[2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686) lp_file_list_changed() file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera last mod_time: Thu Jan 1 01:00:00 1970 file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Thu Dec 16 14:11:35 2004 [2004/12/16 15:17:02, 5] smbd/connection.c:claim_connection(170) claiming 0 [2004/12/16 15:17:02, 5] smbd/reply.c:reply_special(284) init msg_type=0x81 msg_flags=0x0 [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(24,4) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(24,4) wrote 4 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 104 [2004/12/16 15:17:02, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x68 [2004/12/16 15:17:02, 3] smbd/process.c:process_smb(1091) Transaction 1 of length 108 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=104 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=0 smb_tid=0 smb_pid=132 smb_uid=0 smb_mid=37008 smt_wct=0 smb_bcc=69 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 58 45 4E 49 58 20 43 RAM 1.0. .XENIX C [020] 4F 52 45 00 02 4C 41 4E 4D 41 4E 31 2E 30 00 02 ORE..LAN MAN1.0.. [030] 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D 41 LM1.2X00 2..LANMA [040] 4E 32 2E 31 00 N2.1. [2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886) switch message SMBnegprot (pid 3628) conn 0x0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [PC NETWORK PROGRAM 1.0] [2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [XENIX CORE] [2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN1.0] [2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LM1.2X002] [2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN2.1] [2004/12/16 15:17:02, 10] lib/util.c:set_remote_arch(1952) set_remote_arch: Client arch is 'OS2' [2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686) lp_file_list_changed() file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera last mod_time: Thu Jan 1 01:00:00 1970 file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Thu Dec 16 14:11:35 2004 [2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686) lp_file_list_changed() file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera last mod_time: Thu Jan 1 01:00:00 1970 file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Thu Dec 16 14:11:35 2004 [2004/12/16 15:17:02, 10] smbd/negprot.c:get_challenge(40) get challenge: creating negprot_global_auth_context [2004/12/16 15:17:02, 5] auth/auth.c:make_auth_context_subsystem(506) Using specified auth order [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend rhosts [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'rhosts' [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend hostsequiv [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'hostsequiv' [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam' [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam_ignoredomain [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam_ignoredomain' [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend unix [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'unix' [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend winbind [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'winbind' [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend smbserver [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'smbserver' [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend trustdomain [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'trustdomain' [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend ntdomain [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'ntdomain' [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend guest [2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'guest' [2004/12/16 15:17:02, 5] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match ntdomain [2004/12/16 15:17:02, 5] auth/auth.c:load_auth_module(409) load_auth_module: auth method ntdomain has a valid init [2004/12/16 15:17:02, 10] smbd/negprot.c:get_challenge(45) get challenge: getting challenge [2004/12/16 15:17:02, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module ntdomain did not want to specify a challenge [2004/12/16 15:17:02, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2004/12/16 15:17:02, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2004/12/16 15:17:02, 5] lib/util.c:dump_data(1977) [000] 57 C8 DB 44 9A A7 E5 1B WÈÛD.§å. [2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(549) Selected protocol LM1.2X002 [2004/12/16 15:17:02, 5] smbd/negprot.c:reply_negprot(555) negprot index=3 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=69 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=129 smb_flg2=16385 smb_tid=0 smb_pid=132 smb_uid=0 smb_mid=37008 smt_wct=13 smb_vwv[ 0]= 3 (0x3) smb_vwv[ 1]= 3 (0x3) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 3 (0x3) smb_vwv[ 6]= 3628 (0xE2C) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]=31265 (0x7A21) smb_vwv[ 9]=12688 (0x3190) smb_vwv[10]=65476 (0xFFC4) smb_vwv[11]= 8 (0x8) smb_vwv[12]= 0 (0x0) smb_bcc=8 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 57 C8 DB 44 9A A7 E5 1B WÈÛD.§å. [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(24,73) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(24,73) wrote 73 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 157 [2004/12/16 15:17:02, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x9d [2004/12/16 15:17:02, 3] smbd/process.c:process_smb(1091) Transaction 2 of length 161 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=157 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=10 smb_flg2=3 smb_tid=1 smb_pid=132 smb_uid=0 smb_mid=37073 smt_wct=10 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 127 (0x7F) smb_vwv[ 2]= 4356 (0x1104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 3628 (0xE2C) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 24 (0x18) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=72 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 48 3B 5A F2 51 03 93 1D 3E C3 F7 01 F2 05 43 EA H;ZòQ... >Ã÷.ò.Cê [010] F9 20 9A 5C 94 AD A1 09 47 49 45 53 53 4C 45 52 ù .\.­¡. GIESSLER [020] 00 42 49 4F 4D 41 47 00 4F 53 2F 32 20 57 61 72 .BIOMAG. OS/2 War [030] 70 20 20 20 00 49 42 4D 20 4C 41 4E 20 53 65 72 p .IBM LAN Ser [040] 76 65 72 20 35 2E 30 00 ver 5.0. [2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886) switch message SMBsesssetupX (pid 3628) conn 0x0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/16 15:17:02, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=10 flg2=0x3 [2004/12/16 15:17:02, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/12/16 15:17:02, 3] smbd/sesssetup.c:reply_sesssetup_and_X(804) sesssetupX:name=[]\[GIESSLER]@[gera] [2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686) lp_file_list_changed() file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera last mod_time: Thu Jan 1 01:00:00 1970 file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Thu Dec 16 14:11:35 2004 [2004/12/16 15:17:02, 5] auth/auth_util.c:make_user_info_map(225) make_user_info_map: Mapping user []\[GIESSLER] from workstation [gera] [2004/12/16 15:17:02, 10] lib/gencache.c:gencache_get(285) Cache entry with key = TDOM/BIOMAG couldn't be found [2004/12/16 15:17:02, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) no entry for trusted domain BIOMAG found. [2004/12/16 15:17:02, 5] auth/auth_util.c:make_user_info(133) attempting to make a user_info for GIESSLER (GIESSLER) [2004/12/16 15:17:02, 5] auth/auth_util.c:make_user_info(143) making strings for GIESSLER's user_info struct [2004/12/16 15:17:02, 5] auth/auth_util.c:make_user_info(185) making blobs for GIESSLER's user_info struct [2004/12/16 15:17:02, 10] auth/auth_util.c:make_user_info(201) made an encrypted user_info for GIESSLER (GIESSLER) [2004/12/16 15:17:02, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[GIESSLER]@[gera] with the new password interface [2004/12/16 15:17:02, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [BIOMAG]\[GIESSLER]@[gera] [2004/12/16 15:17:02, 10] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by random [2004/12/16 15:17:02, 10] auth/auth.c:check_ntlm_password(233) challenge is: [2004/12/16 15:17:02, 5] lib/util.c:dump_data(1977) [000] 57 C8 DB 44 9A A7 E5 1B WÈÛD.§å. [2004/12/16 15:17:02, 4] passdb/secrets.c:secrets_fetch_trust_account_password(290) Using cleartext machine password [2004/12/16 15:17:02, 4] passdb/secrets.c:secrets_fetch_trust_account_password(290) Using cleartext machine password [2004/12/16 15:17:02, 8] libsmb/namequery.c:get_sorted_dc_list(1433) get_sorted_dc_list: attempting lookup using [lmhosts wins host bcast] [2004/12/16 15:17:02, 10] libsmb/namequery.c:internal_resolve_name(1028) internal_resolve_name: looking up stendal#20 [2004/12/16 15:17:02, 10] lib/gencache.c:gencache_get(263) Returning valid cache entry: key = NBT/STENDAL#20, value = 141.35.200.65:0, timeout = Thu Dec 16 15:21:27 2004 [2004/12/16 15:17:02, 5] libsmb/namecache.c:namecache_fetch(201) name stendal#20 found. [2004/12/16 15:17:02, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) remove_duplicate_addrs2: looking for duplicate address/port pairs [2004/12/16 15:17:02, 4] libsmb/namequery.c:get_dc_list(1406) get_dc_list: returning 1 ip addresses in an ordered list [2004/12/16 15:17:02, 4] libsmb/namequery.c:get_dc_list(1407) get_dc_list: 141.35.200.65:0 [2004/12/16 15:17:02, 10] libsmb/namequery.c:name_status_find(188) name_status_find: looking up BIOMAG#1c at 141.35.200.65 [2004/12/16 15:17:02, 10] lib/gencache.c:gencache_get(285) Cache entry with key = NBT/BIOMAG#1C.20.141.35.200.65 couldn't be found [2004/12/16 15:17:02, 5] libsmb/namecache.c:namecache_status_fetch(308) namecache_status_fetch: no entry for NBT/BIOMAG#1C.20.141.35.200.65 found. [2004/12/16 15:17:02, 10] lib/gencache.c:gencache_del(214) Deleting cache entry (key = NBT/BIOMAG#1C.20.141.35.200.65) [2004/12/16 15:17:02, 10] lib/util_sock.c:open_socket_in(717) bind succeeded on port 0 [2004/12/16 15:17:02, 5] libsmb/nmblib.c:send_udp(776) Sending a packet of len 50 to (141.35.200.65) on port 137 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_udp_socket(230) read_udp_socket: lastip 141.35.200.65 lastport 137 read: 265 [2004/12/16 15:17:02, 10] libsmb/nmblib.c:parse_nmb(503) parse_nmb: packet id = 24002 [2004/12/16 15:17:02, 5] libsmb/nmblib.c:read_packet(754) Received a packet of len 265 from (141.35.200.65) port 137 [2004/12/16 15:17:02, 4] libsmb/nmblib.c:debug_nmb_packet(109) nmb packet from 141.35.200.65(137) header: id=24002 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=BIOMAG<1c> rr_type=33 rr_class=1 ttl=0 answers 0 char .STENDAL hex 095354454E44414C2020202020202020 answers 10 char .D.STENDAL hex 0044005354454E44414C202020202020 answers 20 char .D.STENDAL hex 20200344005354454E44414C20202020 answers 30 char D...__MSBRO hex 2020202020440001025F5F4D5342524F answers 40 char WSE__....BIOMAG hex 5753455F5F0201C40042494F4D414720 answers 50 char ...BIOMA hex 202020202020202000C40042494F4D41 answers 60 char G .D.BIO hex 472020202020202020201B440042494F answers 70 char MAG ...B hex 4D41472020202020202020201CC40042 answers 80 char IOMAG .D hex 494F4D41472020202020202020201D44 answers 90 char .BIOMAG hex 0042494F4D4147202020202020202020 answers a0 char ................ hex 1EC40000000000000000000000000000 answers b0 char ................ hex 00000000000000000000000000000000 answers c0 char ................ hex 00000000000000000000000000000000 answers d0 char . hex 00 [2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70) STENDAL#00: flags = 0x44 [2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70) STENDAL#03: flags = 0x44 [2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70) STENDAL#20: flags = 0x44 [2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70) __MSBROWSE__#01: flags = 0xc4 [2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70) BIOMAG#00: flags = 0xc4 [2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70) BIOMAG#1b: flags = 0x44 [2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70) BIOMAG#1c: flags = 0xc4 [2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70) BIOMAG#1d: flags = 0x44 [2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70) BIOMAG#1e: flags = 0xc4 [2004/12/16 15:17:02, 10] libsmb/namequery.c:name_status_find(227) name_status_find: name found, name STENDAL ip address is 141.35.200.65 [2004/12/16 15:17:02, 3] libsmb/namequery_dc.c:rpc_dc_name(145) rpc_dc_name: Returning DC STENDAL (141.35.200.65) for domain BIOMAG [2004/12/16 15:17:02, 10] passdb/secrets.c:secrets_named_mutex(702) secrets_named_mutex: got mutex for STENDAL [2004/12/16 15:17:02, 3] libsmb/cliconnect.c:cli_start_connection(1382) Connecting to host=STENDAL [2004/12/16 15:17:02, 3] lib/util_sock.c:open_socket_out(752) Connecting to 141.35.200.65 at port 445 [2004/12/16 15:17:02, 2] lib/util_sock.c:open_socket_out(789) error connecting to 141.35.200.65:445 (Connection refused) [2004/12/16 15:17:02, 3] lib/util_sock.c:open_socket_out(752) Connecting to 141.35.200.65 at port 139 [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 0 [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 0 [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 49152 [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 49640 [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(145) Could not test socket option SO_SNDLOWAT. [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(145) Could not test socket option SO_RCVLOWAT. [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(145) Could not test socket option SO_SNDTIMEO. [2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(145) Could not test socket option SO_RCVTIMEO. [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,72) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,72) wrote 72 [2004/12/16 15:17:02, 5] libsmb/cliconnect.c:cli_session_request(1207) Sent session request [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 0 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=0 smb_com=0x0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=0 smb_tid=0 smb_pid=0 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=0 [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,183) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,183) wrote 183 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 84 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=84 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=3628 smb_uid=0 smb_mid=2 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 1536 (0x600) smb_vwv[ 8]= 86 (0x56) smb_vwv[ 9]=63744 (0xF900) smb_vwv[10]= 227 (0xE3) smb_vwv[11]= 0 (0x0) smb_vwv[12]=27907 (0x6D03) smb_vwv[13]=31209 (0x79E9) smb_vwv[14]=50403 (0xC4E3) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 2303 (0x8FF) smb_bcc=15 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 7F 87 86 2C 68 20 6F 41 42 49 4F 4D 41 47 00 ...,h oA BIOMAG. [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=84 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=3628 smb_uid=0 smb_mid=2 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 1536 (0x600) smb_vwv[ 8]= 86 (0x56) smb_vwv[ 9]=63744 (0xF900) smb_vwv[10]= 227 (0xE3) smb_vwv[11]= 0 (0x0) smb_vwv[12]=27907 (0x6D03) smb_vwv[13]=31209 (0x79E9) smb_vwv[14]=50403 (0xC4E3) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 2303 (0x8FF) smb_bcc=15 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 7F 87 86 2C 68 20 6F 41 42 49 4F 4D 41 47 00 ...,h oA BIOMAG. [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,78) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,78) wrote 78 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 66 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=66 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=3628 smb_uid=100 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=25 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 55 6E 69 78 00 53 61 6D 62 61 20 32 2E 32 2E 31 Unix.Sam ba 2.2.1 [010] 32 00 42 49 4F 4D 41 47 00 2.BIOMAG . [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=66 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=3628 smb_uid=100 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=25 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 55 6E 69 78 00 53 61 6D 62 61 20 32 2E 32 2E 31 Unix.Sam ba 2.2.1 [010] 32 00 42 49 4F 4D 41 47 00 2.BIOMAG . [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,67) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,67) wrote 67 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 49 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=49 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=4 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=8 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 49 50 43 00 49 50 43 00 IPC.IPC. [2004/12/16 15:17:02, 10] libsmb/clientgen.c:cli_init_creds(217) cli_init_creds: user domain [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,97) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,97) wrote 97 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 103 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=5 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=55296 (0xD800) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1319) Bind RPC Pipe[76d8]: \PIPE\NETLOGON [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:valid_pipe_name(1215) Bind Abstract Syntax: [000] 12 34 56 78 12 34 AB CD EF 00 01 23 45 67 CF FB .4Vx.4«Í ï..#EgÏû [010] 00 00 00 01 .... [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:valid_pipe_name(1218) Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..ë.É .è..+.H` [010] 00 00 00 02 .... [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 0b [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0048 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_rb [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_bba [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0010 max_tsize: 10b8 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0012 max_rsize: 10b8 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0014 assoc_gid: 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_elements: 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001c context_id : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001e num_syntaxes: 01 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 00001f smb_io_rpc_iface [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 data : 12345678 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0024 data : 1234 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0026 data : abcd [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0028 data : ef 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 002a data : 01 23 45 67 cf fb [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 version: 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_rpc_iface [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_uuid uuid [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 data : 8a885d04 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0038 data : 1ceb [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 003a data : 11c9 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 003c data : 9f e8 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 003e data : 08 00 2b 10 48 60 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 version: 00000002 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421) rpc_api_pipe: fnum:76d8 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=146 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=18433 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 74 (0x4A) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 74 (0x4A) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30424 (0x76D8) smb_bcc=79 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 5C 50 49 50 45 5C 00 05 00 0B 03 10 00 00 00 48 \PIPE\.. .......H [010] 00 00 00 01 00 00 00 B8 10 B8 10 00 00 00 00 01 .......¸ .¸...... [020] 00 00 00 00 00 01 00 78 56 34 12 34 12 CD AB EF .......x V4.4.Í«ï [030] 00 01 23 45 67 CF FB 01 00 00 00 04 5D 88 8A EB ..#EgÏû. ....]..ë [040] 1C C9 11 9F E8 08 00 2B 10 48 60 02 00 00 00 .É..è..+ .H`.... [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,150) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,150) wrote 150 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 124 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 30 16 30 16 F0 53 00 00 0C 00 5C 50 49 50 45 .0.0.ðS. ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..ë.É ..è..+.H [040] 60 02 00 00 00 `.... [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 30 16 30 16 F0 53 00 00 0C 00 5C 50 49 50 45 .0.0.ðS. ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..ë.É ..è..+.H [040] 60 02 00 00 00 `.... [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 68 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 0c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0044 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494) rpc_api_pipe: len left: 0 smbtrans read: 68 [2004/12/16 15:17:02, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536) rpc_api_pipe: fragment first and last both set [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1395) rpc_pipe_bind: rpc_api_pipe returned OK. [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_ba [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_bba [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0010 max_tsize: 1630 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0012 max_rsize: 1630 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0014 assoc_gid: 000053f0 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_rpc_addr_str [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0018 len: 000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 001a str: \PIPE\lsass. [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000026 smb_io_rpc_results [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0028 num_results: 01 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 002c result : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 002e reason : 0000 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_rpc_iface [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_uuid uuid [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 data : 8a885d04 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0034 data : 1ceb [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0036 data : 11c9 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0038 data : 9f e8 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 003a data : 08 00 2b 10 48 60 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0040 version: 00000002 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:check_bind_response(1271) bind_rpc_pipe: accepted! [2004/12/16 15:17:02, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(45) cli_net_req_chal: LSA Request Challenge from MOSKAU to STENDAL: 8384CF4AB2DBEFD3 [2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_q_req_chal(676) init_q_req_chal: 676 [2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_q_req_chal(685) init_q_req_chal: 685 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 net_io_q_req_chal [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 undoc_buffer: 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 uni_max_len: 0000000a [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c uni_str_len: 0000000a [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0010 buffer : \.\.S.T.E.N.D.A.L... [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_unistr2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 uni_max_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0028 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c uni_str_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0030 buffer : M.O.S.K.A.U... [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 00003e smb_io_chal [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 003e data: 83 84 cf 4a b2 db ef d3 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:create_rpc_request(852) create_rpc_request: opnum: 0x4 data_len: 0x5e [2004/12/16 15:17:02, 10] rpc_client/cli_pipe.c:create_rpc_request(869) create_rpc_request: data_len: 5e auth_len: 0 alloc_hint: 4e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 005e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000002 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_req hdr_req [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 0000004e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 opnum : 0004 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421) rpc_api_pipe: fnum:76d8 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=168 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=18433 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 94 (0x5E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 5680 (0x1630) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 74 (0x4A) smb_vwv[11]= 94 (0x5E) smb_vwv[12]= 74 (0x4A) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30424 (0x76D8) smb_bcc=101 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 5C 50 49 50 45 5C 00 05 00 00 03 10 00 00 00 5E \PIPE\.. .......^ [010] 00 00 00 02 00 00 00 4E 00 00 00 00 00 04 00 01 .......N ........ [020] 00 00 00 0A 00 00 00 00 00 00 00 0A 00 00 00 5C ........ .......\ [030] 00 5C 00 53 00 54 00 45 00 4E 00 44 00 41 00 4C .\.S.T.E .N.D.A.L [040] 00 00 00 07 00 00 00 00 00 00 00 07 00 00 00 4D ........ .......M [050] 00 4F 00 53 00 4B 00 41 00 55 00 00 00 83 84 CF .O.S.K.A .U.....Ï [060] 4A B2 DB EF D3 J²ÛïÓ [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,172) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,172) wrote 172 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 92 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 02 00 00 ........ .$...... [010] 00 0C 00 00 00 00 00 00 00 4D 8C 21 63 DD C8 33 ........ .M.!cÝÈ3 [020] F2 00 00 00 00 ò.... [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 02 00 00 ........ .$...... [010] 00 0C 00 00 00 00 00 00 00 4D 8C 21 63 DD C8 33 ........ .M.!cÝÈ3 [020] F2 00 00 00 00 ò.... [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 36 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 02 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0024 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000002 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 0000000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494) rpc_api_pipe: len left: 0 smbtrans read: 36 [2004/12/16 15:17:02, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536) rpc_api_pipe: fragment first and last both set [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000018 net_io_r_req_chal [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_chal [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0018 data: 4d 8c 21 63 dd c8 33 f2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_ntstatus(672) 0020 status: NT_STATUS_OK [2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_session_key(59) cred_session_key [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_session_key(61) clnt_chal: 8384CF4AB2DBEFD3 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_session_key(62) srv_chal : 4D8C2163DDC833F2 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_session_key(63) clnt+srv : D010F1AD8FA423C6 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_session_key(64) sess_key : 93EF72B007AECAB8 [2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_create(90) cred_create [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(92) sess_key : 93EF72B007AECAB8 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(93) stor_cred: 8384CF4AB2DBEFD3 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(94) timestamp: 0 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(95) timecred : 8384CF4AB2DBEFD3 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(96) calc_cred: 078BB05635D7AA29 [2004/12/16 15:17:02, 4] rpc_client/cli_netlogon.c:cli_net_auth2(108) cli_net_auth2: srv:\\STENDAL acct:MOSKAU$ sc:2 mc: MOSKAU chal 078BB05635D7AA29 neg: 400701ff [2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_q_auth_2(797) init_q_auth_2: 797 [2004/12/16 15:17:02, 5] rpc_parse/parse_misc.c:init_log_info(1319) make_log_info 1319 [2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_q_auth_2(803) init_q_auth_2: 803 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 net_io_q_auth_2 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_log_info [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 undoc_buffer: 00000001 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 unistr2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 uni_max_len: 0000000a [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c uni_str_len: 0000000a [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0010 buffer : \.\.S.T.E.N.D.A.L... [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_unistr2 unistr2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 uni_max_len: 00000008 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0028 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c uni_str_len: 00000008 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0030 buffer : M.O.S.K.A.U.$... [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0040 sec_chan: 0002 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000042 smb_io_unistr2 unistr2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 uni_max_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0048 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 004c uni_str_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0050 buffer : M.O.S.K.A.U... [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 00005e smb_io_chal [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 005e data: 07 8b b0 56 35 d7 aa 29 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000066 net_io_neg_flags [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0068 neg_flags: 400701ff [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:create_rpc_request(852) create_rpc_request: opnum: 0xf data_len: 0x84 [2004/12/16 15:17:02, 10] rpc_client/cli_pipe.c:create_rpc_request(869) create_rpc_request: data_len: 84 auth_len: 0 alloc_hint: 74 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0084 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000003 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_req hdr_req [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 00000074 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 opnum : 000f [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421) rpc_api_pipe: fnum:76d8 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=206 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=18433 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=8 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 132 (0x84) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 5680 (0x1630) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 74 (0x4A) smb_vwv[11]= 132 (0x84) smb_vwv[12]= 74 (0x4A) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30424 (0x76D8) smb_bcc=139 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 5C 50 49 50 45 5C 00 05 00 00 03 10 00 00 00 84 \PIPE\.. ........ [010] 00 00 00 03 00 00 00 74 00 00 00 00 00 0F 00 01 .......t ........ [020] 00 00 00 0A 00 00 00 00 00 00 00 0A 00 00 00 5C ........ .......\ [030] 00 5C 00 53 00 54 00 45 00 4E 00 44 00 41 00 4C .\.S.T.E .N.D.A.L [040] 00 00 00 08 00 00 00 00 00 00 00 08 00 00 00 4D ........ .......M [050] 00 4F 00 53 00 4B 00 41 00 55 00 24 00 00 00 02 .O.S.K.A .U.$.... [060] 00 00 00 07 00 00 00 00 00 00 00 07 00 00 00 4D ........ .......M [070] 00 4F 00 53 00 4B 00 41 00 55 00 00 00 07 8B B0 .O.S.K.A .U.....° [080] 56 35 D7 AA 29 00 00 FF 01 07 40 V5ת)..ÿ ..@ [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,210) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,210) wrote 210 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 96 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=8 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 8C 53 91 BC A5 BB A0 ........ ..S.¼¥»  [020] 4F FF 01 00 00 00 00 00 00 Oÿ...... . [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=8 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 8C 53 91 BC A5 BB A0 ........ ..S.¼¥»  [020] 4F FF 01 00 00 00 00 00 00 Oÿ...... . [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 40 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 02 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0028 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000003 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 00000010 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494) rpc_api_pipe: len left: 0 smbtrans read: 40 [2004/12/16 15:17:02, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536) rpc_api_pipe: fragment first and last both set [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000018 net_io_r_auth_2 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_chal [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0018 data: 8c 53 91 bc a5 bb a0 4f [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 net_io_neg_flags [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 neg_flags: 000001ff [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_ntstatus(672) 0024 status: NT_STATUS_OK [2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_create(90) cred_create [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(92) sess_key : 93EF72B007AECAB8 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(93) stor_cred: 4D8C2163DDC833F2 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(94) timestamp: 0 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(95) timecred : 4D8C2163DDC833F2 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(96) calc_cred: 8C5391BCA5BBA04F [2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_assert(121) cred_assert [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_assert(123) challenge : 8C5391BCA5BBA04F [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_assert(124) calculated: 8C5391BCA5BBA04F [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_assert(128) credentials check ok [2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_create(90) cred_create [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(92) sess_key : 93EF72B007AECAB8 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(93) stor_cred: 078BB05635D7AA29 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(94) timestamp: 41c198de [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(95) timecred : E523729835D7AA29 [2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(96) calc_cred: 7A40300D3C5A6666 [2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_id_info2(1180) init_id_info2: 1180 [2004/12/16 15:17:02, 5] rpc_parse/parse_misc.c:init_logon_id(1498) make_logon_id: 1498 [2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_sam_info(1286) init_sam_info: 1286 [2004/12/16 15:17:02, 5] rpc_parse/parse_misc.c:init_clnt_info2(1413) make_clnt_info: 1413 [2004/12/16 15:17:02, 5] rpc_parse/parse_misc.c:init_clnt_srv(1258) init_clnt_srv: 1258 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 net_io_q_sam_logon [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_sam_info [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_clnt_info2 [2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_clnt_srv [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 undoc_buffer : 00000001 [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 unistr2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 uni_max_len: 0000000a [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c uni_str_len: 0000000a [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0010 buffer : \.\.S.T.E.N.D.A.L... [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 undoc_buffer2: 00000001 [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 000028 smb_io_unistr2 unistr2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0028 uni_max_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 uni_str_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0034 buffer : M.O.S.K.A.U... [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 ptr_cred: 00000001 [2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_cred [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_chal [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0048 data: 7a 40 30 0d 3c 5a 66 66 [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_utime [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0050 time: 41c198de [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0054 ptr_rtn_cred : 00000001 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000058 smb_io_cred [2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82) 000058 smb_io_chal [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0058 data: 00 00 00 00 00 00 00 00 [2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82) 000060 smb_io_utime [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0060 time: 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0064 logon_level : 0002 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000066 smb_io_sam_info logon_info [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0066 switch_value : 0002 [2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82) 000068 net_io_id_info2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0068 ptr_id_info2: 00000001 [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_unihdr unihdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 006c uni_str_len: 000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 006e uni_max_len: 000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0070 buffer : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0074 param_ctrl: 00000000 [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 000078 smb_io_logon_id [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0078 low : 0000dead [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 007c high: 0000beef [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 000080 smb_io_unihdr unihdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0080 uni_str_len: 0010 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0082 uni_max_len: 0010 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0084 buffer : 00000001 [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 000088 smb_io_unihdr unihdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0088 uni_str_len: 000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 008a uni_max_len: 000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 008c buffer : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0090 lm_chal: 57 c8 db 44 9a a7 e5 1b [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 000098 smb_io_strhdr hdr_nt_chal_resp [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0098 str_str_len: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 009a str_max_len: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 009c buffer : 00000000 [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 0000a0 smb_io_strhdr hdr_lm_chal_resp [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00a0 str_str_len: 0018 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00a2 str_max_len: 0018 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00a4 buffer : 00000001 [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 0000a8 smb_io_unistr2 uni_domain_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00a8 uni_max_len: 00000006 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00ac offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00b0 uni_str_len: 00000006 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 00b4 buffer : B.I.O.M.A.G. [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 0000c0 smb_io_unistr2 uni_user_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c0 uni_max_len: 00000008 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c4 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c8 uni_str_len: 00000008 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 00cc buffer : G.I.E.S.S.L.E.R. [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 0000dc smb_io_unistr2 uni_wksta_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00dc uni_max_len: 00000006 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00e0 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00e4 uni_str_len: 00000006 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 00e8 buffer : \.\.g.e.r.a. [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 0000f4 smb_io_string2 - NULL nt_chal_resp [2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82) 0000f4 smb_io_string2 lm_chal_resp [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f4 str_max_len: 00000018 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f8 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00fc str_str_len: 00000018 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_string2(968) 0100 buffer : H;ZòQ...>Ã÷.ò.Cêù .\.­¡. [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0118 validation_level: 0003 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:create_rpc_request(852) create_rpc_request: opnum: 0x2 data_len: 0x132 [2004/12/16 15:17:02, 10] rpc_client/cli_pipe.c:create_rpc_request(869) create_rpc_request: data_len: 132 auth_len: 0 alloc_hint: 122 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0132 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000004 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_req hdr_req [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 00000122 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 opnum : 0002 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421) rpc_api_pipe: fnum:76d8 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=380 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=18433 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=9 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 306 (0x132) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 5680 (0x1630) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 74 (0x4A) smb_vwv[11]= 306 (0x132) smb_vwv[12]= 74 (0x4A) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30424 (0x76D8) smb_bcc=313 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 5C 50 49 50 45 5C 00 05 00 00 03 10 00 00 00 32 \PIPE\.. .......2 [010] 01 00 00 04 00 00 00 22 01 00 00 00 00 02 00 01 ......." ........ [020] 00 00 00 0A 00 00 00 00 00 00 00 0A 00 00 00 5C ........ .......\ [030] 00 5C 00 53 00 54 00 45 00 4E 00 44 00 41 00 4C .\.S.T.E .N.D.A.L [040] 00 00 00 01 00 00 00 07 00 00 00 00 00 00 00 07 ........ ........ [050] 00 00 00 4D 00 4F 00 53 00 4B 00 41 00 55 00 00 ...M.O.S .K.A.U.. [060] 00 00 00 01 00 00 00 7A 40 30 0D 3C 5A 66 66 DE .......z @0. Ã÷.ò.Cêù [130] 20 9A 5C 94 AD A1 09 03 00 .\.­¡.. . [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,384) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,384) wrote 384 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 652 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=652 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 596 (0x254) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 596 (0x254) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=597 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 05 00 02 03 10 00 00 00 54 02 00 00 04 00 00 ........ .T...... [010] 00 3C 02 00 00 00 00 00 00 01 00 00 00 E6 E3 2E .<...... .....æã. [020] B0 DE F8 97 A0 00 00 00 00 03 00 00 00 01 00 00 °Þø. ... ........ [030] 00 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF ........ .ÿÿÿÿÿÿÿ [040] 7F FF FF FF FF FF FF FF 7F 00 EB 6A 36 52 B0 C4 .ÿÿÿÿÿÿÿ ..ëj6R°Ä [050] 01 00 EB 6A 36 52 B0 C4 01 00 C3 19 64 FA F3 C4 ..ëj6R°Ä ..Ã.dúóÄ [060] 01 10 00 10 00 01 00 00 00 1C 00 1C 00 01 00 00 ........ ........ [070] 00 26 00 26 00 01 00 00 00 36 00 36 00 01 00 00 .&.&.... .6.6.... [080] 00 24 00 24 00 01 00 00 00 00 00 00 00 00 00 00 .$.$.... ........ [090] 00 00 00 00 00 B6 04 00 00 FD 03 00 00 02 00 00 .....¶.. .ý...... [0A0] 00 01 00 00 00 20 00 00 00 00 00 00 00 00 00 00 ..... .. ........ [0B0] 00 00 00 00 00 00 00 00 00 0E 00 0E 00 01 00 00 ........ ........ [0C0] 00 0C 00 0C 00 01 00 00 00 01 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 ........ ........ [100] 00 00 00 00 00 08 00 00 00 67 00 69 00 65 00 73 ........ .g.i.e.s [110] 00 73 00 6C 00 65 00 72 00 0E 00 00 00 00 00 00 .s.l.e.r ........ [120] 00 0E 00 00 00 46 00 72 00 61 00 6E 00 6B 00 20 .....F.r .a.n.k. [130] 00 47 00 69 00 65 00 73 00 73 00 6C 00 65 00 72 .G.i.e.s .s.l.e.r [140] 00 13 00 00 00 00 00 00 00 13 00 00 00 73 00 63 ........ .....s.c [150] 00 72 00 69 00 70 00 74 00 73 00 5C 00 6E 00 74 .r.i.p.t .s.\.n.t [160] 00 6C 00 6F 00 67 00 6F 00 6E 00 2E 00 63 00 6D .l.o.g.o .n...c.m [170] 00 64 00 00 00 1B 00 00 00 00 00 00 00 1B 00 00 .d...... ........ [180] 00 5C 00 5C 00 73 00 74 00 65 00 6E 00 64 00 61 .\.\.s.t .e.n.d.a [190] 00 6C 00 5C 00 50 00 72 00 6F 00 66 00 69 00 6C .l.\.P.r .o.f.i.l [1A0] 00 65 00 73 00 5C 00 67 00 69 00 65 00 73 00 73 .e.s.\.g .i.e.s.s [1B0] 00 6C 00 65 00 72 00 00 00 12 00 00 00 00 00 00 .l.e.r.. ........ [1C0] 00 12 00 00 00 5C 00 5C 00 73 00 74 00 65 00 6E .....\.\ .s.t.e.n [1D0] 00 64 00 61 00 6C 00 5C 00 67 00 69 00 65 00 73 .d.a.l.\ .g.i.e.s [1E0] 00 73 00 6C 00 65 00 72 00 02 00 00 00 FD 03 00 .s.l.e.r .....ý.. [1F0] 00 07 00 00 00 01 02 00 00 07 00 00 00 07 00 00 ........ ........ [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=652 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 596 (0x254) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 596 (0x254) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=597 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 05 00 02 03 10 00 00 00 54 02 00 00 04 00 00 ........ .T...... [010] 00 3C 02 00 00 00 00 00 00 01 00 00 00 E6 E3 2E .<...... .....æã. [020] B0 DE F8 97 A0 00 00 00 00 03 00 00 00 01 00 00 °Þø. ... ........ [030] 00 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF ........ .ÿÿÿÿÿÿÿ [040] 7F FF FF FF FF FF FF FF 7F 00 EB 6A 36 52 B0 C4 .ÿÿÿÿÿÿÿ ..ëj6R°Ä [050] 01 00 EB 6A 36 52 B0 C4 01 00 C3 19 64 FA F3 C4 ..ëj6R°Ä ..Ã.dúóÄ [060] 01 10 00 10 00 01 00 00 00 1C 00 1C 00 01 00 00 ........ ........ [070] 00 26 00 26 00 01 00 00 00 36 00 36 00 01 00 00 .&.&.... .6.6.... [080] 00 24 00 24 00 01 00 00 00 00 00 00 00 00 00 00 .$.$.... ........ [090] 00 00 00 00 00 B6 04 00 00 FD 03 00 00 02 00 00 .....¶.. .ý...... [0A0] 00 01 00 00 00 20 00 00 00 00 00 00 00 00 00 00 ..... .. ........ [0B0] 00 00 00 00 00 00 00 00 00 0E 00 0E 00 01 00 00 ........ ........ [0C0] 00 0C 00 0C 00 01 00 00 00 01 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 ........ ........ [100] 00 00 00 00 00 08 00 00 00 67 00 69 00 65 00 73 ........ .g.i.e.s [110] 00 73 00 6C 00 65 00 72 00 0E 00 00 00 00 00 00 .s.l.e.r ........ [120] 00 0E 00 00 00 46 00 72 00 61 00 6E 00 6B 00 20 .....F.r .a.n.k. [130] 00 47 00 69 00 65 00 73 00 73 00 6C 00 65 00 72 .G.i.e.s .s.l.e.r [140] 00 13 00 00 00 00 00 00 00 13 00 00 00 73 00 63 ........ .....s.c [150] 00 72 00 69 00 70 00 74 00 73 00 5C 00 6E 00 74 .r.i.p.t .s.\.n.t [160] 00 6C 00 6F 00 67 00 6F 00 6E 00 2E 00 63 00 6D .l.o.g.o .n...c.m [170] 00 64 00 00 00 1B 00 00 00 00 00 00 00 1B 00 00 .d...... ........ [180] 00 5C 00 5C 00 73 00 74 00 65 00 6E 00 64 00 61 .\.\.s.t .e.n.d.a [190] 00 6C 00 5C 00 50 00 72 00 6F 00 66 00 69 00 6C .l.\.P.r .o.f.i.l [1A0] 00 65 00 73 00 5C 00 67 00 69 00 65 00 73 00 73 .e.s.\.g .i.e.s.s [1B0] 00 6C 00 65 00 72 00 00 00 12 00 00 00 00 00 00 .l.e.r.. ........ [1C0] 00 12 00 00 00 5C 00 5C 00 73 00 74 00 65 00 6E .....\.\ .s.t.e.n [1D0] 00 64 00 61 00 6C 00 5C 00 67 00 69 00 65 00 73 .d.a.l.\ .g.i.e.s [1E0] 00 73 00 6C 00 65 00 72 00 02 00 00 00 FD 03 00 .s.l.e.r .....ý.. [1F0] 00 07 00 00 00 01 02 00 00 07 00 00 00 07 00 00 ........ ........ [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 596 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 02 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0254 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000004 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 0000023c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 [2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494) rpc_api_pipe: len left: 0 smbtrans read: 596 [2004/12/16 15:17:02, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536) rpc_api_pipe: fragment first and last both set [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000018 net_io_r_sam_logon [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 buffer_creds: 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_cred [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_chal [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 001c data: e6 e3 2e b0 de f8 97 a0 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_utime [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 time: 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0028 switch_value: 0003 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 00002c net_io_user_info3 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c ptr_user_info : 00000001 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_time logon time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 low : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 high: 00000000 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000038 smb_io_time logoff time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0038 low : ffffffff [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 003c high: 7fffffff [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000040 smb_io_time kickoff time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0040 low : ffffffff [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 high: 7fffffff [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_time last set time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0048 low : 366aeb00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 004c high: 01c4b052 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_time can change time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0050 low : 366aeb00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0054 high: 01c4b052 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000058 smb_io_time must change time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0058 low : 6419c300 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 005c high: 01c4f3fa [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000060 smb_io_unihdr hdr_user_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0060 uni_str_len: 0010 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0062 uni_max_len: 0010 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0064 buffer : 00000001 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000068 smb_io_unihdr hdr_full_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0068 uni_str_len: 001c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 006a uni_max_len: 001c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 006c buffer : 00000001 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000070 smb_io_unihdr hdr_logon_script [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0070 uni_str_len: 0026 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0072 uni_max_len: 0026 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0074 buffer : 00000001 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000078 smb_io_unihdr hdr_profile_path [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0078 uni_str_len: 0036 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 007a uni_max_len: 0036 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 007c buffer : 00000001 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000080 smb_io_unihdr hdr_home_dir [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0080 uni_str_len: 0024 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0082 uni_max_len: 0024 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0084 buffer : 00000001 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000088 smb_io_unihdr hdr_dir_drive [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0088 uni_str_len: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 008a uni_max_len: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 008c buffer : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0090 logon_count : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0092 bad_pw_count : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0094 user_rid : 000004b6 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0098 group_rid : 000003fd [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 009c num_groups : 00000002 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00a0 buffer_groups : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00a4 user_flgs : 00000020 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 00a8 user_sess_key: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 0000b8 smb_io_unihdr hdr_logon_srv [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00b8 uni_str_len: 000e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00ba uni_max_len: 000e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00bc buffer : 00000001 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 0000c0 smb_io_unihdr hdr_logon_dom [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00c0 uni_str_len: 000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00c2 uni_max_len: 000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c4 buffer : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c8 buffer_dom_id : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 00cc padding : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f4 num_other_sids: 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f8 buffer_other_sids: 00000000 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 0000fc smb_io_unistr2 uni_user_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00fc uni_max_len: 00000008 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0100 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0104 uni_str_len: 00000008 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0108 buffer : g.i.e.s.s.l.e.r. [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000118 smb_io_unistr2 uni_full_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0118 uni_max_len: 0000000e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 011c offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0120 uni_str_len: 0000000e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0124 buffer : F.r.a.n.k. .G.i.e.s.s.l.e.r. [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000140 smb_io_unistr2 uni_logon_script [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0140 uni_max_len: 00000013 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0144 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0148 uni_str_len: 00000013 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 014c buffer : s.c.r.i.p.t.s.\.n.t.l.o.g.o.n...c.m.d. [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000172 smb_io_unistr2 uni_profile_path [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0174 uni_max_len: 0000001b [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0178 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 017c uni_str_len: 0000001b [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0180 buffer : \.\.s.t.e.n.d.a.l.\.P.r.o.f.i.l.e.s.\.g.i.e.s.s.l.e.r. [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 0001b6 smb_io_unistr2 uni_home_dir [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01b8 uni_max_len: 00000012 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01bc offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01c0 uni_str_len: 00000012 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 01c4 buffer : \.\.s.t.e.n.d.a.l.\.g.i.e.s.s.l.e.r. [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 0001e8 smb_io_unistr2 - NULL uni_dir_drive [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01e8 num_groups2 : 00000002 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 0001ec smb_io_gid [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01ec g_rid: 000003fd [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01f0 attr : 00000007 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 0001f4 smb_io_gid [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01f4 g_rid: 00000201 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01f8 attr : 00000007 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 0001fc smb_io_unistr2 uni_logon_srv [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01fc uni_max_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0200 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0204 uni_str_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0208 buffer : S.T.E.N.D.A.L. [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000216 smb_io_unistr2 uni_logon_dom [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0218 uni_max_len: 00000006 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 021c offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0220 uni_str_len: 00000006 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0224 buffer : B.I.O.M.A.G. [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 000230 smb_io_dom_sid2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0230 num_auths: 00000004 [2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82) 000234 smb_io_dom_sid sid [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0234 sid_rev_num: 01 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0235 num_auths : 04 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0236 id_auth[0] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0237 id_auth[1] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0238 id_auth[2] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0239 id_auth[3] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 023a id_auth[4] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 023b id_auth[5] : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 023c sub_auths : 00000015 d5b85d7b 3291e4e7 72a90f0f [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 024c auth_resp : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_ntstatus(672) 0250 status : NT_STATUS_OK [2004/12/16 15:17:02, 10] passdb/secrets.c:secrets_named_mutex_release(714) secrets_named_mutex: released mutex for STENDAL [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam(293) Finding user BIOMAG\giessler [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is biomag\giessler [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(230) Trying _Get_Pwnam(), username as given is BIOMAG\giessler [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(239) Trying _Get_Pwnam(), username as uppercase is BIOMAG\GIESSLER [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(247) Checking combinations of 0 uppercase letters in biomag\giessler [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals didn't find user [BIOMAG\giessler]! [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam(293) Finding user giessler [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is giessler [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [giessler]! [2004/12/16 15:17:02, 5] auth/auth_util.c:fill_sam_account(965) fill_sam_account: located username was [giessler] [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_username(625) pdb_set_username: setting username giessler, was [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 12 -> now SET [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_fullname(706) pdb_set_full_name: setting full name Frank Giessler, was [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 13 -> now SET [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(841) pdb_set_unix_homedir: setting home dir /home/stendal/giessler, was NULL [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 22 -> now SET [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_domain(652) pdb_set_domain: setting domain MOSKAU, was [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_user_sid(552) pdb_set_user_sid: setting user sid S-1-5-21-3293228863-3396999352-2992300284-1206 [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 18 -> now SET [2004/12/16 15:17:02, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-3293228863-3396999352-2992300284-1206 from rid 1206 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_group_sid(588) pdb_set_group_sid: setting group sid S-1-5-21-3293228863-3396999352-2992300284-1021 [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 19 -> now SET [2004/12/16 15:17:02, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-3293228863-3396999352-2992300284-1021 from rid 1021 [2004/12/16 15:17:02, 4] lib/substitute.c:automount_server(323) Home server: moskau [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_profile_path(760) pdb_set_profile_path: setting profile path \\moskau\giessler\profile, was [2004/12/16 15:17:02, 4] lib/substitute.c:automount_server(323) Home server: moskau [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_homedir(814) pdb_set_homedir: setting home dir \\moskau\giessler, was [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(787) pdb_set_dir_drive: setting dir drive , was NULL [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_logon_script(733) pdb_set_logon_script: setting logon script , was [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_nt_username(679) pdb_set_nt_username: setting nt username giessler, was [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_username(625) pdb_set_username: setting username giessler, was giessler [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_domain(652) pdb_set_domain: setting domain BIOMAG, was MOSKAU [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_user_sid(552) pdb_set_user_sid: setting user sid S-1-5-21-3585629563-848422119-1923682063-1206 [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_group_sid(588) pdb_set_group_sid: setting group sid S-1-5-21-3585629563-848422119-1923682063-1021 [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_fullname(706) pdb_set_full_name: setting full name Frank Giessler, was Frank Giessler [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_logon_script(733) pdb_set_logon_script: setting logon script scripts\ntlogon.cmd, was [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_profile_path(760) pdb_set_profile_path: setting profile path \\stendal\Profiles\giessler, was \\moskau\giessler\profile [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_homedir(814) pdb_set_homedir: setting home dir \\stendal\giessler, was \\moskau\giessler [2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(787) pdb_set_dir_drive: setting dir drive , was [2004/12/16 15:17:02, 10] lib/system_smbd.c:sys_getgrouplist(117) sys_getgrouplist: user [giessler] [2004/12/16 15:17:02, 10] lib/system_smbd.c:sys_getgrouplist(126) sys_getgrouplist(): disabled winbindd for group lookup [user == giessler] [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 8] lib/util_getent.c:remove_duplicate_gids(330) remove_duplicate_gids: Enter 8 gids [2004/12/16 15:17:02, 8] lib/util_getent.c:remove_duplicate_gids(348) remove_duplicate_gids: Exit 7 gids [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 103 Primary group is 10 and contains 7 supplementary groups Group[ 0]: 10 Group[ 1]: 14 Group[ 2]: 40 Group[ 3]: 100 Group[ 4]: 300 Group[ 5]: 400 Group[ 6]: 700 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264) local_gid_to_sid: Fall back to algorithmic mapping: 10 -> S-1-0-0 [2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234) algorithmic_gid_to_sid: gid (10) -> SID S-1-5-21-3293228863-3396999352-2992300284-1021. [2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 10 -> S-1-5-21-3293228863-3396999352-2992300284-1021 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264) local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-0-0 [2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234) algorithmic_gid_to_sid: gid (14) -> SID S-1-5-21-3293228863-3396999352-2992300284-1029. [2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 14 -> S-1-5-21-3293228863-3396999352-2992300284-1029 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264) local_gid_to_sid: Fall back to algorithmic mapping: 40 -> S-1-0-0 [2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234) algorithmic_gid_to_sid: gid (40) -> SID S-1-5-21-3293228863-3396999352-2992300284-1081. [2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 40 -> S-1-5-21-3293228863-3396999352-2992300284-1081 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264) local_gid_to_sid: Fall back to algorithmic mapping: 100 -> S-1-0-0 [2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234) algorithmic_gid_to_sid: gid (100) -> SID S-1-5-21-3293228863-3396999352-2992300284-1201. [2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 100 -> S-1-5-21-3293228863-3396999352-2992300284-1201 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264) local_gid_to_sid: Fall back to algorithmic mapping: 300 -> S-1-0-0 [2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234) algorithmic_gid_to_sid: gid (300) -> SID S-1-5-21-3293228863-3396999352-2992300284-1601. [2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 300 -> S-1-5-21-3293228863-3396999352-2992300284-1601 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264) local_gid_to_sid: Fall back to algorithmic mapping: 400 -> S-1-0-0 [2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234) algorithmic_gid_to_sid: gid (400) -> SID S-1-5-21-3293228863-3396999352-2992300284-1801. [2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 400 -> S-1-5-21-3293228863-3396999352-2992300284-1801 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264) local_gid_to_sid: Fall back to algorithmic mapping: 700 -> S-1-0-0 [2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234) algorithmic_gid_to_sid: gid (700) -> SID S-1-5-21-3293228863-3396999352-2992300284-2401. [2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 700 -> S-1-5-21-3293228863-3396999352-2992300284-2401 [2004/12/16 15:17:02, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-3585629563-848422119-1923682063-1206 contains 13 SIDs SID[ 0]: S-1-5-21-3585629563-848422119-1923682063-1206 SID[ 1]: S-1-5-21-3585629563-848422119-1923682063-1021 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-3585629563-848422119-1923682063-513 SID[ 6]: S-1-5-21-3293228863-3396999352-2992300284-1021 SID[ 7]: S-1-5-21-3293228863-3396999352-2992300284-1029 SID[ 8]: S-1-5-21-3293228863-3396999352-2992300284-1081 SID[ 9]: S-1-5-21-3293228863-3396999352-2992300284-1201 SID[ 10]: S-1-5-21-3293228863-3396999352-2992300284-1601 SID[ 11]: S-1-5-21-3293228863-3396999352-2992300284-1801 SID[ 12]: S-1-5-21-3293228863-3396999352-2992300284-2401 [2004/12/16 15:17:02, 10] libsmb/samlogon_cache.c:netsamlogon_cache_store(133) netsamlogon_cache_store: SID [S-1-5-21-3585629563-848422119-1923682063-1206] [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 timestamp: 41c198de [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82) 000004 net_io_user_info3 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 ptr_user_info : 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_time logon time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 low : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c high: 00000000 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_time logoff time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 low : ffffffff [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0014 high: 7fffffff [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_time kickoff time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 low : ffffffff [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 001c high: 7fffffff [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_time last set time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 low : 366aeb00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 high: 01c4b052 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000028 smb_io_time can change time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0028 low : 366aeb00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c high: 01c4b052 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_time must change time [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 low : 6419c300 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 high: 01c4f3fa [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000038 smb_io_unihdr hdr_user_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0038 uni_str_len: 0010 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 003a uni_max_len: 0010 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 003c buffer : 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000040 smb_io_unihdr hdr_full_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0040 uni_str_len: 001c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0042 uni_max_len: 001c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 buffer : 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_unihdr hdr_logon_script [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0048 uni_str_len: 0026 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 004a uni_max_len: 0026 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 004c buffer : 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_unihdr hdr_profile_path [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0050 uni_str_len: 0036 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0052 uni_max_len: 0036 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0054 buffer : 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000058 smb_io_unihdr hdr_home_dir [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0058 uni_str_len: 0024 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 005a uni_max_len: 0024 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 005c buffer : 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000060 smb_io_unihdr hdr_dir_drive [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0060 uni_str_len: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0062 uni_max_len: 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0064 buffer : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0068 logon_count : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 006a bad_pw_count : 0000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 006c user_rid : 000004b6 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0070 group_rid : 000003fd [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0074 num_groups : 00000002 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0078 buffer_groups : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 007c user_flgs : 00000020 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0080 user_sess_key: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000090 smb_io_unihdr hdr_logon_srv [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0090 uni_str_len: 000e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0092 uni_max_len: 000e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0094 buffer : 00000001 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000098 smb_io_unihdr hdr_logon_dom [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0098 uni_str_len: 000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613) 009a uni_max_len: 000c [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 009c buffer : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00a0 buffer_dom_id : 00000001 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 00a4 padding : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00cc num_other_sids: 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00d0 buffer_other_sids: 00000000 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 0000d4 smb_io_unistr2 uni_user_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00d4 uni_max_len: 00000008 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00d8 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00dc uni_str_len: 00000008 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 00e0 buffer : g.i.e.s.s.l.e.r. [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 0000f0 smb_io_unistr2 uni_full_name [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f0 uni_max_len: 0000000e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f4 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f8 uni_str_len: 0000000e [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 00fc buffer : F.r.a.n.k. .G.i.e.s.s.l.e.r. [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000118 smb_io_unistr2 uni_logon_script [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0118 uni_max_len: 00000013 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 011c offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0120 uni_str_len: 00000013 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0124 buffer : s.c.r.i.p.t.s.\.n.t.l.o.g.o.n...c.m.d. [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 00014a smb_io_unistr2 uni_profile_path [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 014c uni_max_len: 0000001b [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0150 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0154 uni_str_len: 0000001b [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0158 buffer : \.\.s.t.e.n.d.a.l.\.P.r.o.f.i.l.e.s.\.g.i.e.s.s.l.e.r. [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 00018e smb_io_unistr2 uni_home_dir [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0190 uni_max_len: 00000012 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0194 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0198 uni_str_len: 00000012 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 019c buffer : \.\.s.t.e.n.d.a.l.\.g.i.e.s.s.l.e.r. [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 0001c0 smb_io_unistr2 - NULL uni_dir_drive [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01c0 num_groups2 : 00000002 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 0001c4 smb_io_gid [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01c4 g_rid: 000003fd [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01c8 attr : 00000007 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 0001cc smb_io_gid [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01cc g_rid: 00000201 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01d0 attr : 00000007 [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 0001d4 smb_io_unistr2 uni_logon_srv [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01d4 uni_max_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01d8 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01dc uni_str_len: 00000007 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 01e0 buffer : S.T.E.N.D.A.L. [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 0001ee smb_io_unistr2 uni_logon_dom [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01f0 uni_max_len: 00000006 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01f4 offset : 00000000 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01f8 uni_str_len: 00000006 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 01fc buffer : B.I.O.M.A.G. [2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82) 000208 smb_io_dom_sid2 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0208 num_auths: 00000004 [2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82) 00020c smb_io_dom_sid sid [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 020c sid_rev_num: 01 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 020d num_auths : 04 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 020e id_auth[0] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 020f id_auth[1] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0210 id_auth[2] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0211 id_auth[3] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0212 id_auth[4] : 00 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0213 id_auth[5] : 05 [2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 0214 sub_auths : 00000015 d5b85d7b 3291e4e7 72a90f0f [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,45) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,45) wrote 45 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 35 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=10 smt_wct=0 smb_bcc=0 [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,43) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,43) wrote 43 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 39 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=3628 smb_uid=100 smb_mid=11 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(20,39) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(20,39) wrote 39 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 35 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 smb_tid=1 smb_pid=3628 smb_uid=100 smb_mid=12 smt_wct=0 smb_bcc=0 [2004/12/16 15:17:02, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: ntdomain authentication for user [GIESSLER] succeeded [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 5] auth/auth.c:check_ntlm_password(292) check_ntlm_password: PAM Account for user [giessler] succeeded [2004/12/16 15:17:02, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [GIESSLER] -> [GIESSLER] -> [giessler] succeeded [2004/12/16 15:17:02, 5] auth/auth_util.c:free_user_info(1318) attempting to free (and zero) a user_info structure [2004/12/16 15:17:02, 10] auth/auth_util.c:free_user_info(1321) structure was created for GIESSLER [2004/12/16 15:17:02, 10] smbd/password.c:register_vuid(158) register_vuid: allocated vuid = 100 [2004/12/16 15:17:02, 10] smbd/password.c:register_vuid(220) register_vuid: (103,10) giessler GIESSLER BIOMAG guest=0 [2004/12/16 15:17:02, 3] smbd/password.c:register_vuid(222) User name: giessler Real name: Frank Giessler [2004/12/16 15:17:02, 3] smbd/password.c:register_vuid(241) UNIX uid 103 is UNIX user giessler, and will be vuid 100 [2004/12/16 15:17:02, 2] smbd/utmp.c:sys_utmp_update(419) utmp_update: uname:/var/adm/utmpx wname:/var/adm/wtmpx [2004/12/16 15:17:02, 7] param/loadparm.c:lp_servicenumber(4043) lp_servicenumber: couldn't find giessler [2004/12/16 15:17:02, 3] smbd/password.c:register_vuid(270) Adding homes service for user 'giessler' using home directory: '/home/stendal/giessler' [2004/12/16 15:17:02, 7] param/loadparm.c:lp_servicenumber(4043) lp_servicenumber: couldn't find homes [2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686) lp_file_list_changed() file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera last mod_time: Thu Jan 1 01:00:00 1970 file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Thu Dec 16 14:11:35 2004 [2004/12/16 15:17:02, 3] smbd/process.c:chain_reply(1232) Chained message [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=157 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=10 smb_flg2=3 smb_tid=1 smb_pid=132 smb_uid=100 smb_mid=37073 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 157 (0x9D) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1 (0x1) smb_bcc=19 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 5C 5C 4D 4F 53 4B 41 55 5C 49 50 43 24 00 49 .\\MOSKA U\IPC$.I [010] 50 43 00 PC. [2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 3628) conn 0x0 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/16 15:17:02, 4] smbd/reply.c:reply_tcon_and_X(408) Client requested device type [IPC] for share [IPC$] [2004/12/16 15:17:02, 5] smbd/service.c:make_connection(813) making a connection to 'normal' service ipc$ [2004/12/16 15:17:02, 3] lib/access.c:only_ipaddrs_in_list(291) only_ipaddrs_in_list: list has non-ip address (@biomag) [2004/12/16 15:17:02, 3] lib/access.c:check_access(316) check_access: hostnames in host allow/deny list. [2004/12/16 15:17:02, 5] lib/access.c:string_match(100) looking for 141.35.200.71 of domain hippo.biomag.uni-jena.de in netgroup biomag gave No [2004/12/16 15:17:02, 5] lib/access.c:string_match(100) looking for gera of domain hippo.biomag.uni-jena.de in netgroup biomag gave Yes [2004/12/16 15:17:02, 2] lib/access.c:check_access(324) Allowed connection from gera (141.35.200.71) [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam(293) Finding user giessler [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is giessler [2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [giessler]! [2004/12/16 15:17:02, 3] smbd/service.c:make_connection_snum(472) Connect path is '/tmp' for service [IPC$] [2004/12/16 15:17:02, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/12/16 15:17:02, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/16 15:17:02, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 13 entries and first sid S-1-5-21-3585629563-848422119-1923682063-1206. [2004/12/16 15:17:02, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/16 15:17:02, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3585629563-848422119-1923682063-1206 se_access_check: also S-1-5-21-3585629563-848422119-1923682063-1021 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-3585629563-848422119-1923682063-513 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1021 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1029 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1081 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1201 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1601 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1801 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-2401 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/12/16 15:17:02, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/12/16 15:17:02, 3] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2004/12/16 15:17:02, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2004/12/16 15:17:02, 10] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share IPC$ is read-only for unix user giessler [2004/12/16 15:17:02, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/12/16 15:17:02, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/16 15:17:02, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 13 entries and first sid S-1-5-21-3585629563-848422119-1923682063-1206. [2004/12/16 15:17:02, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/16 15:17:02, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3585629563-848422119-1923682063-1206 se_access_check: also S-1-5-21-3585629563-848422119-1923682063-1021 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-3585629563-848422119-1923682063-513 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1021 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1029 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1081 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1201 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1601 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1801 se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-2401 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2004/12/16 15:17:02, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (1) granted. [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (103, 10) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-3585629563-848422119-1923682063-1206 contains 13 SIDs SID[ 0]: S-1-5-21-3585629563-848422119-1923682063-1206 SID[ 1]: S-1-5-21-3585629563-848422119-1923682063-1021 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-3585629563-848422119-1923682063-513 SID[ 6]: S-1-5-21-3293228863-3396999352-2992300284-1021 SID[ 7]: S-1-5-21-3293228863-3396999352-2992300284-1029 SID[ 8]: S-1-5-21-3293228863-3396999352-2992300284-1081 SID[ 9]: S-1-5-21-3293228863-3396999352-2992300284-1201 SID[ 10]: S-1-5-21-3293228863-3396999352-2992300284-1601 SID[ 11]: S-1-5-21-3293228863-3396999352-2992300284-1801 SID[ 12]: S-1-5-21-3293228863-3396999352-2992300284-2401 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 103 Primary group is 10 and contains 7 supplementary groups Group[ 0]: 10 Group[ 1]: 14 Group[ 2]: 40 Group[ 3]: 100 Group[ 4]: 300 Group[ 5]: 400 Group[ 6]: 700 [2004/12/16 15:17:02, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,103) gid=(0,10) [2004/12/16 15:17:02, 3] smbd/service.c:make_connection_snum(648) gera (141.35.200.71) connect to service IPC$ initially as user giessler (uid=103, gid=10) (pid 3628) [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:02, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/16 15:17:02, 3] smbd/reply.c:reply_tcon_and_X(456) tconX service=IPC$ [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=55 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=16385 smb_tid=1 smb_pid=132 smb_uid=100 smb_mid=37073 smt_wct=3 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_bcc=0 [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(24,59) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(24,59) wrote 59 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 95 [2004/12/16 15:17:02, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x5f [2004/12/16 15:17:02, 3] smbd/process.c:process_smb(1091) Transaction 3 of length 99 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=95 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=3 smb_tid=1 smb_pid=132 smb_uid=100 smb_mid=37138 smt_wct=14 smb_vwv[ 0]= 19 (0x13) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]=65535 (0xFFFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 5000 (0x1388) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 19 (0x13) smb_vwv[10]= 76 (0x4C) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=32 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 5C 50 49 50 45 5C 4C 41 4E 4D 41 4E 00 00 00 57 \PIPE\LA NMAN...W [010] 72 4C 65 68 00 42 31 33 42 57 7A 00 01 00 FF FF rLeh.B13 BWz...ÿÿ [2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 3628) conn 0x2f08c8 [2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (103, 10) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-3585629563-848422119-1923682063-1206 contains 13 SIDs SID[ 0]: S-1-5-21-3585629563-848422119-1923682063-1206 SID[ 1]: S-1-5-21-3585629563-848422119-1923682063-1021 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-3585629563-848422119-1923682063-513 SID[ 6]: S-1-5-21-3293228863-3396999352-2992300284-1021 SID[ 7]: S-1-5-21-3293228863-3396999352-2992300284-1029 SID[ 8]: S-1-5-21-3293228863-3396999352-2992300284-1081 SID[ 9]: S-1-5-21-3293228863-3396999352-2992300284-1201 SID[ 10]: S-1-5-21-3293228863-3396999352-2992300284-1601 SID[ 11]: S-1-5-21-3293228863-3396999352-2992300284-1801 SID[ 12]: S-1-5-21-3293228863-3396999352-2992300284-2401 [2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 103 Primary group is 10 and contains 7 supplementary groups Group[ 0]: 10 Group[ 1]: 14 Group[ 2]: 40 Group[ 3]: 100 Group[ 4]: 300 Group[ 5]: 400 Group[ 6]: 700 [2004/12/16 15:17:02, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(0,103) gid=(0,10) [2004/12/16 15:17:02, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /tmp [2004/12/16 15:17:02, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\LANMAN> data=0 params=19 setup=0 [2004/12/16 15:17:02, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/12/16 15:17:02, 3] smbd/ipc.c:named_pipe(334) named pipe command on name [2004/12/16 15:17:02, 3] smbd/lanman.c:api_reply(3579) Got API command 0 of form (tdscnt=0,tpscnt=19,mdrcnt=65535,mprcnt=8) [2004/12/16 15:17:02, 3] smbd/lanman.c:api_reply(3583) Doing RNetShareEnum [2004/12/16 15:17:02, 3] smbd/lanman.c:api_RNetShareEnum(1551) RNetShareEnum gave 3 entries of 3 (1 65535 148 65535) [2004/12/16 15:17:02, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..8] data[0..148] [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=212 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=16385 smb_tid=1 smb_pid=132 smb_uid=100 smb_mid=37138 smt_wct=10 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 148 (0x94) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 148 (0x94) smb_vwv[ 7]= 64 (0x40) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=157 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 00 00 00 00 03 00 03 00 54 65 73 74 73 68 61 ........ .Testsha [010] 72 65 00 00 00 00 00 00 00 3C 00 00 00 49 50 43 re...... .<...IPC [020] 24 00 00 00 00 00 00 00 00 00 00 03 00 4C 00 00 $....... .....L.. [030] 00 41 44 4D 49 4E 24 00 00 00 00 00 00 00 00 03 .ADMIN$. ........ [040] 00 70 00 00 00 54 65 73 74 76 65 72 7A 65 69 63 .p...Tes tverzeic [050] 68 6E 69 73 00 49 50 43 20 53 65 72 76 69 63 65 hnis.IPC Service [060] 20 28 6D 6F 73 6B 61 75 20 28 53 61 6D 62 61 20 (moskau (Samba [070] 33 2E 30 2E 31 30 29 29 00 49 50 43 20 53 65 72 3.0.10)) .IPC Ser [080] 76 69 63 65 20 28 6D 6F 73 6B 61 75 20 28 53 61 vice (mo skau (Sa [090] 6D 62 61 20 33 2E 30 2E 31 30 29 29 00 mba 3.0. 10)). [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(24,216) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(24,216) wrote 216 [2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 95 [2004/12/16 15:17:02, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x5f [2004/12/16 15:17:02, 3] smbd/process.c:process_smb(1091) Transaction 4 of length 99 [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=95 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=3 smb_tid=1 smb_pid=132 smb_uid=100 smb_mid=37203 smt_wct=14 smb_vwv[ 0]= 19 (0x13) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 6 (0x6) smb_vwv[ 3]=32767 (0x7FFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 5000 (0x1388) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 19 (0x13) smb_vwv[10]= 76 (0x4C) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=32 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 5C 50 49 50 45 5C 4C 41 4E 4D 41 4E 00 0D 00 57 \PIPE\LA NMAN...W [010] 72 4C 68 00 42 31 36 42 42 44 7A 00 01 00 FF 7F rLh.B16B BDz...ÿ. [2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 3628) conn 0x2f08c8 [2004/12/16 15:17:02, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/16 15:17:02, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\LANMAN> data=0 params=19 setup=0 [2004/12/16 15:17:02, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/12/16 15:17:02, 3] smbd/ipc.c:named_pipe(334) named pipe command on name [2004/12/16 15:17:02, 3] smbd/lanman.c:api_reply(3579) Got API command 13 of form (tdscnt=0,tpscnt=19,mdrcnt=32767,mprcnt=6) [2004/12/16 15:17:02, 3] smbd/lanman.c:api_reply(3583) Doing RNetServerGetInfo [2004/12/16 15:17:02, 4] smbd/lanman.c:api_RNetServerGetInfo(2334) NetServerGetInfo level 1 [2004/12/16 15:17:02, 4] smbd/lanman.c:get_server_info(984) Servertype search: 3fffffff [2004/12/16 15:17:02, 4] smbd/lanman.c:get_server_info(1038) s: dom mismatch BIOMAG 80001000 BIOMAG [2004/12/16 15:17:02, 4] smbd/lanman.c:get_server_info(1053) **SV** MOSKAU 19b23 moskau (Samba 3.0.10) BIOMAG [2004/12/16 15:17:02, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..6] data[0..48] [2004/12/16 15:17:02, 5] lib/util.c:show_msg(464) [2004/12/16 15:17:02, 5] lib/util.c:show_msg(474) size=112 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=16385 smb_tid=1 smb_pid=132 smb_uid=100 smb_mid=37203 smt_wct=10 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 6 (0x6) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 64 (0x40) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=57 [2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977) [000] 00 00 00 00 00 30 00 00 00 4D 4F 53 4B 41 55 00 .....0.. .MOSKAU. [010] 00 00 00 00 00 00 00 00 00 04 09 23 9B 01 00 1A ........ ...#.... [020] 00 00 00 6D 6F 73 6B 61 75 20 28 53 61 6D 62 61 ...moska u (Samba [030] 20 33 2E 30 2E 31 30 29 00 3.0.10) . [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449) write_socket(24,116) [2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452) write_socket(24,116) wrote 116 [2004/12/16 15:17:05, 10] smbd/process.c:async_processing(281) async_processing: Doing async processing. [2004/12/16 15:17:05, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/12/16 15:17:05, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:05, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:05, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:05, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/16 15:17:05, 2] smbd/server.c:exit_server(571) Closing connections [2004/12/16 15:17:05, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:05, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:05, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:05, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/16 15:17:05, 3] smbd/service.c:close_cnum(836) gera (141.35.200.71) closed connection to service IPC$ [2004/12/16 15:17:05, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2004/12/16 15:17:05, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to / [2004/12/16 15:17:05, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 15:17:05, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/16 15:17:05, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/16 15:17:05, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/16 15:17:05, 2] smbd/utmp.c:sys_utmp_update(419) utmp_update: uname:/var/adm/utmpx wname:/var/adm/wtmpx [2004/12/16 15:17:05, 5] auth/auth_util.c:free_server_info(1344) attempting to free (and zero) a server_info structure [2004/12/16 15:17:05, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2004/12/16 15:17:05, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/12/16 15:17:05, 3] smbd/server.c:exit_server(614) Server exit (Caught TERM signal)