAPERSIZE 0: DEVMODE_PAPERLENGTH 0: DEVMODE_PAPERWIDTH 1: DEVMODE_SCALE 0: DEVMODE_POSITION 1: DEVMODE_NUP 1: DEVMODE_COPIES 1: DEVMODE_DEFAULTSOURCE 1: DEVMODE_PRINTQUALITY 1: DEVMODE_COLOR 1: DEVMODE_DUPLEX 1: DEVMODE_YRESOLUTION 1: DEVMODE_TTOPTION 1: DEVMODE_COLLATE 0: DEVMODE_FORMNAME 0: DEVMODE_LOGPIXELS 0: DEVMODE_BITSPERPEL 0: DEVMODE_PELSWIDTH 0: DEVMODE_PELSHEIGHT 0: DEVMODE_DISPLAYFLAGS 0: DEVMODE_DISPLAYFREQUENCY 1: DEVMODE_ICMMETHOD 1: DEVMODE_ICMINTENT 1: DEVMODE_MEDIATYPE 0: DEVMODE_DITHERTYPE 0: DEVMODE_PANNINGWIDTH 0: DEVMODE_PANNINGHEIGHT orientation : DMORIENT_PORTRAIT (1) papersize : DMPAPER_A5 (11) paperlength : 0x0b9a (2970) paperwidth : 0x0834 (2100) scale : 0x0064 (100) copies : 0x0001 (1) defaultsource : DMBIN_FORMSOURCE (15) printquality : UNKNOWN_ENUM_VALUE (600) color : DMRES_COLOR (2) duplex : DMDUP_SIMPLEX (1) yresolution : 0x0258 (600) ttoption : DMTT_SUBDEV (3) collate : DMCOLLATE_TRUE (1) formname : 'A4' logpixels : 0x0000 (0) bitsperpel : 0x00000000 (0) pelswidth : 0x00000000 (0) pelsheight : 0x00000000 (0) displayflags : DMNUP_SYSTEM (1) displayfrequency : 0x00000000 (0) icmmethod : DMICMMETHOD_NONE (1) icmintent : DMICM_CONTRAST (2) mediatype : UNKNOWN_ENUM_VALUE (256) dithertype : UNKNOWN_ENUM_VALUE (0) reserved1 : 0x00000000 (0) reserved2 : 0x00000000 (0) panningwidth : 0x00000000 (0) panningheight : 0x00000000 (0) driverextra_data : DATA_BLOB length=1496 [2011/04/20 16:10:52.813620, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 00 PRIVâ0.. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 27 ........ .......' [0060] 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 00 .'.'...' ........ [0070] B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 00 ¸....... ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ........ ........ [0090] 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 00 ....L... P4..(... [00A0] 00 00 00 00 00 00 00 00 01 00 01 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 84 E0 5A 4E ........ .....àZN [00C0] 1C 00 00 00 00 00 00 00 01 00 FF 00 00 00 FF 00 ........ ..ÿ...ÿ. [00D0] 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ........ ........ [00E0] 00 00 00 00 02 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 02 00 01 00 03 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 B8 02 00 00 53 4D 54 4A 00 00 00 00 ....¸... SMTJ.... [02E0] 10 00 A8 02 52 00 49 00 43 00 4F 00 48 00 20 00 ..¨.R.I. C.O.H. . [02F0] 41 00 66 00 69 00 63 00 69 00 6F 00 20 00 33 00 A.f.i.c. i.o. .3. [0300] 32 00 33 00 32 00 43 00 20 00 50 00 53 00 00 00 2.3.2.C. .P.S... [0310] 52 65 73 6F 6C 75 74 69 6F 6E 00 36 30 30 64 70 Resoluti on.600dp [0320] 69 00 52 49 50 61 70 65 72 50 6F 6C 69 63 79 00 i.RIPape rPolicy. [0330] 50 72 6F 6D 70 74 55 73 65 72 00 50 61 67 65 53 PromptUs er.PageS [0340] 69 7A 65 00 41 34 00 50 61 67 65 52 65 67 69 6F ize.A4.P ageRegio [0350] 6E 00 00 49 6E 70 75 74 53 6C 6F 74 00 2A 55 73 n..Input Slot.*Us [0360] 65 46 6F 72 6D 54 72 61 79 54 61 62 6C 65 00 4C eFormTra yTable.L [0370] 65 61 64 69 6E 67 45 64 67 65 00 00 44 75 70 6C eadingEd ge..Dupl [0380] 65 78 00 4E 6F 6E 65 00 52 49 43 6F 6C 6C 61 74 ex.None. RICollat [0390] 65 00 46 61 6C 73 65 00 52 49 50 72 69 6E 74 4D e.False. RIPrintM [03A0] 6F 64 65 00 30 72 68 69 74 00 43 6F 6C 6F 72 4D ode.0rhi t.ColorM [03B0] 6F 64 65 6C 00 43 4D 59 4B 00 52 50 53 42 69 74 odel.CMY K.RPSBit [03C0] 73 50 65 72 50 69 78 65 6C 00 32 42 69 74 73 50 sPerPixe l.2BitsP [03D0] 65 72 50 69 78 65 6C 00 52 69 6D 61 67 65 73 6D erPixel. Rimagesm [03E0] 00 4F 66 66 00 52 50 53 52 47 42 63 6F 72 72 65 .Off.RPS RGBcorre [03F0] 63 74 00 44 65 74 61 69 6C 42 72 69 67 68 74 00 ct.Detai lBright. [0400] 52 50 53 43 6F 6C 6F 72 52 65 6E 64 44 69 63 74 RPSColor RendDict [0410] 00 41 75 74 6F 00 52 50 53 43 6F 6C 6F 72 53 65 .Auto.RP SColorSe [0420] 70 00 4E 4F 53 45 50 41 52 41 54 45 00 52 50 53 p.NOSEPA RATE.RPS [0430] 44 69 74 68 65 72 54 79 70 65 00 41 75 74 6F 00 DitherTy pe.Auto. [0440] 52 50 53 42 6C 61 63 6B 4D 6F 64 65 00 47 72 61 RPSBlack Mode.Gra [0450] 79 00 52 50 53 42 6C 61 63 6B 4F 76 65 72 50 72 y.RPSBla ckOverPr [0460] 69 6E 74 00 46 61 6C 73 65 00 52 63 6D 79 6B 73 int.Fals e.Rcmyks [0470] 69 6D 75 6C 61 74 69 6F 6E 00 4F 66 66 00 4D 65 imulatio n.Off.Me [0480] 64 69 61 54 79 70 65 00 50 6C 61 69 6E 00 4F 75 diaType. Plain.Ou [0490] 74 70 75 74 42 69 6E 00 44 65 66 61 75 6C 74 00 tputBin. Default. [04A0] 53 74 61 70 6C 65 4C 6F 63 61 74 69 6F 6E 00 4E StapleLo cation.N [04B0] 6F 6E 65 00 52 49 57 61 74 65 72 6D 61 72 6B 00 one.RIWa termark. [04C0] 4F 66 66 00 52 49 57 4D 54 65 78 74 00 43 6F 6E Off.RIWM Text.Con [04D0] 66 69 64 65 6E 74 69 61 6C 00 52 49 77 6D 46 6F fidentia l.RIwmFo [04E0] 6E 74 00 48 65 6C 76 65 74 69 63 61 42 00 52 49 nt.Helve ticaB.RI [04F0] 77 6D 53 69 7A 65 00 33 36 00 52 49 77 6D 41 6E wmSize.3 6.RIwmAn [0500] 67 6C 65 00 34 35 44 65 67 00 52 49 77 6D 54 65 gle.45De g.RIwmTe [0510] 78 74 53 74 79 6C 65 00 47 72 61 79 00 00 00 00 xtStyle. Gray.... [0520] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0530] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0560] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 00 00 00 00 4C 00 00 00 ........ ....L... [0590] 45 42 44 41 45 42 44 41 00 00 00 00 00 00 00 00 EBDAEBDA ........ [05A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 ........ access_mask : 0x00000008 (8) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 1: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:52.821971, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:52.822063, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[13] [0000] 00 00 00 00 57 00 00 00 00 00 00 00 AE 4D 6C E9 ....W... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.822238, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:52.822321, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:52.822455, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:52 2011 [2011/04/20 16:10:52.822562, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:52 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:52.822767, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 13 printer handles active [2011/04/20 16:10:52.822832, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 57 00 00 00 00 00 00 00 AE 4D 6C E9 ....W... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.823012, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 57 00 00 00 00 00 00 00 AE 4D 6C E9 ....W... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.823190, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.824910, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:52.825070, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:52.825135, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:52.825205, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.825293, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.825357, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.825420, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.825479, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.825661, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.825730, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.825793, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.825855, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.825921, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.826020, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.826085, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.826151, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.826216, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.826292, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.826359, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.826428, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.826492, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.826553, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.826615, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.826674, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.826788, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.826922, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.826992, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.827065, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.827171, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.827235, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.827296, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.827357, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.827416, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.827524, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:52.827597, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.827667, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:52.827796, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:52.827865, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:52.828064, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.828135, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.828197, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.828259, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.828317, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.828428, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.828500, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.828594, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.828658, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.828720, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.828781, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.828848, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.828939, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.829003, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.829069, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.829134, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.829210, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.829325, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.829394, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.829459, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.829521, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.829583, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.829642, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.829758, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.829832, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.829898, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.829971, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.830073, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:52.830174, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.830267, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:52.830439, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:52.830507, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:52.830570, 5, pid=27181] rpc_server/srv_spoolss_nt.c:1521(convert_devicemode) convert_devicemode: allocating a generic devmode [2011/04/20 16:10:52.830644, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000057-0000-0000-ae4d-6ce92d6a0000 result : WERR_OK [2011/04/20 16:10:52.830934, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.831045, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.831123, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:52.831265, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.831331, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.831405, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000235 [2011/04/20 16:10:52.831814, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.832056, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.832122, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.832161, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38530 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.832642, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 35 02 00 ........ .0...5.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 57 00 00 ........ .....W.. [0020] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 00 00 00 .....®Ml é-j..... [0030] 00 . [2011/04/20 16:10:52.833214, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:52.833305, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:52.833366, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 603 of length 132 (0 toread) [2011/04/20 16:10:52.833427, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.833465, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38593 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:52.834073, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 38 02 00 ........ .,...8.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 56 00 00 ........ .....V.. [0030] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 .....®Ml é-j.. [2011/04/20 16:10:52.834424, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.834490, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.834580, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:52.834652, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.834710, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.834772, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.834832, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.834896, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.834961, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:52.835026, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:52.835087, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:52.835150, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.835261, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.835321, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.835379, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:52.835443, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000238 [2011/04/20 16:10:52.835847, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.835909, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.835972, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.836031, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.836090, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:52.836153, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.836215, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:52.836355, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.836422, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.836490, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:52.836562, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:52.836635, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000056-0000-0000-ae4d-6ce92d6a0000 [2011/04/20 16:10:52.836871, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 56 00 00 00 00 00 00 00 AE 4D 6C E9 ....V... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.837060, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 56 00 00 00 00 00 00 00 AE 4D 6C E9 ....V... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.837239, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 56 00 00 00 00 00 00 00 AE 4D 6C E9 ....V... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.837418, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:52.837481, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:52.837793, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.837864, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.837927, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:52.838049, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.838117, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.838188, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000238 [2011/04/20 16:10:52.838510, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.838694, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.839388, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.839451, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38593 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.839989, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 38 02 00 ........ .0...8.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:52.842284, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:52.842392, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:52.842455, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 604 of length 292 (0 toread) [2011/04/20 16:10:52.842516, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.842554, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38657 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=221 [2011/04/20 16:10:52.843162, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 39 02 00 ........ .Ì...9.. [0020] 00 B4 00 00 00 00 00 45 00 18 CF E2 00 14 00 00 .´.....E ..Ïâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 18 01 1C 00 00 ........ .Øü..... [0080] 00 D0 B9 A6 00 34 FD 18 01 28 0A 00 00 03 00 00 .й¦.4ý. .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:52.844401, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.844473, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.844564, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:52.844637, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.844696, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.844757, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.844818, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.844883, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.844948, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:52.845014, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:52.845074, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:52.845138, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.845202, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.845261, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.845321, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:52.845385, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000239 [2011/04/20 16:10:52.845715, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.845775, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.845839, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.845898, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:52.845957, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:52.846021, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.846113, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 000000b4 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:52.846259, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.846325, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.846394, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:52.846467, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:52.846566, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:52.847465, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:52.847558, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[13] [0000] 00 00 00 00 58 00 00 00 00 00 00 00 AE 4D 6C E9 ....X... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.847788, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:52.847872, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:52.848004, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:52 2011 [2011/04/20 16:10:52.848108, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:52 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:52.848269, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 13 printer handles active [2011/04/20 16:10:52.848332, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 58 00 00 00 00 00 00 00 AE 4D 6C E9 ....X... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.848556, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 58 00 00 00 00 00 00 00 AE 4D 6C E9 ....X... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.848735, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:52.850360, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:52.850518, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:52.850583, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:52.850653, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.850741, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:52.850805, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.850867, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.850927, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.851103, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.851172, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.851235, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.851297, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.851364, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.851458, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.851523, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.851590, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.851655, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.851805, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.851874, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.851944, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.852007, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.852069, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.852131, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.852189, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.852307, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.852382, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.852450, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.852582, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.852691, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.852755, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.852816, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.852877, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.852936, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.853047, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:52.853120, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.853191, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:52.853250, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:52.853320, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:52.853499, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.853570, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.853631, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.853693, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.853751, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.853859, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.853933, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.854023, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:52.854086, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:52.854148, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:52.854210, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:52.854276, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.854363, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:52.854428, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:52.854493, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:52.854557, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:52.854631, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:52.854697, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:52.854763, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.854826, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:52.854933, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:52.854995, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:52.855053, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:52.855168, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:52.855240, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:52.855305, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:52.855377, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:52.855481, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:52.855584, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:52.855676, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:52.855932, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:52.856002, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:52.856067, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000058-0000-0000-ae4d-6ce92d6a0000 result : WERR_OK [2011/04/20 16:10:52.856342, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.856449, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.856520, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:52.856639, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.856705, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.856777, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000239 [2011/04/20 16:10:52.857101, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.857285, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.857348, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.857388, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38657 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.857918, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 39 02 00 ........ .0...9.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 58 00 00 ........ .....X.. [0020] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 00 00 00 .....®Ml é-j..... [0030] 00 . [2011/04/20 16:10:52.859392, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:52.859497, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:52.859558, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 605 of length 132 (0 toread) [2011/04/20 16:10:52.859619, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.859658, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38721 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:52.860325, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 3A 02 00 ........ .,...:.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 58 00 00 ........ .....X.. [0030] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 .....®Ml é-j.. [2011/04/20 16:10:52.860678, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:52.860745, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:52.860834, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:52.860907, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:52.860965, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:52.861027, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:52.861088, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:52.861153, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:52.861217, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:52.861282, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:52.861342, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:52.861406, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:52.861469, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:52.861528, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.861587, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:52.861700, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 0000023a [2011/04/20 16:10:52.862031, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:52.862091, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:52.862154, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:52.862212, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:52.862271, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:52.862335, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:52.862396, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:52.862536, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.862602, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:52.862671, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:52.862743, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:52.862816, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000058-0000-0000-ae4d-6ce92d6a0000 [2011/04/20 16:10:52.863052, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 58 00 00 00 00 00 00 00 AE 4D 6C E9 ....X... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.863236, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 58 00 00 00 00 00 00 00 AE 4D 6C E9 ....X... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.863418, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 58 00 00 00 00 00 00 00 AE 4D 6C E9 ....X... ....®Mlé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:52.863801, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:52.863884, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:52.864244, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:52.864321, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:52.864432, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:52.864569, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:52.864639, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:52.864712, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000023a [2011/04/20 16:10:52.865034, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:52.865217, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:52.865281, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:52.865320, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38721 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:52.865800, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 3A 02 00 ........ .0...:.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:53.080549, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2008 [2011/04/20 16:10:53.080699, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7d8 [2011/04/20 16:10:53.080762, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 606 of length 2012 (0 toread) [2011/04/20 16:10:53.080824, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.080863, 5, pid=27181] lib/util.c:627(show_msg) size=2008 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38785 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1924 (0x784) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1924 (0x784) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1941 [2011/04/20 16:10:53.081471, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 84 07 00 00 3B 02 00 ........ .....;.. [0020] 00 6C 07 00 00 00 00 45 00 30 CC E2 00 14 00 00 .l.....E .0Ìâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 B4 06 00 00 18 0A E3 00 B4 06 00 .....´.. ...ã.´.. [0070] 00 5C 00 5C 00 73 00 65 00 72 00 76 00 65 00 72 .\.\.s.e .r.v.e.r [0080] 00 64 00 61 00 74 00 69 00 5C 00 74 00 75 00 6E .d.a.t.i .\.t.u.n [0090] 00 69 00 6E 00 67 00 00 00 00 00 00 00 00 00 00 .i.n.g.. ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 01 04 00 06 DC 00 D8 05 53 FF 81 03 01 00 0B .....Ü.Ø .Sÿ..... [00C0] 00 9A 0B 34 08 64 00 01 00 0F 00 58 02 02 00 01 ...4.d.. ...X.... [00D0] 00 58 02 03 00 01 00 41 00 34 00 00 00 00 00 00 .X.....A .4...... [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [0130] 00 02 00 00 00 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 50 52 49 ........ .....PRI [0150] 56 E2 30 00 00 00 00 00 00 00 00 00 00 00 00 00 Vâ0..... ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 18 00 00 00 00 00 10 27 10 27 10 ........ ....'.'. [01B0] 27 00 00 10 27 00 00 00 00 00 00 00 00 B8 02 8C '...'... .....¸.. [01C0] 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ........ ........ [01E0] 00 4C 00 10 00 50 34 03 00 28 88 04 00 00 00 00 .L...P4. .(...... [01F0] 00 00 00 00 00 01 00 01 00 00 00 00 00 00 00 00 ........ ........ [2011/04/20 16:10:53.084144, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.084218, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.084328, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1924 params=0 setup=2 [2011/04/20 16:10:53.084404, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.084462, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.084523, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.084583, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.084647, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.084715, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1924 [2011/04/20 16:10:53.084782, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1924 [2011/04/20 16:10:53.084842, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1924 [2011/04/20 16:10:53.084906, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1924, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.084971, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.085030, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:53.085089, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1908 [2011/04/20 16:10:53.085154, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0784 000a auth_len : 0000 000c call_id : 0000023b [2011/04/20 16:10:53.085521, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.085584, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.085653, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.085712, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:53.085771, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1908, incoming data = 1908 [2011/04/20 16:10:53.085838, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.085900, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000076c 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.086047, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.086112, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.086183, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.086255, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.086390, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x000006b4 (1716) devmode : * devmode: struct spoolss_DeviceMode devicename : '\\serverdati\tuning' specversion : DMSPEC_NT4_AND_ABOVE (1025) driverversion : 0x0600 (1536) size : 0x00dc (220) __driverextra_length : 0x05d8 (1496) fields : 0x0381ff53 (58851155) 1: DEVMODE_ORIENTATION 1: DEVMODE_PAPERSIZE 0: DEVMODE_PAPERLENGTH 0: DEVMODE_PAPERWIDTH 1: DEVMODE_SCALE 0: DEVMODE_POSITION 1: DEVMODE_NUP 1: DEVMODE_COPIES 1: DEVMODE_DEFAULTSOURCE 1: DEVMODE_PRINTQUALITY 1: DEVMODE_COLOR 1: DEVMODE_DUPLEX 1: DEVMODE_YRESOLUTION 1: DEVMODE_TTOPTION 1: DEVMODE_COLLATE 1: DEVMODE_FORMNAME 0: DEVMODE_LOGPIXELS 0: DEVMODE_BITSPERPEL 0: DEVMODE_PELSWIDTH 0: DEVMODE_PELSHEIGHT 0: DEVMODE_DISPLAYFLAGS 0: DEVMODE_DISPLAYFREQUENCY 1: DEVMODE_ICMMETHOD 1: DEVMODE_ICMINTENT 1: DEVMODE_MEDIATYPE 0: DEVMODE_DITHERTYPE 0: DEVMODE_PANNINGWIDTH 0: DEVMODE_PANNINGHEIGHT orientation : DMORIENT_PORTRAIT (1) papersize : DMPAPER_A5 (11) paperlength : 0x0b9a (2970) paperwidth : 0x0834 (2100) scale : 0x0064 (100) copies : 0x0001 (1) defaultsource : DMBIN_FORMSOURCE (15) printquality : UNKNOWN_ENUM_VALUE (600) color : DMRES_COLOR (2) duplex : DMDUP_SIMPLEX (1) yresolution : 0x0258 (600) ttoption : DMTT_SUBDEV (3) collate : DMCOLLATE_TRUE (1) formname : 'A4' logpixels : 0x0000 (0) bitsperpel : 0x00000000 (0) pelswidth : 0x00000000 (0) pelsheight : 0x00000000 (0) displayflags : DMNUP_SYSTEM (1) displayfrequency : 0x00000000 (0) icmmethod : DMICMMETHOD_NONE (1) icmintent : DMICM_CONTRAST (2) mediatype : UNKNOWN_ENUM_VALUE (256) dithertype : UNKNOWN_ENUM_VALUE (0) reserved1 : 0x00000000 (0) reserved2 : 0x00000000 (0) panningwidth : 0x00000000 (0) panningheight : 0x00000000 (0) driverextra_data : DATA_BLOB length=1496 [2011/04/20 16:10:53.089084, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 00 PRIVâ0.. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 27 ........ .......' [0060] 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 00 .'.'...' ........ [0070] B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 00 ¸....... ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ........ ........ [0090] 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 00 ....L... P4..(... [00A0] 00 00 00 00 00 00 00 00 01 00 01 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 84 E0 5A 4E ........ .....àZN [00C0] 1C 00 00 00 00 00 00 00 01 00 FF 00 00 00 FF 00 ........ ..ÿ...ÿ. [00D0] 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ........ ........ [00E0] 00 00 00 00 02 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 02 00 01 00 03 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 B8 02 00 00 53 4D 54 4A 00 00 00 00 ....¸... SMTJ.... [02E0] 10 00 A8 02 52 00 49 00 43 00 4F 00 48 00 20 00 ..¨.R.I. C.O.H. . [02F0] 41 00 66 00 69 00 63 00 69 00 6F 00 20 00 33 00 A.f.i.c. i.o. .3. [0300] 32 00 33 00 32 00 43 00 20 00 50 00 53 00 00 00 2.3.2.C. .P.S... [0310] 52 65 73 6F 6C 75 74 69 6F 6E 00 36 30 30 64 70 Resoluti on.600dp [0320] 69 00 52 49 50 61 70 65 72 50 6F 6C 69 63 79 00 i.RIPape rPolicy. [0330] 50 72 6F 6D 70 74 55 73 65 72 00 50 61 67 65 53 PromptUs er.PageS [0340] 69 7A 65 00 41 34 00 50 61 67 65 52 65 67 69 6F ize.A4.P ageRegio [0350] 6E 00 00 49 6E 70 75 74 53 6C 6F 74 00 2A 55 73 n..Input Slot.*Us [0360] 65 46 6F 72 6D 54 72 61 79 54 61 62 6C 65 00 4C eFormTra yTable.L [0370] 65 61 64 69 6E 67 45 64 67 65 00 00 44 75 70 6C eadingEd ge..Dupl [0380] 65 78 00 4E 6F 6E 65 00 52 49 43 6F 6C 6C 61 74 ex.None. RICollat [0390] 65 00 46 61 6C 73 65 00 52 49 50 72 69 6E 74 4D e.False. RIPrintM [03A0] 6F 64 65 00 30 72 68 69 74 00 43 6F 6C 6F 72 4D ode.0rhi t.ColorM [03B0] 6F 64 65 6C 00 43 4D 59 4B 00 52 50 53 42 69 74 odel.CMY K.RPSBit [03C0] 73 50 65 72 50 69 78 65 6C 00 32 42 69 74 73 50 sPerPixe l.2BitsP [03D0] 65 72 50 69 78 65 6C 00 52 69 6D 61 67 65 73 6D erPixel. Rimagesm [03E0] 00 4F 66 66 00 52 50 53 52 47 42 63 6F 72 72 65 .Off.RPS RGBcorre [03F0] 63 74 00 44 65 74 61 69 6C 42 72 69 67 68 74 00 ct.Detai lBright. [0400] 52 50 53 43 6F 6C 6F 72 52 65 6E 64 44 69 63 74 RPSColor RendDict [0410] 00 41 75 74 6F 00 52 50 53 43 6F 6C 6F 72 53 65 .Auto.RP SColorSe [0420] 70 00 4E 4F 53 45 50 41 52 41 54 45 00 52 50 53 p.NOSEPA RATE.RPS [0430] 44 69 74 68 65 72 54 79 70 65 00 41 75 74 6F 00 DitherTy pe.Auto. [0440] 52 50 53 42 6C 61 63 6B 4D 6F 64 65 00 47 72 61 RPSBlack Mode.Gra [0450] 79 00 52 50 53 42 6C 61 63 6B 4F 76 65 72 50 72 y.RPSBla ckOverPr [0460] 69 6E 74 00 46 61 6C 73 65 00 52 63 6D 79 6B 73 int.Fals e.Rcmyks [0470] 69 6D 75 6C 61 74 69 6F 6E 00 4F 66 66 00 4D 65 imulatio n.Off.Me [0480] 64 69 61 54 79 70 65 00 50 6C 61 69 6E 00 4F 75 diaType. Plain.Ou [0490] 74 70 75 74 42 69 6E 00 44 65 66 61 75 6C 74 00 tputBin. Default. [04A0] 53 74 61 70 6C 65 4C 6F 63 61 74 69 6F 6E 00 4E StapleLo cation.N [04B0] 6F 6E 65 00 52 49 57 61 74 65 72 6D 61 72 6B 00 one.RIWa termark. [04C0] 4F 66 66 00 52 49 57 4D 54 65 78 74 00 43 6F 6E Off.RIWM Text.Con [04D0] 66 69 64 65 6E 74 69 61 6C 00 52 49 77 6D 46 6F fidentia l.RIwmFo [04E0] 6E 74 00 48 65 6C 76 65 74 69 63 61 42 00 52 49 nt.Helve ticaB.RI [04F0] 77 6D 53 69 7A 65 00 33 36 00 52 49 77 6D 41 6E wmSize.3 6.RIwmAn [0500] 67 6C 65 00 34 35 44 65 67 00 52 49 77 6D 54 65 gle.45De g.RIwmTe [0510] 78 74 53 74 79 6C 65 00 47 72 61 79 00 00 00 00 xtStyle. Gray.... [0520] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0530] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0560] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 00 00 00 00 4C 00 00 00 ........ ....L... [0590] 45 42 44 41 45 42 44 41 00 00 00 00 00 00 00 00 EBDAEBDA ........ [05A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 ........ access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:53.097132, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:53.097252, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[13] [0000] 00 00 00 00 59 00 00 00 00 00 00 00 AE 4D 6D E9 ....Y... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.097431, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:53.097515, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:53.097651, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:52 2011 [2011/04/20 16:10:53.097759, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:53 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:53.097975, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 13 printer handles active [2011/04/20 16:10:53.098041, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 59 00 00 00 00 00 00 00 AE 4D 6D E9 ....Y... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.098222, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 59 00 00 00 00 00 00 00 AE 4D 6D E9 ....Y... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.098400, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:53.100144, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:53.100300, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:53.100365, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:53.100436, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.100524, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:53.100587, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.100649, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.100708, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.100888, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.100955, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.101017, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.101079, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.101146, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.101242, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.101307, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.101374, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.101439, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.101516, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.101584, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.101652, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.101715, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.101776, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.101838, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.101896, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.102009, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.102146, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.102215, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.102289, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.102396, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.102460, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.102520, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.102582, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.102640, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.102747, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:53.102818, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.102888, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:53.102947, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:53.103016, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:53.103192, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.103262, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.103323, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.103385, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.103442, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.103552, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.103623, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.103776, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.103844, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.103906, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.103967, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.104034, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.104122, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.104188, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.104253, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.104317, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.104392, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.104507, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.104575, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.104638, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.104699, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.104761, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.104818, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.104936, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.105007, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.105073, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.105144, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.105246, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:53.105346, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:53.105438, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:53.105628, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:53.105699, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:53.105763, 5, pid=27181] rpc_server/srv_spoolss_nt.c:1521(convert_devicemode) convert_devicemode: allocating a generic devmode [2011/04/20 16:10:53.105837, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000059-0000-0000-ae4d-6de92d6a0000 result : WERR_OK [2011/04/20 16:10:53.106125, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.106236, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.106304, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1908 [2011/04/20 16:10:53.106445, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.106511, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.106585, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000023b [2011/04/20 16:10:53.106908, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.107144, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.107210, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.107250, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38785 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.107796, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 3B 02 00 ........ .0...;.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 59 00 00 ........ .....Y.. [0020] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 00 00 00 .....®Mm é-j..... [0030] 00 . [2011/04/20 16:10:53.108438, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:53.108536, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:53.108599, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 607 of length 292 (0 toread) [2011/04/20 16:10:53.108660, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.108699, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38850 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=221 [2011/04/20 16:10:53.109304, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 3C 02 00 ........ .Ì...<.. [0020] 00 B4 00 00 00 00 00 45 00 10 D1 E2 00 14 00 00 .´.....E ..Ñâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 76 01 1C 00 00 ........ .Øüv.... [0080] 00 D0 B9 A6 00 34 FD 76 01 28 0A 00 00 03 00 00 .й¦.4ýv .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:53.110438, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.110506, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.110597, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:53.110670, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.110729, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.110791, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.110895, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.110961, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.111026, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:53.111091, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:53.111152, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:53.111216, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.111281, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.111340, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.111399, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:53.111462, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 0000023c [2011/04/20 16:10:53.111876, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.111938, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.112003, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.112063, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.112122, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:53.112186, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.112248, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 000000b4 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.112391, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.112457, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.112527, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.112600, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.112701, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:53.113644, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:53.113735, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[14] [0000] 00 00 00 00 5A 00 00 00 00 00 00 00 AE 4D 6D E9 ....Z... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.113912, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:53.113994, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:53.114123, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:53 2011 [2011/04/20 16:10:53.114225, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:53 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:53.114385, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 14 printer handles active [2011/04/20 16:10:53.114447, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5A 00 00 00 00 00 00 00 AE 4D 6D E9 ....Z... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.114616, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5A 00 00 00 00 00 00 00 AE 4D 6D E9 ....Z... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.114793, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:53.116509, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:53.116666, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:53.116729, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:53.116800, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.116893, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:53.116957, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.117019, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.117079, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.117256, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.117386, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.117449, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.117511, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.117579, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.117676, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.117741, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.117807, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.117872, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.117948, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.118016, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.118084, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.118148, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.118210, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.118272, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.118330, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.118447, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.118521, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.118589, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.118662, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.118768, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.118831, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.118891, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.118954, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.119011, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.119118, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:53.119189, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.119258, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:53.119319, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:53.119388, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:53.119561, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.119678, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.119813, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.119875, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.119933, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.120050, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.120122, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.120213, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.120277, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.120339, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.120400, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.120467, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.120556, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.120621, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.120687, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.120750, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.120825, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.120891, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.120958, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.121021, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.121082, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.121143, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.121201, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.121309, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.121380, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.121445, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.121517, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.121619, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:53.121721, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:53.121813, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:53.122002, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:53.122118, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:53.122183, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005a-0000-0000-ae4d-6de92d6a0000 result : WERR_OK [2011/04/20 16:10:53.122460, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.122568, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.122638, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:53.122759, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.122824, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.122898, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000023c [2011/04/20 16:10:53.123221, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.123405, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.123469, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.123509, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38850 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.124052, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 3C 02 00 ........ .0...<.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 5A 00 00 ........ .....Z.. [0020] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 00 00 00 .....®Mm é-j..... [0030] 00 . [2011/04/20 16:10:53.125604, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:53.125707, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:53.125769, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 608 of length 132 (0 toread) [2011/04/20 16:10:53.125830, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.125869, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38914 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:53.126546, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 3D 02 00 ........ .,...=.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 5A 00 00 ........ .....Z.. [0030] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 .....®Mm é-j.. [2011/04/20 16:10:53.127006, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.127076, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.127168, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:53.127240, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.127298, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.127359, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.127419, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.127484, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.127548, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:53.127614, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:53.127674, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:53.127806, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.127871, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.127930, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.127989, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:53.128052, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 0000023d [2011/04/20 16:10:53.128383, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.128443, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.128506, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.128564, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.128623, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:53.128687, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.128748, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:53.128890, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.129002, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.129073, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:53.129144, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:53.129218, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005a-0000-0000-ae4d-6de92d6a0000 [2011/04/20 16:10:53.129455, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5A 00 00 00 00 00 00 00 AE 4D 6D E9 ....Z... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.129638, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5A 00 00 00 00 00 00 00 AE 4D 6D E9 ....Z... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.129824, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5A 00 00 00 00 00 00 00 AE 4D 6D E9 ....Z... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.130006, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:53.130069, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:53.130334, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.130402, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.130466, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:53.130586, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.130652, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.130724, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000023d [2011/04/20 16:10:53.131045, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.131229, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.131293, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.131332, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38914 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.131920, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 3D 02 00 ........ .0...=.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:53.132519, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:53.132609, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:53.132671, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 609 of length 292 (0 toread) [2011/04/20 16:10:53.132731, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.132770, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38977 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=221 [2011/04/20 16:10:53.133376, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 3E 02 00 ........ .Ì...>.. [0020] 00 B4 00 00 00 00 00 45 00 38 85 E2 00 14 00 00 .´.....E .8.â.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 18 01 1C 00 00 ........ .Øü..... [0080] 00 D0 B9 A6 00 34 FD 18 01 28 0A 00 00 03 00 00 .й¦.4ý. .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:53.134505, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.134572, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.134657, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:53.134730, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.134788, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.134849, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.134909, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.134973, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.135037, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:53.135102, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:53.135205, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:53.135269, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.135334, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.135392, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.135450, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:53.135514, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 0000023e [2011/04/20 16:10:53.135901, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.135963, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.136026, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.136085, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.136143, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:53.136208, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.136270, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 000000b4 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.136564, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.136637, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.136706, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.136779, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.136879, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:53.137820, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:53.137912, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[14] [0000] 00 00 00 00 5B 00 00 00 00 00 00 00 AE 4D 6D E9 ....[... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.138092, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:53.138174, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:53.138303, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:53 2011 [2011/04/20 16:10:53.138407, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:53 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:53.138566, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 14 printer handles active [2011/04/20 16:10:53.138628, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5B 00 00 00 00 00 00 00 AE 4D 6D E9 ....[... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.138807, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5B 00 00 00 00 00 00 00 AE 4D 6D E9 ....[... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.138983, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:53.140679, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:53.140840, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:53.140904, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:53.140974, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.141062, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:53.141126, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.141188, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.141248, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.141427, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.141495, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.141558, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.141620, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.141746, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.141844, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.141909, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.141976, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.142041, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.142116, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.142183, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.142252, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.142316, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.142378, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.142440, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.142497, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.142617, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.142689, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.142758, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.142831, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.142938, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.143001, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.143062, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.143123, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.143181, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.143289, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:53.143361, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.143430, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:53.143490, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:53.143558, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:53.143801, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.143875, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.143937, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.143998, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.144056, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.144223, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.144301, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.144389, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.144451, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.144513, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.144574, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.144641, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.144726, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.144791, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.144856, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.144921, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.144995, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.145062, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.145128, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.145190, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.145251, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.145313, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.145370, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.145479, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.145550, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.145614, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.145687, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.145789, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:53.145890, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:53.145981, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:53.146168, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:53.146238, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:53.146302, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005b-0000-0000-ae4d-6de92d6a0000 result : WERR_OK [2011/04/20 16:10:53.146625, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.146735, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.146804, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:53.146924, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.146990, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.147062, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000023e [2011/04/20 16:10:53.147384, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.147567, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.147631, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.147669, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=38977 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.148229, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 3E 02 00 ........ .0...>.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 5B 00 00 ........ .....[.. [0020] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 00 00 00 .....®Mm é-j..... [0030] 00 . [2011/04/20 16:10:53.148796, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:53.148886, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:53.148948, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 610 of length 132 (0 toread) [2011/04/20 16:10:53.149009, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.149047, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39042 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:53.149781, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 3F 02 00 ........ .,...?.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 59 00 00 ........ .....Y.. [0030] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 .....®Mm é-j.. [2011/04/20 16:10:53.150192, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.150260, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.150350, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:53.150421, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.150479, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.150540, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.150601, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.150665, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.150731, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:53.150796, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:53.150857, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:53.150920, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.150985, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.151044, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.151103, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:53.151166, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 0000023f [2011/04/20 16:10:53.151494, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.151554, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.151617, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.151676, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.151806, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:53.151871, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.151933, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:53.152072, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.152139, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.152209, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:53.152280, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:53.152397, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000059-0000-0000-ae4d-6de92d6a0000 [2011/04/20 16:10:53.152633, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 59 00 00 00 00 00 00 00 AE 4D 6D E9 ....Y... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.152820, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 59 00 00 00 00 00 00 00 AE 4D 6D E9 ....Y... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.153000, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 59 00 00 00 00 00 00 00 AE 4D 6D E9 ....Y... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.153182, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:53.153247, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:53.153513, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.153583, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.153646, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:53.153766, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.153833, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.153903, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000023f [2011/04/20 16:10:53.154224, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.154407, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.154470, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.154508, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39042 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.154986, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 3F 02 00 ........ .0...?.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:53.155554, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:53.155643, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:53.155753, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 611 of length 132 (0 toread) [2011/04/20 16:10:53.155816, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.155855, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39105 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=61 [2011/04/20 16:10:53.156458, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 40 02 00 ........ .,...@.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 5B 00 00 ........ .....[.. [0030] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 .....®Mm é-j.. [2011/04/20 16:10:53.156807, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.156873, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.156959, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:53.157030, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.157088, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.157149, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.157208, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.157272, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.157336, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:53.157399, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:53.157459, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:53.157522, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.157586, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.157645, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.157704, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:53.157768, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000240 [2011/04/20 16:10:53.158388, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.158502, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.158566, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.158626, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.158685, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:53.158749, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.158811, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:53.158956, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.159023, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.159093, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:53.159164, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:53.159237, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005b-0000-0000-ae4d-6de92d6a0000 [2011/04/20 16:10:53.159475, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5B 00 00 00 00 00 00 00 AE 4D 6D E9 ....[... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.159663, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5B 00 00 00 00 00 00 00 AE 4D 6D E9 ....[... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.159895, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5B 00 00 00 00 00 00 00 AE 4D 6D E9 ....[... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.160078, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:53.160142, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:53.160410, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.160480, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.160543, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:53.160669, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.160736, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.160844, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000240 [2011/04/20 16:10:53.161166, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.161351, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.161414, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.161453, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39105 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.161930, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 40 02 00 ........ .0...@.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:53.162512, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2008 [2011/04/20 16:10:53.162610, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7d8 [2011/04/20 16:10:53.162672, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 612 of length 2012 (0 toread) [2011/04/20 16:10:53.162734, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.162773, 5, pid=27181] lib/util.c:627(show_msg) size=2008 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39170 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1924 (0x784) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1924 (0x784) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1941 [2011/04/20 16:10:53.163377, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 84 07 00 00 41 02 00 ........ .....A.. [0020] 00 6C 07 00 00 00 00 45 00 48 FA E2 00 14 00 00 .l.....E .Húâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 B4 06 00 00 F8 9D E2 00 B4 06 00 .....´.. .ø.â.´.. [0070] 00 5C 00 5C 00 73 00 65 00 72 00 76 00 65 00 72 .\.\.s.e .r.v.e.r [0080] 00 64 00 61 00 74 00 69 00 5C 00 74 00 75 00 6E .d.a.t.i .\.t.u.n [0090] 00 69 00 6E 00 67 00 00 00 00 00 00 00 00 00 00 .i.n.g.. ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 01 04 00 06 DC 00 D8 05 53 FF 81 03 01 00 0B .....Ü.Ø .Sÿ..... [00C0] 00 9A 0B 34 08 64 00 01 00 0F 00 58 02 02 00 01 ...4.d.. ...X.... [00D0] 00 58 02 03 00 01 00 41 00 34 00 00 00 00 00 00 .X.....A .4...... [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [0130] 00 02 00 00 00 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 50 52 49 ........ .....PRI [0150] 56 E2 30 00 00 00 00 00 00 00 00 00 00 00 00 00 Vâ0..... ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 18 00 00 00 00 00 10 27 10 27 10 ........ ....'.'. [01B0] 27 00 00 10 27 00 00 00 00 00 00 00 00 B8 02 8C '...'... .....¸.. [01C0] 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ........ ........ [01E0] 00 4C 00 10 00 50 34 03 00 28 88 04 00 00 00 00 .L...P4. .(...... [01F0] 00 00 00 00 00 01 00 01 00 00 00 00 00 00 00 00 ........ ........ [2011/04/20 16:10:53.166012, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.166083, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.166181, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1924 params=0 setup=2 [2011/04/20 16:10:53.166413, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.166477, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.166538, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.166597, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.166661, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.166727, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1924 [2011/04/20 16:10:53.166794, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1924 [2011/04/20 16:10:53.166854, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1924 [2011/04/20 16:10:53.166917, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1924, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.166981, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.167040, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:53.167098, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1908 [2011/04/20 16:10:53.167162, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0784 000a auth_len : 0000 000c call_id : 00000241 [2011/04/20 16:10:53.167491, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.167551, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.167619, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.167777, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:53.167838, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1908, incoming data = 1908 [2011/04/20 16:10:53.167904, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.167966, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000076c 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.168113, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.168177, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.168246, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.168317, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.168452, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x000006b4 (1716) devmode : * devmode: struct spoolss_DeviceMode devicename : '\\serverdati\tuning' specversion : DMSPEC_NT4_AND_ABOVE (1025) driverversion : 0x0600 (1536) size : 0x00dc (220) __driverextra_length : 0x05d8 (1496) fields : 0x0381ff53 (58851155) 1: DEVMODE_ORIENTATION 1: DEVMODE_PAPERSIZE 0: DEVMODE_PAPERLENGTH 0: DEVMODE_PAPERWIDTH 1: DEVMODE_SCALE 0: DEVMODE_POSITION 1: DEVMODE_NUP 1: DEVMODE_COPIES 1: DEVMODE_DEFAULTSOURCE 1: DEVMODE_PRINTQUALITY 1: DEVMODE_COLOR 1: DEVMODE_DUPLEX 1: DEVMODE_YRESOLUTION 1: DEVMODE_TTOPTION 1: DEVMODE_COLLATE 1: DEVMODE_FORMNAME 0: DEVMODE_LOGPIXELS 0: DEVMODE_BITSPERPEL 0: DEVMODE_PELSWIDTH 0: DEVMODE_PELSHEIGHT 0: DEVMODE_DISPLAYFLAGS 0: DEVMODE_DISPLAYFREQUENCY 1: DEVMODE_ICMMETHOD 1: DEVMODE_ICMINTENT 1: DEVMODE_MEDIATYPE 0: DEVMODE_DITHERTYPE 0: DEVMODE_PANNINGWIDTH 0: DEVMODE_PANNINGHEIGHT orientation : DMORIENT_PORTRAIT (1) papersize : DMPAPER_A5 (11) paperlength : 0x0b9a (2970) paperwidth : 0x0834 (2100) scale : 0x0064 (100) copies : 0x0001 (1) defaultsource : DMBIN_FORMSOURCE (15) printquality : UNKNOWN_ENUM_VALUE (600) color : DMRES_COLOR (2) duplex : DMDUP_SIMPLEX (1) yresolution : 0x0258 (600) ttoption : DMTT_SUBDEV (3) collate : DMCOLLATE_TRUE (1) formname : 'A4' logpixels : 0x0000 (0) bitsperpel : 0x00000000 (0) pelswidth : 0x00000000 (0) pelsheight : 0x00000000 (0) displayflags : DMNUP_SYSTEM (1) displayfrequency : 0x00000000 (0) icmmethod : DMICMMETHOD_NONE (1) icmintent : DMICM_CONTRAST (2) mediatype : UNKNOWN_ENUM_VALUE (256) dithertype : UNKNOWN_ENUM_VALUE (0) reserved1 : 0x00000000 (0) reserved2 : 0x00000000 (0) panningwidth : 0x00000000 (0) panningheight : 0x00000000 (0) driverextra_data : DATA_BLOB length=1496 [2011/04/20 16:10:53.170897, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 00 PRIVâ0.. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 27 ........ .......' [0060] 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 00 .'.'...' ........ [0070] B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 00 ¸....... ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ........ ........ [0090] 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 00 ....L... P4..(... [00A0] 00 00 00 00 00 00 00 00 01 00 01 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 84 E0 5A 4E ........ .....àZN [00C0] 1C 00 00 00 00 00 00 00 01 00 FF 00 00 00 FF 00 ........ ..ÿ...ÿ. [00D0] 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ........ ........ [00E0] 00 00 00 00 02 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 02 00 01 00 03 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 B8 02 00 00 53 4D 54 4A 00 00 00 00 ....¸... SMTJ.... [02E0] 10 00 A8 02 52 00 49 00 43 00 4F 00 48 00 20 00 ..¨.R.I. C.O.H. . [02F0] 41 00 66 00 69 00 63 00 69 00 6F 00 20 00 33 00 A.f.i.c. i.o. .3. [0300] 32 00 33 00 32 00 43 00 20 00 50 00 53 00 00 00 2.3.2.C. .P.S... [0310] 52 65 73 6F 6C 75 74 69 6F 6E 00 36 30 30 64 70 Resoluti on.600dp [0320] 69 00 52 49 50 61 70 65 72 50 6F 6C 69 63 79 00 i.RIPape rPolicy. [0330] 50 72 6F 6D 70 74 55 73 65 72 00 50 61 67 65 53 PromptUs er.PageS [0340] 69 7A 65 00 41 34 00 50 61 67 65 52 65 67 69 6F ize.A4.P ageRegio [0350] 6E 00 00 49 6E 70 75 74 53 6C 6F 74 00 2A 55 73 n..Input Slot.*Us [0360] 65 46 6F 72 6D 54 72 61 79 54 61 62 6C 65 00 4C eFormTra yTable.L [0370] 65 61 64 69 6E 67 45 64 67 65 00 00 44 75 70 6C eadingEd ge..Dupl [0380] 65 78 00 4E 6F 6E 65 00 52 49 43 6F 6C 6C 61 74 ex.None. RICollat [0390] 65 00 46 61 6C 73 65 00 52 49 50 72 69 6E 74 4D e.False. RIPrintM [03A0] 6F 64 65 00 30 72 68 69 74 00 43 6F 6C 6F 72 4D ode.0rhi t.ColorM [03B0] 6F 64 65 6C 00 43 4D 59 4B 00 52 50 53 42 69 74 odel.CMY K.RPSBit [03C0] 73 50 65 72 50 69 78 65 6C 00 32 42 69 74 73 50 sPerPixe l.2BitsP [03D0] 65 72 50 69 78 65 6C 00 52 69 6D 61 67 65 73 6D erPixel. Rimagesm [03E0] 00 4F 66 66 00 52 50 53 52 47 42 63 6F 72 72 65 .Off.RPS RGBcorre [03F0] 63 74 00 44 65 74 61 69 6C 42 72 69 67 68 74 00 ct.Detai lBright. [0400] 52 50 53 43 6F 6C 6F 72 52 65 6E 64 44 69 63 74 RPSColor RendDict [0410] 00 41 75 74 6F 00 52 50 53 43 6F 6C 6F 72 53 65 .Auto.RP SColorSe [0420] 70 00 4E 4F 53 45 50 41 52 41 54 45 00 52 50 53 p.NOSEPA RATE.RPS [0430] 44 69 74 68 65 72 54 79 70 65 00 41 75 74 6F 00 DitherTy pe.Auto. [0440] 52 50 53 42 6C 61 63 6B 4D 6F 64 65 00 47 72 61 RPSBlack Mode.Gra [0450] 79 00 52 50 53 42 6C 61 63 6B 4F 76 65 72 50 72 y.RPSBla ckOverPr [0460] 69 6E 74 00 46 61 6C 73 65 00 52 63 6D 79 6B 73 int.Fals e.Rcmyks [0470] 69 6D 75 6C 61 74 69 6F 6E 00 4F 66 66 00 4D 65 imulatio n.Off.Me [0480] 64 69 61 54 79 70 65 00 50 6C 61 69 6E 00 4F 75 diaType. Plain.Ou [0490] 74 70 75 74 42 69 6E 00 44 65 66 61 75 6C 74 00 tputBin. Default. [04A0] 53 74 61 70 6C 65 4C 6F 63 61 74 69 6F 6E 00 4E StapleLo cation.N [04B0] 6F 6E 65 00 52 49 57 61 74 65 72 6D 61 72 6B 00 one.RIWa termark. [04C0] 4F 66 66 00 52 49 57 4D 54 65 78 74 00 43 6F 6E Off.RIWM Text.Con [04D0] 66 69 64 65 6E 74 69 61 6C 00 52 49 77 6D 46 6F fidentia l.RIwmFo [04E0] 6E 74 00 48 65 6C 76 65 74 69 63 61 42 00 52 49 nt.Helve ticaB.RI [04F0] 77 6D 53 69 7A 65 00 33 36 00 52 49 77 6D 41 6E wmSize.3 6.RIwmAn [0500] 67 6C 65 00 34 35 44 65 67 00 52 49 77 6D 54 65 gle.45De g.RIwmTe [0510] 78 74 53 74 79 6C 65 00 47 72 61 79 00 00 00 00 xtStyle. Gray.... [0520] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0530] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0560] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 00 00 00 00 4C 00 00 00 ........ ....L... [0590] 45 42 44 41 45 42 44 41 00 00 00 00 00 00 00 00 EBDAEBDA ........ [05A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 ........ access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:53.182102, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:53.182258, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[13] [0000] 00 00 00 00 5C 00 00 00 00 00 00 00 AE 4D 6D E9 ....\... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.182438, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:53.182521, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:53.182726, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:53 2011 [2011/04/20 16:10:53.182839, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:53 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:53.183002, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 13 printer handles active [2011/04/20 16:10:53.183064, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5C 00 00 00 00 00 00 00 AE 4D 6D E9 ....\... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.183289, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5C 00 00 00 00 00 00 00 AE 4D 6D E9 ....\... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.183470, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:53.185160, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:53.185318, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:53.185382, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:53.185459, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.187942, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:53.188022, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.188085, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.188145, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.188316, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.188385, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.188448, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.188509, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.188579, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.188672, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.188737, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.188803, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.188868, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.188943, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.189010, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.189078, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.189141, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.189202, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.189263, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.189321, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.189433, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.189505, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.189573, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.189645, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.189817, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.189881, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.189942, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.190004, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.190063, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.190173, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:53.190245, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.190314, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:53.190373, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:53.190442, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:53.190621, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.190691, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.190753, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.190814, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.190872, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.190981, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.191055, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.191144, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.191207, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.191268, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.191329, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.191394, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.191478, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.191543, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.191609, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.191672, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.191807, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.191874, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.191941, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.192004, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.192066, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.192174, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.192234, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.192352, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.192425, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.192491, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.192563, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.192668, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:53.192768, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:53.192862, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:53.193054, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:53.193125, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:53.193189, 5, pid=27181] rpc_server/srv_spoolss_nt.c:1521(convert_devicemode) convert_devicemode: allocating a generic devmode [2011/04/20 16:10:53.193264, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005c-0000-0000-ae4d-6de92d6a0000 result : WERR_OK [2011/04/20 16:10:53.193552, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.193663, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.193731, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1908 [2011/04/20 16:10:53.193850, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.193916, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.193990, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000241 [2011/04/20 16:10:53.194314, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.194498, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.194561, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.194601, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39170 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.195135, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 41 02 00 ........ .0...A.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 5C 00 00 ........ .....\.. [0020] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 00 00 00 .....®Mm é-j..... [0030] 00 . [2011/04/20 16:10:53.195787, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:53.195887, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:53.195950, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 613 of length 292 (0 toread) [2011/04/20 16:10:53.196010, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.196049, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39233 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=221 [2011/04/20 16:10:53.196655, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 42 02 00 ........ .Ì...B.. [0020] 00 B4 00 00 00 00 00 45 00 10 D1 E2 00 14 00 00 .´.....E ..Ñâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 18 01 1C 00 00 ........ .Øü..... [0080] 00 D0 B9 A6 00 34 FD 18 01 28 0A 00 00 03 00 00 .й¦.4ý. .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:53.198181, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.198258, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.198349, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:53.198423, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.198482, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.198543, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.198604, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.198668, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.198733, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:53.198798, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:53.198912, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:53.198975, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.199040, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.199099, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.199157, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:53.199221, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000242 [2011/04/20 16:10:53.199552, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.199612, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.199676, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.199803, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.199862, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:53.199926, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.199989, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 000000b4 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.200134, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.200200, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.200270, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.200343, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.200445, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:53.201389, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:53.201486, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[14] [0000] 00 00 00 00 5D 00 00 00 00 00 00 00 AE 4D 6D E9 ....]... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.201665, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:53.201747, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:53.201876, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:53 2011 [2011/04/20 16:10:53.201978, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:53 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:53.202138, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 14 printer handles active [2011/04/20 16:10:53.202200, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5D 00 00 00 00 00 00 00 AE 4D 6D E9 ....]... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.202379, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5D 00 00 00 00 00 00 00 AE 4D 6D E9 ....]... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.202555, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:53.204273, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:53.204432, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:53.204496, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:53.204567, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.204654, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:53.204719, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.204781, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.204842, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.205201, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.205280, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.206848, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.206932, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.207051, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.207155, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.207221, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.207287, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.207352, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.207429, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.207497, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.207571, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.207638, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.207764, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.207828, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.207888, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.208028, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.208101, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.208170, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.208244, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.208355, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.208419, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.208480, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.208541, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.208600, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.208708, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:53.208779, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.208850, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:53.209285, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:53.209373, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:53.209568, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.209640, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.209703, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.209765, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.209824, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.209985, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.210060, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.210155, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.210219, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.210281, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.210342, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.210410, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.210500, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.210564, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.210629, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.210695, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.210770, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.210836, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.210903, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.210966, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.211027, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.211089, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.211147, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.211257, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.211329, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.211396, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.211469, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.211572, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:53.211675, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:53.211848, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:53.212041, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:53.212114, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:53.212178, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005d-0000-0000-ae4d-6de92d6a0000 result : WERR_OK [2011/04/20 16:10:53.212503, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.212617, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.212687, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:53.212808, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.212874, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.212947, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000242 [2011/04/20 16:10:53.213271, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.213456, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.213520, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.213559, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39233 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.214860, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 42 02 00 ........ .0...B.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 5D 00 00 ........ .....].. [0020] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 00 00 00 .....®Mm é-j..... [0030] 00 . [2011/04/20 16:10:53.216028, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:53.216161, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:53.216341, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 614 of length 132 (0 toread) [2011/04/20 16:10:53.216406, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.216446, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39298 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:53.217051, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 43 02 00 ........ .,...C.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 5C 00 00 ........ .....\.. [0030] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 .....®Mm é-j.. [2011/04/20 16:10:53.217454, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.217522, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.217610, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:53.217681, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.217740, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.217801, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.217862, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.217926, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.217990, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:53.218056, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:53.218117, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:53.218180, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.218245, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.218304, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.218362, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:53.218427, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000243 [2011/04/20 16:10:53.218756, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.218817, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.218880, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.218938, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.218997, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:53.219061, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.219123, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:53.219264, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.219330, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.219401, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:53.219472, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:53.219585, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005c-0000-0000-ae4d-6de92d6a0000 [2011/04/20 16:10:53.219882, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 5C 00 00 00 00 00 00 00 AE 4D 6D E9 ....\... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.220071, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 5C 00 00 00 00 00 00 00 AE 4D 6D E9 ....\... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.220250, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 5C 00 00 00 00 00 00 00 AE 4D 6D E9 ....\... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.220432, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:53.220498, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:53.220766, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.220835, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.220899, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:53.221018, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.221086, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.221157, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000243 [2011/04/20 16:10:53.221478, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.221661, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.221724, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.221764, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39298 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.222242, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 43 02 00 ........ .0...C.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:53.222809, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:53.222902, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:53.222963, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 615 of length 132 (0 toread) [2011/04/20 16:10:53.223024, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.223063, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39361 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=61 [2011/04/20 16:10:53.223665, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 44 02 00 ........ .,...D.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 5D 00 00 ........ .....].. [0030] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 .....®Mm é-j.. [2011/04/20 16:10:53.224065, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.224130, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.224216, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:53.224287, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.224345, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.224406, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.224466, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.224535, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.224599, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:53.224663, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:53.224723, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:53.224786, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.224849, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.224909, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.224968, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:53.225031, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000244 [2011/04/20 16:10:53.225685, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.225764, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.225827, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.225887, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.225946, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:53.226010, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.226072, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:53.226215, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.226282, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.226350, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:53.226421, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:53.226495, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005d-0000-0000-ae4d-6de92d6a0000 [2011/04/20 16:10:53.226732, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5D 00 00 00 00 00 00 00 AE 4D 6D E9 ....]... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.226915, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5D 00 00 00 00 00 00 00 AE 4D 6D E9 ....]... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.227095, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5D 00 00 00 00 00 00 00 AE 4D 6D E9 ....]... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.227274, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:53.227338, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:53.227605, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.227674, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.227790, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:53.227919, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.227988, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.228104, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000244 [2011/04/20 16:10:53.228428, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.228613, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.228678, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.228717, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39361 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.229195, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 44 02 00 ........ .0...D.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:53.229781, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.229882, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.229945, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 616 of length 2032 (0 toread) [2011/04/20 16:10:53.230006, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.230044, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39426 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1961 [2011/04/20 16:10:53.230648, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 45 02 00 ........ .....E.. [0020] 00 80 07 00 00 00 00 45 00 30 CC E2 00 14 00 00 .......E .0Ìâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 10 D0 E2 00 04 00 00 00 00 00 00 00 04 00 00 ..Ðâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 48 34 E3 .R.A.W.. .´...H4ã [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 25 00 00 .u.n.i.n .g...%.. [00B0] 00 F0 00 00 00 90 00 59 00 16 00 08 00 01 00 00 .ð.....Y ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 69 00 40 ........ .....i.@ [0100] 00 70 00 73 00 69 00 00 00 00 00 00 00 00 00 06 .p.s.i.. ........ [0110] 00 00 00 0C 00 00 00 63 00 01 00 08 00 02 00 14 .......c ........ [0120] 20 AF 00 AC 00 4D 00 00 00 00 00 00 00 00 00 00 ¯.¬.M.. ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.233426, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.233507, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.233612, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.233685, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.233742, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.233803, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.233863, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.233927, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.233993, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.234059, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.234119, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.234182, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.234246, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.234304, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.234363, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.234427, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 00000245 [2011/04/20 16:10:53.234755, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.234815, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.234920, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.234980, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.235038, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.235104, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.235165, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000780 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.235310, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.235374, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.235443, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.235515, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.235628, 3, pid=27181] lib/charcnv.c:644(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence( ¯) [2011/04/20 16:10:53.235742, 0, pid=27181] lib/charcnv.c:650(convert_string_talloc) Conversion error: Illegal multibyte sequence( ¯) [2011/04/20 16:10:53.235808, 1, pid=27181] ../librpc/ndr/ndr.c:395(ndr_pull_error) ndr_pull_error(5): Bad character conversion [2011/04/20 16:10:53.235875, 0, pid=27181] rpc_server/srv_pipe.c:2439(api_rpcTNP) api_rpcTNP: \spoolss: SPOOLSS_OPENPRINTEREX failed. [2011/04/20 16:10:53.235944, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.236006, 3, pid=27181] rpc_server/srv_pipe_hnd.c:656(process_complete_pdu) process_complete_pdu: DCE/RPC fault sent on pipe \spoolss [2011/04/20 16:10:53.236072, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.236137, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000245 [2011/04/20 16:10:53.236465, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.236625, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.236738, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.236847, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.236913, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.237002, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.237066, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.237105, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39426 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.237633, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 45 02 00 ....#... . ...E.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.238085, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:53.238175, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:53.238237, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 617 of length 292 (0 toread) [2011/04/20 16:10:53.238297, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.238336, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39489 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=221 [2011/04/20 16:10:53.238938, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 46 02 00 ........ .Ì...F.. [0020] 00 B4 00 00 00 00 00 45 00 48 FA E2 00 14 00 00 .´.....E .Húâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 18 01 1C 00 00 ........ .Øü..... [0080] 00 D0 B9 A6 00 34 FD 18 01 28 0A 00 00 03 00 00 .й¦.4ý. .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:53.240234, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.240309, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.240393, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:53.240465, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.240524, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.240585, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.240647, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.240710, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.240774, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:53.240840, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:53.240901, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:53.241012, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.241077, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.241136, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.241195, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:53.241258, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000246 [2011/04/20 16:10:53.241589, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.241650, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.241712, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.241772, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.241831, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:53.241895, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.241956, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 000000b4 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.242099, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.242164, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.242232, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.242304, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.242400, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:53.243332, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:53.243422, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[13] [0000] 00 00 00 00 5E 00 00 00 00 00 00 00 AE 4D 6D E9 ....^... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.243599, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:53.243731, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:53.243864, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:53 2011 [2011/04/20 16:10:53.244728, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:53 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:53.244949, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 13 printer handles active [2011/04/20 16:10:53.245013, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5E 00 00 00 00 00 00 00 AE 4D 6D E9 ....^... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.245195, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5E 00 00 00 00 00 00 00 AE 4D 6D E9 ....^... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.245372, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:53.248269, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:53.248426, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:53.248490, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:53.248560, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.248649, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:53.248713, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.248776, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.248836, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.249014, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.249082, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.249145, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.249207, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.249274, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.249431, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.249499, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.249566, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.249631, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.249706, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.249773, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.249844, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.249909, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.249972, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.250034, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.250091, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.250996, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.251113, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.251185, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.251259, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.251372, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.251437, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.251499, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.251561, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.251620, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.252219, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:53.252313, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.252386, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:53.252448, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:53.252517, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:53.252700, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.252771, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.252833, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.254003, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.254091, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.254223, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.254344, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.254443, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.255133, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.255219, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.255281, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.255351, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.255452, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.255518, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.255585, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.255649, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.255801, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.255871, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.255942, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.256008, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.256070, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.256132, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.256192, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.256322, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.256395, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.256463, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.256537, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.256644, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:53.256748, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:53.256846, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:53.257038, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:53.257110, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:53.257175, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005e-0000-0000-ae4d-6de92d6a0000 result : WERR_OK [2011/04/20 16:10:53.257507, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.257622, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.257690, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:53.257814, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.257880, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.257953, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000246 [2011/04/20 16:10:53.258276, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.258460, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.258524, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.258562, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39489 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.259041, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 46 02 00 ........ .0...F.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 5E 00 00 ........ .....^.. [0020] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 00 00 00 .....®Mm é-j..... [0030] 00 . [2011/04/20 16:10:53.259610, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.259768, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.259832, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 618 of length 204 (0 toread) [2011/04/20 16:10:53.259893, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.259932, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39554 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=133 [2011/04/20 16:10:53.260534, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 47 02 00 ........ .t...G.. [0020] 00 5C 00 00 00 00 00 01 00 30 CC E2 00 14 00 00 .\...... .0Ìâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 10 D0 E2 00 04 00 00 00 00 00 00 00 04 00 00 ..Ðâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.261307, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.261375, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.261461, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.261533, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.261591, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.261799, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.261875, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.261939, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.262004, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.262069, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.262130, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.262194, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.262257, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.262316, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.262375, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.262439, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 00000247 [2011/04/20 16:10:53.262772, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.262833, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.262895, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.262955, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.263014, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.263077, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.263144, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.263209, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000247 [2011/04/20 16:10:53.263580, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.263804, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.263920, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.264039, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.264108, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.264198, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.264261, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.264299, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39554 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.264779, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 47 02 00 ....#... . ...G.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.265311, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:53.265408, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:53.265469, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 619 of length 132 (0 toread) [2011/04/20 16:10:53.265530, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.265569, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39617 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=61 [2011/04/20 16:10:53.266173, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 48 02 00 ........ .,...H.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 5E 00 00 ........ .....^.. [0030] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 .....®Mm é-j.. [2011/04/20 16:10:53.266908, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.266985, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.267074, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:53.267145, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.267203, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.267265, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.267380, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.267505, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.267571, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:53.267637, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:53.267752, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:53.267816, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.267880, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.267939, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.267998, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:53.268062, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000248 [2011/04/20 16:10:53.268394, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.268454, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.268516, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.268575, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.268633, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:53.268702, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.268764, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:53.268906, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.268972, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.269042, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:53.269113, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:53.269187, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005e-0000-0000-ae4d-6de92d6a0000 [2011/04/20 16:10:53.269425, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5E 00 00 00 00 00 00 00 AE 4D 6D E9 ....^... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.269611, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5E 00 00 00 00 00 00 00 AE 4D 6D E9 ....^... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.269834, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5E 00 00 00 00 00 00 00 AE 4D 6D E9 ....^... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.270014, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:53.270079, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:53.270347, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.270417, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.270480, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:53.270604, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.270671, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.270743, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000248 [2011/04/20 16:10:53.271064, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.271246, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.271310, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.271349, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39617 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.272032, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 48 02 00 ........ .0...H.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:53.275353, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:53.275502, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:53.275566, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 620 of length 292 (0 toread) [2011/04/20 16:10:53.275626, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.275666, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39681 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=221 [2011/04/20 16:10:53.276922, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 49 02 00 ........ .Ì...I.. [0020] 00 B4 00 00 00 00 00 45 00 E8 CE E2 00 14 00 00 .´.....E .èÎâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 18 01 1C 00 00 ........ .Øü..... [0080] 00 D0 B9 A6 00 34 FD 18 01 28 0A 00 00 03 00 00 .й¦.4ý. .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:53.278488, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.278572, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.278664, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:53.278736, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.278795, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.278857, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.278917, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.278981, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.279046, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:53.279112, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:53.279172, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:53.279236, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.279300, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.279359, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.279418, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:53.279483, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000249 [2011/04/20 16:10:53.279928, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.279993, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.280058, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.280117, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.280175, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:53.280239, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.280307, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.280371, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000249 [2011/04/20 16:10:53.280700, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.280862, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.280977, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:53.281094, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.281162, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.281252, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.281316, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.281355, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39681 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.281833, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 49 02 00 ....#... . ...I.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.283262, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:53.283395, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:53.283457, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 621 of length 184 (0 toread) [2011/04/20 16:10:53.283519, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.283558, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39745 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=113 [2011/04/20 16:10:53.284678, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 4A 02 00 ........ .`...J.. [0020] 00 48 00 00 00 00 00 01 00 E8 CE E2 00 14 00 00 .H...... .èÎâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:53.286566, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.286661, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.286751, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:53.287240, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.287329, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.287391, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.287452, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.287515, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.287580, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:53.287646, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:53.287760, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:53.288293, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.288377, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.288437, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.288497, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:53.288562, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 0000024a [2011/04/20 16:10:53.289324, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.289403, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.289465, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.289524, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.289583, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:53.289697, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.289767, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.289833, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000024a [2011/04/20 16:10:53.290553, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.290731, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.291267, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:53.291419, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.291491, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.291580, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.291645, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.291737, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39745 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.292691, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 4A 02 00 ....#... . ...J.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.304483, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:53.304624, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:53.304688, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 622 of length 132 (0 toread) [2011/04/20 16:10:53.304749, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.304789, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39809 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=61 [2011/04/20 16:10:53.305784, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 4B 02 00 ........ .,...K.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 57 00 00 ........ .....W.. [0030] 00 00 00 00 00 AE 4D 6C E9 2D 6A 00 00 .....®Ml é-j.. [2011/04/20 16:10:53.306581, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.306666, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.306757, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:53.306829, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.306888, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.306949, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.307009, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.307474, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.307556, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:53.307623, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:53.307738, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:53.307804, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.307867, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.307926, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.307985, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:53.308049, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 0000024b [2011/04/20 16:10:53.308383, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.308444, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.308505, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.308564, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.308622, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:53.308685, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.308754, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.308819, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000024b [2011/04/20 16:10:53.309151, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.309370, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.309487, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:53.309608, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.309677, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.309765, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.309829, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.309868, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39809 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.310347, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 4B 02 00 ....#... . ...K.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.319913, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2008 [2011/04/20 16:10:53.320081, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7d8 [2011/04/20 16:10:53.320145, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 623 of length 2012 (0 toread) [2011/04/20 16:10:53.320207, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.320246, 5, pid=27181] lib/util.c:627(show_msg) size=2008 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39873 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1924 (0x784) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1924 (0x784) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1941 [2011/04/20 16:10:53.320851, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 84 07 00 00 4C 02 00 ........ .....L.. [0020] 00 6C 07 00 00 00 00 45 00 30 77 E2 00 14 00 00 .l.....E .0wâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 B4 06 00 00 40 E7 E2 00 B4 06 00 .....´.. .@çâ.´.. [0070] 00 5C 00 5C 00 73 00 65 00 72 00 76 00 65 00 72 .\.\.s.e .r.v.e.r [0080] 00 64 00 61 00 74 00 69 00 5C 00 74 00 75 00 6E .d.a.t.i .\.t.u.n [0090] 00 69 00 6E 00 67 00 00 00 00 00 00 00 00 00 00 .i.n.g.. ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 01 04 00 06 DC 00 D8 05 53 FF 81 03 01 00 0B .....Ü.Ø .Sÿ..... [00C0] 00 9A 0B 34 08 64 00 01 00 0F 00 58 02 02 00 01 ...4.d.. ...X.... [00D0] 00 58 02 03 00 01 00 41 00 34 00 00 00 00 00 00 .X.....A .4...... [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [0130] 00 02 00 00 00 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 50 52 49 ........ .....PRI [0150] 56 E2 30 00 00 00 00 00 00 00 00 00 00 00 00 00 Vâ0..... ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 18 00 00 00 00 00 10 27 10 27 10 ........ ....'.'. [01B0] 27 00 00 10 27 00 00 00 00 00 00 00 00 B8 02 8C '...'... .....¸.. [01C0] 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ........ ........ [01E0] 00 4C 00 10 00 50 34 03 00 28 88 04 00 00 00 00 .L...P4. .(...... [01F0] 00 00 00 00 00 01 00 01 00 00 00 00 00 00 00 00 ........ ........ [2011/04/20 16:10:53.326335, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.326454, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.326587, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1924 params=0 setup=2 [2011/04/20 16:10:53.326667, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.326725, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.326786, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.326847, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.326911, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.326980, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1924 [2011/04/20 16:10:53.327047, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1924 [2011/04/20 16:10:53.327108, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1924 [2011/04/20 16:10:53.327171, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1924, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.327234, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.327293, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:53.327352, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1908 [2011/04/20 16:10:53.327417, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0784 000a auth_len : 0000 000c call_id : 0000024c [2011/04/20 16:10:53.327827, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.327890, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.327964, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.328085, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:53.328146, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1908, incoming data = 1908 [2011/04/20 16:10:53.328211, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.328282, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.328346, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000024c [2011/04/20 16:10:53.328676, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.328836, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.328951, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1908 [2011/04/20 16:10:53.329066, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.329133, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.329223, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.329288, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.329327, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39873 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.329807, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 4C 02 00 ....#... . ...L.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.332912, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:53.333089, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:53.333153, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 624 of length 292 (0 toread) [2011/04/20 16:10:53.333214, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.333253, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39938 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=221 [2011/04/20 16:10:53.333859, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 4D 02 00 ........ .Ì...M.. [0020] 00 B4 00 00 00 00 00 45 00 30 CC E2 00 14 00 00 .´.....E .0Ìâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 76 01 1C 00 00 ........ .Øüv.... [0080] 00 D0 B9 A6 00 34 FD 76 01 28 0A 00 00 03 00 00 .й¦.4ýv .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:53.335334, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.335413, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.335510, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:53.335583, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.335641, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.335918, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.335986, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.336050, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.336116, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:53.336183, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:53.336243, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:53.336307, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.336373, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.336433, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.336491, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:53.336556, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 0000024d [2011/04/20 16:10:53.336888, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.336948, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.337012, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.337072, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.337130, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:53.337246, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.337308, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 000000b4 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.337452, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.337519, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.337589, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.337662, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.337765, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:53.338663, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:53.338758, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[13] [0000] 00 00 00 00 5F 00 00 00 00 00 00 00 AE 4D 6D E9 ...._... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.338935, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:53.339018, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:53.339150, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:53 2011 [2011/04/20 16:10:53.339253, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:53 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:53.339413, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 13 printer handles active [2011/04/20 16:10:53.339520, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5F 00 00 00 00 00 00 00 AE 4D 6D E9 ...._... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.339756, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5F 00 00 00 00 00 00 00 AE 4D 6D E9 ...._... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.339927, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:53.341560, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:53.341717, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:53.341781, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:53.341851, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.341939, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:53.342004, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.342066, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.342127, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.348016, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.348125, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.348188, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.348250, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.348322, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.348426, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.348498, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.348564, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.348630, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.348707, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.348775, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.348847, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.348912, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.348975, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.349037, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.349096, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.349216, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.349288, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.349417, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.349492, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.349600, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.349664, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.349725, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.349787, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.349845, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.349954, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:53.350026, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.350096, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:53.350156, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:53.350224, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:53.350403, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.350473, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.350535, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.350597, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.350655, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.350762, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.350835, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.350922, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.350986, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.351048, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.351109, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.351174, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.351260, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.351325, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.351390, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.351453, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.351529, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.351595, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.355855, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.355972, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.356035, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.356099, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.356157, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.356301, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.356374, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.356443, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.356517, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.356627, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:53.356732, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:53.356830, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:53.357036, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:53.357109, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:53.357174, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005f-0000-0000-ae4d-6de92d6a0000 result : WERR_OK [2011/04/20 16:10:53.357453, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.357566, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.357638, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:53.357759, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.357825, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.357898, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000024d [2011/04/20 16:10:53.358221, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.358407, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.358471, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.358510, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=39938 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.359055, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 4D 02 00 ........ .0...M.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 5F 00 00 ........ ....._.. [0020] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 00 00 00 .....®Mm é-j..... [0030] 00 . [2011/04/20 16:10:53.361484, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:53.361635, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:53.361697, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 625 of length 184 (0 toread) [2011/04/20 16:10:53.361758, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.361798, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40001 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=113 [2011/04/20 16:10:53.362405, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 4E 02 00 ........ .`...N.. [0020] 00 48 00 00 00 00 00 01 00 30 77 E2 00 14 00 00 .H...... .0wâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:53.363049, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.363116, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.363207, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:53.363278, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.363337, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.363398, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.363459, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.363523, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.363588, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:53.363654, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:53.363789, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:53.363853, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.363969, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.364029, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.364088, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:53.364152, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 0000024e [2011/04/20 16:10:53.364483, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.364543, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.364608, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.364667, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.364727, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:53.364789, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.364858, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.364922, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000024e [2011/04/20 16:10:53.365251, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.365411, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.365526, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:53.365638, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.365704, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.365793, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.365857, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.365897, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40001 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.366376, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 4E 02 00 ....#... . ...N.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.367442, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.367554, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.367618, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 626 of length 2032 (0 toread) [2011/04/20 16:10:53.367678, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.367776, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40064 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=1961 [2011/04/20 16:10:53.368374, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 4F 02 00 ........ .....O.. [0020] 00 80 07 00 00 00 00 45 00 E8 D8 E1 00 14 00 00 .......E .èØá.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 58 CF E2 00 04 00 00 00 00 00 00 00 04 00 00 .XÏâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 C8 26 E3 .R.A.W.. .´...È&ã [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 00 00 00 .u.n.i.n .g...... [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 0B 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.371169, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.371247, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.371398, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.371472, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.371529, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.371590, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.371651, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:53.371769, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:53.371836, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.371902, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.371961, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.372024, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.372086, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.372144, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.372203, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.372267, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 0000024f [2011/04/20 16:10:53.372592, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.372651, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.372722, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.372780, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.372838, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.372902, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.372969, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.373031, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000024f [2011/04/20 16:10:53.373354, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.373512, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.373625, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.373773, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.373843, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.373932, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.373995, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.374033, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40064 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.374505, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 4F 02 00 ....#... . ...O.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.374953, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:53.375040, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:53.375101, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 627 of length 132 (0 toread) [2011/04/20 16:10:53.375160, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.375199, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40130 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=61 [2011/04/20 16:10:53.378074, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 50 02 00 ........ .,...P.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 5F 00 00 ........ ....._.. [0030] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 .....®Mm é-j.. [2011/04/20 16:10:53.378484, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.378553, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.378655, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:53.378731, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.378789, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.378852, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.378913, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.378977, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.379043, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:53.379110, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:53.379171, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:53.379305, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.379370, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.379429, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.379488, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:53.379553, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000250 [2011/04/20 16:10:53.379965, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.380028, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.380092, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.380151, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.380209, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:53.380274, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.380337, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:53.380481, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.380548, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.380621, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:53.380693, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:53.380768, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000005f-0000-0000-ae4d-6de92d6a0000 [2011/04/20 16:10:53.381008, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5F 00 00 00 00 00 00 00 AE 4D 6D E9 ...._... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.381194, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5F 00 00 00 00 00 00 00 AE 4D 6D E9 ...._... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.381379, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 5F 00 00 00 00 00 00 00 AE 4D 6D E9 ...._... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.381560, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:53.381670, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:53.381944, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.382016, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.382080, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:53.382211, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.382280, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.382353, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000250 [2011/04/20 16:10:53.382675, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.382863, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.382928, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.382968, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40130 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.383448, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 50 02 00 ........ .0...P.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:53.392255, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:53.392388, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:53.392451, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 628 of length 292 (0 toread) [2011/04/20 16:10:53.392512, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.392551, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40193 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=221 [2011/04/20 16:10:53.393223, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 51 02 00 ........ .Ì...Q.. [0020] 00 B4 00 00 00 00 00 45 00 38 85 E2 00 14 00 00 .´.....E .8.â.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 18 01 1C 00 00 ........ .Øü..... [0080] 00 D0 B9 A6 00 34 FD 18 01 28 0A 00 00 03 00 00 .й¦.4ý. .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:53.394360, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.394429, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.394524, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:53.394597, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.394656, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.394717, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.394777, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.394842, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.394908, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:53.394974, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:53.395034, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:53.395098, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.395161, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.395220, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.395279, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:53.395343, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000251 [2011/04/20 16:10:53.395675, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.399885, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.399960, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.400020, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.400137, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:53.400204, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.400275, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.400341, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000251 [2011/04/20 16:10:53.400669, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.400830, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.400945, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:53.401085, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.401153, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.401244, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.401308, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.401348, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40193 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.401828, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 51 02 00 ....#... . ...Q.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.402310, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.402404, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.402465, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 629 of length 204 (0 toread) [2011/04/20 16:10:53.402526, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.402565, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40256 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7193 (0x1C19) smb_bcc=133 [2011/04/20 16:10:53.403918, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 52 02 00 ........ .t...R.. [0020] 00 5C 00 00 00 00 00 01 00 E8 D8 E1 00 14 00 00 .\...... .èØá.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 58 CF E2 00 04 00 00 00 00 00 00 00 04 00 00 .XÏâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.404722, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.404790, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.404885, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.404959, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.405018, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.405079, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.405140, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c19) [2011/04/20 16:10:53.405203, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb923afc0 max_trans_reply: 1024 [2011/04/20 16:10:53.405268, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.405334, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.405394, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.405458, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.405521, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.405580, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.405639, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.405703, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 00000252 [2011/04/20 16:10:53.406036, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.406097, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.406160, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.406220, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.406279, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.406342, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.406411, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.406480, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000252 [2011/04/20 16:10:53.406846, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.407008, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.407123, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.407244, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.407314, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.407404, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.407467, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.407507, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40256 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.410867, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 52 02 00 ....#... . ...R.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.411429, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:53.411524, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:53.411586, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 630 of length 184 (0 toread) [2011/04/20 16:10:53.411647, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.411742, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40321 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=113 [2011/04/20 16:10:53.412349, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 53 02 00 ........ .`...S.. [0020] 00 48 00 00 00 00 00 01 00 38 85 E2 00 14 00 00 .H...... .8.â.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:53.412991, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.413114, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.413208, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:53.413281, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.413339, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.413401, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.413461, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.413526, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.413591, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:53.413656, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:53.413717, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:53.413780, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.413842, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.413901, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.413960, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:53.414024, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000253 [2011/04/20 16:10:53.414353, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.414413, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.414476, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.414535, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.414594, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:53.414657, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.414726, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.414790, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000253 [2011/04/20 16:10:53.416607, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.416808, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.416982, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:53.417127, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.417203, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.417294, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.417358, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.417398, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40321 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.417878, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 53 02 00 ....#... . ...S.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.438527, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2008 [2011/04/20 16:10:53.438671, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7d8 [2011/04/20 16:10:53.438735, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 631 of length 2012 (0 toread) [2011/04/20 16:10:53.438797, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.438836, 5, pid=27181] lib/util.c:627(show_msg) size=2008 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40385 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1924 (0x784) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1924 (0x784) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1941 [2011/04/20 16:10:53.439445, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 84 07 00 00 54 02 00 ........ .....T.. [0020] 00 6C 07 00 00 00 00 45 00 38 CE E2 00 14 00 00 .l.....E .8Îâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 B4 06 00 00 18 0A E3 00 B4 06 00 .....´.. ...ã.´.. [0070] 00 5C 00 5C 00 73 00 65 00 72 00 76 00 65 00 72 .\.\.s.e .r.v.e.r [0080] 00 64 00 61 00 74 00 69 00 5C 00 74 00 75 00 6E .d.a.t.i .\.t.u.n [0090] 00 69 00 6E 00 67 00 00 00 00 00 00 00 00 00 00 .i.n.g.. ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 01 04 00 06 DC 00 D8 05 53 FF 81 03 01 00 0B .....Ü.Ø .Sÿ..... [00C0] 00 9A 0B 34 08 64 00 01 00 0F 00 58 02 02 00 01 ...4.d.. ...X.... [00D0] 00 58 02 03 00 01 00 41 00 34 00 00 00 00 00 00 .X.....A .4...... [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [0130] 00 02 00 00 00 00 01 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 50 52 49 ........ .....PRI [0150] 56 E2 30 00 00 00 00 00 00 00 00 00 00 00 00 00 Vâ0..... ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 18 00 00 00 00 00 10 27 10 27 10 ........ ....'.'. [01B0] 27 00 00 10 27 00 00 00 00 00 00 00 00 B8 02 8C '...'... .....¸.. [01C0] 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ........ ........ [01E0] 00 4C 00 10 00 50 34 03 00 28 88 04 00 00 00 00 .L...P4. .(...... [01F0] 00 00 00 00 00 01 00 01 00 00 00 00 00 00 00 00 ........ ........ [2011/04/20 16:10:53.442244, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.442325, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.442533, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1924 params=0 setup=2 [2011/04/20 16:10:53.442629, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.442940, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.443006, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.443067, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.443131, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.443202, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1924 [2011/04/20 16:10:53.443269, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1924 [2011/04/20 16:10:53.443330, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1924 [2011/04/20 16:10:53.443393, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1924, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.443456, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.443515, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:53.443574, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1908 [2011/04/20 16:10:53.443638, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0784 000a auth_len : 0000 000c call_id : 00000254 [2011/04/20 16:10:53.444019, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.444080, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.444145, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.444203, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1908 [2011/04/20 16:10:53.444309, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1908, incoming data = 1908 [2011/04/20 16:10:53.444377, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.444447, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.444512, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000254 [2011/04/20 16:10:53.444840, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.445001, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.445115, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1908 [2011/04/20 16:10:53.445231, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.445298, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.445388, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.445452, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.445491, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40385 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.445971, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 54 02 00 ....#... . ...T.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.446430, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:53.446520, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:53.446581, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 632 of length 292 (0 toread) [2011/04/20 16:10:53.446642, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.446680, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40448 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=221 [2011/04/20 16:10:53.447287, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 55 02 00 ........ .Ì...U.. [0020] 00 B4 00 00 00 00 00 45 00 70 70 E2 00 14 00 00 .´.....E .ppâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 76 01 1C 00 00 ........ .Øüv.... [0080] 00 D0 B9 A6 00 34 FD 76 01 28 0A 00 00 03 00 00 .й¦.4ýv .(...... [0090] 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00 00 ........ ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:53.449947, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.450041, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.450128, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:53.450200, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.450259, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.450321, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.450381, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.450446, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.450511, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:53.450577, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:53.450639, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:53.450703, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.450768, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.450828, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.450887, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:53.450954, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000255 [2011/04/20 16:10:53.453858, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.454680, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.455434, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.455529, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.455589, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:53.455775, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.455841, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 000000b4 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.455990, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.456057, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.456128, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.456201, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.456306, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx in: struct spoolss_OpenPrinterEx printername : * printername : '\\serverdati\tuning' datatype : NULL devmode_ctr: struct spoolss_DevmodeContainer _ndr_size : 0x00000000 (0) devmode : NULL access_mask : 0x00000000 (0) 0: SERVER_ACCESS_ADMINISTER 0: SERVER_ACCESS_ENUMERATE 0: PRINTER_ACCESS_ADMINISTER 0: PRINTER_ACCESS_USE 0: JOB_ACCESS_ADMINISTER 0: JOB_ACCESS_READ level : 0x00000001 (1) userlevel : union spoolss_UserLevel(case 1) level1 : * level1: struct spoolss_UserLevel1 size : 0x0000001c (28) client : * client : '\\INORG0408' user : * user : 'msansuini' build : 0x00000a28 (2600) major : UNKNOWN_ENUM_VALUE (3) minor : SPOOLSS_MINOR_VERSION_0 (0) processor : PROCESSOR_ARCHITECTURE_INTEL (0) checking name: \\serverdati\tuning [2011/04/20 16:10:53.457672, 10, pid=27181] rpc_server/srv_spoolss_nt.c:601(open_printer_hnd) open_printer_hnd: name [\\serverdati\tuning] [2011/04/20 16:10:53.457793, 4, pid=27181] rpc_server/srv_lsa_hnd.c:191(create_policy_hnd_internal) Opened policy hnd[13] [0000] 00 00 00 00 60 00 00 00 00 00 00 00 AE 4D 6D E9 ....`... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.457973, 3, pid=27181] rpc_server/srv_spoolss_nt.c:396(set_printer_hnd_printertype) Setting printer type=\\serverdati\tuning Printer is a printer [2011/04/20 16:10:53.458055, 4, pid=27181] rpc_server/srv_spoolss_nt.c:444(set_printer_hnd_name) Setting printer name=\\serverdati\tuning (len=19) searching for [tuning] [2011/04/20 16:10:53.458176, 10, pid=27181] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = PRINTERNAME/tuning, value = tuning, timeout = Wed Apr 20 16:15:53 2011 [2011/04/20 16:10:53.458279, 10, pid=27181] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = PRINTERNAME/tuning and timeout = Wed Apr 20 16:15:53 2011 (300 seconds ahead) set_printer_hnd_name: Printer found: tuning -> tuning [2011/04/20 16:10:53.458441, 5, pid=27181] rpc_server/srv_spoolss_nt.c:632(open_printer_hnd) 13 printer handles active [2011/04/20 16:10:53.458938, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 60 00 00 00 00 00 00 00 AE 4D 6D E9 ....`... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.459185, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 60 00 00 00 00 00 00 00 AE 4D 6D E9 ....`... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.459364, 4, pid=27181] rpc_server/srv_spoolss_nt.c:379(get_printer_snum) short name:tuning [2011/04/20 16:10:53.461081, 3, pid=27181] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2011/04/20 16:10:53.461242, 10, pid=27181] passdb/lookup_sid.c:69(lookup_name) lookup_name: SERVERDATI\root => SERVERDATI (domain), root (name) [2011/04/20 16:10:53.461305, 10, pid=27181] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2011/04/20 16:10:53.461376, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(21452, 21453) : sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.461464, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2011/04/20 16:10:53.461528, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.461590, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.461651, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.461828, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.461897, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.461960, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.462767, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.462861, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.463595, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.464298, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.464940, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.465042, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.465134, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.465203, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.465275, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.465341, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.465404, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.465466, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.465524, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.465659, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.466361, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.467099, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.468511, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.468663, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.469212, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.469289, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.470087, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.470148, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.470878, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2011/04/20 16:10:53.471741, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.472453, 5, pid=27181] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2011/04/20 16:10:53.472570, 5, pid=27181] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2011/04/20 16:10:53.473339, 5, pid=27181] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2011/04/20 16:10:53.473592, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.473664, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.473727, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.473790, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.473850, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.473975, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.474050, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.474141, 10, pid=27181] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2011/04/20 16:10:53.474205, 10, pid=27181] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain SERVERDATI, was [2011/04/20 16:10:53.474267, 10, pid=27181] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2011/04/20 16:10:53.474330, 10, pid=27181] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2011/04/20 16:10:53.474397, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.474493, 10, pid=27181] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\serverdati\root, was [2011/04/20 16:10:53.474558, 10, pid=27181] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2011/04/20 16:10:53.474624, 10, pid=27181] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2011/04/20 16:10:53.474688, 4, pid=27181] lib/substitute.c:504(automount_server) Home server: serverdati [2011/04/20 16:10:53.474764, 10, pid=27181] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\serverdati\root\profile, was [2011/04/20 16:10:53.474833, 10, pid=27181] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2011/04/20 16:10:53.474899, 3, pid=27181] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.474963, 3, pid=27181] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2011/04/20 16:10:53.475084, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2011/04/20 16:10:53.475146, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:10:53.475204, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:10:53.475319, 10, pid=27181] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2011/04/20 16:10:53.475391, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2011/04/20 16:10:53.475458, 10, pid=27181] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 [2011/04/20 16:10:53.475532, 10, pid=27181] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1755553952-1951548001-1627821224-1000 from rid 1000 [2011/04/20 16:10:53.475636, 10, pid=27181] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1755553952-1951548001-1627821224-513 [2011/04/20 16:10:53.475817, 3, pid=27181] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:10:53.475918, 10, pid=27181] smbd/share_access.c:238(user_ok_token) user_ok_token: share tuning is ok for unix user DOMINIOCSA\msansuini [2011/04/20 16:10:53.476114, 4, pid=27181] printing/nt_printing.c:5724(print_access_check) access check was SUCCESS [2011/04/20 16:10:53.476187, 4, pid=27181] rpc_server/srv_spoolss_nt.c:1772(_spoolss_OpenPrinterEx) Setting printer access = PRINTER_ACCESS_USE [2011/04/20 16:10:53.476253, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000060-0000-0000-ae4d-6de92d6a0000 result : WERR_OK [2011/04/20 16:10:53.476526, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.476639, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.476708, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:53.476824, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.476890, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.476963, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000255 [2011/04/20 16:10:53.477288, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.479503, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.479594, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.479634, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40448 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.480240, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 55 02 00 ........ .0...U.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 60 00 00 ........ .....`.. [0020] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 00 00 00 .....®Mm é-j..... [0030] 00 . [2011/04/20 16:10:53.482237, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:53.482906, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:53.483619, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 633 of length 184 (0 toread) [2011/04/20 16:10:53.483765, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.483806, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40513 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=113 [2011/04/20 16:10:53.486223, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 56 02 00 ........ .`...V.. [0020] 00 48 00 00 00 00 00 01 00 38 CE E2 00 14 00 00 .H...... .8Îâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:53.487623, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.487771, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.487859, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:53.487933, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.487990, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.488052, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.488113, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.488178, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.488243, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:53.488308, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:53.488368, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:53.488432, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.488495, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.488615, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.488676, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:53.488740, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000256 [2011/04/20 16:10:53.489745, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.489827, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.489892, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.489952, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.490011, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:53.490076, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.490145, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.490211, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000256 [2011/04/20 16:10:53.490542, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.490702, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.490817, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:53.490943, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.491010, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.491100, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.491163, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.491202, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40513 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.491741, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 56 02 00 ....#... . ...V.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.492230, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 128 [2011/04/20 16:10:53.492325, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x80 [2011/04/20 16:10:53.492387, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 634 of length 132 (0 toread) [2011/04/20 16:10:53.492448, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.492486, 5, pid=27181] lib/util.c:627(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40576 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=61 [2011/04/20 16:10:53.493099, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 57 02 00 ........ .,...W.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 60 00 00 ........ .....`.. [0030] 00 00 00 00 00 AE 4D 6D E9 2D 6A 00 00 .....®Mm é-j.. [2011/04/20 16:10:53.493448, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.493514, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.493600, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2011/04/20 16:10:53.493673, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.493731, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.493792, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.493853, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.493916, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.494111, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 44 [2011/04/20 16:10:53.494181, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 44 [2011/04/20 16:10:53.494241, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44 [2011/04/20 16:10:53.494304, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.494368, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.494428, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.494487, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28 [2011/04/20 16:10:53.494550, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000257 [2011/04/20 16:10:53.494880, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.494941, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.495048, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.495108, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 28 [2011/04/20 16:10:53.495167, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28 [2011/04/20 16:10:53.495231, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.495293, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000014 0004 context_id: 0000 0006 opnum : 001d [2011/04/20 16:10:53.495436, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.495503, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.495572, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2011/04/20 16:10:53.495644, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[29].fn == 0xb72021c0 [2011/04/20 16:10:53.495774, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000060-0000-0000-ae4d-6de92d6a0000 [2011/04/20 16:10:53.496012, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 60 00 00 00 00 00 00 00 AE 4D 6D E9 ....`... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.496199, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 60 00 00 00 00 00 00 00 AE 4D 6D E9 ....`... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.496379, 4, pid=27181] rpc_server/srv_lsa_hnd.c:219(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 60 00 00 00 00 00 00 00 AE 4D 6D E9 ....`... ....®Mmé [0010] 2D 6A 00 00 -j.. [2011/04/20 16:10:53.496561, 3, pid=27181] rpc_server/srv_lsa_hnd.c:258(close_policy_hnd) Closed policy [2011/04/20 16:10:53.496624, 1, pid=27181] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2011/04/20 16:10:53.496891, 5, pid=27181] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2011/04/20 16:10:53.496960, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.497023, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 28 [2011/04/20 16:10:53.497144, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.497212, 10, pid=27181] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24. [2011/04/20 16:10:53.497284, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000257 [2011/04/20 16:10:53.497648, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.497834, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2011/04/20 16:10:53.497898, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.497938, 5, pid=27181] lib/util.c:627(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40576 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2011/04/20 16:10:53.498418, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 57 02 00 ........ .0...W.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2011/04/20 16:10:53.500772, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 288 [2011/04/20 16:10:53.500877, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x120 [2011/04/20 16:10:53.500940, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 635 of length 292 (0 toread) [2011/04/20 16:10:53.501001, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.501040, 5, pid=27181] lib/util.c:627(show_msg) size=288 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40640 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 204 (0xCC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 204 (0xCC) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=221 [2011/04/20 16:10:53.501648, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 CC 00 00 00 58 02 00 ........ .Ì...X.. [0020] 00 B4 00 00 00 00 00 45 00 18 CF E2 00 14 00 00 .´.....E ..Ïâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 01 00 00 00 01 00 00 00 D8 FC 18 01 1C 00 00 ........ .Øü..... [0080] 00 D0 B9 A6 00 34 FD 18 01 28 0A 00 00 03 00 00 .й¦.4ý. .(...... [0090] 00 00 00 00 00 00 00 7A 01 0C 00 00 00 00 00 00 .......z ........ [00A0] 00 0C 00 00 00 5C 00 5C 00 49 00 4E 00 4F 00 52 .....\.\ .I.N.O.R [00B0] 00 47 00 30 00 34 00 30 00 38 00 00 00 0A 00 00 .G.0.4.0 .8...... [00C0] 00 00 00 00 00 0A 00 00 00 6D 00 73 00 61 00 6E ........ .m.s.a.n [00D0] 00 73 00 75 00 69 00 6E 00 69 00 00 00 .s.u.i.n .i... [2011/04/20 16:10:53.502784, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.502851, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.502983, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=204 params=0 setup=2 [2011/04/20 16:10:53.503058, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.503117, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.503178, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.503239, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.503303, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.503367, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 204 [2011/04/20 16:10:53.503433, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 204 [2011/04/20 16:10:53.503493, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 204 [2011/04/20 16:10:53.503556, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 204, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.503619, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.503678, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.503794, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 188 [2011/04/20 16:10:53.503858, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00cc 000a auth_len : 0000 000c call_id : 00000258 [2011/04/20 16:10:53.504190, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.504250, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.504314, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.504373, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 188 [2011/04/20 16:10:53.504432, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 188, incoming data = 188 [2011/04/20 16:10:53.504495, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.504564, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.504630, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000258 [2011/04/20 16:10:53.505313, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.505486, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.505602, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 188 [2011/04/20 16:10:53.505772, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.505844, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.505935, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.505999, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.506038, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40640 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.509209, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 58 02 00 ....#... . ...X.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.512063, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.512213, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.512276, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 636 of length 2032 (0 toread) [2011/04/20 16:10:53.512337, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.512376, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40705 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=1961 [2011/04/20 16:10:53.513731, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 59 02 00 ........ .....Y.. [0020] 00 80 07 00 00 00 00 45 00 60 CD E2 00 14 00 00 .......E .`Íâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 20 74 E2 00 04 00 00 00 00 00 00 00 04 00 00 . tâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 F8 9D E2 .R.A.W.. .´...ø.â [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 25 00 00 .u.n.i.n .g...%.. [00B0] 00 F0 00 00 00 90 00 59 00 16 00 08 00 01 00 00 .ð.....Y ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 69 00 40 ........ .....i.@ [0100] 00 70 00 73 00 69 00 00 00 00 00 00 00 00 00 06 .p.s.i.. ........ [0110] 00 00 00 0C 00 00 00 63 00 01 00 08 00 02 00 14 .......c ........ [0120] 20 AF 00 AC 00 4D 00 00 00 00 00 00 00 00 00 00 ¯.¬.M.. ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.516451, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.516523, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.516631, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.517171, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.517250, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.517312, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.517373, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.517438, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.517508, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.517574, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.517634, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.517698, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.517764, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.517822, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.518376, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.518460, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 00000259 [2011/04/20 16:10:53.518896, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.518962, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.519035, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.519094, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.519154, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.519268, 10, pid=27181] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2011/04/20 16:10:53.519332, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000780 0004 context_id: 0000 0006 opnum : 0045 [2011/04/20 16:10:53.519479, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.519544, 5, pid=27181] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\spoolss [2011/04/20 16:10:53.519615, 4, pid=27181] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2011/04/20 16:10:53.519746, 6, pid=27181] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[69].fn == 0xb71fa770 [2011/04/20 16:10:53.519874, 3, pid=27181] lib/charcnv.c:644(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence( ¯) [2011/04/20 16:10:53.519939, 0, pid=27181] lib/charcnv.c:650(convert_string_talloc) Conversion error: Illegal multibyte sequence( ¯) [2011/04/20 16:10:53.520003, 1, pid=27181] ../librpc/ndr/ndr.c:395(ndr_pull_error) ndr_pull_error(5): Bad character conversion [2011/04/20 16:10:53.520070, 0, pid=27181] rpc_server/srv_pipe.c:2439(api_rpcTNP) api_rpcTNP: \spoolss: SPOOLSS_OPENPRINTEREX failed. [2011/04/20 16:10:53.520140, 3, pid=27181] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2011/04/20 16:10:53.520202, 3, pid=27181] rpc_server/srv_pipe_hnd.c:656(process_complete_pdu) process_complete_pdu: DCE/RPC fault sent on pipe \spoolss [2011/04/20 16:10:53.521219, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.521867, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000259 [2011/04/20 16:10:53.522702, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.522898, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.523016, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.523146, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.523216, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.523306, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.523370, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.523409, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40705 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.524382, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 59 02 00 ....#... . ...Y.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.525232, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 180 [2011/04/20 16:10:53.525338, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2011/04/20 16:10:53.525399, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 637 of length 184 (0 toread) [2011/04/20 16:10:53.525461, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.525499, 5, pid=27181] lib/util.c:627(show_msg) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40768 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=113 [2011/04/20 16:10:53.526107, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 60 00 00 00 5A 02 00 ........ .`...Z.. [0020] 00 48 00 00 00 00 00 01 00 18 CF E2 00 14 00 00 .H...... ..Ïâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 . [2011/04/20 16:10:53.528700, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.528794, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.528885, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=96 params=0 setup=2 [2011/04/20 16:10:53.533642, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.533755, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.533818, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.533880, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.533945, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.534013, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 96 [2011/04/20 16:10:53.535529, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 96 [2011/04/20 16:10:53.535646, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2011/04/20 16:10:53.536566, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.536724, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.536786, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.536846, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2011/04/20 16:10:53.536910, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 0000025a [2011/04/20 16:10:53.537302, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.537363, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.537426, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.537486, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 80 [2011/04/20 16:10:53.537545, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 80, incoming data = 80 [2011/04/20 16:10:53.537609, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.537678, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.537743, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000025a [2011/04/20 16:10:53.538074, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.538235, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.538350, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 80 [2011/04/20 16:10:53.538482, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.538550, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.538640, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.538704, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.538743, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40768 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.539223, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 5A 02 00 ....#... . ...Z.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.539593, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.539672, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.541854, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 638 of length 204 (0 toread) [2011/04/20 16:10:53.541926, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.542499, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40833 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=133 [2011/04/20 16:10:53.545192, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 5B 02 00 ........ .t...[.. [0020] 00 5C 00 00 00 00 00 01 00 60 CD E2 00 14 00 00 .\...... .`Íâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 20 74 E2 00 04 00 00 00 00 00 00 00 04 00 00 . tâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.547405, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.547503, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.548008, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.548097, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.548155, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.548216, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.548681, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.548759, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.548825, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.549186, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.549257, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.550079, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.550181, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.550390, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.550457, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.550593, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 0000025b [2011/04/20 16:10:53.551967, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.552172, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.552250, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.552803, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.552885, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.552950, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.553382, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.553755, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000025b [2011/04/20 16:10:53.556071, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.556995, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.557298, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.557524, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.558182, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.558308, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.558374, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.558414, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40833 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.559626, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 5B 02 00 ....#... . ...[.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.562863, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.562997, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.563061, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 639 of length 2032 (0 toread) [2011/04/20 16:10:53.563122, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.563164, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40897 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1961 [2011/04/20 16:10:53.571254, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 5C 02 00 ........ .....\.. [0020] 00 80 07 00 00 00 00 45 00 E8 CE E2 00 14 00 00 .......E .èÎâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 70 F5 E2 00 04 00 00 00 00 00 00 00 04 00 00 .põâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 98 D2 E2 .R.A.W.. .´....Òâ [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 25 00 00 .u.n.i.n .g...%.. [00B0] 00 F0 00 00 00 90 00 59 00 16 00 08 00 01 00 00 .ð.....Y ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 69 00 40 ........ .....i.@ [0100] 00 70 00 73 00 69 00 00 00 00 00 00 00 00 00 06 .p.s.i.. ........ [0110] 00 00 00 0C 00 00 00 63 00 01 00 08 00 02 00 14 .......c ........ [0120] 20 AF 00 AC 00 4D 00 00 00 00 00 00 00 00 00 00 ¯.¬.M.. ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.573948, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.574019, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.574137, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.574214, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.574272, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.574334, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.574394, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.574548, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.574618, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.574685, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.574821, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.574888, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.574999, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.575060, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.575119, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.575184, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 0000025c [2011/04/20 16:10:53.575515, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.575575, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.575647, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.575845, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.575906, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.575972, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.576043, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.576107, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000025c [2011/04/20 16:10:53.576437, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.576598, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.576713, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.576832, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.576899, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.576989, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.577052, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.577091, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40897 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.577572, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 5C 02 00 ....#... . ...\.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.579086, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.579200, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.579262, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 640 of length 204 (0 toread) [2011/04/20 16:10:53.579323, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.579362, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40961 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=133 [2011/04/20 16:10:53.580019, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 5D 02 00 ........ .t...].. [0020] 00 5C 00 00 00 00 00 01 00 E8 CE E2 00 14 00 00 .\...... .èÎâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 70 F5 E2 00 04 00 00 00 00 00 00 00 04 00 00 .põâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.580745, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.580812, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.580902, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.580974, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.581032, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.581093, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.581153, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.581217, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.581282, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.581346, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.581407, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.581469, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.581532, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.581591, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.581650, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.581714, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 0000025d [2011/04/20 16:10:53.582092, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.582152, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.582215, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.582275, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.582334, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.582398, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.582466, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.582529, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000025d [2011/04/20 16:10:53.582857, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.583018, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.583132, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.583244, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.583312, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.583401, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.583464, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.583503, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=40961 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.584030, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 5D 02 00 ....#... . ...].. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.587342, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.587493, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.587558, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 641 of length 2032 (0 toread) [2011/04/20 16:10:53.587619, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.587766, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41025 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1961 [2011/04/20 16:10:53.590463, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 5E 02 00 ........ .....^.. [0020] 00 80 07 00 00 00 00 45 00 E8 CE E2 00 14 00 00 .......E .èÎâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 70 F5 E2 00 04 00 00 00 00 00 00 00 04 00 00 .põâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 98 D2 E2 .R.A.W.. .´....Òâ [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 25 00 00 .u.n.i.n .g...%.. [00B0] 00 F0 00 00 00 90 00 59 00 16 00 08 00 01 00 00 .ð.....Y ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 69 00 40 ........ .....i.@ [0100] 00 70 00 73 00 69 00 00 00 00 00 00 00 00 00 06 .p.s.i.. ........ [0110] 00 00 00 0C 00 00 00 63 00 01 00 08 00 02 00 14 .......c ........ [0120] 20 AF 00 AC 00 4D 00 00 00 00 00 00 00 00 00 00 ¯.¬.M.. ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.593917, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.594010, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.594120, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.594194, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.594252, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.594820, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.594905, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.594970, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.595093, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.595161, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.595222, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.595285, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.595348, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.595407, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.595466, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.596353, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 0000025e [2011/04/20 16:10:53.597489, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.597572, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.597637, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.598346, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.598813, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.600065, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.600521, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.600606, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000025e [2011/04/20 16:10:53.601991, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.602174, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.602292, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.602419, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.603253, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.603383, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.603448, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.603537, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41025 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.604834, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 5E 02 00 ....#... . ...^.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.606891, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.607025, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.607088, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 642 of length 204 (0 toread) [2011/04/20 16:10:53.607150, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.607188, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41089 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=133 [2011/04/20 16:10:53.609297, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 5F 02 00 ........ .t..._.. [0020] 00 5C 00 00 00 00 00 01 00 E8 CE E2 00 14 00 00 .\...... .èÎâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 70 F5 E2 00 04 00 00 00 00 00 00 00 04 00 00 .põâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.614239, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.614333, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.615121, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.615229, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.615920, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.616008, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.617042, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.617135, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.617784, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.617867, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.618686, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.619170, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.620116, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.620378, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.620446, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.620512, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 0000025f [2011/04/20 16:10:53.620845, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.620905, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.620969, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.621029, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.621087, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.621152, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.621222, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.621287, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 0000025f [2011/04/20 16:10:53.621616, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.621778, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.621893, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.622028, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.622097, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.622188, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.622252, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.622291, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41089 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.622772, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 5F 02 00 ....#... . ..._.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.626781, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.627843, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.629507, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 643 of length 2032 (0 toread) [2011/04/20 16:10:53.629729, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.629772, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41153 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1961 [2011/04/20 16:10:53.630382, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 60 02 00 ........ .....`.. [0020] 00 80 07 00 00 00 00 45 00 E8 CE E2 00 14 00 00 .......E .èÎâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 70 F5 E2 00 04 00 00 00 00 00 00 00 04 00 00 .põâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 98 D2 E2 .R.A.W.. .´....Òâ [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 25 00 00 .u.n.i.n .g...%.. [00B0] 00 F0 00 00 00 90 00 59 00 16 00 08 00 01 00 00 .ð.....Y ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 69 00 40 ........ .....i.@ [0100] 00 70 00 73 00 69 00 00 00 00 00 00 00 00 00 06 .p.s.i.. ........ [0110] 00 00 00 0C 00 00 00 63 00 01 00 08 00 02 00 14 .......c ........ [0120] 20 AF 00 AC 00 4D 00 00 00 00 00 00 00 00 00 00 ¯.¬.M.. ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.643633, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.643796, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.643975, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.644051, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.644109, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.644170, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.644230, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.644294, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.644361, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.644426, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.644486, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.644550, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.644613, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.644672, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.644730, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.644795, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 00000260 [2011/04/20 16:10:53.645129, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.645190, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.645253, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.645312, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.645371, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.645436, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.645505, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.645569, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000260 [2011/04/20 16:10:53.645898, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.646058, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.646218, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.646336, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.646405, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.646494, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.646558, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.646597, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41153 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.647077, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 60 02 00 ....#... . ...`.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.650073, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.651745, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.652503, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 644 of length 204 (0 toread) [2011/04/20 16:10:53.652592, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.652632, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41217 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=133 [2011/04/20 16:10:53.654896, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 61 02 00 ........ .t...a.. [0020] 00 5C 00 00 00 00 00 01 00 E8 CE E2 00 14 00 00 .\...... .èÎâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 70 F5 E2 00 04 00 00 00 00 00 00 00 04 00 00 .põâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.665388, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.666314, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.667014, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.667130, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.667189, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.667251, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.667481, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.668265, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.668333, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.668520, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.669199, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.669295, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.669358, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.669417, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.669476, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.669651, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 00000261 [2011/04/20 16:10:53.669987, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.670048, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.670111, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.670171, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.670229, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.670683, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.671139, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.671222, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000261 [2011/04/20 16:10:53.672400, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.674051, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.674201, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.675953, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.676057, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.676768, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.677764, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.678211, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41217 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.679876, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 61 02 00 ....#... . ...a.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.684468, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.684696, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.684762, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 645 of length 2032 (0 toread) [2011/04/20 16:10:53.684822, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.684862, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41281 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1961 [2011/04/20 16:10:53.685468, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 62 02 00 ........ .....b.. [0020] 00 80 07 00 00 00 00 45 00 E8 D8 E1 00 14 00 00 .......E .èØá.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 90 F7 E2 00 04 00 00 00 00 00 00 00 04 00 00 ..÷â.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 38 97 E2 .R.A.W.. .´...8.â [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 25 00 00 .u.n.i.n .g...%.. [00B0] 00 F0 00 00 00 90 00 59 00 16 00 08 00 01 00 00 .ð.....Y ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 69 00 40 ........ .....i.@ [0100] 00 70 00 73 00 69 00 00 00 00 00 00 00 00 00 06 .p.s.i.. ........ [0110] 00 00 00 0C 00 00 00 63 00 01 00 08 00 02 00 14 .......c ........ [0120] 20 AF 00 AC 00 4D 00 00 00 00 00 00 00 00 00 00 ¯.¬.M.. ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.693171, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.693269, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.693385, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.693459, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.693517, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.693578, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.693638, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.693703, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.694426, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.694533, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.694595, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.696480, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.696584, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.696772, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.696836, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.696901, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 00000262 [2011/04/20 16:10:53.697712, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.697794, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.697859, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.697918, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.697978, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.698048, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.698118, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.698183, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000262 [2011/04/20 16:10:53.699206, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.700534, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.700673, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.701080, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.701171, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.701261, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.701324, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.701364, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41281 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.702780, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 62 02 00 ....#... . ...b.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.705531, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.705748, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.705817, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 646 of length 2032 (0 toread) [2011/04/20 16:10:53.705879, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.705918, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41344 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=1961 [2011/04/20 16:10:53.706626, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 63 02 00 ........ .....c.. [0020] 00 80 07 00 00 00 00 45 00 18 F5 E2 00 14 00 00 .......E ..õâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 70 F5 E2 00 04 00 00 00 00 00 00 00 04 00 00 .põâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 78 90 E2 .R.A.W.. .´...x.â [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 25 00 00 .u.n.i.n .g...%.. [00B0] 00 F0 00 00 00 90 00 59 00 16 00 08 00 01 00 00 .ð.....Y ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 69 00 40 ........ .....i.@ [0100] 00 70 00 73 00 69 00 00 00 00 00 00 00 00 00 06 .p.s.i.. ........ [0110] 00 00 00 0C 00 00 00 63 00 01 00 08 00 02 00 14 .......c ........ [0120] 20 AF 00 AC 00 4D 00 00 00 00 00 00 00 00 00 00 ¯.¬.M.. ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.709305, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.709378, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.709488, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.709562, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.709620, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.709684, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.715999, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.716101, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.716178, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.716249, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.716310, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.716375, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.716438, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.716497, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.716555, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.716620, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 00000263 [2011/04/20 16:10:53.717034, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.717096, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.717162, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.717221, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.717280, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.717346, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.717419, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.717485, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000263 [2011/04/20 16:10:53.717815, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.717975, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.718091, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.718224, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.718294, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.718386, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.718451, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.718490, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41344 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.718969, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 63 02 00 ....#... . ...c.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.721046, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.721235, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.721299, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 647 of length 204 (0 toread) [2011/04/20 16:10:53.721361, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.721400, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41409 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=133 [2011/04/20 16:10:53.722068, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 64 02 00 ........ .t...d.. [0020] 00 5C 00 00 00 00 00 01 00 E8 D8 E1 00 14 00 00 .\...... .èØá.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 90 F7 E2 00 04 00 00 00 00 00 00 00 04 00 00 ..÷â.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.722799, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.722867, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.722965, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.723039, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.723098, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.723160, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.723221, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.723286, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.723351, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.723417, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.723477, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.723540, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.723603, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.723662, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.727844, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.727937, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 00000264 [2011/04/20 16:10:53.728270, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.728331, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.728397, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.728456, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.728570, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.728637, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.728707, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.728772, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000264 [2011/04/20 16:10:53.729102, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.729264, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.729379, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.729520, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.729589, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.729681, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.729744, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.729783, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41409 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.730263, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 64 02 00 ....#... . ...d.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.731644, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.731861, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.731925, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 648 of length 204 (0 toread) [2011/04/20 16:10:53.731986, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.732025, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41472 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7195 (0x1C1B) smb_bcc=133 [2011/04/20 16:10:53.732632, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 65 02 00 ........ .t...e.. [0020] 00 5C 00 00 00 00 00 01 00 18 F5 E2 00 14 00 00 .\...... ..õâ.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 70 F5 E2 00 04 00 00 00 00 00 00 00 04 00 00 .põâ.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.736230, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.736346, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.736448, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.736522, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.736580, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.736643, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.736704, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1b) [2011/04/20 16:10:53.736768, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb9241e80 max_trans_reply: 1024 [2011/04/20 16:10:53.736834, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.736902, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.736962, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.737025, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.737088, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.737147, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.737206, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.737271, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 00000265 [2011/04/20 16:10:53.737602, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.737662, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.737726, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.737785, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.737843, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.737908, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.737980, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.738045, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000265 [2011/04/20 16:10:53.738435, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.738604, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.738720, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.738850, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.738920, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.739013, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.739077, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.739116, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41472 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.739595, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 65 02 00 ....#... . ...e.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.756010, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.756234, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.756303, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 649 of length 2032 (0 toread) [2011/04/20 16:10:53.756364, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.756403, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41537 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1961 [2011/04/20 16:10:53.757011, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 66 02 00 ........ .....f.. [0020] 00 80 07 00 00 00 00 45 00 38 85 E2 00 14 00 00 .......E .8.â.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 90 F7 E2 00 04 00 00 00 00 00 00 00 04 00 00 ..÷â.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 38 97 E2 .R.A.W.. .´...8.â [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 25 00 00 .u.n.i.n .g...%.. [00B0] 00 F0 00 00 00 90 00 59 00 16 00 08 00 01 00 00 .ð.....Y ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 69 00 40 ........ .....i.@ [0100] 00 70 00 73 00 69 00 00 00 00 00 00 00 00 00 06 .p.s.i.. ........ [0110] 00 00 00 0C 00 00 00 63 00 01 00 08 00 02 00 14 .......c ........ [0120] 20 AF 00 AC 00 4D 00 00 00 00 00 00 00 00 00 00 ¯.¬.M.. ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.759652, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.760410, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.760885, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.761911, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.761990, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.762051, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.762113, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.762887, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.763342, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.763861, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.763947, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.764967, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.765062, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.765122, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.765182, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.765246, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 00000266 [2011/04/20 16:10:53.771173, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.771263, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.771328, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.776317, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.776463, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.777349, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.777458, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.777524, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000266 [2011/04/20 16:10:53.777861, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.778020, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.778136, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.778268, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.778335, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.778424, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.778488, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.778527, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41537 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.780067, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 66 02 00 ....#... . ...f.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.781617, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.782844, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.782962, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 650 of length 204 (0 toread) [2011/04/20 16:10:53.784139, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.784206, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41601 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=133 [2011/04/20 16:10:53.784856, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 67 02 00 ........ .t...g.. [0020] 00 5C 00 00 00 00 00 01 00 38 85 E2 00 14 00 00 .\...... .8.â.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 90 F7 E2 00 04 00 00 00 00 00 00 00 04 00 00 ..÷â.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.785588, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.785656, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.785748, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.785821, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.785880, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.785941, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.786001, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.786066, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.786131, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.786197, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.786258, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.786322, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.786385, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.786444, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.786503, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.786567, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 00000267 [2011/04/20 16:10:53.786898, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.786958, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.787022, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.787081, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.787179, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.787245, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.787314, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.787379, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000267 [2011/04/20 16:10:53.792710, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.792918, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.793036, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.793194, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.793270, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.793364, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.793428, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.793467, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41601 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.793948, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 67 02 00 ....#... . ...g.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.801625, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 2028 [2011/04/20 16:10:53.801770, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7ec [2011/04/20 16:10:53.801834, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 651 of length 2032 (0 toread) [2011/04/20 16:10:53.801895, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.801934, 5, pid=27181] lib/util.c:627(show_msg) size=2028 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41665 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1944 (0x798) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1944 (0x798) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=1961 [2011/04/20 16:10:53.802541, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 98 07 00 00 68 02 00 ........ .....h.. [0020] 00 80 07 00 00 00 00 45 00 38 85 E2 00 14 00 00 .......E .8.â.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 90 F7 E2 00 04 00 00 00 00 00 00 00 04 00 00 ..÷â.... ........ [0070] 00 52 00 41 00 57 00 00 00 B4 06 00 00 78 90 E2 .R.A.W.. .´...x.â [0080] 00 B4 06 00 00 5C 00 5C 00 73 00 65 00 72 00 76 .´...\.\ .s.e.r.v [0090] 00 65 00 72 00 64 00 61 00 74 00 69 00 5C 00 74 .e.r.d.a .t.i.\.t [00A0] 00 75 00 6E 00 69 00 6E 00 67 00 00 00 25 00 00 .u.n.i.n .g...%.. [00B0] 00 F0 00 00 00 90 00 59 00 16 00 08 00 01 00 00 .ð.....Y ........ [00C0] 00 00 00 00 00 01 04 00 06 DC 00 D8 05 53 FF 80 ........ .Ü.Ø.Sÿ. [00D0] 03 01 00 09 00 9A 0B 34 08 64 00 01 00 0F 00 58 .......4 .d.....X [00E0] 02 02 00 01 00 58 02 03 00 01 00 41 00 34 00 00 .....X.. ...A.4.. [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 69 00 40 ........ .....i.@ [0100] 00 70 00 73 00 69 00 00 00 00 00 00 00 00 00 06 .p.s.i.. ........ [0110] 00 00 00 0C 00 00 00 63 00 01 00 08 00 02 00 14 .......c ........ [0120] 20 AF 00 AC 00 4D 00 00 00 00 00 00 00 00 00 00 ¯.¬.M.. ........ [0130] 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0140] 00 01 00 00 00 02 00 00 00 00 01 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 50 52 49 56 E2 30 00 00 00 00 00 00 00 00 00 .PRIVâ0. ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 10 ........ ........ [01C0] 27 10 27 10 27 00 00 10 27 00 00 00 00 00 00 00 '.'.'... '....... [01D0] 00 B8 02 8C 05 00 00 00 00 00 00 00 00 00 00 00 .¸...... ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........ [01F0] 00 00 00 00 00 4C 00 10 00 50 34 03 00 28 88 04 .....L.. .P4..(.. [2011/04/20 16:10:53.821282, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.822643, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.822780, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=1944 params=0 setup=2 [2011/04/20 16:10:53.823438, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.823536, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.824360, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.824444, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.824508, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.824579, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 1944 [2011/04/20 16:10:53.824646, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1944 [2011/04/20 16:10:53.824707, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1944 [2011/04/20 16:10:53.824771, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 1944, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.824834, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.824951, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.825011, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1928 [2011/04/20 16:10:53.825075, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0798 000a auth_len : 0000 000c call_id : 00000268 [2011/04/20 16:10:53.825406, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.825466, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.825530, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.826144, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 1928 [2011/04/20 16:10:53.826703, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1928, incoming data = 1928 [2011/04/20 16:10:53.826795, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.826866, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.826932, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000268 [2011/04/20 16:10:53.827268, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.828631, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.830282, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 1928 [2011/04/20 16:10:53.832027, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.832152, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.832243, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.832307, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.832346, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41665 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.832829, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 68 02 00 ....#... . ...h.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:10:53.834802, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 200 [2011/04/20 16:10:53.834936, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xc8 [2011/04/20 16:10:53.835002, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 652 of length 204 (0 toread) [2011/04/20 16:10:53.835570, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.835610, 5, pid=27181] lib/util.c:627(show_msg) size=200 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41729 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 116 (0x74) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 116 (0x74) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 7194 (0x1C1A) smb_bcc=133 [2011/04/20 16:10:53.836698, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 00 00 00 69 02 00 ........ .t...i.. [0020] 00 5C 00 00 00 00 00 01 00 38 85 E2 00 14 00 00 .\...... .8.â.... [0030] 00 00 00 00 00 14 00 00 00 5C 00 5C 00 73 00 65 ........ .\.\.s.e [0040] 00 72 00 76 00 65 00 72 00 64 00 61 00 74 00 69 .r.v.e.r .d.a.t.i [0050] 00 5C 00 74 00 75 00 6E 00 69 00 6E 00 67 00 00 .\.t.u.n .i.n.g.. [0060] 00 90 F7 E2 00 04 00 00 00 00 00 00 00 04 00 00 ..÷â.... ........ [0070] 00 52 00 41 00 57 00 00 00 00 00 00 00 00 00 00 .R.A.W.. ........ [0080] 00 08 00 00 00 ..... [2011/04/20 16:10:53.837550, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 27181) conn 0xb9222800 [2011/04/20 16:10:53.837621, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:10:53.837711, 3, pid=27181] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=116 params=0 setup=2 [2011/04/20 16:10:53.837933, 5, pid=27181] smbd/ipc.c:578(handle_trans) calling named_pipe [2011/04/20 16:10:53.838005, 3, pid=27181] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2011/04/20 16:10:53.838067, 5, pid=27181] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2011/04/20 16:10:53.838128, 3, pid=27181] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 1c1a) [2011/04/20 16:10:53.838193, 10, pid=27181] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0xb92168d8 max_trans_reply: 1024 [2011/04/20 16:10:53.838258, 6, pid=27181] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2011/04/20 16:10:53.838324, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2011/04/20 16:10:53.838525, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2011/04/20 16:10:53.838594, 10, pid=27181] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2011/04/20 16:10:53.838657, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2011/04/20 16:10:53.838717, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.838776, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2011/04/20 16:10:53.838841, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 00000269 [2011/04/20 16:10:53.839230, 5, pid=27181] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2011/04/20 16:10:53.839292, 10, pid=27181] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2011/04/20 16:10:53.839356, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2011/04/20 16:10:53.839416, 10, pid=27181] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2011/04/20 16:10:53.839475, 10, pid=27181] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2011/04/20 16:10:53.839540, 10, pid=27181] rpc_server/srv_pipe_hnd.c:518(process_complete_pdu) process_complete_pdu: pipe \spoolss in fault state. [2011/04/20 16:10:53.839748, 10, pid=27181] rpc_server/srv_pipe_hnd.c:180(set_incoming_fault) set_incoming_fault: Setting fault state on pipe \spoolss [2011/04/20 16:10:53.839821, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 03 0003 flags : 23 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0020 000a auth_len : 0000 000c call_id : 00000269 [2011/04/20 16:10:53.842051, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000000 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2011/04/20 16:10:53.842858, 5, pid=27181] rpc_parse/parse_prs.c:89(prs_debug) 000018 smb_io_rpc_hdr_fault fault 0018 status : DCERPC_FAULT_OP_RNG_ERROR 001c reserved: 00000000 [2011/04/20 16:10:53.842997, 10, pid=27181] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2011/04/20 16:10:53.843132, 6, pid=27181] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \spoolss len: 1024 [2011/04/20 16:10:53.843206, 10, pid=27181] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \spoolss: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes. [2011/04/20 16:10:53.843296, 5, pid=27181] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..32] (align 0) [2011/04/20 16:10:53.843360, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:10:53.843399, 5, pid=27181] lib/util.c:627(show_msg) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=1452 smb_uid=100 smb_mid=41729 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2011/04/20 16:10:53.843937, 10, pid=27181] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 03 23 10 00 00 00 20 00 00 00 69 02 00 ....#... . ...i.. [0010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [0020] 00 . [2011/04/20 16:11:13.581937, 10, pid=27181] lib/events.c:131(run_events) Running timed event "smbd_idle_event_handler" 0xb9223700 [2011/04/20 16:11:13.582121, 10, pid=27181] smbd/process.c:683(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2011/04/20 16:11:13.582189, 10, pid=27181] smbd/process.c:694(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2011/04/20 16:11:13.582271, 10, pid=27181] lib/events.c:131(run_events) Running timed event "smbd_idle_event_handler" 0xb923f790 [2011/04/20 16:11:13.582411, 10, pid=27181] smbd/process.c:683(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2011/04/20 16:11:13.582476, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/04/20 16:11:13.582540, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:11:13.582599, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:11:13.582709, 5, pid=27181] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/04/20 16:11:13.582782, 10, pid=27181] smbd/process.c:694(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled [2011/04/20 16:11:20.672698, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 41 [2011/04/20 16:11:20.672868, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x29 [2011/04/20 16:11:20.672931, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 653 of length 45 (0 toread) [2011/04/20 16:11:20.672992, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:11:20.673031, 5, pid=27181] lib/util.c:627(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=41793 smt_wct=3 smb_vwv[ 0]= 7195 (0x1C1B) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2011/04/20 16:11:20.673370, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBclose (pid 27181) conn 0xb9222800 [2011/04/20 16:11:20.673446, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (21452, 21453) - sec_ctx_stack_ndx = 0 [2011/04/20 16:11:20.673509, 5, pid=27181] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-2943704632-3037471470-1787688681-11452 contains 22 SIDs SID[ 0]: S-1-5-21-2943704632-3037471470-1787688681-11452 SID[ 1]: S-1-5-21-2943704632-3037471470-1787688681-11453 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2943704632-3037471470-1787688681-513 SID[ 6]: S-1-5-21-2943704632-3037471470-1787688681-11001 SID[ 7]: S-1-5-21-2943704632-3037471470-1787688681-11163 SID[ 8]: S-1-5-21-2943704632-3037471470-1787688681-11461 SID[ 9]: S-1-5-21-2943704632-3037471470-1787688681-11273 SID[ 10]: S-1-5-32-545 SID[ 11]: S-1-22-1-21452 SID[ 12]: S-1-22-2-21453 SID[ 13]: S-1-22-2-10034 SID[ 14]: S-1-22-2-10035 SID[ 15]: S-1-22-2-10003 SID[ 16]: S-1-22-2-10513 SID[ 17]: S-1-22-2-21001 SID[ 18]: S-1-22-2-21163 SID[ 19]: S-1-22-2-21461 SID[ 20]: S-1-22-2-21273 SID[ 21]: S-1-22-2-10032 SE_PRIV 0x0 0x0 0x0 0x0 [2011/04/20 16:11:20.674229, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 21452 Primary group is 21453 and contains 10 supplementary groups Group[ 0]: 21453 Group[ 1]: 10034 Group[ 2]: 10035 Group[ 3]: 10003 Group[ 4]: 10513 Group[ 5]: 21001 Group[ 6]: 21163 Group[ 7]: 21461 Group[ 8]: 21273 Group[ 9]: 10032 [2011/04/20 16:11:20.674568, 5, pid=27181] smbd/uid.c:354(change_to_user) change_to_user uid=(0,21452) gid=(0,21453) [2011/04/20 16:11:20.674641, 3, pid=27181] smbd/reply.c:4653(reply_close) close fd=-1 fnum=7195 (numopen=3) [2011/04/20 16:11:20.674722, 6, pid=27181] smbd/close.c:501(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2011/04/20 16:11:20.674867, 5, pid=27181] smbd/files.c:497(file_free) freed files structure 7195 (2 used) [2011/04/20 16:11:20.674939, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:11:20.674979, 5, pid=27181] lib/util.c:627(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=41793 smt_wct=0 smb_bcc=0 [2011/04/20 16:11:20.676221, 10, pid=27181] lib/util_sock.c:731(read_smb_length_return_keepalive) got smb length of 41 [2011/04/20 16:11:20.676433, 6, pid=27181] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x29 [2011/04/20 16:11:20.676501, 3, pid=27181] smbd/process.c:1485(process_smb) Transaction 654 of length 45 (0 toread) [2011/04/20 16:11:20.676563, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:11:20.676602, 5, pid=27181] lib/util.c:627(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=41857 smt_wct=3 smb_vwv[ 0]= 7194 (0x1C1A) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2011/04/20 16:11:20.676937, 3, pid=27181] smbd/process.c:1294(switch_message) switch message SMBclose (pid 27181) conn 0xb9222800 [2011/04/20 16:11:20.677001, 4, pid=27181] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2011/04/20 16:11:20.677068, 3, pid=27181] smbd/reply.c:4653(reply_close) close fd=-1 fnum=7194 (numopen=2) [2011/04/20 16:11:20.677131, 6, pid=27181] smbd/close.c:501(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2011/04/20 16:11:20.677238, 5, pid=27181] smbd/files.c:497(file_free) freed files structure 7194 (1 used) [2011/04/20 16:11:20.677306, 5, pid=27181] lib/util.c:617(show_msg) [2011/04/20 16:11:20.677345, 5, pid=27181] lib/util.c:627(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=41857 smt_wct=0 smb_bcc=0 [2011/04/20 16:12:13.307835, 10, pid=27181] lib/events.c:131(run_events) Running timed event "smbd_idle_event_handler" 0xb92219d0 [2011/04/20 16:12:13.308061, 10, pid=27181] smbd/process.c:683(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(keepalive) (nil) called [2011/04/20 16:12:13.308184, 10, pid=27181] smbd/process.c:694(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(keepalive) (nil) rescheduled [2011/04/20 16:12:13.582619, 10, pid=27181] lib/events.c:131(run_events) Running timed event "smbd_idle_event_handler" 0xb923d158 [2011/04/20 16:12:13.583274, 10, pid=27181] smbd/process.c:683(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) called [2011/04/20 16:12:13.583407, 10, pid=27181] smbd/process.c:694(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(deadtime) (nil) rescheduled [2011/04/20 16:12:13.583570, 10, pid=27181] lib/events.c:131(run_events) Running timed event "smbd_idle_event_handler" 0xb923f9d0 [2011/04/20 16:12:13.583658, 10, pid=27181] smbd/process.c:683(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) called [2011/04/20 16:12:13.583914, 3, pid=27181] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/04/20 16:12:13.584001, 5, pid=27181] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/04/20 16:12:13.584071, 5, pid=27181] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/04/20 16:12:13.584272, 5, pid=27181] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/04/20 16:12:13.584379, 10, pid=27181] smbd/process.c:694(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(housekeeping) (nil) rescheduled