smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.567753, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.567824, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.567888, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.567945, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 49821 (numopen=2) [2013/05/23 17:28:59.568005, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.568054, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.568182, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:28:59.568258, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:28:59.568351, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.568405, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000002f41 (12097) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.547374 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000210e4bcd (554585037) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.463079218 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.569609, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xed0f2ae2 [2013/05/23 17:28:59.569687, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.569739, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.463079218 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.570232, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.570304, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:28:59.570872, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.570974, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.571046, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file W32X86 [2013/05/23 17:28:59.571154, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.571213, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.571268, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 21EF4EC6 [2013/05/23 17:28:59.571331, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8b1c440 [2013/05/23 17:28:59.571399, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 21EF4EC6 [2013/05/23 17:28:59.571450, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.571583, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.571656, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 49821 (2 used) [2013/05/23 17:28:59.571810, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.571846, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=12225 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.572053, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.573744, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 77 [2013/05/23 17:28:59.573913, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d [2013/05/23 17:28:59.573969, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8018 of length 81 (0 toread) [2013/05/23 17:28:59.574017, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.574046, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=77 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12289 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 1 (0x1) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2013/05/23 17:28:59.574533, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 E1 16 F5 03 00 00 00 00 01 ........ .... [2013/05/23 17:28:59.574626, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.574683, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.574758, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:8199(call_trans2setfilepathinfo) call_trans2setfilepathinfo(8) W32X86/hpzsm5mu.gpd (fnum 5857) info_level=1013 totdata=1 [2013/05/23 17:28:59.574818, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:7775(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: W32X86/hpzsm5mu.gpd (fnum 5857) info_level=1013 totdata=1 [2013/05/23 17:28:59.574869, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzsm5mu.gpd [2013/05/23 17:28:59.574958, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzsm5mu.gpd attr = 0x20 [2013/05/23 17:28:59.575020, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzsm5mu.gpd case 3 set btime Thu May 23 17:28:17 2013 [2013/05/23 17:28:59.575144, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.575212, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.575259, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5986(smb_set_file_disposition_info) smb_set_file_disposition_info: file W32X86/hpzsm5mu.gpd, dosmode = 32, delete_on_close = 1 [2013/05/23 17:28:59.575311, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1028(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum 5857, file W32X86/hpzsm5mu.gpd [2013/05/23 17:28:59.575367, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.575478, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.575540, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000C447 [2013/05/23 17:28:59.575621, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8854288 [2013/05/23 17:28:59.575714, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.575779, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzsm5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c4 (673732) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000002dc1 (11713) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.473572 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c4 (673732) extid : 0x0000000000000000 (0) share_file_id : 0x00000000dd9a60e2 (3717882082) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x81864df5 (2173062645) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Fri Oct 19 18:46:56 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.576802, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.576856, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzsm5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c4 (673732) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000002dc1 (11713) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.473572 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c4 (673732) extid : 0x0000000000000000 (0) share_file_id : 0x00000000dd9a60e2 (3717882082) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x81864df5 (2173062645) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0x81864df5 (2173062645) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Fri Oct 19 18:46:56 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.579701, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000C447 [2013/05/23 17:28:59.579776, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.579827, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.579886, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 16584 [2013/05/23 17:28:59.579935, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2013/05/23 17:28:59.579984, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.580013, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12289 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2013/05/23 17:28:59.580676, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 ... [2013/05/23 17:28:59.582414, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.582580, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.582637, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8019 of length 45 (0 toread) [2013/05/23 17:28:59.582684, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.582714, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=12353 smt_wct=3 smb_vwv[ 0]= 5857 (0x16E1) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.582965, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.583010, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.583065, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.583159, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close file fd=-1 fnum 5857 (numopen=1) [2013/05/23 17:28:59.583218, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:609(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2013/05/23 17:28:59.583284, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.583333, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.583389, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000C447 [2013/05/23 17:28:59.583454, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:28:59.583561, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.583617, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzsm5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c4 (673732) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000002dc1 (11713) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.473572 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c4 (673732) extid : 0x0000000000000000 (0) share_file_id : 0x00000000dd9a60e2 (3717882082) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x81864df5 (2173062645) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0x81864df5 (2173062645) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Fri Oct 19 18:46:56 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.586568, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x81864df5 [2013/05/23 17:28:59.586708, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0x81864df5 [2013/05/23 17:28:59.586763, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:470(close_remove_share_mode) close_remove_share_mode: file W32X86/hpzsm5mu.gpd. Delete on close was set - deleting file. [2013/05/23 17:28:59.586817, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x81864df5 [2013/05/23 17:28:59.586863, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0x81864df5 [2013/05/23 17:28:59.587055, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.587222, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzsm5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c4 (673732) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Fri Oct 19 18:46:56 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.587657, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.587722, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000C447 [2013/05/23 17:28:59.587780, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.587830, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.587885, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/notify_internal.c:604(notify_trigger) notify_trigger called action=0x2, filter=0x1, path=/usr/local/samba/var/print/W32X86/hpzsm5mu.gpd [2013/05/23 17:28:59.588022, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:850(close_normal_file) MARINA\Administrator closed file W32X86/hpzsm5mu.gpd (numopen=0) NT_STATUS_OK [2013/05/23 17:28:59.588137, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.588207, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.588265, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key AD3D37AE [2013/05/23 17:28:59.588413, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8a7a758 [2013/05/23 17:28:59.588505, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key AD3D37AE [2013/05/23 17:28:59.588559, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.588608, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.588671, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 5857 (1 used) [2013/05/23 17:28:59.588735, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.588765, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=12353 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.588970, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.590635, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 126 [2013/05/23 17:28:59.590784, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7e [2013/05/23 17:28:59.590840, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8020 of length 130 (0 toread) [2013/05/23 17:28:59.590887, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.590915, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=126 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12417 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=10240 (0x2800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=43 [2013/05/23 17:28:59.591556, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0010] 00 68 00 70 00 6F 00 32 00 32 00 30 00 30 00 61 .h.p.o.2 .2.0.0.a [0020] 00 2E 00 69 00 6E 00 69 00 00 00 ...i.n.i ... [2013/05/23 17:28:59.591808, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.591878, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.591941, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = W32X86/hpo2200a.ini [2013/05/23 17:28:59.592001, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpo2200a.ini" [2013/05/23 17:28:59.592063, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPO2200A.INI] -> [W32X86/hpo2200a.ini] [2013/05/23 17:28:59.592164, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/hpo2200a.ini] [/usr/local/samba/var/print] [2013/05/23 17:28:59.592242, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/hpo2200a.ini] -> [/usr/local/samba/var/print/W32X86/hpo2200a.ini] [2013/05/23 17:28:59.592295, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/hpo2200a.ini reduced to /usr/local/samba/var/print/W32X86/hpo2200a.ini [2013/05/23 17:28:59.592344, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpo2200a.ini [2013/05/23 17:28:59.592402, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpo2200a.ini [2013/05/23 17:28:59.592506, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.592562, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.592616, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 3EA23ABF [2013/05/23 17:28:59.592680, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x90cca48 [2013/05/23 17:28:59.592795, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.592845, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '3EA23ABF' stored [2013/05/23 17:28:59.592897, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x3ea23abf (1050819263) open_persistent_id : 0x000000003ea23abf (1050819263) open_volatile_id : 0x000000000000491c (18716) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.593517, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 3EA23ABF [2013/05/23 17:28:59.593575, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.593625, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.593674, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.593703, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x3ea23abf) stored [2013/05/23 17:28:59.593748, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000491c (18716) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x3ea23abf (1050819263) open_persistent_id : 0x000000003ea23abf (1050819263) open_volatile_id : 0x000000000000491c (18716) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.594562, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 18716 (2 used) [2013/05/23 17:28:59.594624, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/hpo2200a.ini hash 0xb400e2c0 [2013/05/23 17:28:59.594932, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:160(unix_mode) unix_mode(W32X86/hpo2200a.ini) returning 0644 [2013/05/23 17:28:59.594997, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1977(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpo2200a.ini, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0644 oplock_request=0 private_flags = 0x0 [2013/05/23 17:28:59.595054, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo2200a.ini [2013/05/23 17:28:59.595196, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo2200a.ini attr = 0x20 [2013/05/23 17:28:59.595273, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo2200a.ini case 3 set btime Thu May 23 17:27:24 2013 [2013/05/23 17:28:59.595345, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.595462, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.595524, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2135(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpo2200a.ini, after mapping access_mask=0x10080 [2013/05/23 17:28:59.595585, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.595653, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.595709, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B147 [2013/05/23 17:28:59.595772, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88544b8 [2013/05/23 17:28:59.595846, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:28:59.595899, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2:/usr/local/samba/var/lock/brlock.tdb 3: [2013/05/23 17:28:59.595955, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B147 [2013/05/23 17:28:59.596008, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88547d8 [2013/05/23 17:28:59.596056, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/brlock.c:1955(brl_get_locks_internal) brl_get_locks_internal: 0 current locks on file_id 802:a47b1:0 [2013/05/23 17:28:59.596159, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B147 [2013/05/23 17:28:59.596215, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:28:59.596263, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.596316, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1441(grant_fsp_oplock_type) grant_fsp_oplock_type: oplock type 0x10 on file W32X86/hpo2200a.ini [2013/05/23 17:28:59.596365, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2424(open_file_ntcreate) calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x10080, open_access_mask = 0x10080 [2013/05/23 17:28:59.596416, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpo2200a.ini. Granting 0x10080 [2013/05/23 17:28:59.596466, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:914(open_file) MARINA\Administrator opened file W32X86/hpo2200a.ini read=No write=No (numopen=1) [2013/05/23 17:28:59.596517, 5, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/smbd/oplock.c:89(set_file_oplock) set_file_oplock: granted oplock on file W32X86/hpo2200a.ini, 802:a47b1:0/1704294238, tv_sec = 519e35bb, tv_usec = 90a61 [2013/05/23 17:28:59.596580, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.596635, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo2200a.ini' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003081 (12417) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.592481 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) share_file_id : 0x000000006595775e (1704294238) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xb400e2c0 (3019956928) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon May 21 12:31:50 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.597680, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B147 [2013/05/23 17:28:59.597751, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.597801, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.597853, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.597898, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.597948, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo2200a.ini [2013/05/23 17:28:59.598044, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo2200a.ini attr = 0x20 [2013/05/23 17:28:59.598145, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo2200a.ini case 3 set btime Thu May 23 17:27:24 2013 [2013/05/23 17:28:59.598221, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.598273, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.598376, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.598435, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo2200a.ini' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003081 (12417) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.592481 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) share_file_id : 0x000000006595775e (1704294238) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xb400e2c0 (3019956928) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon May 21 12:31:50 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.599371, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpo2200a.ini. Granting 0x2 [2013/05/23 17:28:59.599427, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 18716, open name = W32X86/hpo2200a.ini [2013/05/23 17:28:59.599480, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.599509, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12417 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 7168 (0x1C00) smb_vwv[ 3]= 329 (0x149) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 2048 (0x800) smb_vwv[ 6]= 2392 (0x958) smb_vwv[ 7]=51718 (0xCA06) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=34817 (0x8801) smb_vwv[10]=43982 (0xABCE) smb_vwv[11]=51768 (0xCA38) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]= 1 (0x1) smb_vwv[14]=41967 (0xA3EF) smb_vwv[15]=37693 (0x933D) smb_vwv[16]=51099 (0xC79B) smb_vwv[17]= 1 (0x1) smb_vwv[18]=41967 (0xA3EF) smb_vwv[19]=37693 (0x933D) smb_vwv[20]=51099 (0xC79B) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=40448 (0x9E00) smb_vwv[28]= 1 (0x1) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.600646, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.602155, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:28:59.602310, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:28:59.602383, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8021 of length 76 (0 toread) [2013/05/23 17:28:59.602432, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.602461, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12481 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:28:59.602896, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 1C 49 EE 03 ....I.. [2013/05/23 17:28:59.602977, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.603033, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.603129, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2013/05/23 17:28:59.603270, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.603340, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo2200a.ini' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003081 (12417) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.592481 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) share_file_id : 0x000000006595775e (1704294238) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xb400e2c0 (3019956928) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon May 21 12:31:50 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.604254, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xb400e2c0 [2013/05/23 17:28:59.604307, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpo2200a.ini (fnum 18716) level=1006 call=7 total_data=0 [2013/05/23 17:28:59.604363, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpo2200a.ini (fnum 18716) level=1006 max_data=8 [2013/05/23 17:28:59.604416, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo2200a.ini [2013/05/23 17:28:59.604509, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo2200a.ini attr = 0x20 [2013/05/23 17:28:59.604573, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo2200a.ini case 3 set btime Thu May 23 17:27:24 2013 [2013/05/23 17:28:59.604643, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.604696, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.604754, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4790(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2013/05/23 17:28:59.604806, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 [2013/05/23 17:28:59.604854, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2013/05/23 17:28:59.604901, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.604929, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12481 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2013/05/23 17:28:59.605536, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 B1 47 0A 00 00 00 00 00 ......G. ..... [2013/05/23 17:28:59.607898, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:28:59.608067, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:28:59.608161, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8022 of length 76 (0 toread) [2013/05/23 17:28:59.608211, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.608240, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12545 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:28:59.608693, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 1C 49 ED 03 ....I.. [2013/05/23 17:28:59.608777, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.608834, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.608895, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2013/05/23 17:28:59.609024, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.609125, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo2200a.ini' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003081 (12417) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.592481 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) share_file_id : 0x000000006595775e (1704294238) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xb400e2c0 (3019956928) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon May 21 12:31:50 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.609991, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xb400e2c0 [2013/05/23 17:28:59.610042, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpo2200a.ini (fnum 18716) level=1005 call=7 total_data=0 [2013/05/23 17:28:59.610128, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpo2200a.ini (fnum 18716) level=1005 max_data=24 [2013/05/23 17:28:59.610206, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo2200a.ini [2013/05/23 17:28:59.610304, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo2200a.ini attr = 0x20 [2013/05/23 17:28:59.610368, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo2200a.ini case 3 set btime Thu May 23 17:27:24 2013 [2013/05/23 17:28:59.613255, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.613315, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.613382, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4648(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2013/05/23 17:28:59.613436, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:28:59.613483, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2013/05/23 17:28:59.613531, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.613559, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12545 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2013/05/23 17:28:59.613913, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 00 00 10 00 00 00 00 00 9E 01 00 ........ ........ [0010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2013/05/23 17:28:59.615987, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 88 [2013/05/23 17:28:59.616199, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x58 [2013/05/23 17:28:59.616262, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8023 of length 92 (0 toread) [2013/05/23 17:28:59.616310, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.616339, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12609 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2013/05/23 17:28:59.616923, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 00 00 .\... [2013/05/23 17:28:59.617070, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.617196, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.617262, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = [2013/05/23 17:28:59.617322, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "" [2013/05/23 17:28:59.617379, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:292(unix_convert) conversion finished "" -> . [2013/05/23 17:28:59.617436, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [.] [/usr/local/samba/var/print] [2013/05/23 17:28:59.617497, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:28:59.617547, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: . reduced to /usr/local/samba/var/print [2013/05/23 17:28:59.617596, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:28:59.617653, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:28:59.617713, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:28:59.617769, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x100001 [2013/05/23 17:28:59.617842, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.617893, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.617947, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 061991B1 [2013/05/23 17:28:59.618012, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x834c0d0 [2013/05/23 17:28:59.618158, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.618227, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '061991B1' stored [2013/05/23 17:28:59.618282, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x061991b1 (102338993) open_persistent_id : 0x00000000061991b1 (102338993) open_volatile_id : 0x0000000000000f9e (3998) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.618879, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 061991B1 [2013/05/23 17:28:59.618934, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.618983, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.619034, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.619062, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x061991b1) stored [2013/05/23 17:28:59.619139, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x00000f9e (3998) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x061991b1 (102338993) open_persistent_id : 0x00000000061991b1 (102338993) open_volatile_id : 0x0000000000000f9e (3998) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.619915, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 3998 (3 used) [2013/05/23 17:28:59.619978, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/. hash 0xc423281d [2013/05/23 17:28:59.620039, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name ., flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:28:59.620131, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.620191, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.620250, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:28:59.620312, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca608 [2013/05/23 17:28:59.620892, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.620948, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003141 (12609) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.617817 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000bdad3e64 (3182247524) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.622010, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:28:59.622416, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.622524, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.622580, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.622625, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.622687, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: . [2013/05/23 17:28:59.622752, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.622805, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.622940, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.623012, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003141 (12609) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.617817 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000bdad3e64 (3182247524) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.623919, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 3998, open name = . [2013/05/23 17:28:59.623994, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.624025, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12609 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=40448 (0x9E00) smb_vwv[ 3]= 271 (0x10F) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=58624 (0xE500) smb_vwv[ 6]=27003 (0x697B) smb_vwv[ 7]=33578 (0x832A) smb_vwv[ 8]=52779 (0xCE2B) smb_vwv[ 9]=43777 (0xAB01) smb_vwv[10]=28123 (0x6DDB) smb_vwv[11]= 4015 (0xFAF) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=58625 (0xE501) smb_vwv[14]=27003 (0x697B) smb_vwv[15]=33578 (0x832A) smb_vwv[16]=52779 (0xCE2B) smb_vwv[17]=58625 (0xE501) smb_vwv[18]=27003 (0x697B) smb_vwv[19]=33578 (0x832A) smb_vwv[20]=52779 (0xCE2B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.624916, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.626622, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 96 [2013/05/23 17:28:59.626775, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x60 [2013/05/23 17:28:59.626832, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8024 of length 100 (0 toread) [2013/05/23 17:28:59.626881, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.626909, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12673 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=31 [2013/05/23 17:28:59.627682, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 00 00 .W.3.2.X .8.6... [2013/05/23 17:28:59.627853, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.627916, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.627985, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:28:59.628054, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.628174, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:28:59.628229, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.628276, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:28:59.628321, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:28:59.628404, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:28:59.628470, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:28:59.628534, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:28:59.628617, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:28:59.628681, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=., mask = W32X86 [2013/05/23 17:28:59.628736, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=. [2013/05/23 17:28:59.628787, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x1 [2013/05/23 17:28:59.628871, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2013/05/23 17:28:59.628925, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = W32X86, attr = 22 [2013/05/23 17:28:59.628973, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath=<.> dontdescend=<> [2013/05/23 17:28:59.629041, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x8cdda18 now at offset -1 [2013/05/23 17:28:59.629147, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: ./W32X86 [2013/05/23 17:28:59.629226, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.629281, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.629353, 3, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:28:59.629401, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[W32X86] found ./W32X86 fname=W32X86 (W32X86) [2013/05/23 17:28:59.629464, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:28:59.629513, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:28:59.629563, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:28:59.629610, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:28:59.629689, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:28:59.629741, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 24, paramsize = 10, datasize = 24 [2013/05/23 17:28:59.629790, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.629819, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=92 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12673 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2013/05/23 17:28:59.630229, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 18 00 00 ........ ........ [0010] 00 00 00 00 00 0C 00 00 00 57 00 33 00 32 00 58 ........ .W.3.2.X [0020] 00 38 00 36 00 .8.6. [2013/05/23 17:28:59.633014, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=W32X86 directory=. dirtype=22 numentries=1 [2013/05/23 17:28:59.633227, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:28:59.633596, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.633722, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.633778, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8025 of length 45 (0 toread) [2013/05/23 17:28:59.633825, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.633853, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=12737 smt_wct=3 smb_vwv[ 0]= 3998 (0xF9E) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.634156, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.634209, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.634268, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.634326, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 3998 (numopen=2) [2013/05/23 17:28:59.634386, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.634435, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.634492, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:28:59.634557, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:28:59.634662, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.634721, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003141 (12609) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.617817 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000bdad3e64 (3182247524) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.635723, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xc423281d [2013/05/23 17:28:59.635783, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.635830, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.636312, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.636393, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:28:59.636454, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.636504, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.636570, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file . [2013/05/23 17:28:59.636635, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.636687, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.636741, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 061991B1 [2013/05/23 17:28:59.636800, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8b1c440 [2013/05/23 17:28:59.636864, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 061991B1 [2013/05/23 17:28:59.636915, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.636963, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.637022, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 3998 (2 used) [2013/05/23 17:28:59.637076, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.637178, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=12737 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.637464, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.639238, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 100 [2013/05/23 17:28:59.639402, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x64 [2013/05/23 17:28:59.639461, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8026 of length 104 (0 toread) [2013/05/23 17:28:59.639510, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.639539, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12801 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2013/05/23 17:28:59.640178, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 00 .\.W.3.2 .X.8.6.. [0010] 00 . [2013/05/23 17:28:59.641686, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.641771, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.641835, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = W32X86 [2013/05/23 17:28:59.641896, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:28:59.641957, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:28:59.642021, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:28:59.642118, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:28:59.642175, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86 reduced to /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.642226, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:28:59.642365, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:28:59.642440, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory W32X86, access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:28:59.642495, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x100001 [2013/05/23 17:28:59.642568, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.642619, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.642674, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key CEE68C77 [2013/05/23 17:28:59.642738, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x834c0d0 [2013/05/23 17:28:59.642854, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.642923, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'CEE68C77' stored [2013/05/23 17:28:59.642980, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xcee68c77 (3471215735) open_persistent_id : 0x00000000cee68c77 (3471215735) open_volatile_id : 0x0000000000006396 (25494) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.643617, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key CEE68C77 [2013/05/23 17:28:59.643676, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.643727, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.643776, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.643804, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xcee68c77) stored [2013/05/23 17:28:59.643850, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x00006396 (25494) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xcee68c77 (3471215735) open_persistent_id : 0x00000000cee68c77 (3471215735) open_volatile_id : 0x0000000000006396 (25494) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.645847, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 25494 (3 used) [2013/05/23 17:28:59.645914, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86 hash 0xed0f2ae2 [2013/05/23 17:28:59.645977, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name W32X86, flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:28:59.646040, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.646121, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.646187, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:28:59.646252, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca688 [2013/05/23 17:28:59.646327, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.646376, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003201 (12801) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.642544 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x0000000000e01f21 (14688033) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.585094726 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.647381, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:28:59.647490, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.647543, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.647595, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.647642, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.647691, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86 [2013/05/23 17:28:59.647755, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.647808, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.647937, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.648013, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003201 (12801) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.642544 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x0000000000e01f21 (14688033) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.585094726 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.649222, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 25494, open name = W32X86 [2013/05/23 17:28:59.649286, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.649317, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12801 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=38400 (0x9600) smb_vwv[ 3]= 355 (0x163) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=62720 (0xF500) smb_vwv[ 6]=43726 (0xAACE) smb_vwv[ 7]=51773 (0xCA3D) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=62721 (0xF501) smb_vwv[10]=43726 (0xAACE) smb_vwv[11]=51773 (0xCA3D) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=49921 (0xC301) smb_vwv[14]=13878 (0x3636) smb_vwv[15]=51775 (0xCA3F) smb_vwv[16]=52823 (0xCE57) smb_vwv[17]=49921 (0xC301) smb_vwv[18]=13878 (0x3636) smb_vwv[19]=51775 (0xCA3F) smb_vwv[20]=52823 (0xCE57) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.650193, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.659328, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 122 [2013/05/23 17:28:59.659477, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7a [2013/05/23 17:28:59.659533, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8027 of length 126 (0 toread) [2013/05/23 17:28:59.659581, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.659609, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12865 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=57 [2013/05/23 17:28:59.660040, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 68 .W.3.2.X .8.6.\.h [0020] 00 70 00 6F 00 32 00 32 00 30 00 30 00 61 00 2E .p.o.2.2 .0.0.a.. [0030] 00 69 00 6E 00 69 00 00 00 .i.n.i.. . [2013/05/23 17:28:59.660283, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.660342, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.660427, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:28:59.660498, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.660559, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:28:59.660609, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.660655, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:28:59.660699, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:28:59.660781, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpo2200a.ini" [2013/05/23 17:28:59.660848, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPO2200A.INI] -> [W32X86/hpo2200a.ini] [2013/05/23 17:28:59.660911, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86/hpo2200a.ini] [/usr/local/samba/var/print] [2013/05/23 17:28:59.660979, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:28:59.661043, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.661154, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:28:59.661236, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:28:59.661303, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:28:59.661353, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=W32X86, mask = hpo2200a.ini [2013/05/23 17:28:59.661409, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=W32X86 [2013/05/23 17:28:59.661461, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x1 [2013/05/23 17:28:59.661522, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:28:59.661582, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.661648, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:28:59.661713, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:28:59.661764, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path W32X86, expect_close = 1 [2013/05/23 17:28:59.661812, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = hpo2200a.ini, attr = 22 [2013/05/23 17:28:59.661875, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath= dontdescend=<> [2013/05/23 17:28:59.661948, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x876e688 now at offset -1 [2013/05/23 17:28:59.662005, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo2200a.ini [2013/05/23 17:28:59.662322, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo2200a.ini attr = 0x20 [2013/05/23 17:28:59.662414, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo2200a.ini case 3 set btime Thu May 23 17:27:24 2013 [2013/05/23 17:28:59.662488, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.662539, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.662646, 10, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.662705, 1, pid=2404, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo2200a.ini' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003081 (12417) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.592481 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) share_file_id : 0x000000006595775e (1704294238) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xb400e2c0 (3019956928) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon May 21 12:31:50 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.664561, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[hpo2200a.ini] found W32X86/hpo2200a.ini fname=hpo2200a.ini (hpo2200a.ini) [2013/05/23 17:28:59.664660, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:28:59.664716, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:28:59.664769, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:28:59.664816, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:28:59.664880, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 36, useable_space = 16582 [2013/05/23 17:28:59.664930, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 36, paramsize = 10, datasize = 36 [2013/05/23 17:28:59.664978, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.665006, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12865 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2013/05/23 17:28:59.665522, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 24 00 00 ........ .....$.. [0010] 00 00 00 00 00 18 00 00 00 68 00 70 00 6F 00 32 ........ .h.p.o.2 [0020] 00 32 00 30 00 30 00 61 00 2E 00 69 00 6E 00 69 .2.0.0.a ...i.n.i [0030] 00 . [2013/05/23 17:28:59.667164, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=hpo2200a.ini directory=W32X86 dirtype=22 numentries=1 [2013/05/23 17:28:59.667336, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:28:59.667466, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.667640, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.667702, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8028 of length 45 (0 toread) [2013/05/23 17:28:59.667749, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.667778, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=12929 smt_wct=3 smb_vwv[ 0]=25494 (0x6396) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.668027, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.668070, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.668200, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.668263, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 25494 (numopen=2) [2013/05/23 17:28:59.668338, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.668391, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.668528, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:28:59.668605, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:28:59.668695, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.668748, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003201 (12801) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.642544 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x0000000000e01f21 (14688033) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.585094726 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.669680, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xed0f2ae2 [2013/05/23 17:28:59.669738, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.669784, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.585094726 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.670839, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.670907, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:28:59.670966, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.671016, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.671083, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file W32X86 [2013/05/23 17:28:59.671235, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.671290, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.671354, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key CEE68C77 [2013/05/23 17:28:59.671417, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8b49f58 [2013/05/23 17:28:59.671483, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key CEE68C77 [2013/05/23 17:28:59.671642, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.671697, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.671761, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 25494 (2 used) [2013/05/23 17:28:59.671816, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.671845, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=12929 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.672049, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.673745, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 77 [2013/05/23 17:28:59.673893, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d [2013/05/23 17:28:59.673948, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8029 of length 81 (0 toread) [2013/05/23 17:28:59.673996, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.674025, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=77 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12993 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 1 (0x1) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2013/05/23 17:28:59.674526, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 1C 49 F5 03 00 00 00 00 01 ....I... .... [2013/05/23 17:28:59.674622, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.674681, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.674756, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:8199(call_trans2setfilepathinfo) call_trans2setfilepathinfo(8) W32X86/hpo2200a.ini (fnum 18716) info_level=1013 totdata=1 [2013/05/23 17:28:59.674815, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:7775(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: W32X86/hpo2200a.ini (fnum 18716) info_level=1013 totdata=1 [2013/05/23 17:28:59.674867, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo2200a.ini [2013/05/23 17:28:59.674954, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo2200a.ini attr = 0x20 [2013/05/23 17:28:59.675015, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo2200a.ini case 3 set btime Thu May 23 17:27:24 2013 [2013/05/23 17:28:59.675134, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.675202, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.675250, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5986(smb_set_file_disposition_info) smb_set_file_disposition_info: file W32X86/hpo2200a.ini, dosmode = 32, delete_on_close = 1 [2013/05/23 17:28:59.675303, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1028(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum 18716, file W32X86/hpo2200a.ini [2013/05/23 17:28:59.675360, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.675467, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.675529, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B147 [2013/05/23 17:28:59.675595, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca718 [2013/05/23 17:28:59.675682, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.675734, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo2200a.ini' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003081 (12417) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.592481 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) share_file_id : 0x000000006595775e (1704294238) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xb400e2c0 (3019956928) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon May 21 12:31:50 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.676690, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.676744, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo2200a.ini' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003081 (12417) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.592481 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) share_file_id : 0x000000006595775e (1704294238) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xb400e2c0 (3019956928) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xb400e2c0 (3019956928) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Mon May 21 12:31:50 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.679673, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B147 [2013/05/23 17:28:59.679749, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.679800, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.679858, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 16584 [2013/05/23 17:28:59.679907, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2013/05/23 17:28:59.679954, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.679982, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=12993 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2013/05/23 17:28:59.680679, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 ... [2013/05/23 17:28:59.682791, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.682945, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.683016, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8030 of length 45 (0 toread) [2013/05/23 17:28:59.683064, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.683126, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=13057 smt_wct=3 smb_vwv[ 0]=18716 (0x491C) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.683382, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.683426, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.683483, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.683610, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close file fd=-1 fnum 18716 (numopen=1) [2013/05/23 17:28:59.683693, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:609(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2013/05/23 17:28:59.683761, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.683811, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.683866, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B147 [2013/05/23 17:28:59.683931, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:28:59.684036, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.684125, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo2200a.ini' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003081 (12417) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.592481 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) share_file_id : 0x000000006595775e (1704294238) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xb400e2c0 (3019956928) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xb400e2c0 (3019956928) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Mon May 21 12:31:50 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.687052, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xb400e2c0 [2013/05/23 17:28:59.687145, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0xb400e2c0 [2013/05/23 17:28:59.687201, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:470(close_remove_share_mode) close_remove_share_mode: file W32X86/hpo2200a.ini. Delete on close was set - deleting file. [2013/05/23 17:28:59.687254, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xb400e2c0 [2013/05/23 17:28:59.687302, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0xb400e2c0 [2013/05/23 17:28:59.687453, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.687532, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo2200a.ini' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b1 (673713) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon May 21 12:31:50 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.687977, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.688041, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B147 [2013/05/23 17:28:59.688232, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.688329, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.688387, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/notify_internal.c:604(notify_trigger) notify_trigger called action=0x2, filter=0x1, path=/usr/local/samba/var/print/W32X86/hpo2200a.ini [2013/05/23 17:28:59.688527, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:850(close_normal_file) MARINA\Administrator closed file W32X86/hpo2200a.ini (numopen=0) NT_STATUS_OK [2013/05/23 17:28:59.688676, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.688747, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.688804, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 3EA23ABF [2013/05/23 17:28:59.688866, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8a7a758 [2013/05/23 17:28:59.688932, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 3EA23ABF [2013/05/23 17:28:59.688984, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.689032, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.689139, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 18716 (1 used) [2013/05/23 17:28:59.689223, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.689255, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=13057 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.689459, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.691556, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 126 [2013/05/23 17:28:59.691706, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7e [2013/05/23 17:28:59.691761, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8031 of length 130 (0 toread) [2013/05/23 17:28:59.691808, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.691853, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=126 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13121 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=10240 (0x2800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=43 [2013/05/23 17:28:59.692491, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0010] 00 68 00 70 00 7A 00 6C 00 65 00 35 00 6D 00 75 .h.p.z.l .e.5.m.u [0020] 00 2E 00 64 00 6C 00 6C 00 00 00 ...d.l.l ... [2013/05/23 17:28:59.692675, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.692734, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.692794, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = W32X86/hpzle5mu.dll [2013/05/23 17:28:59.692854, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpzle5mu.dll" [2013/05/23 17:28:59.692916, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPZLE5MU.DLL] -> [W32X86/hpzle5mu.dll] [2013/05/23 17:28:59.703233, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/hpzle5mu.dll] [/usr/local/samba/var/print] [2013/05/23 17:28:59.703348, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/hpzle5mu.dll] -> [/usr/local/samba/var/print/W32X86/hpzle5mu.dll] [2013/05/23 17:28:59.703402, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/hpzle5mu.dll reduced to /usr/local/samba/var/print/W32X86/hpzle5mu.dll [2013/05/23 17:28:59.703453, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpzle5mu.dll [2013/05/23 17:28:59.703513, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpzle5mu.dll [2013/05/23 17:28:59.703598, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.703761, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.703844, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2E701303 [2013/05/23 17:28:59.703911, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8441ee0 [2013/05/23 17:28:59.704032, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.704084, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '2E701303' stored [2013/05/23 17:28:59.704177, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x2e701303 (779096835) open_persistent_id : 0x000000002e701303 (779096835) open_volatile_id : 0x000000000000e941 (59713) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.704847, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2E701303 [2013/05/23 17:28:59.704928, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.704982, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.705032, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.705061, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x2e701303) stored [2013/05/23 17:28:59.705138, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000e941 (59713) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x2e701303 (779096835) open_persistent_id : 0x000000002e701303 (779096835) open_volatile_id : 0x000000000000e941 (59713) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.705951, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 59713 (2 used) [2013/05/23 17:28:59.706013, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/hpzle5mu.dll hash 0xf50d1599 [2013/05/23 17:28:59.706070, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:160(unix_mode) unix_mode(W32X86/hpzle5mu.dll) returning 0644 [2013/05/23 17:28:59.712131, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1977(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpzle5mu.dll, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0644 oplock_request=0 private_flags = 0x0 [2013/05/23 17:28:59.712218, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzle5mu.dll [2013/05/23 17:28:59.712348, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzle5mu.dll attr = 0x20 [2013/05/23 17:28:59.712429, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzle5mu.dll case 3 set btime Thu May 23 17:28:09 2013 [2013/05/23 17:28:59.712501, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.712553, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.712606, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2135(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpzle5mu.dll, after mapping access_mask=0x10080 [2013/05/23 17:28:59.712664, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.712712, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.712768, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000C047 [2013/05/23 17:28:59.712831, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca948 [2013/05/23 17:28:59.712920, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:28:59.712977, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2:/usr/local/samba/var/lock/brlock.tdb 3: [2013/05/23 17:28:59.713034, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000C047 [2013/05/23 17:28:59.713121, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85cac68 [2013/05/23 17:28:59.713180, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/brlock.c:1955(brl_get_locks_internal) brl_get_locks_internal: 0 current locks on file_id 802:a47c0:0 [2013/05/23 17:28:59.713240, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000C047 [2013/05/23 17:28:59.713292, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:28:59.713340, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.713393, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1441(grant_fsp_oplock_type) grant_fsp_oplock_type: oplock type 0x10 on file W32X86/hpzle5mu.dll [2013/05/23 17:28:59.713443, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2424(open_file_ntcreate) calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x10080, open_access_mask = 0x10080 [2013/05/23 17:28:59.713493, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpzle5mu.dll. Granting 0x10080 [2013/05/23 17:28:59.713543, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:914(open_file) MARINA\Administrator opened file W32X86/hpzle5mu.dll read=No write=No (numopen=1) [2013/05/23 17:28:59.713604, 5, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/smbd/oplock.c:89(set_file_oplock) set_file_oplock: granted oplock on file W32X86/hpzle5mu.dll, 802:a47c0:0/1852454698, tv_sec = 519e35bb, tv_usec = abc55 [2013/05/23 17:28:59.713670, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.713716, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzle5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003341 (13121) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.703573 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) share_file_id : 0x000000006e6a372a (1852454698) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf50d1599 (4111275417) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:21:14 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.726844, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000C047 [2013/05/23 17:28:59.726917, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.726968, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.727022, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.727068, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.727152, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzle5mu.dll [2013/05/23 17:28:59.727258, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzle5mu.dll attr = 0x20 [2013/05/23 17:28:59.727327, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzle5mu.dll case 3 set btime Thu May 23 17:28:09 2013 [2013/05/23 17:28:59.727399, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.727450, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.727551, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.727609, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzle5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003341 (13121) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.703573 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) share_file_id : 0x000000006e6a372a (1852454698) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf50d1599 (4111275417) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:21:14 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.733975, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpzle5mu.dll. Granting 0x2 [2013/05/23 17:28:59.734034, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 59713, open name = W32X86/hpzle5mu.dll [2013/05/23 17:28:59.734118, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.734155, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13121 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=16640 (0x4100) smb_vwv[ 3]= 489 (0x1E9) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 9984 (0x2700) smb_vwv[ 6]=13068 (0x330C) smb_vwv[ 7]=51745 (0xCA21) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=44801 (0xAF01) smb_vwv[10]=44548 (0xAE04) smb_vwv[11]=51769 (0xCA39) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]= 1 (0x1) smb_vwv[14]=62073 (0xF279) smb_vwv[15]=13627 (0x353B) smb_vwv[16]=51219 (0xC813) smb_vwv[17]= 1 (0x1) smb_vwv[18]=62073 (0xF279) smb_vwv[19]=13627 (0x353B) smb_vwv[20]=51219 (0xC813) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 3062 (0xBF6) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.735004, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.741240, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:28:59.741460, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:28:59.741585, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8032 of length 76 (0 toread) [2013/05/23 17:28:59.741636, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.741666, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13185 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:28:59.742983, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 41 E9 EE 03 ...A... [2013/05/23 17:28:59.743122, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.743203, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.743269, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2013/05/23 17:28:59.743402, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.743471, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzle5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003341 (13121) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.703573 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) share_file_id : 0x000000006e6a372a (1852454698) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf50d1599 (4111275417) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:21:14 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.744368, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xf50d1599 [2013/05/23 17:28:59.744421, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpzle5mu.dll (fnum 59713) level=1006 call=7 total_data=0 [2013/05/23 17:28:59.744492, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpzle5mu.dll (fnum 59713) level=1006 max_data=8 [2013/05/23 17:28:59.744547, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzle5mu.dll [2013/05/23 17:28:59.744640, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzle5mu.dll attr = 0x20 [2013/05/23 17:28:59.744703, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzle5mu.dll case 3 set btime Thu May 23 17:28:09 2013 [2013/05/23 17:28:59.744773, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.744823, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.744882, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4790(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2013/05/23 17:28:59.744933, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 [2013/05/23 17:28:59.744981, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2013/05/23 17:28:59.745027, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.745055, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13185 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2013/05/23 17:28:59.750583, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 C0 47 0A 00 00 00 00 00 ......G. ..... [2013/05/23 17:28:59.752397, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:28:59.752564, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:28:59.754613, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8033 of length 76 (0 toread) [2013/05/23 17:28:59.754790, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.754828, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13249 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:28:59.755401, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 41 E9 ED 03 ...A... [2013/05/23 17:28:59.755516, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.755595, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.755661, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2013/05/23 17:28:59.755793, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.755862, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzle5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003341 (13121) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.703573 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) share_file_id : 0x000000006e6a372a (1852454698) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf50d1599 (4111275417) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:21:14 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.756763, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xf50d1599 [2013/05/23 17:28:59.756815, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpzle5mu.dll (fnum 59713) level=1005 call=7 total_data=0 [2013/05/23 17:28:59.756871, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpzle5mu.dll (fnum 59713) level=1005 max_data=24 [2013/05/23 17:28:59.756924, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzle5mu.dll [2013/05/23 17:28:59.757014, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzle5mu.dll attr = 0x20 [2013/05/23 17:28:59.757078, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzle5mu.dll case 3 set btime Thu May 23 17:28:09 2013 [2013/05/23 17:28:59.757211, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.757263, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.757324, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4648(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2013/05/23 17:28:59.757376, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:28:59.757425, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2013/05/23 17:28:59.757472, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.757500, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13249 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2013/05/23 17:28:59.757854, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 00 00 10 00 00 00 00 00 00 F6 0B ........ ........ [0010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2013/05/23 17:28:59.764449, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 88 [2013/05/23 17:28:59.764598, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x58 [2013/05/23 17:28:59.764653, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8034 of length 92 (0 toread) [2013/05/23 17:28:59.764701, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.764731, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13313 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2013/05/23 17:28:59.765455, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 00 00 .\... [2013/05/23 17:28:59.765553, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.765612, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.765672, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = [2013/05/23 17:28:59.765752, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "" [2013/05/23 17:28:59.765809, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:292(unix_convert) conversion finished "" -> . [2013/05/23 17:28:59.765858, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [.] [/usr/local/samba/var/print] [2013/05/23 17:28:59.765916, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:28:59.765966, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: . reduced to /usr/local/samba/var/print [2013/05/23 17:28:59.766015, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:28:59.766072, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:28:59.766185, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:28:59.766250, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x100001 [2013/05/23 17:28:59.766326, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.766380, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.768970, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 469C357C [2013/05/23 17:28:59.769053, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x876e688 [2013/05/23 17:28:59.769220, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.769280, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '469C357C' stored [2013/05/23 17:28:59.769334, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x469c357c (1184642428) open_persistent_id : 0x00000000469c357c (1184642428) open_volatile_id : 0x000000000000df92 (57234) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.769939, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 469C357C [2013/05/23 17:28:59.769995, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.770044, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.770126, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.770160, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x469c357c) stored [2013/05/23 17:28:59.770207, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000df92 (57234) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x469c357c (1184642428) open_persistent_id : 0x00000000469c357c (1184642428) open_volatile_id : 0x000000000000df92 (57234) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.776322, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 57234 (3 used) [2013/05/23 17:28:59.776407, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/. hash 0xc423281d [2013/05/23 17:28:59.776472, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name ., flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:28:59.776536, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.776586, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.776643, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:28:59.776707, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8854178 [2013/05/23 17:28:59.776781, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.776829, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003401 (13313) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.766302 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000a9afb4ef (2846864623) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.777752, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:28:59.777818, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.777882, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.777946, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.777994, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.778042, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: . [2013/05/23 17:28:59.778130, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.778193, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.778318, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.778388, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003401 (13313) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.766302 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000a9afb4ef (2846864623) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.782177, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 57234, open name = . [2013/05/23 17:28:59.782240, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.782270, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13313 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=37376 (0x9200) smb_vwv[ 3]= 479 (0x1DF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=58624 (0xE500) smb_vwv[ 6]=27003 (0x697B) smb_vwv[ 7]=33578 (0x832A) smb_vwv[ 8]=52779 (0xCE2B) smb_vwv[ 9]=43777 (0xAB01) smb_vwv[10]=28123 (0x6DDB) smb_vwv[11]= 4015 (0xFAF) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=58625 (0xE501) smb_vwv[14]=27003 (0x697B) smb_vwv[15]=33578 (0x832A) smb_vwv[16]=52779 (0xCE2B) smb_vwv[17]=58625 (0xE501) smb_vwv[18]=27003 (0x697B) smb_vwv[19]=33578 (0x832A) smb_vwv[20]=52779 (0xCE2B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.783501, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.785154, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 96 [2013/05/23 17:28:59.785302, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x60 [2013/05/23 17:28:59.785357, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8035 of length 100 (0 toread) [2013/05/23 17:28:59.785585, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.785642, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13377 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=31 [2013/05/23 17:28:59.786081, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 00 00 .W.3.2.X .8.6... [2013/05/23 17:28:59.786248, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.786308, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.786375, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:28:59.786445, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.786544, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:28:59.786604, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.786652, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:28:59.786697, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:28:59.786799, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:28:59.786869, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:28:59.786934, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:28:59.787014, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:28:59.787078, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=., mask = W32X86 [2013/05/23 17:28:59.787197, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=. [2013/05/23 17:28:59.787255, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x1 [2013/05/23 17:28:59.787343, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2013/05/23 17:28:59.787401, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = W32X86, attr = 22 [2013/05/23 17:28:59.787449, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath=<.> dontdescend=<> [2013/05/23 17:28:59.787518, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x834c0d0 now at offset -1 [2013/05/23 17:28:59.787574, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: ./W32X86 [2013/05/23 17:28:59.787633, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.787684, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.787756, 3, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:28:59.787804, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[W32X86] found ./W32X86 fname=W32X86 (W32X86) [2013/05/23 17:28:59.787866, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:28:59.787914, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:28:59.788060, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:28:59.788172, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:28:59.788239, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:28:59.788291, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 24, paramsize = 10, datasize = 24 [2013/05/23 17:28:59.788339, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.788378, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=92 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13377 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2013/05/23 17:28:59.788756, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 18 00 00 ........ ........ [0010] 00 00 00 00 00 0C 00 00 00 57 00 33 00 32 00 58 ........ .W.3.2.X [0020] 00 38 00 36 00 .8.6. [2013/05/23 17:28:59.790362, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=W32X86 directory=. dirtype=22 numentries=1 [2013/05/23 17:28:59.790631, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:28:59.791629, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.791744, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.791796, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8036 of length 45 (0 toread) [2013/05/23 17:28:59.791843, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.791872, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=13441 smt_wct=3 smb_vwv[ 0]=57234 (0xDF92) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.792191, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.792244, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.792302, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.792358, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 57234 (numopen=2) [2013/05/23 17:28:59.792417, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.792466, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.792523, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:28:59.792587, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:28:59.792676, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.792729, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003401 (13313) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.766302 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000a9afb4ef (2846864623) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.793713, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xc423281d [2013/05/23 17:28:59.793773, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.793818, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.794281, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.794344, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:28:59.794401, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.794450, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.794531, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file . [2013/05/23 17:28:59.794599, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.794650, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.794704, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 469C357C [2013/05/23 17:28:59.794764, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8b49f58 [2013/05/23 17:28:59.794829, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 469C357C [2013/05/23 17:28:59.794881, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.794930, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.794989, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 57234 (2 used) [2013/05/23 17:28:59.795043, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.795072, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=13441 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.795350, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.797182, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 100 [2013/05/23 17:28:59.797343, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x64 [2013/05/23 17:28:59.797403, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8037 of length 104 (0 toread) [2013/05/23 17:28:59.797451, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.797479, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13505 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2013/05/23 17:28:59.798051, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 00 .\.W.3.2 .X.8.6.. [0010] 00 . [2013/05/23 17:28:59.798233, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.798314, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.798381, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = W32X86 [2013/05/23 17:28:59.798442, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:28:59.798503, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:28:59.798565, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:28:59.798627, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:28:59.798677, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86 reduced to /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.798727, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:28:59.798795, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:28:59.798857, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory W32X86, access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:28:59.798913, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x100001 [2013/05/23 17:28:59.798983, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.799033, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.799133, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DBEF7471 [2013/05/23 17:28:59.799214, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x876e688 [2013/05/23 17:28:59.799338, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.799390, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'DBEF7471' stored [2013/05/23 17:28:59.799444, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xdbef7471 (3689903217) open_persistent_id : 0x00000000dbef7471 (3689903217) open_volatile_id : 0x000000000000e7a3 (59299) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.800042, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DBEF7471 [2013/05/23 17:28:59.800149, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.800217, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.800269, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.800298, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xdbef7471) stored [2013/05/23 17:28:59.800448, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000e7a3 (59299) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xdbef7471 (3689903217) open_persistent_id : 0x00000000dbef7471 (3689903217) open_volatile_id : 0x000000000000e7a3 (59299) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.803313, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 59299 (3 used) [2013/05/23 17:28:59.803381, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86 hash 0xed0f2ae2 [2013/05/23 17:28:59.803446, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name W32X86, flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:28:59.803510, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.803560, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.803617, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:28:59.803682, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88541f8 [2013/05/23 17:28:59.803753, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.803803, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000034c1 (13505) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.798961 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000100cb51f (269268255) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.686107564 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.804865, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:28:59.804936, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.804986, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.805038, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.805084, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.805181, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86 [2013/05/23 17:28:59.805251, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.805308, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.805492, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.805661, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000034c1 (13505) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.798961 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000100cb51f (269268255) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.686107564 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.806682, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 59299, open name = W32X86 [2013/05/23 17:28:59.806741, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.806786, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13505 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=41728 (0xA300) smb_vwv[ 3]= 487 (0x1E7) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=62720 (0xF500) smb_vwv[ 6]=43726 (0xAACE) smb_vwv[ 7]=51773 (0xCA3D) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=62721 (0xF501) smb_vwv[10]=43726 (0xAACE) smb_vwv[11]=51773 (0xCA3D) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=37633 (0x9301) smb_vwv[14]=17824 (0x45A0) smb_vwv[15]=51775 (0xCA3F) smb_vwv[16]=52823 (0xCE57) smb_vwv[17]=37633 (0x9301) smb_vwv[18]=17824 (0x45A0) smb_vwv[19]=51775 (0xCA3F) smb_vwv[20]=52823 (0xCE57) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.807672, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.809489, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 122 [2013/05/23 17:28:59.809638, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7a [2013/05/23 17:28:59.809692, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8038 of length 126 (0 toread) [2013/05/23 17:28:59.809740, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.809768, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13569 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=57 [2013/05/23 17:28:59.810235, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 68 .W.3.2.X .8.6.\.h [0020] 00 70 00 7A 00 6C 00 65 00 35 00 6D 00 75 00 2E .p.z.l.e .5.m.u.. [0030] 00 64 00 6C 00 6C 00 00 00 .d.l.l.. . [2013/05/23 17:28:59.810452, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.810508, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.810641, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:28:59.810741, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.811261, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:28:59.811348, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.811398, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:28:59.811443, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:28:59.811529, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpzle5mu.dll" [2013/05/23 17:28:59.811599, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPZLE5MU.DLL] -> [W32X86/hpzle5mu.dll] [2013/05/23 17:28:59.811664, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86/hpzle5mu.dll] [/usr/local/samba/var/print] [2013/05/23 17:28:59.811733, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:28:59.811797, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.811855, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:28:59.811911, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:28:59.811971, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:28:59.812018, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=W32X86, mask = hpzle5mu.dll [2013/05/23 17:28:59.812073, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=W32X86 [2013/05/23 17:28:59.812198, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x1 [2013/05/23 17:28:59.812268, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:28:59.812328, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.812396, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:28:59.812460, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:28:59.812511, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path W32X86, expect_close = 1 [2013/05/23 17:28:59.812558, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = hpzle5mu.dll, attr = 22 [2013/05/23 17:28:59.812605, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath= dontdescend=<> [2013/05/23 17:28:59.812677, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x8cdda18 now at offset -1 [2013/05/23 17:28:59.812733, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzle5mu.dll [2013/05/23 17:28:59.812839, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzle5mu.dll attr = 0x20 [2013/05/23 17:28:59.812903, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzle5mu.dll case 3 set btime Thu May 23 17:28:09 2013 [2013/05/23 17:28:59.812974, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.813025, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.813186, 10, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.813274, 1, pid=2404, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzle5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003341 (13121) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.703573 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) share_file_id : 0x000000006e6a372a (1852454698) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf50d1599 (4111275417) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:21:14 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.814178, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[hpzle5mu.dll] found W32X86/hpzle5mu.dll fname=hpzle5mu.dll (hpzle5mu.dll) [2013/05/23 17:28:59.814256, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:28:59.814306, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:28:59.814357, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:28:59.814415, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:28:59.814497, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 36, useable_space = 16582 [2013/05/23 17:28:59.814550, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 36, paramsize = 10, datasize = 36 [2013/05/23 17:28:59.814599, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.814628, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13569 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2013/05/23 17:28:59.814986, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 24 00 00 ........ .....$.. [0010] 00 00 00 00 00 18 00 00 00 68 00 70 00 7A 00 6C ........ .h.p.z.l [0020] 00 65 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C .e.5.m.u ...d.l.l [0030] 00 . [2013/05/23 17:28:59.818127, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=hpzle5mu.dll directory=W32X86 dirtype=22 numentries=1 [2013/05/23 17:28:59.818317, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:28:59.818467, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.818547, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.818598, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8039 of length 45 (0 toread) [2013/05/23 17:28:59.818645, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.818674, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=13633 smt_wct=3 smb_vwv[ 0]=59299 (0xE7A3) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.818923, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.818966, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.819021, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.819076, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 59299 (numopen=2) [2013/05/23 17:28:59.819247, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.819304, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.819362, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:28:59.819428, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:28:59.819537, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.819594, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000034c1 (13505) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.798961 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000100cb51f (269268255) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.686107564 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.820647, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xed0f2ae2 [2013/05/23 17:28:59.821180, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.821386, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.686107564 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.821833, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.821901, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:28:59.821961, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.822011, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.822077, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file W32X86 [2013/05/23 17:28:59.822212, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.822269, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.822324, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DBEF7471 [2013/05/23 17:28:59.822386, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x87ff450 [2013/05/23 17:28:59.822451, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DBEF7471 [2013/05/23 17:28:59.822501, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.822549, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.822610, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 59299 (2 used) [2013/05/23 17:28:59.822665, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.822693, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=13633 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.822897, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.824572, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 77 [2013/05/23 17:28:59.824735, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d [2013/05/23 17:28:59.824790, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8040 of length 81 (0 toread) [2013/05/23 17:28:59.824849, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.824878, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=77 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13697 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 1 (0x1) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2013/05/23 17:28:59.825424, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 41 E9 F5 03 00 00 00 00 01 ...A.... .... [2013/05/23 17:28:59.825535, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.825594, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.825670, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:8199(call_trans2setfilepathinfo) call_trans2setfilepathinfo(8) W32X86/hpzle5mu.dll (fnum 59713) info_level=1013 totdata=1 [2013/05/23 17:28:59.825816, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:7775(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: W32X86/hpzle5mu.dll (fnum 59713) info_level=1013 totdata=1 [2013/05/23 17:28:59.825878, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzle5mu.dll [2013/05/23 17:28:59.825968, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzle5mu.dll attr = 0x20 [2013/05/23 17:28:59.826030, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzle5mu.dll case 3 set btime Thu May 23 17:28:09 2013 [2013/05/23 17:28:59.826155, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.826214, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.826261, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5986(smb_set_file_disposition_info) smb_set_file_disposition_info: file W32X86/hpzle5mu.dll, dosmode = 32, delete_on_close = 1 [2013/05/23 17:28:59.826311, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1028(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum 59713, file W32X86/hpzle5mu.dll [2013/05/23 17:28:59.826368, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.826416, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.826470, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000C047 [2013/05/23 17:28:59.826535, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8854288 [2013/05/23 17:28:59.826623, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.826674, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzle5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003341 (13121) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.703573 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) share_file_id : 0x000000006e6a372a (1852454698) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf50d1599 (4111275417) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:21:14 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.827637, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.827690, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzle5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003341 (13121) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.703573 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) share_file_id : 0x000000006e6a372a (1852454698) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf50d1599 (4111275417) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xf50d1599 (4111275417) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Sat Oct 20 18:21:14 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.830503, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000C047 [2013/05/23 17:28:59.830578, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.830631, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.830689, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 16584 [2013/05/23 17:28:59.830990, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2013/05/23 17:28:59.831060, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.831143, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13697 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2013/05/23 17:28:59.831516, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 ... [2013/05/23 17:28:59.833296, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.833447, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.833502, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8041 of length 45 (0 toread) [2013/05/23 17:28:59.833549, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.833578, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=13761 smt_wct=3 smb_vwv[ 0]=59713 (0xE941) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.833842, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.833888, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.833944, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.833999, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close file fd=-1 fnum 59713 (numopen=1) [2013/05/23 17:28:59.834054, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:609(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2013/05/23 17:28:59.834158, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.834211, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.834267, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000C047 [2013/05/23 17:28:59.834334, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:28:59.834442, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.834512, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzle5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003341 (13121) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.703573 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) share_file_id : 0x000000006e6a372a (1852454698) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf50d1599 (4111275417) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xf50d1599 (4111275417) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Sat Oct 20 18:21:14 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.837475, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xf50d1599 [2013/05/23 17:28:59.837532, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0xf50d1599 [2013/05/23 17:28:59.837584, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:470(close_remove_share_mode) close_remove_share_mode: file W32X86/hpzle5mu.dll. Delete on close was set - deleting file. [2013/05/23 17:28:59.837637, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xf50d1599 [2013/05/23 17:28:59.837684, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0xf50d1599 [2013/05/23 17:28:59.840591, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.840719, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzle5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47c0 (673728) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:21:14 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.841475, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.841560, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000C047 [2013/05/23 17:28:59.841620, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.841669, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.841725, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/notify_internal.c:604(notify_trigger) notify_trigger called action=0x2, filter=0x1, path=/usr/local/samba/var/print/W32X86/hpzle5mu.dll [2013/05/23 17:28:59.841863, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:850(close_normal_file) MARINA\Administrator closed file W32X86/hpzle5mu.dll (numopen=0) NT_STATUS_OK [2013/05/23 17:28:59.841934, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.841984, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.842039, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 2E701303 [2013/05/23 17:28:59.842154, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8a7a758 [2013/05/23 17:28:59.842252, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 2E701303 [2013/05/23 17:28:59.842308, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.842357, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.842419, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 59713 (1 used) [2013/05/23 17:28:59.842484, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.842514, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=13761 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.842717, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.845155, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 126 [2013/05/23 17:28:59.845305, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7e [2013/05/23 17:28:59.845359, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8042 of length 130 (0 toread) [2013/05/23 17:28:59.845474, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.845507, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=126 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13825 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=10240 (0x2800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=43 [2013/05/23 17:28:59.846198, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0010] 00 68 00 70 00 7A 00 33 00 6D 00 35 00 6D 00 75 .h.p.z.3 .m.5.m.u [0020] 00 2E 00 67 00 70 00 64 00 00 00 ...g.p.d ... [2013/05/23 17:28:59.846387, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.846446, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.846509, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.846569, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpz3m5mu.gpd" [2013/05/23 17:28:59.846632, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPZ3M5MU.GPD] -> [W32X86/hpz3m5mu.gpd] [2013/05/23 17:28:59.846697, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/hpz3m5mu.gpd] [/usr/local/samba/var/print] [2013/05/23 17:28:59.846763, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/hpz3m5mu.gpd] -> [/usr/local/samba/var/print/W32X86/hpz3m5mu.gpd] [2013/05/23 17:28:59.846814, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/hpz3m5mu.gpd reduced to /usr/local/samba/var/print/W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.846863, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.846920, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.847003, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.847057, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.847153, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key F5843B1C [2013/05/23 17:28:59.847220, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x90cca48 [2013/05/23 17:28:59.847337, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.847389, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'F5843B1C' stored [2013/05/23 17:28:59.847459, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xf5843b1c (4119083804) open_persistent_id : 0x00000000f5843b1c (4119083804) open_volatile_id : 0x000000000000e955 (59733) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.848043, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key F5843B1C [2013/05/23 17:28:59.848129, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.848187, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.848238, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.848266, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xf5843b1c) stored [2013/05/23 17:28:59.848312, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000e955 (59733) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xf5843b1c (4119083804) open_persistent_id : 0x00000000f5843b1c (4119083804) open_volatile_id : 0x000000000000e955 (59733) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.849112, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 59733 (2 used) [2013/05/23 17:28:59.849183, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/hpz3m5mu.gpd hash 0x4a632ce7 [2013/05/23 17:28:59.849239, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:160(unix_mode) unix_mode(W32X86/hpz3m5mu.gpd) returning 0644 [2013/05/23 17:28:59.849288, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1977(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpz3m5mu.gpd, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0644 oplock_request=0 private_flags = 0x0 [2013/05/23 17:28:59.849341, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.849436, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3m5mu.gpd attr = 0x20 [2013/05/23 17:28:59.849502, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3m5mu.gpd case 3 set btime Thu May 23 17:27:36 2013 [2013/05/23 17:28:59.849573, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.849623, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.849673, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2135(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpz3m5mu.gpd, after mapping access_mask=0x10080 [2013/05/23 17:28:59.849728, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.849776, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.849832, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B847 [2013/05/23 17:28:59.849894, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88544b8 [2013/05/23 17:28:59.849966, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:28:59.850018, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2:/usr/local/samba/var/lock/brlock.tdb 3: [2013/05/23 17:28:59.850073, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B847 [2013/05/23 17:28:59.850167, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88547d8 [2013/05/23 17:28:59.850236, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/brlock.c:1955(brl_get_locks_internal) brl_get_locks_internal: 0 current locks on file_id 802:a47b8:0 [2013/05/23 17:28:59.850297, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B847 [2013/05/23 17:28:59.850349, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:28:59.850396, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.850447, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1441(grant_fsp_oplock_type) grant_fsp_oplock_type: oplock type 0x10 on file W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.850497, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2424(open_file_ntcreate) calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x10080, open_access_mask = 0x10080 [2013/05/23 17:28:59.850547, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpz3m5mu.gpd. Granting 0x10080 [2013/05/23 17:28:59.850596, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:914(open_file) MARINA\Administrator opened file W32X86/hpz3m5mu.gpd read=No write=No (numopen=1) [2013/05/23 17:28:59.850648, 5, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/smbd/oplock.c:89(set_file_oplock) set_file_oplock: granted oplock on file W32X86/hpz3m5mu.gpd, 802:a47b8:0/204122705, tv_sec = 519e35bb, tv_usec = cec83 [2013/05/23 17:28:59.850710, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.850755, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3m5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003601 (13825) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.846979 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) share_file_id : 0x000000000c2aaa51 (204122705) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x4a632ce7 (1248013543) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Sep 13 19:19:46 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.852026, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B847 [2013/05/23 17:28:59.852124, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.852183, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.852236, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.852282, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.852330, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.852430, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3m5mu.gpd attr = 0x20 [2013/05/23 17:28:59.852495, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3m5mu.gpd case 3 set btime Thu May 23 17:27:36 2013 [2013/05/23 17:28:59.852566, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.852616, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.852715, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.852774, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3m5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003601 (13825) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.846979 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) share_file_id : 0x000000000c2aaa51 (204122705) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x4a632ce7 (1248013543) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Sep 13 19:19:46 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.853705, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpz3m5mu.gpd. Granting 0x2 [2013/05/23 17:28:59.853761, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 59733, open name = W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.853814, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.853842, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13825 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=21760 (0x5500) smb_vwv[ 3]= 489 (0x1E9) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=11776 (0x2E00) smb_vwv[ 6]=33624 (0x8358) smb_vwv[ 7]=51725 (0xCA0D) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]= 3841 (0xF01) smb_vwv[10]=56347 (0xDC1B) smb_vwv[11]=51769 (0xCA39) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]= 1 (0x1) smb_vwv[14]=64101 (0xFA65) smb_vwv[15]=10823 (0x2A47) smb_vwv[16]=51190 (0xC7F6) smb_vwv[17]= 1 (0x1) smb_vwv[18]=64101 (0xFA65) smb_vwv[19]=10823 (0x2A47) smb_vwv[20]=51190 (0xC7F6) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]=48896 (0xBF00) smb_vwv[28]= 601 (0x259) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.854827, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.856185, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:28:59.856333, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:28:59.856388, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8043 of length 76 (0 toread) [2013/05/23 17:28:59.856436, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.856465, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13889 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:28:59.856978, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 55 E9 EE 03 ...U... [2013/05/23 17:28:59.857085, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.857184, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.857247, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2013/05/23 17:28:59.857377, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.857445, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3m5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003601 (13825) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.846979 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) share_file_id : 0x000000000c2aaa51 (204122705) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x4a632ce7 (1248013543) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Sep 13 19:19:46 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.858335, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x4a632ce7 [2013/05/23 17:28:59.858386, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpz3m5mu.gpd (fnum 59733) level=1006 call=7 total_data=0 [2013/05/23 17:28:59.858440, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpz3m5mu.gpd (fnum 59733) level=1006 max_data=8 [2013/05/23 17:28:59.858493, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.858585, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3m5mu.gpd attr = 0x20 [2013/05/23 17:28:59.858664, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3m5mu.gpd case 3 set btime Thu May 23 17:27:36 2013 [2013/05/23 17:28:59.858738, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.858788, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.858847, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4790(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2013/05/23 17:28:59.858899, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 [2013/05/23 17:28:59.858946, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2013/05/23 17:28:59.858993, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.859021, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13889 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2013/05/23 17:28:59.859407, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 B8 47 0A 00 00 00 00 00 ......G. ..... [2013/05/23 17:28:59.861792, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:28:59.861954, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:28:59.862011, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8044 of length 76 (0 toread) [2013/05/23 17:28:59.862058, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.862117, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13953 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:28:59.862560, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 55 E9 ED 03 ...U... [2013/05/23 17:28:59.862643, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.862700, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.862762, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2013/05/23 17:28:59.862891, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.862978, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3m5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003601 (13825) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.846979 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) share_file_id : 0x000000000c2aaa51 (204122705) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x4a632ce7 (1248013543) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Sep 13 19:19:46 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.863871, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x4a632ce7 [2013/05/23 17:28:59.863923, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpz3m5mu.gpd (fnum 59733) level=1005 call=7 total_data=0 [2013/05/23 17:28:59.863979, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpz3m5mu.gpd (fnum 59733) level=1005 max_data=24 [2013/05/23 17:28:59.864031, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.864145, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3m5mu.gpd attr = 0x20 [2013/05/23 17:28:59.864222, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3m5mu.gpd case 3 set btime Thu May 23 17:27:36 2013 [2013/05/23 17:28:59.864293, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.864344, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.864403, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4648(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2013/05/23 17:28:59.864469, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:28:59.864518, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2013/05/23 17:28:59.864565, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.864594, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=13953 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2013/05/23 17:28:59.864949, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 00 00 10 00 00 00 00 00 BF 59 02 ........ ......Y. [0010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2013/05/23 17:28:59.866795, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 88 [2013/05/23 17:28:59.866940, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x58 [2013/05/23 17:28:59.866994, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8045 of length 92 (0 toread) [2013/05/23 17:28:59.867042, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.867071, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14017 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2013/05/23 17:28:59.867675, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 00 00 .\... [2013/05/23 17:28:59.867758, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.867815, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.867874, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = [2013/05/23 17:28:59.867933, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "" [2013/05/23 17:28:59.867989, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:292(unix_convert) conversion finished "" -> . [2013/05/23 17:28:59.868037, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [.] [/usr/local/samba/var/print] [2013/05/23 17:28:59.868153, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:28:59.868211, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: . reduced to /usr/local/samba/var/print [2013/05/23 17:28:59.868261, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:28:59.868319, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:28:59.868378, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:28:59.868433, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x100001 [2013/05/23 17:28:59.868504, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.868554, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.868607, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 90F1F054 [2013/05/23 17:28:59.868671, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8cdda18 [2013/05/23 17:28:59.868785, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.868835, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '90F1F054' stored [2013/05/23 17:28:59.868887, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x90f1f054 (2431774804) open_persistent_id : 0x0000000090f1f054 (2431774804) open_volatile_id : 0x0000000000001600 (5632) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.869526, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 90F1F054 [2013/05/23 17:28:59.869585, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.869634, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.869683, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.869712, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x90f1f054) stored [2013/05/23 17:28:59.869757, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x00001600 (5632) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x90f1f054 (2431774804) open_persistent_id : 0x0000000090f1f054 (2431774804) open_volatile_id : 0x0000000000001600 (5632) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.870543, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 5632 (3 used) [2013/05/23 17:28:59.870605, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/. hash 0xc423281d [2013/05/23 17:28:59.870667, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name ., flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:28:59.870729, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.870796, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.871494, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:28:59.871598, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca608 [2013/05/23 17:28:59.871677, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.871741, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000036c1 (14017) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.868480 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x0000000067779600 (1735890432) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.872668, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:28:59.872734, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.872784, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.872836, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.872881, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.872928, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: . [2013/05/23 17:28:59.873006, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.873061, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.873222, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.873298, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000036c1 (14017) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.868480 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x0000000067779600 (1735890432) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.874196, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 5632, open name = . [2013/05/23 17:28:59.874255, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.874284, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14017 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 278 (0x116) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=58624 (0xE500) smb_vwv[ 6]=27003 (0x697B) smb_vwv[ 7]=33578 (0x832A) smb_vwv[ 8]=52779 (0xCE2B) smb_vwv[ 9]=43777 (0xAB01) smb_vwv[10]=28123 (0x6DDB) smb_vwv[11]= 4015 (0xFAF) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=58625 (0xE501) smb_vwv[14]=27003 (0x697B) smb_vwv[15]=33578 (0x832A) smb_vwv[16]=52779 (0xCE2B) smb_vwv[17]=58625 (0xE501) smb_vwv[18]=27003 (0x697B) smb_vwv[19]=33578 (0x832A) smb_vwv[20]=52779 (0xCE2B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.875182, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.876999, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 96 [2013/05/23 17:28:59.877183, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x60 [2013/05/23 17:28:59.877242, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8046 of length 100 (0 toread) [2013/05/23 17:28:59.877289, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.877317, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14081 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=31 [2013/05/23 17:28:59.877751, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 00 00 .W.3.2.X .8.6... [2013/05/23 17:28:59.877884, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.877940, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.878006, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:28:59.878074, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.878170, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:28:59.878221, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.878267, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:28:59.878311, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:28:59.878393, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:28:59.878458, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:28:59.878521, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:28:59.878621, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:28:59.878689, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=., mask = W32X86 [2013/05/23 17:28:59.878745, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=. [2013/05/23 17:28:59.878797, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x1 [2013/05/23 17:28:59.878881, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2013/05/23 17:28:59.878936, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = W32X86, attr = 22 [2013/05/23 17:28:59.878985, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath=<.> dontdescend=<> [2013/05/23 17:28:59.879053, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x876e688 now at offset -1 [2013/05/23 17:28:59.879167, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: ./W32X86 [2013/05/23 17:28:59.879236, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.879289, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.879359, 3, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:28:59.879408, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[W32X86] found ./W32X86 fname=W32X86 (W32X86) [2013/05/23 17:28:59.879470, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:28:59.879519, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:28:59.879570, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:28:59.879617, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:28:59.879677, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:28:59.879728, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 24, paramsize = 10, datasize = 24 [2013/05/23 17:28:59.879776, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.879804, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=92 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14081 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2013/05/23 17:28:59.880214, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 18 00 00 ........ ........ [0010] 00 00 00 00 00 0C 00 00 00 57 00 33 00 32 00 58 ........ .W.3.2.X [0020] 00 38 00 36 00 .8.6. [2013/05/23 17:28:59.882084, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=W32X86 directory=. dirtype=22 numentries=1 [2013/05/23 17:28:59.882319, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:28:59.882451, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.882525, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.882574, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8047 of length 45 (0 toread) [2013/05/23 17:28:59.882621, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.882649, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=14145 smt_wct=3 smb_vwv[ 0]= 5632 (0x1600) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.882897, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.882940, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.882995, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.883051, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 5632 (numopen=2) [2013/05/23 17:28:59.883167, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.883225, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.883283, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:28:59.883347, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:28:59.883438, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.883490, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000036c1 (14017) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.868480 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x0000000067779600 (1735890432) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.884444, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xc423281d [2013/05/23 17:28:59.884502, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.884548, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.884958, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.885018, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:28:59.885074, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.885176, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.885247, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file . [2013/05/23 17:28:59.885310, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.885361, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.885497, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 90F1F054 [2013/05/23 17:28:59.885569, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x87ff450 [2013/05/23 17:28:59.885637, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 90F1F054 [2013/05/23 17:28:59.885689, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.885739, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.885802, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 5632 (2 used) [2013/05/23 17:28:59.885857, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.885885, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=14145 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.886148, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.887994, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 100 [2013/05/23 17:28:59.888182, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x64 [2013/05/23 17:28:59.888243, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8048 of length 104 (0 toread) [2013/05/23 17:28:59.888291, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.888319, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14209 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2013/05/23 17:28:59.888886, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 00 .\.W.3.2 .X.8.6.. [0010] 00 . [2013/05/23 17:28:59.889005, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.889062, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.889180, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = W32X86 [2013/05/23 17:28:59.889248, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:28:59.889325, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:28:59.889393, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:28:59.889456, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:28:59.889506, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86 reduced to /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.889554, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:28:59.889611, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:28:59.889671, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory W32X86, access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:28:59.889726, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x100001 [2013/05/23 17:28:59.889798, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.889848, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.889901, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 77DBE854 [2013/05/23 17:28:59.889966, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8cdda18 [2013/05/23 17:28:59.890081, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.890204, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '77DBE854' stored [2013/05/23 17:28:59.890261, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x77dbe854 (2010900564) open_persistent_id : 0x0000000077dbe854 (2010900564) open_volatile_id : 0x000000000000764f (30287) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.890863, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 77DBE854 [2013/05/23 17:28:59.891159, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.891286, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.891342, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.891371, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x77dbe854) stored [2013/05/23 17:28:59.891418, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000764f (30287) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x77dbe854 (2010900564) open_persistent_id : 0x0000000077dbe854 (2010900564) open_volatile_id : 0x000000000000764f (30287) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.892317, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 30287 (3 used) [2013/05/23 17:28:59.892382, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86 hash 0xed0f2ae2 [2013/05/23 17:28:59.892462, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name W32X86, flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:28:59.892538, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.892592, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.892648, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:28:59.892711, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca688 [2013/05/23 17:28:59.892785, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.892833, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003781 (14209) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.889774 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000d58ac4d1 (3582641361) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.836126631 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.893785, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:28:59.893853, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.893902, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.893952, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.894014, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.894063, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86 [2013/05/23 17:28:59.894159, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.894216, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.894340, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.894413, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003781 (14209) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.889774 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000d58ac4d1 (3582641361) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.836126631 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.895315, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 30287, open name = W32X86 [2013/05/23 17:28:59.895469, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.895540, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14209 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=20224 (0x4F00) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=62720 (0xF500) smb_vwv[ 6]=43726 (0xAACE) smb_vwv[ 7]=51773 (0xCA3D) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=62721 (0xF501) smb_vwv[10]=43726 (0xAACE) smb_vwv[11]=51773 (0xCA3D) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=45569 (0xB201) smb_vwv[14]=23684 (0x5C84) smb_vwv[15]=51775 (0xCA3F) smb_vwv[16]=52823 (0xCE57) smb_vwv[17]=45569 (0xB201) smb_vwv[18]=23684 (0x5C84) smb_vwv[19]=51775 (0xCA3F) smb_vwv[20]=52823 (0xCE57) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.896465, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.898195, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 122 [2013/05/23 17:28:59.898371, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7a [2013/05/23 17:28:59.898434, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8049 of length 126 (0 toread) [2013/05/23 17:28:59.898483, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.898511, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14273 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=57 [2013/05/23 17:28:59.898948, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 68 .W.3.2.X .8.6.\.h [0020] 00 70 00 7A 00 33 00 6D 00 35 00 6D 00 75 00 2E .p.z.3.m .5.m.u.. [0030] 00 67 00 70 00 64 00 00 00 .g.p.d.. . [2013/05/23 17:28:59.899191, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.899251, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.899317, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:28:59.899385, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.899448, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:28:59.899496, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.899543, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:28:59.899587, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:28:59.899687, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpz3m5mu.gpd" [2013/05/23 17:28:59.899757, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPZ3M5MU.GPD] -> [W32X86/hpz3m5mu.gpd] [2013/05/23 17:28:59.899824, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86/hpz3m5mu.gpd] [/usr/local/samba/var/print] [2013/05/23 17:28:59.899891, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:28:59.899955, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.900012, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:28:59.900069, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:28:59.903858, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:28:59.903930, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=W32X86, mask = hpz3m5mu.gpd [2013/05/23 17:28:59.903990, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=W32X86 [2013/05/23 17:28:59.904044, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x1 [2013/05/23 17:28:59.904163, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:28:59.904240, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.904310, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:28:59.904375, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:28:59.904527, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path W32X86, expect_close = 1 [2013/05/23 17:28:59.904580, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = hpz3m5mu.gpd, attr = 22 [2013/05/23 17:28:59.904627, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath= dontdescend=<> [2013/05/23 17:28:59.904700, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x834c0d0 now at offset -1 [2013/05/23 17:28:59.904757, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.904845, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3m5mu.gpd attr = 0x20 [2013/05/23 17:28:59.904906, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3m5mu.gpd case 3 set btime Thu May 23 17:27:36 2013 [2013/05/23 17:28:59.904976, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.905025, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.905213, 10, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.905308, 1, pid=2404, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3m5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003601 (13825) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.846979 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) share_file_id : 0x000000000c2aaa51 (204122705) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x4a632ce7 (1248013543) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Sep 13 19:19:46 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.906274, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[hpz3m5mu.gpd] found W32X86/hpz3m5mu.gpd fname=hpz3m5mu.gpd (hpz3m5mu.gpd) [2013/05/23 17:28:59.906351, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:28:59.906402, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:28:59.906452, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:28:59.906500, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:28:59.906562, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 36, useable_space = 16582 [2013/05/23 17:28:59.906614, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 36, paramsize = 10, datasize = 36 [2013/05/23 17:28:59.906661, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.906704, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14273 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2013/05/23 17:28:59.907065, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 24 00 00 ........ .....$.. [0010] 00 00 00 00 00 18 00 00 00 68 00 70 00 7A 00 33 ........ .h.p.z.3 [0020] 00 6D 00 35 00 6D 00 75 00 2E 00 67 00 70 00 64 .m.5.m.u ...g.p.d [0030] 00 . [2013/05/23 17:28:59.908790, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=hpz3m5mu.gpd directory=W32X86 dirtype=22 numentries=1 [2013/05/23 17:28:59.909012, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:28:59.909203, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.909307, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.909360, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8050 of length 45 (0 toread) [2013/05/23 17:28:59.909406, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.909433, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=14337 smt_wct=3 smb_vwv[ 0]=30287 (0x764F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.909681, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.909724, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.909780, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.909834, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 30287 (numopen=2) [2013/05/23 17:28:59.909892, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.909942, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.909998, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:28:59.910062, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:28:59.910230, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.910294, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003781 (14209) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.889774 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000d58ac4d1 (3582641361) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.836126631 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.911549, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xed0f2ae2 [2013/05/23 17:28:59.911609, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.911655, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.836126631 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.912067, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.912179, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:28:59.912242, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.912292, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.912375, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file W32X86 [2013/05/23 17:28:59.912441, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.912493, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.912547, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 77DBE854 [2013/05/23 17:28:59.912607, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x84d0990 [2013/05/23 17:28:59.912772, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 77DBE854 [2013/05/23 17:28:59.912834, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.912884, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.912948, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 30287 (2 used) [2013/05/23 17:28:59.913005, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.913034, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=14337 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.913307, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.915228, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 77 [2013/05/23 17:28:59.915530, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d [2013/05/23 17:28:59.915603, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8051 of length 81 (0 toread) [2013/05/23 17:28:59.915652, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.915681, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=77 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14401 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 1 (0x1) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2013/05/23 17:28:59.916169, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 55 E9 F5 03 00 00 00 00 01 ...U.... .... [2013/05/23 17:28:59.916263, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.916321, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.916396, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:8199(call_trans2setfilepathinfo) call_trans2setfilepathinfo(8) W32X86/hpz3m5mu.gpd (fnum 59733) info_level=1013 totdata=1 [2013/05/23 17:28:59.916473, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:7775(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: W32X86/hpz3m5mu.gpd (fnum 59733) info_level=1013 totdata=1 [2013/05/23 17:28:59.916527, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.916615, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3m5mu.gpd attr = 0x20 [2013/05/23 17:28:59.916676, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3m5mu.gpd case 3 set btime Thu May 23 17:27:36 2013 [2013/05/23 17:28:59.916746, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.916796, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.916841, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5986(smb_set_file_disposition_info) smb_set_file_disposition_info: file W32X86/hpz3m5mu.gpd, dosmode = 32, delete_on_close = 1 [2013/05/23 17:28:59.916891, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1028(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum 59733, file W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.916945, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.916993, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.917048, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B847 [2013/05/23 17:28:59.917169, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca718 [2013/05/23 17:28:59.917277, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.917330, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3m5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003601 (13825) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.846979 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) share_file_id : 0x000000000c2aaa51 (204122705) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x4a632ce7 (1248013543) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Sep 13 19:19:46 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.918390, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.918444, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3m5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003601 (13825) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.846979 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) share_file_id : 0x000000000c2aaa51 (204122705) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x4a632ce7 (1248013543) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0x4a632ce7 (1248013543) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Thu Sep 13 19:19:46 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.921947, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B847 [2013/05/23 17:28:59.922025, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.922076, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.922171, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 16584 [2013/05/23 17:28:59.922222, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2013/05/23 17:28:59.922270, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.922299, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14401 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2013/05/23 17:28:59.922659, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 ... [2013/05/23 17:28:59.926202, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.926353, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.926408, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8052 of length 45 (0 toread) [2013/05/23 17:28:59.926455, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.926484, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=14465 smt_wct=3 smb_vwv[ 0]=59733 (0xE955) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.926734, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.926777, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.926833, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.926888, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close file fd=-1 fnum 59733 (numopen=1) [2013/05/23 17:28:59.926959, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:609(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2013/05/23 17:28:59.927026, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.927077, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.927169, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B847 [2013/05/23 17:28:59.927237, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:28:59.927344, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.927401, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3m5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003601 (13825) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.846979 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) share_file_id : 0x000000000c2aaa51 (204122705) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x4a632ce7 (1248013543) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0x4a632ce7 (1248013543) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Thu Sep 13 19:19:46 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.930896, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x4a632ce7 [2013/05/23 17:28:59.931148, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0x4a632ce7 [2013/05/23 17:28:59.931248, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:470(close_remove_share_mode) close_remove_share_mode: file W32X86/hpz3m5mu.gpd. Delete on close was set - deleting file. [2013/05/23 17:28:59.931313, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x4a632ce7 [2013/05/23 17:28:59.931382, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0x4a632ce7 [2013/05/23 17:28:59.931602, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.931787, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3m5mu.gpd' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b8 (673720) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Sep 13 19:19:46 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.932499, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.932576, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B847 [2013/05/23 17:28:59.932661, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.932716, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.932798, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/notify_internal.c:604(notify_trigger) notify_trigger called action=0x2, filter=0x1, path=/usr/local/samba/var/print/W32X86/hpz3m5mu.gpd [2013/05/23 17:28:59.933142, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:850(close_normal_file) MARINA\Administrator closed file W32X86/hpz3m5mu.gpd (numopen=0) NT_STATUS_OK [2013/05/23 17:28:59.933262, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.933315, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.933371, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key F5843B1C [2013/05/23 17:28:59.933432, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8a7a758 [2013/05/23 17:28:59.933499, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key F5843B1C [2013/05/23 17:28:59.933550, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.933598, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.933661, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 59733 (1 used) [2013/05/23 17:28:59.933725, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.933755, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=14465 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.933959, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.935593, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 126 [2013/05/23 17:28:59.935744, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7e [2013/05/23 17:28:59.935799, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8053 of length 130 (0 toread) [2013/05/23 17:28:59.935846, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.935874, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=126 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14529 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=10240 (0x2800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=43 [2013/05/23 17:28:59.936504, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0010] 00 68 00 70 00 6F 00 32 00 32 00 30 00 30 00 33 .h.p.o.2 .2.0.0.3 [0020] 00 2E 00 65 00 78 00 70 00 00 00 ...e.x.p ... [2013/05/23 17:28:59.936704, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.936765, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.936827, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = W32X86/hpo22003.exp [2013/05/23 17:28:59.936886, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpo22003.exp" [2013/05/23 17:28:59.936948, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPO22003.EXP] -> [W32X86/hpo22003.exp] [2013/05/23 17:28:59.937013, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/hpo22003.exp] [/usr/local/samba/var/print] [2013/05/23 17:28:59.937078, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/hpo22003.exp] -> [/usr/local/samba/var/print/W32X86/hpo22003.exp] [2013/05/23 17:28:59.937166, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/hpo22003.exp reduced to /usr/local/samba/var/print/W32X86/hpo22003.exp [2013/05/23 17:28:59.937218, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpo22003.exp [2013/05/23 17:28:59.937276, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpo22003.exp [2013/05/23 17:28:59.937359, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.937410, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.937464, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 25DBD12D [2013/05/23 17:28:59.937527, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8441ee0 [2013/05/23 17:28:59.937645, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.937803, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '25DBD12D' stored [2013/05/23 17:28:59.937863, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x25dbd12d (635162925) open_persistent_id : 0x0000000025dbd12d (635162925) open_volatile_id : 0x0000000000007e27 (32295) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.938605, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 25DBD12D [2013/05/23 17:28:59.938666, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.938717, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.938767, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.938796, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x25dbd12d) stored [2013/05/23 17:28:59.938841, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x00007e27 (32295) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x25dbd12d (635162925) open_persistent_id : 0x0000000025dbd12d (635162925) open_volatile_id : 0x0000000000007e27 (32295) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.939662, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 32295 (2 used) [2013/05/23 17:28:59.939724, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/hpo22003.exp hash 0xff167e2a [2013/05/23 17:28:59.939782, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:160(unix_mode) unix_mode(W32X86/hpo22003.exp) returning 0644 [2013/05/23 17:28:59.939831, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1977(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpo22003.exp, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0644 oplock_request=0 private_flags = 0x0 [2013/05/23 17:28:59.939886, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo22003.exp [2013/05/23 17:28:59.939983, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo22003.exp attr = 0x20 [2013/05/23 17:28:59.940048, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo22003.exp case 3 set btime Thu May 23 17:27:20 2013 [2013/05/23 17:28:59.940156, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.940211, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.940263, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2135(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpo22003.exp, after mapping access_mask=0x10080 [2013/05/23 17:28:59.940319, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.940476, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.940762, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000AE47 [2013/05/23 17:28:59.940841, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca948 [2013/05/23 17:28:59.940919, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:28:59.940973, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2:/usr/local/samba/var/lock/brlock.tdb 3: [2013/05/23 17:28:59.941029, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000AE47 [2013/05/23 17:28:59.941083, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85cac68 [2013/05/23 17:28:59.941180, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/brlock.c:1955(brl_get_locks_internal) brl_get_locks_internal: 0 current locks on file_id 802:a47ae:0 [2013/05/23 17:28:59.941241, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000AE47 [2013/05/23 17:28:59.941293, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:28:59.941358, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.941413, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1441(grant_fsp_oplock_type) grant_fsp_oplock_type: oplock type 0x10 on file W32X86/hpo22003.exp [2013/05/23 17:28:59.941464, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2424(open_file_ntcreate) calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x10080, open_access_mask = 0x10080 [2013/05/23 17:28:59.941516, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpo22003.exp. Granting 0x10080 [2013/05/23 17:28:59.941566, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:914(open_file) MARINA\Administrator opened file W32X86/hpo22003.exp read=No write=No (numopen=1) [2013/05/23 17:28:59.941618, 5, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/smbd/oplock.c:89(set_file_oplock) set_file_oplock: granted oplock on file W32X86/hpo22003.exp, 802:a47ae:0/2437635793, tv_sec = 519e35bb, tv_usec = e4d77 [2013/05/23 17:28:59.941680, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.941725, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo22003.exp' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000038c1 (14529) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.937335 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) share_file_id : 0x00000000914b5ed1 (2437635793) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xff167e2a (4279664170) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon Oct 22 15:55:22 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.942657, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000AE47 [2013/05/23 17:28:59.942739, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.942792, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.942845, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.942890, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.942939, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo22003.exp [2013/05/23 17:28:59.943139, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo22003.exp attr = 0x20 [2013/05/23 17:28:59.943254, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo22003.exp case 3 set btime Thu May 23 17:27:20 2013 [2013/05/23 17:28:59.943327, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.943379, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.944401, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.944520, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo22003.exp' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000038c1 (14529) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.937335 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) share_file_id : 0x00000000914b5ed1 (2437635793) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xff167e2a (4279664170) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon Oct 22 15:55:22 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.945558, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpo22003.exp. Granting 0x2 [2013/05/23 17:28:59.945626, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 32295, open name = W32X86/hpo22003.exp [2013/05/23 17:28:59.945680, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.945708, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14529 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 9984 (0x2700) smb_vwv[ 3]= 382 (0x17E) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=42240 (0xA500) smb_vwv[ 6]= 7002 (0x1B5A) smb_vwv[ 7]=51716 (0xCA04) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=34817 (0x8801) smb_vwv[10]=40407 (0x9DD7) smb_vwv[11]=51769 (0xCA39) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]= 1 (0x1) smb_vwv[14]=11457 (0x2CC1) smb_vwv[15]=45872 (0xB330) smb_vwv[16]=51220 (0xC814) smb_vwv[17]= 1 (0x1) smb_vwv[18]=11457 (0x2CC1) smb_vwv[19]=45872 (0xB330) smb_vwv[20]=51220 (0xC814) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 3328 (0xD00) smb_vwv[28]= 91 (0x5B) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.946589, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.947924, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:28:59.948265, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:28:59.948387, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8054 of length 76 (0 toread) [2013/05/23 17:28:59.948437, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.948466, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14593 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:28:59.948964, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 27 7E EE 03 ...'~.. [2013/05/23 17:28:59.949067, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.949160, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.949223, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2013/05/23 17:28:59.949352, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.949438, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo22003.exp' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000038c1 (14529) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.937335 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) share_file_id : 0x00000000914b5ed1 (2437635793) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xff167e2a (4279664170) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon Oct 22 15:55:22 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.950348, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xff167e2a [2013/05/23 17:28:59.950400, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpo22003.exp (fnum 32295) level=1006 call=7 total_data=0 [2013/05/23 17:28:59.950456, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpo22003.exp (fnum 32295) level=1006 max_data=8 [2013/05/23 17:28:59.950753, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo22003.exp [2013/05/23 17:28:59.950878, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo22003.exp attr = 0x20 [2013/05/23 17:28:59.950943, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo22003.exp case 3 set btime Thu May 23 17:27:20 2013 [2013/05/23 17:28:59.951013, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.951065, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.951170, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4790(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2013/05/23 17:28:59.951246, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 [2013/05/23 17:28:59.951296, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2013/05/23 17:28:59.951344, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.951373, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14593 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2013/05/23 17:28:59.951729, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 AE 47 0A 00 00 00 00 00 ......G. ..... [2013/05/23 17:28:59.953507, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:28:59.953654, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:28:59.953710, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8055 of length 76 (0 toread) [2013/05/23 17:28:59.953758, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.953787, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14657 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:28:59.954253, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 27 7E ED 03 ...'~.. [2013/05/23 17:28:59.954430, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.954495, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.954556, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2013/05/23 17:28:59.954680, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.954747, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo22003.exp' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000038c1 (14529) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.937335 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) share_file_id : 0x00000000914b5ed1 (2437635793) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xff167e2a (4279664170) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon Oct 22 15:55:22 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.955820, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xff167e2a [2013/05/23 17:28:59.955874, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpo22003.exp (fnum 32295) level=1005 call=7 total_data=0 [2013/05/23 17:28:59.955932, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpo22003.exp (fnum 32295) level=1005 max_data=24 [2013/05/23 17:28:59.955984, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo22003.exp [2013/05/23 17:28:59.956080, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo22003.exp attr = 0x20 [2013/05/23 17:28:59.956185, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo22003.exp case 3 set btime Thu May 23 17:27:20 2013 [2013/05/23 17:28:59.956258, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.956310, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.956370, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4648(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2013/05/23 17:28:59.956424, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:28:59.956472, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2013/05/23 17:28:59.956519, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.956548, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14657 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2013/05/23 17:28:59.956918, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 00 00 10 00 00 00 00 00 0D 5B 00 ........ ......[. [0010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2013/05/23 17:28:59.958567, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 88 [2013/05/23 17:28:59.958747, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x58 [2013/05/23 17:28:59.958811, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8056 of length 92 (0 toread) [2013/05/23 17:28:59.958860, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.958889, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14721 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2013/05/23 17:28:59.959509, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 00 00 .\... [2013/05/23 17:28:59.959593, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.959651, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.959711, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = [2013/05/23 17:28:59.959770, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "" [2013/05/23 17:28:59.959826, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:292(unix_convert) conversion finished "" -> . [2013/05/23 17:28:59.959873, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [.] [/usr/local/samba/var/print] [2013/05/23 17:28:59.959931, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:28:59.959980, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: . reduced to /usr/local/samba/var/print [2013/05/23 17:28:59.960028, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:28:59.960133, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:28:59.960199, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:28:59.960264, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x100001 [2013/05/23 17:28:59.960420, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.960511, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.961684, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 09762F58 [2013/05/23 17:28:59.961774, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x834c0d0 [2013/05/23 17:28:59.961899, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.961952, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '09762F58' stored [2013/05/23 17:28:59.962005, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x09762f58 (158740312) open_persistent_id : 0x0000000009762f58 (158740312) open_volatile_id : 0x00000000000036ca (14026) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.962629, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 09762F58 [2013/05/23 17:28:59.962686, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.962754, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.962807, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.962835, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x09762f58) stored [2013/05/23 17:28:59.962881, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x000036ca (14026) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x09762f58 (158740312) open_persistent_id : 0x0000000009762f58 (158740312) open_volatile_id : 0x00000000000036ca (14026) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.963765, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 14026 (3 used) [2013/05/23 17:28:59.963829, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/. hash 0xc423281d [2013/05/23 17:28:59.963893, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name ., flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:28:59.963958, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.964007, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.964065, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:28:59.964162, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8854178 [2013/05/23 17:28:59.964240, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.964308, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003981 (14721) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.960313 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x0000000076b1a9d6 (1991354838) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.965234, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:28:59.965301, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.965350, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.965472, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.965525, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.965574, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: . [2013/05/23 17:28:59.965637, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.965690, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.965819, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.965891, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003981 (14721) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.960313 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x0000000076b1a9d6 (1991354838) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.966844, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 14026, open name = . [2013/05/23 17:28:59.966900, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.966929, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14721 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=51712 (0xCA00) smb_vwv[ 3]= 310 (0x136) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=58624 (0xE500) smb_vwv[ 6]=27003 (0x697B) smb_vwv[ 7]=33578 (0x832A) smb_vwv[ 8]=52779 (0xCE2B) smb_vwv[ 9]=43777 (0xAB01) smb_vwv[10]=28123 (0x6DDB) smb_vwv[11]= 4015 (0xFAF) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=58625 (0xE501) smb_vwv[14]=27003 (0x697B) smb_vwv[15]=33578 (0x832A) smb_vwv[16]=52779 (0xCE2B) smb_vwv[17]=58625 (0xE501) smb_vwv[18]=27003 (0x697B) smb_vwv[19]=33578 (0x832A) smb_vwv[20]=52779 (0xCE2B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.967807, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.969559, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 96 [2013/05/23 17:28:59.969726, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x60 [2013/05/23 17:28:59.969782, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8057 of length 100 (0 toread) [2013/05/23 17:28:59.969830, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.969859, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14785 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=31 [2013/05/23 17:28:59.970330, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 00 00 .W.3.2.X .8.6... [2013/05/23 17:28:59.970466, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.970523, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.971070, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:28:59.971249, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.971314, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:28:59.971365, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.971411, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:28:59.971455, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:28:59.971538, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:28:59.971604, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:28:59.971668, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:28:59.971749, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:28:59.971813, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=., mask = W32X86 [2013/05/23 17:28:59.971867, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=. [2013/05/23 17:28:59.971934, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x1 [2013/05/23 17:28:59.972023, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2013/05/23 17:28:59.972079, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = W32X86, attr = 22 [2013/05/23 17:28:59.972190, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath=<.> dontdescend=<> [2013/05/23 17:28:59.972264, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x8cdda18 now at offset -1 [2013/05/23 17:28:59.972322, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: ./W32X86 [2013/05/23 17:28:59.972382, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.972433, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.972504, 3, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:28:59.972552, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[W32X86] found ./W32X86 fname=W32X86 (W32X86) [2013/05/23 17:28:59.972612, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:28:59.972660, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:28:59.972711, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:28:59.972758, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:28:59.972818, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:28:59.972869, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 24, paramsize = 10, datasize = 24 [2013/05/23 17:28:59.972916, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.972944, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=92 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14785 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2013/05/23 17:28:59.973369, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 18 00 00 ........ ........ [0010] 00 00 00 00 00 0C 00 00 00 57 00 33 00 32 00 58 ........ .W.3.2.X [0020] 00 38 00 36 00 .8.6. [2013/05/23 17:28:59.975083, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=W32X86 directory=. dirtype=22 numentries=1 [2013/05/23 17:28:59.975325, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:28:59.975599, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.975703, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.975755, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8058 of length 45 (0 toread) [2013/05/23 17:28:59.975802, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.975830, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=14849 smt_wct=3 smb_vwv[ 0]=14026 (0x36CA) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:28:59.976138, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.976193, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.976252, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.976308, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 14026 (numopen=2) [2013/05/23 17:28:59.976366, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.976414, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.976471, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:28:59.976536, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:28:59.976624, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.976678, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003981 (14721) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.960313 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x0000000076b1a9d6 (1991354838) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.977634, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xc423281d [2013/05/23 17:28:59.977693, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.977738, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:28:59.978202, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:28:59.978267, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:28:59.978325, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.978376, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.978440, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file . [2013/05/23 17:28:59.978503, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.978643, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.978710, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 09762F58 [2013/05/23 17:28:59.978774, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x84d0990 [2013/05/23 17:28:59.978841, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 09762F58 [2013/05/23 17:28:59.978893, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.978959, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.979025, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 14026 (2 used) [2013/05/23 17:28:59.979081, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.979186, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=14849 smt_wct=0 smb_bcc=0 [2013/05/23 17:28:59.979399, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.981368, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 100 [2013/05/23 17:28:59.981551, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x64 [2013/05/23 17:28:59.981607, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8059 of length 104 (0 toread) [2013/05/23 17:28:59.981656, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.981685, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14913 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2013/05/23 17:28:59.982308, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 00 .\.W.3.2 .X.8.6.. [0010] 00 . [2013/05/23 17:28:59.982435, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.982492, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.982553, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = W32X86 [2013/05/23 17:28:59.982614, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:28:59.982674, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:28:59.982738, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:28:59.982800, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:28:59.982867, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86 reduced to /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.982920, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:28:59.982979, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:28:59.983040, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory W32X86, access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:28:59.983146, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x100001 [2013/05/23 17:28:59.983237, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.983290, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:28:59.983345, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key ABC45E38 [2013/05/23 17:28:59.983409, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x834c0d0 [2013/05/23 17:28:59.983601, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:28:59.983685, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'ABC45E38' stored [2013/05/23 17:28:59.983743, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xabc45e38 (2881773112) open_persistent_id : 0x00000000abc45e38 (2881773112) open_volatile_id : 0x000000000000b18f (45455) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:28:59.984410, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key ABC45E38 [2013/05/23 17:28:59.984472, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:28:59.984522, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.984572, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:28:59.984601, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xabc45e38) stored [2013/05/23 17:28:59.984646, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000b18f (45455) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xabc45e38 (2881773112) open_persistent_id : 0x00000000abc45e38 (2881773112) open_volatile_id : 0x000000000000b18f (45455) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:28:59.985528, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 45455 (3 used) [2013/05/23 17:28:59.985595, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86 hash 0xed0f2ae2 [2013/05/23 17:28:59.985658, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name W32X86, flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:28:59.985721, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.985771, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:28:59.985843, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:28:59.985909, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88541f8 [2013/05/23 17:28:59.985983, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:28:59.986033, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003a41 (14913) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.983213 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000f7c1dc45 (4156677189) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.930138579 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:28:59.987036, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:28:59.987162, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:28:59.987239, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:28:59.987293, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:28:59.987338, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:28:59.987388, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86 [2013/05/23 17:28:59.987450, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:28:59.987502, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:28:59.987732, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.987833, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003a41 (14913) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.983213 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000f7c1dc45 (4156677189) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.930138579 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.988843, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 45455, open name = W32X86 [2013/05/23 17:28:59.988903, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.988932, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14913 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=36608 (0x8F00) smb_vwv[ 3]= 433 (0x1B1) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=62720 (0xF500) smb_vwv[ 6]=43726 (0xAACE) smb_vwv[ 7]=51773 (0xCA3D) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=62721 (0xF501) smb_vwv[10]=43726 (0xAACE) smb_vwv[11]=51773 (0xCA3D) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]= 2305 (0x901) smb_vwv[14]=27357 (0x6ADD) smb_vwv[15]=51775 (0xCA3F) smb_vwv[16]=52823 (0xCE57) smb_vwv[17]= 2305 (0x901) smb_vwv[18]=27357 (0x6ADD) smb_vwv[19]=51775 (0xCA3F) smb_vwv[20]=52823 (0xCE57) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:28:59.989828, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:28:59.991841, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 122 [2013/05/23 17:28:59.991989, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7a [2013/05/23 17:28:59.992043, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8060 of length 126 (0 toread) [2013/05/23 17:28:59.992212, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.992286, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14977 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=57 [2013/05/23 17:28:59.992725, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 68 .W.3.2.X .8.6.\.h [0020] 00 70 00 6F 00 32 00 32 00 30 00 30 00 33 00 2E .p.o.2.2 .0.0.3.. [0030] 00 65 00 78 00 70 00 00 00 .e.x.p.. . [2013/05/23 17:28:59.992943, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:28:59.993001, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:28:59.993067, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:28:59.993169, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.993234, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:28:59.993397, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:28:59.993452, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:28:59.993497, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:28:59.993651, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpo22003.exp" [2013/05/23 17:28:59.993744, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPO22003.EXP] -> [W32X86/hpo22003.exp] [2013/05/23 17:28:59.993811, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86/hpo22003.exp] [/usr/local/samba/var/print] [2013/05/23 17:28:59.993901, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:28:59.993968, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.994026, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:28:59.994084, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:28:59.994223, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:28:59.994276, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=W32X86, mask = hpo22003.exp [2013/05/23 17:28:59.994333, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=W32X86 [2013/05/23 17:28:59.994499, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x1 [2013/05/23 17:28:59.994582, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:28:59.994647, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:28:59.994717, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:28:59.994782, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:28:59.994833, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path W32X86, expect_close = 1 [2013/05/23 17:28:59.994882, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = hpo22003.exp, attr = 22 [2013/05/23 17:28:59.994929, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath= dontdescend=<> [2013/05/23 17:28:59.995000, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x876e688 now at offset -1 [2013/05/23 17:28:59.995057, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo22003.exp [2013/05/23 17:28:59.995204, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo22003.exp attr = 0x20 [2013/05/23 17:28:59.995275, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo22003.exp case 3 set btime Thu May 23 17:27:20 2013 [2013/05/23 17:28:59.995346, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:28:59.995524, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:28:59.995655, 10, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:28:59.995717, 1, pid=2404, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo22003.exp' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000038c1 (14529) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.937335 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) share_file_id : 0x00000000914b5ed1 (2437635793) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xff167e2a (4279664170) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon Oct 22 15:55:22 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:28:59.996660, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[hpo22003.exp] found W32X86/hpo22003.exp fname=hpo22003.exp (hpo22003.exp) [2013/05/23 17:28:59.996745, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:28:59.996795, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:28:59.996847, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:28:59.996893, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:28:59.996956, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 36, useable_space = 16582 [2013/05/23 17:28:59.997007, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 36, paramsize = 10, datasize = 36 [2013/05/23 17:28:59.997053, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.997082, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=14977 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2013/05/23 17:28:59.997513, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 24 00 00 ........ .....$.. [0010] 00 00 00 00 00 18 00 00 00 68 00 70 00 6F 00 32 ........ .h.p.o.2 [0020] 00 32 00 30 00 30 00 33 00 2E 00 65 00 78 00 70 .2.0.0.3 ...e.x.p [0030] 00 . [2013/05/23 17:28:59.999285, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=hpo22003.exp directory=W32X86 dirtype=22 numentries=1 [2013/05/23 17:28:59.999469, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:28:59.999604, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:28:59.999680, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:28:59.999730, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8061 of length 45 (0 toread) [2013/05/23 17:28:59.999777, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:28:59.999804, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15041 smt_wct=3 smb_vwv[ 0]=45455 (0xB18F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.000054, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.000145, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.000220, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.000277, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 45455 (numopen=2) [2013/05/23 17:29:00.000336, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.004639, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.004800, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:29:00.004873, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:29:00.004965, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.005018, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003a41 (14913) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.983213 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x00000000f7c1dc45 (4156677189) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.930138579 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.006022, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xed0f2ae2 [2013/05/23 17:29:00.006081, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.006163, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:59 2013 CEST.930138579 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.006580, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.006643, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:29:00.006701, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.006750, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.006815, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file W32X86 [2013/05/23 17:29:00.006879, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.006929, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.006999, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key ABC45E38 [2013/05/23 17:29:00.007060, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8b1c440 [2013/05/23 17:29:00.007191, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key ABC45E38 [2013/05/23 17:29:00.007254, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.007304, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.007367, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 45455 (2 used) [2013/05/23 17:29:00.007422, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.007450, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15041 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.007656, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.010744, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 77 [2013/05/23 17:29:00.012072, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d [2013/05/23 17:29:00.012272, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8062 of length 81 (0 toread) [2013/05/23 17:29:00.012326, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.012356, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=77 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15105 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 1 (0x1) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2013/05/23 17:29:00.012790, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 27 7E F5 03 00 00 00 00 01 ...'~... .... [2013/05/23 17:29:00.012878, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.012935, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.013010, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:8199(call_trans2setfilepathinfo) call_trans2setfilepathinfo(8) W32X86/hpo22003.exp (fnum 32295) info_level=1013 totdata=1 [2013/05/23 17:29:00.013070, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:7775(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: W32X86/hpo22003.exp (fnum 32295) info_level=1013 totdata=1 [2013/05/23 17:29:00.013192, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpo22003.exp [2013/05/23 17:29:00.013289, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpo22003.exp attr = 0x20 [2013/05/23 17:29:00.013370, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpo22003.exp case 3 set btime Thu May 23 17:27:20 2013 [2013/05/23 17:29:00.013442, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.013492, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.013537, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5986(smb_set_file_disposition_info) smb_set_file_disposition_info: file W32X86/hpo22003.exp, dosmode = 32, delete_on_close = 1 [2013/05/23 17:29:00.013587, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1028(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum 32295, file W32X86/hpo22003.exp [2013/05/23 17:29:00.013643, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.013691, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.013746, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000AE47 [2013/05/23 17:29:00.013811, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8854288 [2013/05/23 17:29:00.013895, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.014029, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo22003.exp' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000038c1 (14529) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.937335 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) share_file_id : 0x00000000914b5ed1 (2437635793) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xff167e2a (4279664170) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon Oct 22 15:55:22 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.015001, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.015054, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo22003.exp' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000038c1 (14529) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.937335 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) share_file_id : 0x00000000914b5ed1 (2437635793) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xff167e2a (4279664170) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xff167e2a (4279664170) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Mon Oct 22 15:55:22 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.018023, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000AE47 [2013/05/23 17:29:00.018129, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.018187, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.018246, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 16584 [2013/05/23 17:29:00.018296, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2013/05/23 17:29:00.018345, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.018374, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15105 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2013/05/23 17:29:00.018734, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 ... [2013/05/23 17:29:00.020281, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.020516, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.020580, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8063 of length 45 (0 toread) [2013/05/23 17:29:00.020628, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.020656, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15169 smt_wct=3 smb_vwv[ 0]=32295 (0x7E27) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.021638, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.021787, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.021855, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.021913, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close file fd=-1 fnum 32295 (numopen=1) [2013/05/23 17:29:00.021969, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:609(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2013/05/23 17:29:00.022035, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.022125, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.022212, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000AE47 [2013/05/23 17:29:00.022280, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:29:00.022389, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.022447, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo22003.exp' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000038c1 (14529) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:28:59 2013 CEST.937335 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) share_file_id : 0x00000000914b5ed1 (2437635793) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xff167e2a (4279664170) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xff167e2a (4279664170) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Mon Oct 22 15:55:22 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.025297, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xff167e2a [2013/05/23 17:29:00.025353, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0xff167e2a [2013/05/23 17:29:00.025464, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:470(close_remove_share_mode) close_remove_share_mode: file W32X86/hpo22003.exp. Delete on close was set - deleting file. [2013/05/23 17:29:00.025526, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xff167e2a [2013/05/23 17:29:00.025573, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0xff167e2a [2013/05/23 17:29:00.025733, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.025816, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpo22003.exp' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47ae (673710) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Mon Oct 22 15:55:22 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.026306, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.026372, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000AE47 [2013/05/23 17:29:00.026430, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.026479, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.026535, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/notify_internal.c:604(notify_trigger) notify_trigger called action=0x2, filter=0x1, path=/usr/local/samba/var/print/W32X86/hpo22003.exp [2013/05/23 17:29:00.026671, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:850(close_normal_file) MARINA\Administrator closed file W32X86/hpo22003.exp (numopen=0) NT_STATUS_OK [2013/05/23 17:29:00.026743, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.026793, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.026865, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 25DBD12D [2013/05/23 17:29:00.026925, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8a7a758 [2013/05/23 17:29:00.026992, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 25DBD12D [2013/05/23 17:29:00.027045, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.027145, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.027222, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 32295 (1 used) [2013/05/23 17:29:00.027288, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.027319, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15169 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.027526, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.029564, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 126 [2013/05/23 17:29:00.029728, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7e [2013/05/23 17:29:00.029784, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8064 of length 130 (0 toread) [2013/05/23 17:29:00.029831, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.029859, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=126 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15233 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=10240 (0x2800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=43 [2013/05/23 17:29:00.030487, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0010] 00 68 00 70 00 75 00 61 00 63 00 35 00 6D 00 75 .h.p.u.a .c.5.m.u [0020] 00 2E 00 64 00 6C 00 6C 00 00 00 ...d.l.l ... [2013/05/23 17:29:00.030668, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.030726, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.030789, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = W32X86/hpuac5mu.dll [2013/05/23 17:29:00.030866, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpuac5mu.dll" [2013/05/23 17:29:00.030931, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPUAC5MU.DLL] -> [W32X86/hpuac5mu.dll] [2013/05/23 17:29:00.030997, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/hpuac5mu.dll] [/usr/local/samba/var/print] [2013/05/23 17:29:00.031342, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/hpuac5mu.dll] -> [/usr/local/samba/var/print/W32X86/hpuac5mu.dll] [2013/05/23 17:29:00.031433, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/hpuac5mu.dll reduced to /usr/local/samba/var/print/W32X86/hpuac5mu.dll [2013/05/23 17:29:00.031486, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpuac5mu.dll [2013/05/23 17:29:00.031548, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpuac5mu.dll [2013/05/23 17:29:00.031634, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.031686, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.031741, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 42AFFA50 [2013/05/23 17:29:00.031805, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x90cca48 [2013/05/23 17:29:00.031920, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.031973, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '42AFFA50' stored [2013/05/23 17:29:00.032026, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x42affa50 (1118829136) open_persistent_id : 0x0000000042affa50 (1118829136) open_volatile_id : 0x000000000000bc86 (48262) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.032669, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 42AFFA50 [2013/05/23 17:29:00.032730, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.032780, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.032830, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.032860, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x42affa50) stored [2013/05/23 17:29:00.032905, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000bc86 (48262) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x42affa50 (1118829136) open_persistent_id : 0x0000000042affa50 (1118829136) open_volatile_id : 0x000000000000bc86 (48262) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.033695, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 48262 (2 used) [2013/05/23 17:29:00.033756, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/hpuac5mu.dll hash 0x180bc087 [2013/05/23 17:29:00.033827, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:160(unix_mode) unix_mode(W32X86/hpuac5mu.dll) returning 0644 [2013/05/23 17:29:00.033880, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1977(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpuac5mu.dll, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0644 oplock_request=0 private_flags = 0x0 [2013/05/23 17:29:00.033934, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpuac5mu.dll [2013/05/23 17:29:00.034031, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpuac5mu.dll attr = 0x20 [2013/05/23 17:29:00.034198, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpuac5mu.dll case 3 set btime Thu May 23 17:27:32 2013 [2013/05/23 17:29:00.034299, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.034354, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.034407, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2135(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpuac5mu.dll, after mapping access_mask=0x10080 [2013/05/23 17:29:00.034464, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.034512, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.034569, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B647 [2013/05/23 17:29:00.034631, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88544b8 [2013/05/23 17:29:00.034705, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:29:00.034758, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2:/usr/local/samba/var/lock/brlock.tdb 3: [2013/05/23 17:29:00.034813, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B647 [2013/05/23 17:29:00.034867, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88547d8 [2013/05/23 17:29:00.034916, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/brlock.c:1955(brl_get_locks_internal) brl_get_locks_internal: 0 current locks on file_id 802:a47b6:0 [2013/05/23 17:29:00.034973, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B647 [2013/05/23 17:29:00.035024, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:29:00.035072, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.035161, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1441(grant_fsp_oplock_type) grant_fsp_oplock_type: oplock type 0x10 on file W32X86/hpuac5mu.dll [2013/05/23 17:29:00.035214, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2424(open_file_ntcreate) calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x10080, open_access_mask = 0x10080 [2013/05/23 17:29:00.035291, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpuac5mu.dll. Granting 0x10080 [2013/05/23 17:29:00.035344, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:914(open_file) MARINA\Administrator opened file W32X86/hpuac5mu.dll read=No write=No (numopen=1) [2013/05/23 17:29:00.035522, 5, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/smbd/oplock.c:89(set_file_oplock) set_file_oplock: granted oplock on file W32X86/hpuac5mu.dll, 802:a47b6:0/1963130381, tv_sec = 519e35bc, tv_usec = 7b79 [2013/05/23 17:29:00.035608, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.035656, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpuac5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003b81 (15233) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.31609 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) share_file_id : 0x000000007502fe0d (1963130381) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x180bc087 (403423367) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Tue Jul 31 13:52:28 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.036606, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B647 [2013/05/23 17:29:00.036675, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.036725, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.036776, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.036823, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.036889, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpuac5mu.dll [2013/05/23 17:29:00.036989, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpuac5mu.dll attr = 0x20 [2013/05/23 17:29:00.037055, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpuac5mu.dll case 3 set btime Thu May 23 17:27:32 2013 [2013/05/23 17:29:00.037201, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.037260, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.037366, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.037422, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpuac5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003b81 (15233) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.31609 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) share_file_id : 0x000000007502fe0d (1963130381) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x180bc087 (403423367) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Tue Jul 31 13:52:28 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.038438, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpuac5mu.dll. Granting 0x2 [2013/05/23 17:29:00.038495, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 48262, open name = W32X86/hpuac5mu.dll [2013/05/23 17:29:00.038548, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.038576, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15233 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=34304 (0x8600) smb_vwv[ 3]= 444 (0x1BC) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=17216 (0x4340) smb_vwv[ 7]=51723 (0xCA0B) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=10753 (0x2A01) smb_vwv[10]=38356 (0x95D4) smb_vwv[11]=51770 (0xCA3A) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]= 1 (0x1) smb_vwv[14]=42086 (0xA466) smb_vwv[15]=26948 (0x6944) smb_vwv[16]=51155 (0xC7D3) smb_vwv[17]= 1 (0x1) smb_vwv[18]=42086 (0xA466) smb_vwv[19]=26948 (0x6944) smb_vwv[20]=51155 (0xC7D3) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 224 (0xE0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.039548, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.040764, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:29:00.040913, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:29:00.040968, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8065 of length 76 (0 toread) [2013/05/23 17:29:00.041036, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.041068, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15297 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:29:00.041834, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 86 BC EE 03 ....... [2013/05/23 17:29:00.041939, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.041997, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.042058, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2013/05/23 17:29:00.042225, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.042297, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpuac5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003b81 (15233) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.31609 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) share_file_id : 0x000000007502fe0d (1963130381) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x180bc087 (403423367) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Tue Jul 31 13:52:28 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.043231, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x180bc087 [2013/05/23 17:29:00.043283, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpuac5mu.dll (fnum 48262) level=1006 call=7 total_data=0 [2013/05/23 17:29:00.043340, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpuac5mu.dll (fnum 48262) level=1006 max_data=8 [2013/05/23 17:29:00.043392, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpuac5mu.dll [2013/05/23 17:29:00.044528, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpuac5mu.dll attr = 0x20 [2013/05/23 17:29:00.044607, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpuac5mu.dll case 3 set btime Thu May 23 17:27:32 2013 [2013/05/23 17:29:00.044680, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.044730, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.044791, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4790(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2013/05/23 17:29:00.044844, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 [2013/05/23 17:29:00.044890, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2013/05/23 17:29:00.044936, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.044982, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15297 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2013/05/23 17:29:00.045421, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 B6 47 0A 00 00 00 00 00 ......G. ..... [2013/05/23 17:29:00.047186, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:29:00.047345, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:29:00.047402, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8066 of length 76 (0 toread) [2013/05/23 17:29:00.047450, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.047480, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15361 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:29:00.047913, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 86 BC ED 03 ....... [2013/05/23 17:29:00.047995, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.048052, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.048144, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2013/05/23 17:29:00.048278, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.048347, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpuac5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003b81 (15233) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.31609 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) share_file_id : 0x000000007502fe0d (1963130381) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x180bc087 (403423367) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Tue Jul 31 13:52:28 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.049267, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x180bc087 [2013/05/23 17:29:00.049318, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpuac5mu.dll (fnum 48262) level=1005 call=7 total_data=0 [2013/05/23 17:29:00.049461, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpuac5mu.dll (fnum 48262) level=1005 max_data=24 [2013/05/23 17:29:00.049529, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpuac5mu.dll [2013/05/23 17:29:00.049628, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpuac5mu.dll attr = 0x20 [2013/05/23 17:29:00.049695, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpuac5mu.dll case 3 set btime Thu May 23 17:27:32 2013 [2013/05/23 17:29:00.049766, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.049817, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.049876, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4648(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2013/05/23 17:29:00.049929, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:29:00.049976, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2013/05/23 17:29:00.050023, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.050051, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15361 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2013/05/23 17:29:00.050446, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 00 00 10 00 00 00 00 00 00 E0 00 ........ ........ [0010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2013/05/23 17:29:00.052208, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 88 [2013/05/23 17:29:00.052369, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x58 [2013/05/23 17:29:00.052424, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8067 of length 92 (0 toread) [2013/05/23 17:29:00.052472, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.052500, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15425 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2013/05/23 17:29:00.053073, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 00 00 .\... [2013/05/23 17:29:00.053185, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.053244, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.053305, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = [2013/05/23 17:29:00.053365, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "" [2013/05/23 17:29:00.053421, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:292(unix_convert) conversion finished "" -> . [2013/05/23 17:29:00.053469, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [.] [/usr/local/samba/var/print] [2013/05/23 17:29:00.053526, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:29:00.053576, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: . reduced to /usr/local/samba/var/print [2013/05/23 17:29:00.053625, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:29:00.053682, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:29:00.053755, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:29:00.053814, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x100001 [2013/05/23 17:29:00.053887, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.053939, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.053993, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 58C173D1 [2013/05/23 17:29:00.054056, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x876e688 [2013/05/23 17:29:00.054314, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.054464, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '58C173D1' stored [2013/05/23 17:29:00.054524, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x58c173d1 (1489073105) open_persistent_id : 0x0000000058c173d1 (1489073105) open_volatile_id : 0x000000000000fe85 (65157) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.055145, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 58C173D1 [2013/05/23 17:29:00.055207, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.055257, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.055308, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.055336, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x58c173d1) stored [2013/05/23 17:29:00.055489, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000fe85 (65157) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x58c173d1 (1489073105) open_persistent_id : 0x0000000058c173d1 (1489073105) open_volatile_id : 0x000000000000fe85 (65157) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.056348, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 65157 (3 used) [2013/05/23 17:29:00.056422, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/. hash 0xc423281d [2013/05/23 17:29:00.056487, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name ., flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:29:00.056551, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.056600, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.056658, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:29:00.056721, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca608 [2013/05/23 17:29:00.056794, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.056844, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003c41 (15425) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.53864 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000ead8cba7 (3940076455) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.057791, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:29:00.057859, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.057908, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.057960, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.058006, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.058054, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: . [2013/05/23 17:29:00.058145, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.058204, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.058324, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.058395, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003c41 (15425) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.53864 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000ead8cba7 (3940076455) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.059320, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 65157, open name = . [2013/05/23 17:29:00.059440, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.059492, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15425 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=34048 (0x8500) smb_vwv[ 3]= 510 (0x1FE) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=58624 (0xE500) smb_vwv[ 6]=27003 (0x697B) smb_vwv[ 7]=33578 (0x832A) smb_vwv[ 8]=52779 (0xCE2B) smb_vwv[ 9]=43777 (0xAB01) smb_vwv[10]=28123 (0x6DDB) smb_vwv[11]= 4015 (0xFAF) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=58625 (0xE501) smb_vwv[14]=27003 (0x697B) smb_vwv[15]=33578 (0x832A) smb_vwv[16]=52779 (0xCE2B) smb_vwv[17]=58625 (0xE501) smb_vwv[18]=27003 (0x697B) smb_vwv[19]=33578 (0x832A) smb_vwv[20]=52779 (0xCE2B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.060433, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.063786, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 96 [2013/05/23 17:29:00.063936, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x60 [2013/05/23 17:29:00.063990, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8068 of length 100 (0 toread) [2013/05/23 17:29:00.064037, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.064065, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15489 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=31 [2013/05/23 17:29:00.064576, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 00 00 .W.3.2.X .8.6... [2013/05/23 17:29:00.064717, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.064775, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.064842, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:29:00.064909, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.064970, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.065019, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.065066, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.065141, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.065228, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:29:00.065294, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:29:00.065357, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:29:00.065604, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:29:00.065682, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=., mask = W32X86 [2013/05/23 17:29:00.065740, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=. [2013/05/23 17:29:00.065792, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x1 [2013/05/23 17:29:00.065876, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2013/05/23 17:29:00.065931, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = W32X86, attr = 22 [2013/05/23 17:29:00.065980, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath=<.> dontdescend=<> [2013/05/23 17:29:00.066068, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x834c0d0 now at offset -1 [2013/05/23 17:29:00.066194, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: ./W32X86 [2013/05/23 17:29:00.066261, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.066314, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.066385, 3, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:29:00.066433, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[W32X86] found ./W32X86 fname=W32X86 (W32X86) [2013/05/23 17:29:00.066494, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:29:00.066542, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:29:00.066593, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:29:00.066639, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:29:00.066698, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:29:00.066748, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 24, paramsize = 10, datasize = 24 [2013/05/23 17:29:00.066796, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.066825, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=92 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15489 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2013/05/23 17:29:00.067234, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 18 00 00 ........ ........ [0010] 00 00 00 00 00 0C 00 00 00 57 00 33 00 32 00 58 ........ .W.3.2.X [0020] 00 38 00 36 00 .8.6. [2013/05/23 17:29:00.069335, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=W32X86 directory=. dirtype=22 numentries=1 [2013/05/23 17:29:00.069538, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.069676, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.069752, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.069803, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8069 of length 45 (0 toread) [2013/05/23 17:29:00.069851, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.069879, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15553 smt_wct=3 smb_vwv[ 0]=65157 (0xFE85) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.070221, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.070275, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.070334, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.070391, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 65157 (numopen=2) [2013/05/23 17:29:00.070450, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.070582, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.070652, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:29:00.070718, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:29:00.070941, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.071010, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003c41 (15425) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.53864 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000ead8cba7 (3940076455) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.072583, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xc423281d [2013/05/23 17:29:00.072645, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.072691, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.073161, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.073233, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:29:00.073292, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.073343, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.073408, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file . [2013/05/23 17:29:00.073472, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.073523, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.073577, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 58C173D1 [2013/05/23 17:29:00.073635, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8b1c440 [2013/05/23 17:29:00.073700, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 58C173D1 [2013/05/23 17:29:00.073751, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.073799, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.073858, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 65157 (2 used) [2013/05/23 17:29:00.073912, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.073941, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15553 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.074215, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.076015, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 100 [2013/05/23 17:29:00.076214, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x64 [2013/05/23 17:29:00.076273, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8070 of length 104 (0 toread) [2013/05/23 17:29:00.076322, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.076351, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15617 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2013/05/23 17:29:00.076921, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 00 .\.W.3.2 .X.8.6.. [0010] 00 . [2013/05/23 17:29:00.077041, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.077142, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.077218, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = W32X86 [2013/05/23 17:29:00.077280, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:29:00.077342, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:29:00.077407, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:29:00.077469, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:29:00.077529, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86 reduced to /usr/local/samba/var/print/W32X86 [2013/05/23 17:29:00.077580, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:29:00.077637, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:29:00.077716, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory W32X86, access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:29:00.077772, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x100001 [2013/05/23 17:29:00.077844, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.077895, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.077949, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C36312A3 [2013/05/23 17:29:00.078014, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x876e688 [2013/05/23 17:29:00.078193, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.078269, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'C36312A3' stored [2013/05/23 17:29:00.078325, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xc36312a3 (3278049955) open_persistent_id : 0x00000000c36312a3 (3278049955) open_volatile_id : 0x000000000000cb00 (51968) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.078903, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C36312A3 [2013/05/23 17:29:00.078959, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.079009, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.079059, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.079151, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xc36312a3) stored [2013/05/23 17:29:00.079213, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000cb00 (51968) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xc36312a3 (3278049955) open_persistent_id : 0x00000000c36312a3 (3278049955) open_volatile_id : 0x000000000000cb00 (51968) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.079976, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 51968 (3 used) [2013/05/23 17:29:00.080038, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86 hash 0xed0f2ae2 [2013/05/23 17:29:00.080141, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name W32X86, flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:29:00.080220, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.080273, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.080447, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:29:00.080526, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca688 [2013/05/23 17:29:00.080604, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.080733, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003d01 (15617) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.77821 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x000000006d7b28f7 (1836787959) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.24150528 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.082424, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:29:00.082496, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.082547, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.082598, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.082642, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.082691, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86 [2013/05/23 17:29:00.082755, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.082807, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.082929, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.083000, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003d01 (15617) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.77821 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x000000006d7b28f7 (1836787959) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.24150528 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.083925, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 51968, open name = W32X86 [2013/05/23 17:29:00.083982, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.084011, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15617 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 459 (0x1CB) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=62720 (0xF500) smb_vwv[ 6]=43726 (0xAACE) smb_vwv[ 7]=51773 (0xCA3D) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=62721 (0xF501) smb_vwv[10]=43726 (0xAACE) smb_vwv[11]=51773 (0xCA3D) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=24833 (0x6101) smb_vwv[14]=31029 (0x7935) smb_vwv[15]=51775 (0xCA3F) smb_vwv[16]=52823 (0xCE57) smb_vwv[17]=24833 (0x6101) smb_vwv[18]=31029 (0x7935) smb_vwv[19]=51775 (0xCA3F) smb_vwv[20]=52823 (0xCE57) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.084895, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.086911, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 122 [2013/05/23 17:29:00.087061, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7a [2013/05/23 17:29:00.087170, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8071 of length 126 (0 toread) [2013/05/23 17:29:00.087224, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.087252, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15681 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=57 [2013/05/23 17:29:00.087780, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 68 .W.3.2.X .8.6.\.h [0020] 00 70 00 75 00 61 00 63 00 35 00 6D 00 75 00 2E .p.u.a.c .5.m.u.. [0030] 00 64 00 6C 00 6C 00 00 00 .d.l.l.. . [2013/05/23 17:29:00.088003, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.088062, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.088160, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:29:00.088232, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.088293, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.088343, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.088389, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.088433, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.088515, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpuac5mu.dll" [2013/05/23 17:29:00.088581, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPUAC5MU.DLL] -> [W32X86/hpuac5mu.dll] [2013/05/23 17:29:00.088645, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86/hpuac5mu.dll] [/usr/local/samba/var/print] [2013/05/23 17:29:00.088715, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:29:00.088779, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:29:00.088835, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:29:00.088909, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:29:00.088974, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:29:00.089024, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=W32X86, mask = hpuac5mu.dll [2013/05/23 17:29:00.089080, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=W32X86 [2013/05/23 17:29:00.089199, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x1 [2013/05/23 17:29:00.089267, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:29:00.089328, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:29:00.089396, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:29:00.089460, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:29:00.089510, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path W32X86, expect_close = 1 [2013/05/23 17:29:00.089558, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = hpuac5mu.dll, attr = 22 [2013/05/23 17:29:00.089605, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath= dontdescend=<> [2013/05/23 17:29:00.089676, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x8cdda18 now at offset -1 [2013/05/23 17:29:00.089733, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpuac5mu.dll [2013/05/23 17:29:00.089822, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpuac5mu.dll attr = 0x20 [2013/05/23 17:29:00.089883, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpuac5mu.dll case 3 set btime Thu May 23 17:27:32 2013 [2013/05/23 17:29:00.089954, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.090004, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.090162, 10, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.090250, 1, pid=2404, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpuac5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003b81 (15233) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.31609 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) share_file_id : 0x000000007502fe0d (1963130381) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x180bc087 (403423367) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Tue Jul 31 13:52:28 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.091812, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[hpuac5mu.dll] found W32X86/hpuac5mu.dll fname=hpuac5mu.dll (hpuac5mu.dll) [2013/05/23 17:29:00.091896, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:29:00.091947, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:29:00.091998, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:29:00.092045, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:29:00.092172, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 36, useable_space = 16582 [2013/05/23 17:29:00.092258, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 36, paramsize = 10, datasize = 36 [2013/05/23 17:29:00.092309, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.092338, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15681 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2013/05/23 17:29:00.092695, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 24 00 00 ........ .....$.. [0010] 00 00 00 00 00 18 00 00 00 68 00 70 00 75 00 61 ........ .h.p.u.a [0020] 00 63 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C .c.5.m.u ...d.l.l [0030] 00 . [2013/05/23 17:29:00.094516, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=hpuac5mu.dll directory=W32X86 dirtype=22 numentries=1 [2013/05/23 17:29:00.094688, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.094838, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.094916, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.094967, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8072 of length 45 (0 toread) [2013/05/23 17:29:00.095014, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.095043, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15745 smt_wct=3 smb_vwv[ 0]=51968 (0xCB00) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.095351, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.095514, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.095599, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.095657, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 51968 (numopen=2) [2013/05/23 17:29:00.095782, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.095843, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.095900, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:29:00.095965, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:29:00.096052, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.096158, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003d01 (15617) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.77821 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x000000006d7b28f7 (1836787959) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.24150528 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.097056, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xed0f2ae2 [2013/05/23 17:29:00.097171, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.097226, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.24150528 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.097642, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.097704, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:29:00.097762, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.097812, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.097876, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file W32X86 [2013/05/23 17:29:00.097940, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.097991, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.098044, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key C36312A3 [2013/05/23 17:29:00.098150, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8b49f58 [2013/05/23 17:29:00.098240, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key C36312A3 [2013/05/23 17:29:00.098295, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.098361, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.098427, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 51968 (2 used) [2013/05/23 17:29:00.098482, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.098511, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15745 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.098727, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.100564, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 77 [2013/05/23 17:29:00.100743, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d [2013/05/23 17:29:00.100890, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8073 of length 81 (0 toread) [2013/05/23 17:29:00.100946, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.100976, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=77 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15809 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 1 (0x1) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2013/05/23 17:29:00.101688, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 86 BC F5 03 00 00 00 00 01 ........ .... [2013/05/23 17:29:00.101797, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.101855, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.101930, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:8199(call_trans2setfilepathinfo) call_trans2setfilepathinfo(8) W32X86/hpuac5mu.dll (fnum 48262) info_level=1013 totdata=1 [2013/05/23 17:29:00.101988, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:7775(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: W32X86/hpuac5mu.dll (fnum 48262) info_level=1013 totdata=1 [2013/05/23 17:29:00.102040, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpuac5mu.dll [2013/05/23 17:29:00.102186, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpuac5mu.dll attr = 0x20 [2013/05/23 17:29:00.102274, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpuac5mu.dll case 3 set btime Thu May 23 17:27:32 2013 [2013/05/23 17:29:00.102348, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.102400, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.102459, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5986(smb_set_file_disposition_info) smb_set_file_disposition_info: file W32X86/hpuac5mu.dll, dosmode = 32, delete_on_close = 1 [2013/05/23 17:29:00.102513, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1028(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum 48262, file W32X86/hpuac5mu.dll [2013/05/23 17:29:00.102569, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.102618, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.102673, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B647 [2013/05/23 17:29:00.102737, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca718 [2013/05/23 17:29:00.102823, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.102875, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpuac5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003b81 (15233) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.31609 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) share_file_id : 0x000000007502fe0d (1963130381) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x180bc087 (403423367) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Tue Jul 31 13:52:28 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.103808, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.103860, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpuac5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003b81 (15233) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.31609 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) share_file_id : 0x000000007502fe0d (1963130381) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x180bc087 (403423367) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0x180bc087 (403423367) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Tue Jul 31 13:52:28 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.106980, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B647 [2013/05/23 17:29:00.107056, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.107156, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.107220, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 16584 [2013/05/23 17:29:00.107270, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2013/05/23 17:29:00.107318, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.107346, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15809 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2013/05/23 17:29:00.107702, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 ... [2013/05/23 17:29:00.109514, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.109666, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.109721, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8074 of length 45 (0 toread) [2013/05/23 17:29:00.109769, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.109799, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15873 smt_wct=3 smb_vwv[ 0]=48262 (0xBC86) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.110047, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.110121, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.110188, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.110244, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close file fd=-1 fnum 48262 (numopen=1) [2013/05/23 17:29:00.110300, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:609(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2013/05/23 17:29:00.110365, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.110414, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.110470, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B647 [2013/05/23 17:29:00.110536, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:29:00.110642, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.110699, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpuac5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003b81 (15233) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.31609 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) share_file_id : 0x000000007502fe0d (1963130381) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x180bc087 (403423367) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0x180bc087 (403423367) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Tue Jul 31 13:52:28 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.116808, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x180bc087 [2013/05/23 17:29:00.116881, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0x180bc087 [2013/05/23 17:29:00.116937, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:470(close_remove_share_mode) close_remove_share_mode: file W32X86/hpuac5mu.dll. Delete on close was set - deleting file. [2013/05/23 17:29:00.116991, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x180bc087 [2013/05/23 17:29:00.117037, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0x180bc087 [2013/05/23 17:29:00.117231, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.117324, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpuac5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b6 (673718) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Tue Jul 31 13:52:28 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.117749, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.117813, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B647 [2013/05/23 17:29:00.117871, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.117921, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.117975, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/notify_internal.c:604(notify_trigger) notify_trigger called action=0x2, filter=0x1, path=/usr/local/samba/var/print/W32X86/hpuac5mu.dll [2013/05/23 17:29:00.118164, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:850(close_normal_file) MARINA\Administrator closed file W32X86/hpuac5mu.dll (numopen=0) NT_STATUS_OK [2013/05/23 17:29:00.118262, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.118316, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.118371, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 42AFFA50 [2013/05/23 17:29:00.118429, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8a7a758 [2013/05/23 17:29:00.118494, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 42AFFA50 [2013/05/23 17:29:00.118566, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.118617, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.118680, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 48262 (1 used) [2013/05/23 17:29:00.118747, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.118777, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=15873 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.118984, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.121609, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 126 [2013/05/23 17:29:00.121758, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7e [2013/05/23 17:29:00.121812, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8075 of length 130 (0 toread) [2013/05/23 17:29:00.121859, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.121887, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=126 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15937 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=10240 (0x2800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=43 [2013/05/23 17:29:00.122509, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0010] 00 68 00 70 00 7A 00 65 00 76 00 35 00 6D 00 75 .h.p.z.e .v.5.m.u [0020] 00 2E 00 64 00 6C 00 6C 00 00 00 ...d.l.l ... [2013/05/23 17:29:00.122688, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.122746, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.122808, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = W32X86/hpzev5mu.dll [2013/05/23 17:29:00.122868, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpzev5mu.dll" [2013/05/23 17:29:00.122930, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPZEV5MU.DLL] -> [W32X86/hpzev5mu.dll] [2013/05/23 17:29:00.122996, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/hpzev5mu.dll] [/usr/local/samba/var/print] [2013/05/23 17:29:00.123080, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/hpzev5mu.dll] -> [/usr/local/samba/var/print/W32X86/hpzev5mu.dll] [2013/05/23 17:29:00.123198, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/hpzev5mu.dll reduced to /usr/local/samba/var/print/W32X86/hpzev5mu.dll [2013/05/23 17:29:00.123251, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpzev5mu.dll [2013/05/23 17:29:00.123312, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpzev5mu.dll [2013/05/23 17:29:00.123397, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.123449, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.123504, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 06580A08 [2013/05/23 17:29:00.123568, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8441ee0 [2013/05/23 17:29:00.123682, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.123734, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '06580A08' stored [2013/05/23 17:29:00.123788, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x06580a08 (106433032) open_persistent_id : 0x0000000006580a08 (106433032) open_volatile_id : 0x000000000000cf49 (53065) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.124425, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 06580A08 [2013/05/23 17:29:00.124487, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.124537, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.124587, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.124617, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x06580a08) stored [2013/05/23 17:29:00.124663, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000cf49 (53065) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x06580a08 (106433032) open_persistent_id : 0x0000000006580a08 (106433032) open_volatile_id : 0x000000000000cf49 (53065) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.125529, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 53065 (2 used) [2013/05/23 17:29:00.125593, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/hpzev5mu.dll hash 0xf5249fa0 [2013/05/23 17:29:00.125650, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:160(unix_mode) unix_mode(W32X86/hpzev5mu.dll) returning 0644 [2013/05/23 17:29:00.125698, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1977(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpzev5mu.dll, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0644 oplock_request=0 private_flags = 0x0 [2013/05/23 17:29:00.125752, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzev5mu.dll [2013/05/23 17:29:00.125945, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzev5mu.dll attr = 0x20 [2013/05/23 17:29:00.126056, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzev5mu.dll case 3 set btime Thu May 23 17:27:44 2013 [2013/05/23 17:29:00.126165, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.126219, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.126271, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2135(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpzev5mu.dll, after mapping access_mask=0x10080 [2013/05/23 17:29:00.126328, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.126378, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.126435, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BB47 [2013/05/23 17:29:00.126497, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca948 [2013/05/23 17:29:00.126572, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:29:00.126625, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2:/usr/local/samba/var/lock/brlock.tdb 3: [2013/05/23 17:29:00.126680, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BB47 [2013/05/23 17:29:00.126734, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85cac68 [2013/05/23 17:29:00.126783, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/brlock.c:1955(brl_get_locks_internal) brl_get_locks_internal: 0 current locks on file_id 802:a47bb:0 [2013/05/23 17:29:00.126840, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BB47 [2013/05/23 17:29:00.126890, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:29:00.126937, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.126989, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1441(grant_fsp_oplock_type) grant_fsp_oplock_type: oplock type 0x10 on file W32X86/hpzev5mu.dll [2013/05/23 17:29:00.127038, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2424(open_file_ntcreate) calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x10080, open_access_mask = 0x10080 [2013/05/23 17:29:00.127126, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpzev5mu.dll. Granting 0x10080 [2013/05/23 17:29:00.127186, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:914(open_file) MARINA\Administrator opened file W32X86/hpzev5mu.dll read=No write=No (numopen=1) [2013/05/23 17:29:00.127248, 5, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/smbd/oplock.c:89(set_file_oplock) set_file_oplock: granted oplock on file W32X86/hpzev5mu.dll, 802:a47bb:0/2363810396, tv_sec = 519e35bc, tv_usec = 1e1ed [2013/05/23 17:29:00.127331, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.127379, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzev5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003e41 (15937) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.123373 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) share_file_id : 0x000000008ce4e25c (2363810396) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf5249fa0 (4112818080) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:22:40 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.128312, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BB47 [2013/05/23 17:29:00.128380, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.128430, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.128482, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.128527, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.128575, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzev5mu.dll [2013/05/23 17:29:00.128669, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzev5mu.dll attr = 0x20 [2013/05/23 17:29:00.128732, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzev5mu.dll case 3 set btime Thu May 23 17:27:44 2013 [2013/05/23 17:29:00.128820, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.128871, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.128971, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.129028, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzev5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003e41 (15937) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.123373 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) share_file_id : 0x000000008ce4e25c (2363810396) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf5249fa0 (4112818080) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:22:40 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.129939, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpzev5mu.dll. Granting 0x2 [2013/05/23 17:29:00.129993, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 53065, open name = W32X86/hpzev5mu.dll [2013/05/23 17:29:00.130046, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.130074, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=15937 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=18688 (0x4900) smb_vwv[ 3]= 463 (0x1CF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=48128 (0xBC00) smb_vwv[ 6]= 434 (0x1B2) smb_vwv[ 7]=51730 (0xCA12) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=20993 (0x5201) smb_vwv[10]=59394 (0xE802) smb_vwv[11]=51769 (0xCA39) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]= 1 (0x1) smb_vwv[14]=13576 (0x3508) smb_vwv[15]=13679 (0x356F) smb_vwv[16]=51219 (0xC813) smb_vwv[17]= 1 (0x1) smb_vwv[18]=13576 (0x3508) smb_vwv[19]=13679 (0x356F) smb_vwv[20]=51219 (0xC813) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 4096 (0x1000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 3088 (0xC10) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.131320, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.132444, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:29:00.132616, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:29:00.132673, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8076 of length 76 (0 toread) [2013/05/23 17:29:00.132721, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.132750, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16001 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:29:00.133295, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 49 CF EE 03 ...I... [2013/05/23 17:29:00.133392, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.133451, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.133513, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2013/05/23 17:29:00.133642, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.133709, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzev5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003e41 (15937) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.123373 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) share_file_id : 0x000000008ce4e25c (2363810396) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf5249fa0 (4112818080) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:22:40 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.134633, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xf5249fa0 [2013/05/23 17:29:00.134684, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpzev5mu.dll (fnum 53065) level=1006 call=7 total_data=0 [2013/05/23 17:29:00.134742, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpzev5mu.dll (fnum 53065) level=1006 max_data=8 [2013/05/23 17:29:00.134793, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzev5mu.dll [2013/05/23 17:29:00.134884, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzev5mu.dll attr = 0x20 [2013/05/23 17:29:00.134949, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzev5mu.dll case 3 set btime Thu May 23 17:27:44 2013 [2013/05/23 17:29:00.135020, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.135072, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.135166, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4790(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2013/05/23 17:29:00.135220, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 [2013/05/23 17:29:00.135268, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2013/05/23 17:29:00.135314, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.135343, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16001 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2013/05/23 17:29:00.135835, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 BB 47 0A 00 00 00 00 00 ......G. ..... [2013/05/23 17:29:00.137683, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:29:00.137826, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:29:00.137880, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8077 of length 76 (0 toread) [2013/05/23 17:29:00.137927, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.137956, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16065 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:29:00.138422, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 49 CF ED 03 ...I... [2013/05/23 17:29:00.138507, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.138565, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.138626, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2013/05/23 17:29:00.138755, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.138824, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzev5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003e41 (15937) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.123373 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) share_file_id : 0x000000008ce4e25c (2363810396) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf5249fa0 (4112818080) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:22:40 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.139737, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xf5249fa0 [2013/05/23 17:29:00.139789, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpzev5mu.dll (fnum 53065) level=1005 call=7 total_data=0 [2013/05/23 17:29:00.139845, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpzev5mu.dll (fnum 53065) level=1005 max_data=24 [2013/05/23 17:29:00.139897, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzev5mu.dll [2013/05/23 17:29:00.139989, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzev5mu.dll attr = 0x20 [2013/05/23 17:29:00.140051, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzev5mu.dll case 3 set btime Thu May 23 17:27:44 2013 [2013/05/23 17:29:00.140157, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.140209, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.140269, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4648(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2013/05/23 17:29:00.140408, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:29:00.140488, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2013/05/23 17:29:00.140537, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.140566, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16065 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2013/05/23 17:29:00.140920, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 0C ........ ........ [0010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2013/05/23 17:29:00.144406, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 88 [2013/05/23 17:29:00.144554, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x58 [2013/05/23 17:29:00.144609, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8078 of length 92 (0 toread) [2013/05/23 17:29:00.144658, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.144701, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16129 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2013/05/23 17:29:00.145306, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 00 00 .\... [2013/05/23 17:29:00.145441, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.145524, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.145587, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = [2013/05/23 17:29:00.145648, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "" [2013/05/23 17:29:00.145704, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:292(unix_convert) conversion finished "" -> . [2013/05/23 17:29:00.145752, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [.] [/usr/local/samba/var/print] [2013/05/23 17:29:00.145809, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:29:00.145858, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: . reduced to /usr/local/samba/var/print [2013/05/23 17:29:00.145906, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:29:00.146047, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:29:00.146177, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:29:00.146240, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x100001 [2013/05/23 17:29:00.146314, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.146381, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.146439, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key CDD3F68E [2013/05/23 17:29:00.146503, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8cdda18 [2013/05/23 17:29:00.146620, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.146670, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'CDD3F68E' stored [2013/05/23 17:29:00.146723, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xcdd3f68e (3453220494) open_persistent_id : 0x00000000cdd3f68e (3453220494) open_volatile_id : 0x00000000000013a5 (5029) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.147343, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key CDD3F68E [2013/05/23 17:29:00.147400, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.147450, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.147501, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.147529, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xcdd3f68e) stored [2013/05/23 17:29:00.147574, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x000013a5 (5029) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xcdd3f68e (3453220494) open_persistent_id : 0x00000000cdd3f68e (3453220494) open_volatile_id : 0x00000000000013a5 (5029) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.148393, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 5029 (3 used) [2013/05/23 17:29:00.148456, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/. hash 0xc423281d [2013/05/23 17:29:00.148519, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name ., flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:29:00.148583, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.148633, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.148691, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:29:00.148752, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8854178 [2013/05/23 17:29:00.148824, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.148874, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003f01 (16129) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.146290 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x000000007bb8c44e (2075706446) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.149813, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:29:00.149881, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.149931, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.149983, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.150029, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.150077, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: . [2013/05/23 17:29:00.150172, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.150227, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.150346, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.150414, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003f01 (16129) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.146290 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x000000007bb8c44e (2075706446) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.151694, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 5029, open name = . [2013/05/23 17:29:00.151753, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.151794, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16129 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=42240 (0xA500) smb_vwv[ 3]= 275 (0x113) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=58624 (0xE500) smb_vwv[ 6]=27003 (0x697B) smb_vwv[ 7]=33578 (0x832A) smb_vwv[ 8]=52779 (0xCE2B) smb_vwv[ 9]=43777 (0xAB01) smb_vwv[10]=28123 (0x6DDB) smb_vwv[11]= 4015 (0xFAF) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=58625 (0xE501) smb_vwv[14]=27003 (0x697B) smb_vwv[15]=33578 (0x832A) smb_vwv[16]=52779 (0xCE2B) smb_vwv[17]=58625 (0xE501) smb_vwv[18]=27003 (0x697B) smb_vwv[19]=33578 (0x832A) smb_vwv[20]=52779 (0xCE2B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.152672, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.154534, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 96 [2013/05/23 17:29:00.154703, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x60 [2013/05/23 17:29:00.154776, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8079 of length 100 (0 toread) [2013/05/23 17:29:00.154826, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.154854, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16193 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=31 [2013/05/23 17:29:00.155345, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 00 00 .W.3.2.X .8.6... [2013/05/23 17:29:00.155617, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.155691, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.155759, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:29:00.155828, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.155890, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.155940, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.156049, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.156144, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.156234, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:29:00.156303, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:29:00.156366, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:29:00.156447, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:29:00.156510, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=., mask = W32X86 [2013/05/23 17:29:00.156566, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=. [2013/05/23 17:29:00.156618, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x1 [2013/05/23 17:29:00.156701, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2013/05/23 17:29:00.156757, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = W32X86, attr = 22 [2013/05/23 17:29:00.156804, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath=<.> dontdescend=<> [2013/05/23 17:29:00.156873, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x876e688 now at offset -1 [2013/05/23 17:29:00.156929, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: ./W32X86 [2013/05/23 17:29:00.156988, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.157039, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.157184, 3, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:29:00.157246, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[W32X86] found ./W32X86 fname=W32X86 (W32X86) [2013/05/23 17:29:00.157312, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:29:00.157360, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:29:00.157412, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:29:00.157458, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:29:00.157520, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:29:00.157571, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 24, paramsize = 10, datasize = 24 [2013/05/23 17:29:00.157618, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.157647, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=92 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16193 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2013/05/23 17:29:00.158008, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 18 00 00 ........ ........ [0010] 00 00 00 00 00 0C 00 00 00 57 00 33 00 32 00 58 ........ .W.3.2.X [0020] 00 38 00 36 00 .8.6. [2013/05/23 17:29:00.159614, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=W32X86 directory=. dirtype=22 numentries=1 [2013/05/23 17:29:00.159814, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.159964, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.160042, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.160158, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8080 of length 45 (0 toread) [2013/05/23 17:29:00.160226, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.160256, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=16257 smt_wct=3 smb_vwv[ 0]= 5029 (0x13A5) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.160594, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.160651, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.160725, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.160785, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 5029 (numopen=2) [2013/05/23 17:29:00.160844, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.160893, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.160950, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:29:00.161713, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:29:00.161914, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.161974, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003f01 (16129) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.146290 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x000000007bb8c44e (2075706446) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.162920, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xc423281d [2013/05/23 17:29:00.162977, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.163022, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.163524, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.163590, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:29:00.163648, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.163697, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.163763, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file . [2013/05/23 17:29:00.163827, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.163879, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.163932, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key CDD3F68E [2013/05/23 17:29:00.163991, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8b49f58 [2013/05/23 17:29:00.164056, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key CDD3F68E [2013/05/23 17:29:00.164162, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.164220, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.164282, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 5029 (2 used) [2013/05/23 17:29:00.164338, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.164368, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=16257 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.164572, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.166640, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 100 [2013/05/23 17:29:00.166787, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x64 [2013/05/23 17:29:00.166841, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8081 of length 104 (0 toread) [2013/05/23 17:29:00.166906, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.166935, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16321 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2013/05/23 17:29:00.167562, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 00 .\.W.3.2 .X.8.6.. [0010] 00 . [2013/05/23 17:29:00.167688, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.167746, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.167817, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = W32X86 [2013/05/23 17:29:00.167877, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:29:00.167936, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:29:00.168000, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:29:00.168062, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:29:00.168168, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86 reduced to /usr/local/samba/var/print/W32X86 [2013/05/23 17:29:00.168223, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:29:00.168282, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:29:00.168343, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory W32X86, access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:29:00.168399, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x100001 [2013/05/23 17:29:00.168489, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.168542, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.168595, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key A87963A9 [2013/05/23 17:29:00.168659, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8cdda18 [2013/05/23 17:29:00.168775, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.168827, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'A87963A9' stored [2013/05/23 17:29:00.168879, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xa87963a9 (2826527657) open_persistent_id : 0x00000000a87963a9 (2826527657) open_volatile_id : 0x000000000000cf12 (53010) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.169529, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key A87963A9 [2013/05/23 17:29:00.169588, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.169638, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.169688, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.169717, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xa87963a9) stored [2013/05/23 17:29:00.169762, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000cf12 (53010) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xa87963a9 (2826527657) open_persistent_id : 0x00000000a87963a9 (2826527657) open_volatile_id : 0x000000000000cf12 (53010) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.170733, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 53010 (3 used) [2013/05/23 17:29:00.170808, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86 hash 0xed0f2ae2 [2013/05/23 17:29:00.170871, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name W32X86, flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:29:00.170934, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.170984, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.171560, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:29:00.171646, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88541f8 [2013/05/23 17:29:00.171724, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.171774, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003fc1 (16321) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.168465 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x000000007fe02385 (2145395589) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.116162222 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.172757, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:29:00.172825, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.172875, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.172926, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.172971, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.173020, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86 [2013/05/23 17:29:00.173081, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.173171, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.173298, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.173371, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003fc1 (16321) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.168465 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x000000007fe02385 (2145395589) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.116162222 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.174295, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 53010, open name = W32X86 [2013/05/23 17:29:00.174354, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.174384, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16321 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4608 (0x1200) smb_vwv[ 3]= 463 (0x1CF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=62720 (0xF500) smb_vwv[ 6]=43726 (0xAACE) smb_vwv[ 7]=51773 (0xCA3D) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=62721 (0xF501) smb_vwv[10]=43726 (0xAACE) smb_vwv[11]=51773 (0xCA3D) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=38401 (0x9601) smb_vwv[14]=34623 (0x873F) smb_vwv[15]=51775 (0xCA3F) smb_vwv[16]=52823 (0xCE57) smb_vwv[17]=38401 (0x9601) smb_vwv[18]=34623 (0x873F) smb_vwv[19]=51775 (0xCA3F) smb_vwv[20]=52823 (0xCE57) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.175264, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.177069, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 122 [2013/05/23 17:29:00.177246, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7a [2013/05/23 17:29:00.177302, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8082 of length 126 (0 toread) [2013/05/23 17:29:00.177349, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.177378, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16385 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=57 [2013/05/23 17:29:00.177831, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 68 .W.3.2.X .8.6.\.h [0020] 00 70 00 7A 00 65 00 76 00 35 00 6D 00 75 00 2E .p.z.e.v .5.m.u.. [0030] 00 64 00 6C 00 6C 00 00 00 .d.l.l.. . [2013/05/23 17:29:00.178045, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.178128, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.178199, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:29:00.178268, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.178329, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.178379, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.178425, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.178470, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.178552, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpzev5mu.dll" [2013/05/23 17:29:00.178619, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPZEV5MU.DLL] -> [W32X86/hpzev5mu.dll] [2013/05/23 17:29:00.178684, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86/hpzev5mu.dll] [/usr/local/samba/var/print] [2013/05/23 17:29:00.178753, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:29:00.178815, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:29:00.178872, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:29:00.178929, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:29:00.178989, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:29:00.179037, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=W32X86, mask = hpzev5mu.dll [2013/05/23 17:29:00.179140, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=W32X86 [2013/05/23 17:29:00.179231, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x1 [2013/05/23 17:29:00.179302, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:29:00.179364, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:29:00.179433, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:29:00.179497, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:29:00.179547, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path W32X86, expect_close = 1 [2013/05/23 17:29:00.179594, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = hpzev5mu.dll, attr = 22 [2013/05/23 17:29:00.179641, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath= dontdescend=<> [2013/05/23 17:29:00.179712, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x834c0d0 now at offset -1 [2013/05/23 17:29:00.179767, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzev5mu.dll [2013/05/23 17:29:00.179855, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzev5mu.dll attr = 0x20 [2013/05/23 17:29:00.179916, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzev5mu.dll case 3 set btime Thu May 23 17:27:44 2013 [2013/05/23 17:29:00.179989, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.180040, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.180199, 10, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.180287, 1, pid=2404, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzev5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003e41 (15937) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.123373 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) share_file_id : 0x000000008ce4e25c (2363810396) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf5249fa0 (4112818080) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:22:40 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.181606, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[hpzev5mu.dll] found W32X86/hpzev5mu.dll fname=hpzev5mu.dll (hpzev5mu.dll) [2013/05/23 17:29:00.181688, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:29:00.181740, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:29:00.181791, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:29:00.181839, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:29:00.181902, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 36, useable_space = 16582 [2013/05/23 17:29:00.181952, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 36, paramsize = 10, datasize = 36 [2013/05/23 17:29:00.182000, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.182028, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16385 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2013/05/23 17:29:00.182456, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 24 00 00 ........ .....$.. [0010] 00 00 00 00 00 18 00 00 00 68 00 70 00 7A 00 65 ........ .h.p.z.e [0020] 00 76 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C .v.5.m.u ...d.l.l [0030] 00 . [2013/05/23 17:29:00.184169, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=hpzev5mu.dll directory=W32X86 dirtype=22 numentries=1 [2013/05/23 17:29:00.184370, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.184512, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.184589, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.184641, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8083 of length 45 (0 toread) [2013/05/23 17:29:00.184689, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.184734, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=16449 smt_wct=3 smb_vwv[ 0]=53010 (0xCF12) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.184986, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.185029, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.185135, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.185209, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 53010 (numopen=2) [2013/05/23 17:29:00.185270, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.185319, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.185420, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:29:00.185503, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:29:00.185597, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.185651, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003fc1 (16321) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.168465 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x000000007fe02385 (2145395589) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.116162222 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.186703, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xed0f2ae2 [2013/05/23 17:29:00.186762, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.186848, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.116162222 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.187447, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.187513, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:29:00.187570, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.187619, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.187685, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file W32X86 [2013/05/23 17:29:00.187749, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.187800, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.187854, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key A87963A9 [2013/05/23 17:29:00.187912, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x87ff450 [2013/05/23 17:29:00.187976, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key A87963A9 [2013/05/23 17:29:00.188028, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.188076, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.188199, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 53010 (2 used) [2013/05/23 17:29:00.188258, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.188287, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=16449 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.188510, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.190213, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 77 [2013/05/23 17:29:00.190374, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d [2013/05/23 17:29:00.190431, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8084 of length 81 (0 toread) [2013/05/23 17:29:00.190478, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.190507, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=77 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16513 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 1 (0x1) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2013/05/23 17:29:00.190940, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 49 CF F5 03 00 00 00 00 01 ...I.... .... [2013/05/23 17:29:00.191025, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.191082, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.191793, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:8199(call_trans2setfilepathinfo) call_trans2setfilepathinfo(8) W32X86/hpzev5mu.dll (fnum 53065) info_level=1013 totdata=1 [2013/05/23 17:29:00.191943, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:7775(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: W32X86/hpzev5mu.dll (fnum 53065) info_level=1013 totdata=1 [2013/05/23 17:29:00.192000, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpzev5mu.dll [2013/05/23 17:29:00.192142, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpzev5mu.dll attr = 0x20 [2013/05/23 17:29:00.192230, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpzev5mu.dll case 3 set btime Thu May 23 17:27:44 2013 [2013/05/23 17:29:00.192303, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.192355, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.192403, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5986(smb_set_file_disposition_info) smb_set_file_disposition_info: file W32X86/hpzev5mu.dll, dosmode = 32, delete_on_close = 1 [2013/05/23 17:29:00.192453, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1028(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum 53065, file W32X86/hpzev5mu.dll [2013/05/23 17:29:00.192510, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.192575, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.192631, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BB47 [2013/05/23 17:29:00.192696, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8854288 [2013/05/23 17:29:00.192782, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.192834, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzev5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003e41 (15937) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.123373 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) share_file_id : 0x000000008ce4e25c (2363810396) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf5249fa0 (4112818080) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:22:40 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.193770, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.193823, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzev5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003e41 (15937) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.123373 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) share_file_id : 0x000000008ce4e25c (2363810396) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf5249fa0 (4112818080) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xf5249fa0 (4112818080) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Sat Oct 20 18:22:40 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.196824, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BB47 [2013/05/23 17:29:00.196902, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.196954, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.197012, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 16584 [2013/05/23 17:29:00.197061, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2013/05/23 17:29:00.197154, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.197202, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16513 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2013/05/23 17:29:00.197577, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 ... [2013/05/23 17:29:00.199252, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.199401, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.199456, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8085 of length 45 (0 toread) [2013/05/23 17:29:00.199504, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.199533, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=16577 smt_wct=3 smb_vwv[ 0]=53065 (0xCF49) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.199793, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.199837, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.199893, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.199948, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close file fd=-1 fnum 53065 (numopen=1) [2013/05/23 17:29:00.200003, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:609(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2013/05/23 17:29:00.200068, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.200153, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.200212, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BB47 [2013/05/23 17:29:00.200277, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8853df8 [2013/05/23 17:29:00.200471, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.200569, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzev5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000003e41 (15937) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.123373 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) share_file_id : 0x000000008ce4e25c (2363810396) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xf5249fa0 (4112818080) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xf5249fa0 (4112818080) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Sat Oct 20 18:22:40 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.207209, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xf5249fa0 [2013/05/23 17:29:00.207269, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0xf5249fa0 [2013/05/23 17:29:00.207320, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:470(close_remove_share_mode) close_remove_share_mode: file W32X86/hpzev5mu.dll. Delete on close was set - deleting file. [2013/05/23 17:29:00.207374, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xf5249fa0 [2013/05/23 17:29:00.207437, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0xf5249fa0 [2013/05/23 17:29:00.207790, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.207898, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpzev5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47bb (673723) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:22:40 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.208390, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.208457, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BB47 [2013/05/23 17:29:00.208515, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.208566, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.208621, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/notify_internal.c:604(notify_trigger) notify_trigger called action=0x2, filter=0x1, path=/usr/local/samba/var/print/W32X86/hpzev5mu.dll [2013/05/23 17:29:00.208760, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:850(close_normal_file) MARINA\Administrator closed file W32X86/hpzev5mu.dll (numopen=0) NT_STATUS_OK [2013/05/23 17:29:00.208828, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.208878, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.208932, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 06580A08 [2013/05/23 17:29:00.208988, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8a7a758 [2013/05/23 17:29:00.209052, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 06580A08 [2013/05/23 17:29:00.209160, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.209219, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.209283, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 53065 (1 used) [2013/05/23 17:29:00.209348, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.209395, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=16577 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.209601, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.211700, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 126 [2013/05/23 17:29:00.211910, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7e [2013/05/23 17:29:00.211965, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8086 of length 130 (0 toread) [2013/05/23 17:29:00.212013, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.212041, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=126 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16641 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=10240 (0x2800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 256 (0x100) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=43 [2013/05/23 17:29:00.212668, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0010] 00 68 00 70 00 7A 00 33 00 72 00 35 00 6D 00 75 .h.p.z.3 .r.5.m.u [0020] 00 2E 00 64 00 6C 00 6C 00 00 00 ...d.l.l ... [2013/05/23 17:29:00.212850, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.212908, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.212970, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 root_dir_fid = 0x0, fname = W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.213030, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpz3r5mu.dll" [2013/05/23 17:29:00.213117, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPZ3R5MU.DLL] -> [W32X86/hpz3r5mu.dll] [2013/05/23 17:29:00.213192, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/hpz3r5mu.dll] [/usr/local/samba/var/print] [2013/05/23 17:29:00.213269, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/hpz3r5mu.dll] -> [/usr/local/samba/var/print/W32X86/hpz3r5mu.dll] [2013/05/23 17:29:00.213322, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/hpz3r5mu.dll reduced to /usr/local/samba/var/print/W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.213372, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.213448, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x10080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200040 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.213534, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.213588, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.213642, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 5939A306 [2013/05/23 17:29:00.213705, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x90cca48 [2013/05/23 17:29:00.213821, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.213873, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '5939A306' stored [2013/05/23 17:29:00.213927, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x5939a306 (1496949510) open_persistent_id : 0x000000005939a306 (1496949510) open_volatile_id : 0x000000000000d952 (55634) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.214548, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 5939A306 [2013/05/23 17:29:00.214605, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.214654, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.214704, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.214748, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x5939a306) stored [2013/05/23 17:29:00.214796, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000d952 (55634) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x5939a306 (1496949510) open_persistent_id : 0x000000005939a306 (1496949510) open_volatile_id : 0x000000000000d952 (55634) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.215816, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 55634 (2 used) [2013/05/23 17:29:00.215922, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/hpz3r5mu.dll hash 0x9c1321e3 [2013/05/23 17:29:00.215981, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:160(unix_mode) unix_mode(W32X86/hpz3r5mu.dll) returning 0644 [2013/05/23 17:29:00.216032, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1977(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpz3r5mu.dll, dos_attrs=0x0 access_mask=0x10080 share_access=0x7 create_disposition = 0x1 create_options=0x200040 unix mode=0644 oplock_request=0 private_flags = 0x0 [2013/05/23 17:29:00.216114, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.216227, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3r5mu.dll attr = 0x20 [2013/05/23 17:29:00.216296, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3r5mu.dll case 3 set btime Thu May 23 17:27:38 2013 [2013/05/23 17:29:00.216367, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.216417, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.216486, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2135(open_file_ntcreate) open_file_ntcreate: fname=W32X86/hpz3r5mu.dll, after mapping access_mask=0x10080 [2013/05/23 17:29:00.216546, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.216595, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.216651, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B947 [2013/05/23 17:29:00.216714, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88544b8 [2013/05/23 17:29:00.216861, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:29:00.216950, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2:/usr/local/samba/var/lock/brlock.tdb 3: [2013/05/23 17:29:00.217011, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B947 [2013/05/23 17:29:00.217071, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x88547d8 [2013/05/23 17:29:00.217156, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/brlock.c:1955(brl_get_locks_internal) brl_get_locks_internal: 0 current locks on file_id 802:a47b9:0 [2013/05/23 17:29:00.217218, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B947 [2013/05/23 17:29:00.217270, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/brlock.tdb [2013/05/23 17:29:00.217317, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.217371, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:1441(grant_fsp_oplock_type) grant_fsp_oplock_type: oplock type 0x10 on file W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.217421, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2424(open_file_ntcreate) calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x10080, open_access_mask = 0x10080 [2013/05/23 17:29:00.217472, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpz3r5mu.dll. Granting 0x10080 [2013/05/23 17:29:00.217523, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:914(open_file) MARINA\Administrator opened file W32X86/hpz3r5mu.dll read=No write=No (numopen=1) [2013/05/23 17:29:00.217576, 5, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/smbd/oplock.c:89(set_file_oplock) set_file_oplock: granted oplock on file W32X86/hpz3r5mu.dll, 802:a47b9:0/367985561, tv_sec = 519e35bc, tv_usec = 34206 [2013/05/23 17:29:00.217639, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.217684, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3r5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004101 (16641) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.213510 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) share_file_id : 0x0000000015ef0399 (367985561) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x9c1321e3 (2618499555) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:25:08 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.218658, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B947 [2013/05/23 17:29:00.218726, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.218777, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.218831, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.218877, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.218925, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.219019, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3r5mu.dll attr = 0x20 [2013/05/23 17:29:00.219084, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3r5mu.dll case 3 set btime Thu May 23 17:27:38 2013 [2013/05/23 17:29:00.219195, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.219246, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.219347, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.219405, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3r5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004101 (16641) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.213510 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) share_file_id : 0x0000000015ef0399 (367985561) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x9c1321e3 (2618499555) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:25:08 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.220441, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/hpz3r5mu.dll. Granting 0x2 [2013/05/23 17:29:00.220634, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 55634, open name = W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.220694, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.220724, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16641 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=20992 (0x5200) smb_vwv[ 3]= 473 (0x1D9) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=38400 (0x9600) smb_vwv[ 6]=20438 (0x4FD6) smb_vwv[ 7]=51726 (0xCA0E) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=12801 (0x3201) smb_vwv[10]=23999 (0x5DBF) smb_vwv[11]=51769 (0xCA39) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]= 1 (0x1) smb_vwv[14]=27658 (0x6C0A) smb_vwv[15]=13767 (0x35C7) smb_vwv[16]=51219 (0xC813) smb_vwv[17]= 1 (0x1) smb_vwv[18]=27658 (0x6C0A) smb_vwv[19]=13767 (0x35C7) smb_vwv[20]=51219 (0xC813) smb_vwv[21]= 8193 (0x2001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 8192 (0x2000) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 6990 (0x1B4E) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.222148, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.223432, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:29:00.223600, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:29:00.223675, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8087 of length 76 (0 toread) [2013/05/23 17:29:00.223724, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.223753, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16705 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:29:00.224229, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 52 D9 EE 03 ...R... [2013/05/23 17:29:00.224315, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.224372, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.224433, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2013/05/23 17:29:00.224563, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.224630, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3r5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004101 (16641) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.213510 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) share_file_id : 0x0000000015ef0399 (367985561) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x9c1321e3 (2618499555) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:25:08 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.225623, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x9c1321e3 [2013/05/23 17:29:00.225676, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpz3r5mu.dll (fnum 55634) level=1006 call=7 total_data=0 [2013/05/23 17:29:00.225734, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpz3r5mu.dll (fnum 55634) level=1006 max_data=8 [2013/05/23 17:29:00.225787, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.225883, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3r5mu.dll attr = 0x20 [2013/05/23 17:29:00.225947, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3r5mu.dll case 3 set btime Thu May 23 17:27:38 2013 [2013/05/23 17:29:00.226018, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.226068, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.226163, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4790(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2013/05/23 17:29:00.226220, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 [2013/05/23 17:29:00.226268, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2013/05/23 17:29:00.226316, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.226345, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16705 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2013/05/23 17:29:00.226701, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 B9 47 0A 00 00 00 00 00 ......G. ..... [2013/05/23 17:29:00.228440, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 72 [2013/05/23 17:29:00.228601, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x48 [2013/05/23 17:29:00.228657, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8088 of length 76 (0 toread) [2013/05/23 17:29:00.228721, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.228753, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16769 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2013/05/23 17:29:00.229222, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 52 D9 ED 03 ...R... [2013/05/23 17:29:00.229309, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.229367, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.229428, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5206(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 [2013/05/23 17:29:00.229558, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.229624, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3r5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004101 (16641) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.213510 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) share_file_id : 0x0000000015ef0399 (367985561) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x9c1321e3 (2618499555) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:25:08 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.230520, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x9c1321e3 [2013/05/23 17:29:00.230588, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/hpz3r5mu.dll (fnum 55634) level=1005 call=7 total_data=0 [2013/05/23 17:29:00.230645, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/hpz3r5mu.dll (fnum 55634) level=1005 max_data=24 [2013/05/23 17:29:00.230698, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.230791, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3r5mu.dll attr = 0x20 [2013/05/23 17:29:00.230854, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3r5mu.dll case 3 set btime Thu May 23 17:27:38 2013 [2013/05/23 17:29:00.230925, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.230976, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.231035, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4648(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2013/05/23 17:29:00.231123, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:29:00.231182, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2013/05/23 17:29:00.231231, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.231259, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16769 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2013/05/23 17:29:00.232245, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 00 00 20 00 00 00 00 00 00 4E 1B ....... ......N. [0010] 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ..... [2013/05/23 17:29:00.233921, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 88 [2013/05/23 17:29:00.234129, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x58 [2013/05/23 17:29:00.234205, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8089 of length 92 (0 toread) [2013/05/23 17:29:00.234255, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.234285, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16833 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2013/05/23 17:29:00.234877, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 00 00 .\... [2013/05/23 17:29:00.234958, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.235015, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.235075, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = [2013/05/23 17:29:00.235168, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "" [2013/05/23 17:29:00.235227, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:292(unix_convert) conversion finished "" -> . [2013/05/23 17:29:00.235276, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [.] [/usr/local/samba/var/print] [2013/05/23 17:29:00.235333, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:29:00.235499, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: . reduced to /usr/local/samba/var/print [2013/05/23 17:29:00.235580, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:29:00.235641, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:29:00.235703, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:29:00.235758, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x100001 [2013/05/23 17:29:00.235832, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.235882, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.235937, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DEAD8300 [2013/05/23 17:29:00.236000, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x834c0d0 [2013/05/23 17:29:00.236151, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.236234, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'DEAD8300' stored [2013/05/23 17:29:00.236293, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xdead8300 (3735913216) open_persistent_id : 0x00000000dead8300 (3735913216) open_volatile_id : 0x000000000000ad53 (44371) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.236878, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DEAD8300 [2013/05/23 17:29:00.236932, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.236982, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.237032, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.237061, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xdead8300) stored [2013/05/23 17:29:00.237337, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000ad53 (44371) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xdead8300 (3735913216) open_persistent_id : 0x00000000dead8300 (3735913216) open_volatile_id : 0x000000000000ad53 (44371) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.238172, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 44371 (3 used) [2013/05/23 17:29:00.238240, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/. hash 0xc423281d [2013/05/23 17:29:00.238304, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name ., flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:29:00.238369, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.238420, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.238478, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:29:00.238542, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca608 [2013/05/23 17:29:00.238615, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.238665, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000041c1 (16833) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.235808 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000286160cd (677470413) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.239621, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:29:00.239687, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.239736, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.239798, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.239845, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.239893, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: . [2013/05/23 17:29:00.239954, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.240007, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.240156, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.240243, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000041c1 (16833) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.235808 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000286160cd (677470413) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.241557, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 44371, open name = . [2013/05/23 17:29:00.241617, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.241646, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16833 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=21248 (0x5300) smb_vwv[ 3]= 429 (0x1AD) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=58624 (0xE500) smb_vwv[ 6]=27003 (0x697B) smb_vwv[ 7]=33578 (0x832A) smb_vwv[ 8]=52779 (0xCE2B) smb_vwv[ 9]=43777 (0xAB01) smb_vwv[10]=28123 (0x6DDB) smb_vwv[11]= 4015 (0xFAF) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=58625 (0xE501) smb_vwv[14]=27003 (0x697B) smb_vwv[15]=33578 (0x832A) smb_vwv[16]=52779 (0xCE2B) smb_vwv[17]=58625 (0xE501) smb_vwv[18]=27003 (0x697B) smb_vwv[19]=33578 (0x832A) smb_vwv[20]=52779 (0xCE2B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.242595, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.245394, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 96 [2013/05/23 17:29:00.245545, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x60 [2013/05/23 17:29:00.245600, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8090 of length 100 (0 toread) [2013/05/23 17:29:00.245647, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.245675, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16897 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=31 [2013/05/23 17:29:00.246151, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 00 00 .W.3.2.X .8.6... [2013/05/23 17:29:00.246288, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.246346, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.246431, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:29:00.246504, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.246566, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.246616, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.246663, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.246708, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.246790, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:29:00.246855, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:29:00.246918, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:29:00.246998, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:29:00.247061, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=., mask = W32X86 [2013/05/23 17:29:00.247212, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=. [2013/05/23 17:29:00.247283, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x1 [2013/05/23 17:29:00.247465, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2013/05/23 17:29:00.247528, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = W32X86, attr = 22 [2013/05/23 17:29:00.247577, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath=<.> dontdescend=<> [2013/05/23 17:29:00.247647, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x8cdda18 now at offset -1 [2013/05/23 17:29:00.247704, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: ./W32X86 [2013/05/23 17:29:00.247763, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.247827, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.247898, 3, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:29:00.247948, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[W32X86] found ./W32X86 fname=W32X86 (W32X86) [2013/05/23 17:29:00.248010, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:29:00.248074, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:29:00.248191, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:29:00.248243, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:29:00.248305, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:29:00.248355, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 24, paramsize = 10, datasize = 24 [2013/05/23 17:29:00.248403, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.248432, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=92 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=16897 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2013/05/23 17:29:00.248792, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 18 00 00 ........ ........ [0010] 00 00 00 00 00 0C 00 00 00 57 00 33 00 32 00 58 ........ .W.3.2.X [0020] 00 38 00 36 00 .8.6. [2013/05/23 17:29:00.250363, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=W32X86 directory=. dirtype=22 numentries=1 [2013/05/23 17:29:00.250550, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.250701, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.250787, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.250840, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8091 of length 45 (0 toread) [2013/05/23 17:29:00.250888, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.251219, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=16961 smt_wct=3 smb_vwv[ 0]=44371 (0xAD53) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.251499, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.251548, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.251607, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.251662, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 44371 (numopen=2) [2013/05/23 17:29:00.251721, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.251769, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.251844, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:29:00.251910, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:29:00.252001, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.252053, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x00000000000041c1 (16833) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.235808 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000286160cd (677470413) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.253145, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xc423281d [2013/05/23 17:29:00.253233, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.253283, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.253719, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.253884, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:29:00.253949, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.254000, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.254064, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file . [2013/05/23 17:29:00.254182, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.254238, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.254295, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DEAD8300 [2013/05/23 17:29:00.254357, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x87ff450 [2013/05/23 17:29:00.254423, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DEAD8300 [2013/05/23 17:29:00.254475, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.254523, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.254585, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 44371 (2 used) [2013/05/23 17:29:00.254638, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.254668, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=16961 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.254873, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.256671, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 100 [2013/05/23 17:29:00.256821, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x64 [2013/05/23 17:29:00.256878, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8092 of length 104 (0 toread) [2013/05/23 17:29:00.256925, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.256954, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17025 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2013/05/23 17:29:00.257657, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 00 .\.W.3.2 .X.8.6.. [0010] 00 . [2013/05/23 17:29:00.257796, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.257856, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.257917, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = W32X86 [2013/05/23 17:29:00.257978, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:29:00.258037, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:29:00.258148, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:29:00.258230, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:29:00.258282, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86 reduced to /usr/local/samba/var/print/W32X86 [2013/05/23 17:29:00.258332, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:29:00.258391, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86 [2013/05/23 17:29:00.258452, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory W32X86, access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:29:00.258507, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x100001 [2013/05/23 17:29:00.258580, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.258631, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.258686, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 167E184B [2013/05/23 17:29:00.258767, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x834c0d0 [2013/05/23 17:29:00.258887, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.258939, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '167E184B' stored [2013/05/23 17:29:00.258992, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x167e184b (377362507) open_persistent_id : 0x00000000167e184b (377362507) open_volatile_id : 0x000000000000d9b7 (55735) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.259641, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 167E184B [2013/05/23 17:29:00.259700, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.259750, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.259800, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.259829, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x167e184b) stored [2013/05/23 17:29:00.259874, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000d9b7 (55735) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0x167e184b (377362507) open_persistent_id : 0x00000000167e184b (377362507) open_volatile_id : 0x000000000000d9b7 (55735) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.260817, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 55735 (3 used) [2013/05/23 17:29:00.260882, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86 hash 0xed0f2ae2 [2013/05/23 17:29:00.261504, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name W32X86, flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:29:00.261674, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.261731, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.261789, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:29:00.261853, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca688 [2013/05/23 17:29:00.261927, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.261977, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004281 (17025) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.258556 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x000000004666aaa8 (1181133480) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.206173662 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.263040, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:29:00.263141, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.263196, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.263248, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.263294, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.263343, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86 [2013/05/23 17:29:00.263407, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.263459, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.263581, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.263652, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004281 (17025) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.258556 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x000000004666aaa8 (1181133480) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.206173662 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.264587, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 55735, open name = W32X86 [2013/05/23 17:29:00.264645, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.264675, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17025 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=46848 (0xB700) smb_vwv[ 3]= 473 (0x1D9) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=62720 (0xF500) smb_vwv[ 6]=43726 (0xAACE) smb_vwv[ 7]=51773 (0xCA3D) smb_vwv[ 8]=52823 (0xCE57) smb_vwv[ 9]=62721 (0xF501) smb_vwv[10]=43726 (0xAACE) smb_vwv[11]=51773 (0xCA3D) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=43009 (0xA801) smb_vwv[14]=38139 (0x94FB) smb_vwv[15]=51775 (0xCA3F) smb_vwv[16]=52823 (0xCE57) smb_vwv[17]=43009 (0xA801) smb_vwv[18]=38139 (0x94FB) smb_vwv[19]=51775 (0xCA3F) smb_vwv[20]=52823 (0xCE57) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.265611, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.267431, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 122 [2013/05/23 17:29:00.267642, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x7a [2013/05/23 17:29:00.267703, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8093 of length 126 (0 toread) [2013/05/23 17:29:00.267751, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.267779, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=122 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17089 smt_wct=15 smb_vwv[ 0]= 54 (0x36) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 54 (0x36) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=57 [2013/05/23 17:29:00.270939, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 68 .W.3.2.X .8.6.\.h [0020] 00 70 00 7A 00 33 00 72 00 35 00 6D 00 75 00 2E .p.z.3.r .5.m.u.. [0030] 00 64 00 6C 00 6C 00 00 00 .d.l.l.. . [2013/05/23 17:29:00.271657, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.271735, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.271818, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:29:00.271891, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.271953, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.272002, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.272048, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.272122, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.272214, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/hpz3r5mu.dll" [2013/05/23 17:29:00.272282, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/HPZ3R5MU.DLL] -> [W32X86/hpz3r5mu.dll] [2013/05/23 17:29:00.272348, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86/hpz3r5mu.dll] [/usr/local/samba/var/print] [2013/05/23 17:29:00.272417, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:29:00.272481, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:29:00.272538, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [W32X86] -> [/usr/local/samba/var/print/W32X86] [2013/05/23 17:29:00.272595, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:29:00.272656, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:29:00.272703, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=W32X86, mask = hpz3r5mu.dll [2013/05/23 17:29:00.272759, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=W32X86 [2013/05/23 17:29:00.272810, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86. Granting 0x1 [2013/05/23 17:29:00.272872, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to W32X86 [2013/05/23 17:29:00.272931, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print/W32X86 [2013/05/23 17:29:00.272996, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:29:00.273081, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:29:00.276284, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path W32X86, expect_close = 1 [2013/05/23 17:29:00.276352, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = hpz3r5mu.dll, attr = 22 [2013/05/23 17:29:00.276401, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath= dontdescend=<> [2013/05/23 17:29:00.276479, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x876e688 now at offset -1 [2013/05/23 17:29:00.276537, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.276628, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3r5mu.dll attr = 0x20 [2013/05/23 17:29:00.276690, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3r5mu.dll case 3 set btime Thu May 23 17:27:38 2013 [2013/05/23 17:29:00.276762, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.276812, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.276919, 10, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.276977, 1, pid=2404, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3r5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004101 (16641) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.213510 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) share_file_id : 0x0000000015ef0399 (367985561) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x9c1321e3 (2618499555) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:25:08 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.277895, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[hpz3r5mu.dll] found W32X86/hpz3r5mu.dll fname=hpz3r5mu.dll (hpz3r5mu.dll) [2013/05/23 17:29:00.277968, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:29:00.278018, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:29:00.278070, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:29:00.278148, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:29:00.278213, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 36, useable_space = 16582 [2013/05/23 17:29:00.278264, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 36, paramsize = 10, datasize = 36 [2013/05/23 17:29:00.278312, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.278341, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=104 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17089 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2013/05/23 17:29:00.278704, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 24 00 00 ........ .....$.. [0010] 00 00 00 00 00 18 00 00 00 68 00 70 00 7A 00 33 ........ .h.p.z.3 [0020] 00 72 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C .r.5.m.u ...d.l.l [0030] 00 . [2013/05/23 17:29:00.282172, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=hpz3r5mu.dll directory=W32X86 dirtype=22 numentries=1 [2013/05/23 17:29:00.282343, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.292301, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.292452, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.292506, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8094 of length 45 (0 toread) [2013/05/23 17:29:00.292554, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.292583, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=17153 smt_wct=3 smb_vwv[ 0]=55735 (0xD9B7) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.292833, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.292878, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.292953, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.293010, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 55735 (numopen=2) [2013/05/23 17:29:00.293068, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.293154, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.293213, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000CC0D [2013/05/23 17:29:00.293278, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:29:00.293367, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.293420, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004281 (17025) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.258556 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) share_file_id : 0x000000004666aaa8 (1181133480) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xed0f2ae2 (3977194210) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.206173662 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.294322, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xed0f2ae2 [2013/05/23 17:29:00.294380, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.294425, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dcc (658892) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:29:00 2013 CEST.206173662 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.294854, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.294915, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000CC0D [2013/05/23 17:29:00.294971, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.295020, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.295085, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file W32X86 [2013/05/23 17:29:00.295196, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.295259, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.295315, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 167E184B [2013/05/23 17:29:00.295393, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x84d0990 [2013/05/23 17:29:00.295467, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 167E184B [2013/05/23 17:29:00.295520, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.295567, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.295629, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 55735 (2 used) [2013/05/23 17:29:00.295683, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.295711, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=17153 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.295925, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.298214, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 77 [2013/05/23 17:29:00.298366, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d [2013/05/23 17:29:00.298439, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8095 of length 81 (0 toread) [2013/05/23 17:29:00.298489, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.298518, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=77 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17217 smt_wct=15 smb_vwv[ 0]= 6 (0x6) smb_vwv[ 1]= 1 (0x1) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 6 (0x6) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 1 (0x1) smb_vwv[12]= 76 (0x4C) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 8 (0x8) smb_bcc=12 [2013/05/23 17:29:00.298951, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 52 D9 F5 03 00 00 00 00 01 ...R.... .... [2013/05/23 17:29:00.299037, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.299141, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.299235, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:8199(call_trans2setfilepathinfo) call_trans2setfilepathinfo(8) W32X86/hpz3r5mu.dll (fnum 55634) info_level=1013 totdata=1 [2013/05/23 17:29:00.299297, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:7775(smbd_do_setfilepathinfo) smbd_do_setfilepathinfo: W32X86/hpz3r5mu.dll (fnum 55634) info_level=1013 totdata=1 [2013/05/23 17:29:00.299349, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.299438, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/hpz3r5mu.dll attr = 0x20 [2013/05/23 17:29:00.299498, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/hpz3r5mu.dll case 3 set btime Thu May 23 17:27:38 2013 [2013/05/23 17:29:00.299568, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x20)a [2013/05/23 17:29:00.299618, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning a [2013/05/23 17:29:00.299663, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5986(smb_set_file_disposition_info) smb_set_file_disposition_info: file W32X86/hpz3r5mu.dll, dosmode = 32, delete_on_close = 1 [2013/05/23 17:29:00.299712, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1028(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum 55634, file W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.299767, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.299816, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.299870, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B947 [2013/05/23 17:29:00.299935, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca718 [2013/05/23 17:29:00.300018, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.301128, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3r5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004101 (16641) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.213510 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) share_file_id : 0x0000000015ef0399 (367985561) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x9c1321e3 (2618499555) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:25:08 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.303180, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.303332, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3r5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004101 (16641) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.213510 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) share_file_id : 0x0000000015ef0399 (367985561) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x9c1321e3 (2618499555) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0x9c1321e3 (2618499555) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Sat Oct 20 18:25:08 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.311209, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B947 [2013/05/23 17:29:00.311292, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.311346, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.311405, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 0, useable_space = 16584 [2013/05/23 17:29:00.311454, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 0, paramsize = 2, datasize = 0 [2013/05/23 17:29:00.311503, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.311532, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=58 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17217 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=3 [2013/05/23 17:29:00.311916, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 ... [2013/05/23 17:29:00.313202, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.313352, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.313407, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8096 of length 45 (0 toread) [2013/05/23 17:29:00.313455, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.313538, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=17281 smt_wct=3 smb_vwv[ 0]=55634 (0xD952) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.313815, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.313863, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.313920, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.313975, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close file fd=-1 fnum 55634 (numopen=1) [2013/05/23 17:29:00.314031, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:609(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2013/05/23 17:29:00.314126, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.314186, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.314243, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000B947 [2013/05/23 17:29:00.314309, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:29:00.314416, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.314473, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3r5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004101 (16641) op_type : 0x0010 (16) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.213510 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) share_file_id : 0x0000000015ef0399 (367985561) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0x9c1321e3 (2618499555) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0x9c1321e3 (2618499555) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Sat Oct 20 18:25:08 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.320776, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x9c1321e3 [2013/05/23 17:29:00.320834, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0x9c1321e3 [2013/05/23 17:29:00.320887, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:470(close_remove_share_mode) close_remove_share_mode: file W32X86/hpz3r5mu.dll. Delete on close was set - deleting file. [2013/05/23 17:29:00.320941, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x9c1321e3 [2013/05/23 17:29:00.320987, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0x9c1321e3 [2013/05/23 17:29:00.321643, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.321764, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/hpz3r5mu.dll' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47b9 (673721) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Sat Oct 20 18:25:08 2007 CEST.0 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.323343, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.323412, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000B947 [2013/05/23 17:29:00.323471, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.323520, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.323576, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/notify_internal.c:604(notify_trigger) notify_trigger called action=0x2, filter=0x1, path=/usr/local/samba/var/print/W32X86/hpz3r5mu.dll [2013/05/23 17:29:00.323713, 2, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:850(close_normal_file) MARINA\Administrator closed file W32X86/hpz3r5mu.dll (numopen=0) NT_STATUS_OK [2013/05/23 17:29:00.323784, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.323834, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.323888, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 5939A306 [2013/05/23 17:29:00.323944, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8a7a758 [2013/05/23 17:29:00.324009, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 5939A306 [2013/05/23 17:29:00.324059, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.325211, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.325308, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 55634 (1 used) [2013/05/23 17:29:00.325393, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.325427, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=17281 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.325631, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.386291, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 114 [2013/05/23 17:29:00.386462, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x72 [2013/05/23 17:29:00.386522, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8097 of length 118 (0 toread) [2013/05/23 17:29:00.386570, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.386599, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17345 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2013/05/23 17:29:00.387172, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 EC 03 00 00 00 00 5C 00 57 00 33 00 32 ........ .\.W.3.2 [0010] 00 58 00 38 00 36 00 5C 00 5F 00 5F 00 53 00 4B .X.8.6.\ ._._.S.K [0020] 00 49 00 50 00 5F 00 30 00 31 00 44 00 44 00 00 .I.P._.0 .1.D.D.. [0030] 00 . [2013/05/23 17:29:00.387391, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.387449, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.387506, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5291(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2013/05/23 17:29:00.387569, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/__SKIP_01DD" [2013/05/23 17:29:00.387632, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/__SKIP_01DD] -> [W32X86/__SKIP_01DD] [2013/05/23 17:29:00.387697, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/__SKIP_01DD] [/usr/local/samba/var/print] [2013/05/23 17:29:00.387772, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/__SKIP_01DD] -> [/usr/local/samba/var/print/W32X86/__SKIP_01DD] [2013/05/23 17:29:00.387825, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/__SKIP_01DD reduced to /usr/local/samba/var/print/W32X86/__SKIP_01DD [2013/05/23 17:29:00.387885, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/__SKIP_01DD hash 0xab843d7a [2013/05/23 17:29:00.387956, 3, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:29:00.388006, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/__SKIP_01DD (fnum [fsp is NULL]) level=1004 call=5 total_data=0 [2013/05/23 17:29:00.388058, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/__SKIP_01DD (fnum [fsp is NULL]) level=1004 max_data=40 [2013/05/23 17:29:00.388148, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/__SKIP_01DD [2013/05/23 17:29:00.388262, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/__SKIP_01DD attr = 0x10 [2013/05/23 17:29:00.388329, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/__SKIP_01DD case 3 set btime Thu May 23 17:27:00 2013 [2013/05/23 17:29:00.388399, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x10)d [2013/05/23 17:29:00.388449, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.388509, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4627(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2013/05/23 17:29:00.388558, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4637(smbd_do_qfilepathinfo) SMB_QFBI - create: Thu May 23 17:27:00 2013 access: Thu May 23 17:28:48 2013 write: Thu May 23 17:28:12 2013 change: Thu May 23 17:28:12 2013 mode: 10 [2013/05/23 17:29:00.388694, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 16582 [2013/05/23 17:29:00.388742, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2013/05/23 17:29:00.388789, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.388818, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17345 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2013/05/23 17:29:00.389210, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 A7 7A DE F7 C9 57 CE 01 7D FC 23 ......z. ..W..}.# [0010] 38 CA 57 CE 01 EA CA 0F 23 CA 57 CE 01 EA CA 0F 8.W..... #.W..... [0020] 23 CA 57 CE 01 10 00 00 00 00 00 00 00 #.W..... ..... [2013/05/23 17:29:00.397304, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 114 [2013/05/23 17:29:00.397455, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x72 [2013/05/23 17:29:00.397511, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8098 of length 118 (0 toread) [2013/05/23 17:29:00.397558, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.397587, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17409 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2013/05/23 17:29:00.398018, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 EE 03 00 00 00 00 5C 00 57 00 33 00 32 ........ .\.W.3.2 [0010] 00 58 00 38 00 36 00 5C 00 5F 00 5F 00 53 00 4B .X.8.6.\ ._._.S.K [0020] 00 49 00 50 00 5F 00 30 00 31 00 44 00 44 00 00 .I.P._.0 .1.D.D.. [0030] 00 . [2013/05/23 17:29:00.398276, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.398340, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.398398, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5291(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1006 [2013/05/23 17:29:00.398461, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/__SKIP_01DD" [2013/05/23 17:29:00.398523, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/__SKIP_01DD] -> [W32X86/__SKIP_01DD] [2013/05/23 17:29:00.398588, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/__SKIP_01DD] [/usr/local/samba/var/print] [2013/05/23 17:29:00.398651, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/__SKIP_01DD] -> [/usr/local/samba/var/print/W32X86/__SKIP_01DD] [2013/05/23 17:29:00.398703, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/__SKIP_01DD reduced to /usr/local/samba/var/print/W32X86/__SKIP_01DD [2013/05/23 17:29:00.398760, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/__SKIP_01DD hash 0xab843d7a [2013/05/23 17:29:00.398832, 3, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:29:00.398883, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/__SKIP_01DD (fnum [fsp is NULL]) level=1006 call=5 total_data=0 [2013/05/23 17:29:00.398936, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/__SKIP_01DD (fnum [fsp is NULL]) level=1006 max_data=8 [2013/05/23 17:29:00.399051, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/__SKIP_01DD [2013/05/23 17:29:00.399213, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/__SKIP_01DD attr = 0x10 [2013/05/23 17:29:00.399279, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/__SKIP_01DD case 3 set btime Thu May 23 17:27:00 2013 [2013/05/23 17:29:00.399350, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x10)d [2013/05/23 17:29:00.399401, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.399460, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4790(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2013/05/23 17:29:00.399512, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 [2013/05/23 17:29:00.399560, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2013/05/23 17:29:00.399622, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.399653, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17409 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2013/05/23 17:29:00.400005, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 A4 47 0A 00 00 00 00 00 ......G. ..... [2013/05/23 17:29:00.412311, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 114 [2013/05/23 17:29:00.412465, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x72 [2013/05/23 17:29:00.412521, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8099 of length 118 (0 toread) [2013/05/23 17:29:00.412569, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.412597, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=114 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17473 smt_wct=15 smb_vwv[ 0]= 46 (0x2E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 46 (0x2E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=49 [2013/05/23 17:29:00.413027, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 ED 03 00 00 00 00 5C 00 57 00 33 00 32 ........ .\.W.3.2 [0010] 00 58 00 38 00 36 00 5C 00 5F 00 5F 00 53 00 4B .X.8.6.\ ._._.S.K [0020] 00 49 00 50 00 5F 00 30 00 31 00 44 00 44 00 00 .I.P._.0 .1.D.D.. [0030] 00 . [2013/05/23 17:29:00.413265, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.413325, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.413382, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5291(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005 [2013/05/23 17:29:00.413444, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/__SKIP_01DD" [2013/05/23 17:29:00.413505, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/__SKIP_01DD] -> [W32X86/__SKIP_01DD] [2013/05/23 17:29:00.413570, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/__SKIP_01DD] [/usr/local/samba/var/print] [2013/05/23 17:29:00.413634, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/__SKIP_01DD] -> [/usr/local/samba/var/print/W32X86/__SKIP_01DD] [2013/05/23 17:29:00.413685, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/__SKIP_01DD reduced to /usr/local/samba/var/print/W32X86/__SKIP_01DD [2013/05/23 17:29:00.413760, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/__SKIP_01DD hash 0xab843d7a [2013/05/23 17:29:00.413835, 3, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:29:00.413884, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:5436(call_trans2qfilepathinfo) call_trans2qfilepathinfo W32X86/__SKIP_01DD (fnum [fsp is NULL]) level=1005 call=5 total_data=0 [2013/05/23 17:29:00.413937, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4389(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: W32X86/__SKIP_01DD (fnum [fsp is NULL]) level=1005 max_data=24 [2013/05/23 17:29:00.413986, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: W32X86/__SKIP_01DD [2013/05/23 17:29:00.414077, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:275(get_ea_dos_attribute) get_ea_dos_attribute: W32X86/__SKIP_01DD attr = 0x10 [2013/05/23 17:29:00.414179, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:317(get_ea_dos_attribute) get_ea_dos_attribute: file W32X86/__SKIP_01DD case 3 set btime Thu May 23 17:27:00 2013 [2013/05/23 17:29:00.414252, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:333(get_ea_dos_attribute) get_ea_dos_attribute returning (0x10)d [2013/05/23 17:29:00.414302, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.414361, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:4648(smbd_do_qfilepathinfo) smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2013/05/23 17:29:00.414412, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:29:00.414461, 9, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2013/05/23 17:29:00.414508, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.414536, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17473 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2013/05/23 17:29:00.414890, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 01 00 00 00 00 01 00 00 ........ ..... [2013/05/23 17:29:00.416720, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 88 [2013/05/23 17:29:00.416872, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x58 [2013/05/23 17:29:00.416927, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8100 of length 92 (0 toread) [2013/05/23 17:29:00.416976, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.417005, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17537 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=36864 (0x9000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2013/05/23 17:29:00.417627, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 00 00 .\... [2013/05/23 17:29:00.417714, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBntcreateX (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.417772, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.417833, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:502(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0, fname = [2013/05/23 17:29:00.417893, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "" [2013/05/23 17:29:00.417949, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:292(unix_convert) conversion finished "" -> . [2013/05/23 17:29:00.417997, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [.] [/usr/local/samba/var/print] [2013/05/23 17:29:00.418054, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:29:00.418142, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: . reduced to /usr/local/samba/var/print [2013/05/23 17:29:00.418196, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:29:00.418255, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x100001 file_attributes = 0x90, share_access = 0x7, create_disposition = 0x1 create_options = 0x4001 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . [2013/05/23 17:29:00.418316, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x4001, create_disposition = 0x1, file_attributes = 0x90 [2013/05/23 17:29:00.418371, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x100001 [2013/05/23 17:29:00.418443, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.418493, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.418548, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key BD4A6036 [2013/05/23 17:29:00.418628, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8441ee0 [2013/05/23 17:29:00.418748, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.418801, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'BD4A6036' stored [2013/05/23 17:29:00.418855, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xbd4a6036 (3175768118) open_persistent_id : 0x00000000bd4a6036 (3175768118) open_volatile_id : 0x000000000000a2bf (41663) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.419480, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key BD4A6036 [2013/05/23 17:29:00.419537, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.419587, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.419637, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.419667, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xbd4a6036) stored [2013/05/23 17:29:00.419713, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000a2bf (41663) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xbd4a6036 (3175768118) open_persistent_id : 0x00000000bd4a6036 (3175768118) open_volatile_id : 0x000000000000a2bf (41663) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.425708, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 41663 (2 used) [2013/05/23 17:29:00.425775, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/. hash 0xc423281d [2013/05/23 17:29:00.425838, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name ., flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:29:00.425901, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.425951, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.426009, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:29:00.426072, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca608 [2013/05/23 17:29:00.426185, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.426238, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004481 (17537) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.418419 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000a609c1f4 (2785657332) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.427193, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:29:00.427264, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.427315, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.427366, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.427411, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.427459, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: . [2013/05/23 17:29:00.427520, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.427573, 8, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.427692, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.427761, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004481 (17537) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.418419 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000a609c1f4 (2785657332) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.428697, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/nttrans.c:730(reply_ntcreate_and_X) reply_ntcreate_and_X: fnum 41663, open name = . [2013/05/23 17:29:00.428756, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.428785, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=135 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17537 smt_wct=42 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=48896 (0xBF00) smb_vwv[ 3]= 418 (0x1A2) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=58624 (0xE500) smb_vwv[ 6]=27003 (0x697B) smb_vwv[ 7]=33578 (0x832A) smb_vwv[ 8]=52779 (0xCE2B) smb_vwv[ 9]=43777 (0xAB01) smb_vwv[10]=28123 (0x6DDB) smb_vwv[11]= 4015 (0xFAF) smb_vwv[12]=52823 (0xCE57) smb_vwv[13]=58625 (0xE501) smb_vwv[14]=27003 (0x697B) smb_vwv[15]=33578 (0x832A) smb_vwv[16]=52779 (0xCE2B) smb_vwv[17]=58625 (0xE501) smb_vwv[18]=27003 (0x697B) smb_vwv[19]=33578 (0x832A) smb_vwv[20]=52779 (0xCE2B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_vwv[34]= 0 (0x0) smb_vwv[35]= 0 (0x0) smb_vwv[36]= 0 (0x0) smb_vwv[37]= 0 (0x0) smb_vwv[38]= 0 (0x0) smb_vwv[39]= 0 (0x0) smb_vwv[40]= 0 (0x0) smb_vwv[41]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:00.433766, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.435226, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 96 [2013/05/23 17:29:00.435391, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x60 [2013/05/23 17:29:00.435453, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8101 of length 100 (0 toread) [2013/05/23 17:29:00.435529, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.435563, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17601 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=31 [2013/05/23 17:29:00.436038, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 00 00 16 00 56 05 17 00 03 01 00 00 00 00 5C .....V.. .......\ [0010] 00 57 00 33 00 32 00 58 00 38 00 36 00 00 00 .W.3.2.X .8.6... [2013/05/23 17:29:00.436205, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans2 (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.436298, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.436386, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/trans2.c:2390(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 backup_priv = 1 level = 0x103, max_data_bytes = 16384 [2013/05/23 17:29:00.436461, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.436525, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.436575, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.436634, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.436683, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.436887, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86" [2013/05/23 17:29:00.436962, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] [2013/05/23 17:29:00.437025, 3, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:984(check_reduced_name_with_privilege) check_reduced_name_with_privilege [W32X86] [/usr/local/samba/var/print] [2013/05/23 17:29:00.437214, 10, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1040(check_reduced_name_with_privilege) check_reduced_name_with_privilege: realpath [.] -> [/usr/local/samba/var/print] [2013/05/23 17:29:00.437322, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2487(call_trans2findfirst) dir=., mask = W32X86 [2013/05/23 17:29:00.437397, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:494(dptr_create) dptr_create dir=. [2013/05/23 17:29:00.437459, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on .. Granting 0x1 [2013/05/23 17:29:00.437563, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:665(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2013/05/23 17:29:00.437620, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2562(call_trans2findfirst) dptr_num is 256, wcard = W32X86, attr = 22 [2013/05/23 17:29:00.437669, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2571(call_trans2findfirst) dirpath=<.> dontdescend=<> [2013/05/23 17:29:00.437738, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1061(smbd_dirptr_get_entry) smbd_dirptr_get_entry: dirptr 0x8cdda18 now at offset -1 [2013/05/23 17:29:00.437796, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:628(dos_mode) dos_mode: ./W32X86 [2013/05/23 17:29:00.437856, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:206(dos_mode_from_sbuf) dos_mode_from_sbuf returning d [2013/05/23 17:29:00.437907, 8, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dosmode.c:679(dos_mode) dos_mode returning d [2013/05/23 17:29:00.437976, 3, pid=2404, effective(0, 0), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:408(fetch_share_mode_unlocked) Could not fetch share entry [2013/05/23 17:29:00.438025, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:1144(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[W32X86] found ./W32X86 fname=W32X86 (W32X86) [2013/05/23 17:29:00.439204, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1666(smbd_marshall_dir_entry) smbd_marshall_dir_entry: space_remaining = 16384 [2013/05/23 17:29:00.439339, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1965(smbd_marshall_dir_entry) smbd_marshall_dir_entry: SMB_FIND_FILE_NAMES_INFO [2013/05/23 17:29:00.439394, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2628(call_trans2findfirst) call_trans2findfirst - (2) closing dptr_num 256 [2013/05/23 17:29:00.439442, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/dir.c:261(dptr_close_internal) closing dptr key 256 [2013/05/23 17:29:00.439507, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1041(send_trans2_replies) t2_rep: params_sent_thistime = 10, data_sent_thistime = 24, useable_space = 16582 [2013/05/23 17:29:00.439558, 9, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:1043(send_trans2_replies) t2_rep: params_to_send = 10, data_to_send = 24, paramsize = 10, datasize = 24 [2013/05/23 17:29:00.439606, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.439635, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=92 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=2696 smb_uid=60019 smb_mid=17601 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2013/05/23 17:29:00.439989, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 18 00 00 ........ ........ [0010] 00 00 00 00 00 0C 00 00 00 57 00 33 00 32 00 58 ........ .W.3.2.X [0020] 00 38 00 36 00 .8.6. [2013/05/23 17:29:00.441419, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/trans2.c:2672(call_trans2findfirst) SMBtrans2 mask=W32X86 directory=. dirtype=22 numentries=1 [2013/05/23 17:29:00.441551, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.443267, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:00.443416, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:00.443471, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8102 of length 45 (0 toread) [2013/05/23 17:29:00.443520, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.443549, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=17665 smt_wct=3 smb_vwv[ 0]=41663 (0xA2BF) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:00.443797, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.443841, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.443898, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.443953, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close directory fd=35 fnum 41663 (numopen=1) [2013/05/23 17:29:00.444048, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.444168, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.444238, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000BD0D [2013/05/23 17:29:00.444305, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca288 [2013/05/23 17:29:00.444396, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.444450, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004481 (17537) op_type : 0x0000 (0) access_mask : 0x00100081 (1048705) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.418419 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) share_file_id : 0x00000000a609c1f4 (2785657332) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xc423281d (3290638365) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.445385, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xc423281d [2013/05/23 17:29:00.445452, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.445499, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : '.' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a0dbd (658877) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu Mar 28 08:09:19 2013 CET.258928573 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.445929, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.445991, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000BD0D [2013/05/23 17:29:00.446048, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.448173, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.448312, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/posix.c:481(delete_windows_lock_ref_count) delete_windows_lock_ref_count for file . [2013/05/23 17:29:00.448382, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.448434, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.448489, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key BD4A6036 [2013/05/23 17:29:00.448553, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x84d0990 [2013/05/23 17:29:00.448643, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key BD4A6036 [2013/05/23 17:29:00.448697, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.448746, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.448808, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 41663 (1 used) [2013/05/23 17:29:00.448862, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.448892, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=17665 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.449181, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.450883, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 76 [2013/05/23 17:29:00.451032, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4c [2013/05/23 17:29:00.451138, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8103 of length 80 (0 toread) [2013/05/23 17:29:00.451204, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.451234, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=76 smb_com=0x1 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=17729 smt_wct=0 smb_bcc=41 [2013/05/23 17:29:00.451455, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 04 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0010] 00 5F 00 5F 00 53 00 4B 00 49 00 50 00 5F 00 30 ._._.S.K .I.P._.0 [0020] 00 31 00 44 00 44 00 00 00 .1.D.D.. . [2013/05/23 17:29:00.451627, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBrmdir (pid 2404) conn 0x8fba650 [2013/05/23 17:29:00.451684, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.451756, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/filename.c:258(unix_convert) unix_convert called on file "W32X86/__SKIP_01DD" [2013/05/23 17:29:00.451822, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:283(stat_cache_lookup) stat_cache_lookup: lookup succeeded for name [W32X86/__SKIP_01DD] -> [W32X86/__SKIP_01DD] [2013/05/23 17:29:00.451908, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1140(check_reduced_name) check_reduced_name [W32X86/__SKIP_01DD] [/usr/local/samba/var/print] [2013/05/23 17:29:00.451976, 10, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1200(check_reduced_name) check_reduced_name realpath [W32X86/__SKIP_01DD] -> [/usr/local/samba/var/print/W32X86/__SKIP_01DD] [2013/05/23 17:29:00.452028, 3, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1270(check_reduced_name) check_reduced_name: W32X86/__SKIP_01DD reduced to /usr/local/samba/var/print/W32X86/__SKIP_01DD [2013/05/23 17:29:00.452079, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4138(create_file_default) create_file: access_mask = 0x10000 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/__SKIP_01DD [2013/05/23 17:29:00.452670, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3665(create_file_unixpath) create_file_unixpath: access_mask = 0x10000 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = W32X86/__SKIP_01DD [2013/05/23 17:29:00.452752, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:2952(open_directory) open_directory: opening directory W32X86/__SKIP_01DD, access_mask = 0x10000, share_access = 0x7 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x10 [2013/05/23 17:29:00.452809, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:94(smbd_check_access_rights) smbd_check_access_rights: root override on W32X86/__SKIP_01DD. Granting 0x10000 [2013/05/23 17:29:00.452883, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.452935, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.452989, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EB8C8185 [2013/05/23 17:29:00.453052, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x90cca48 [2013/05/23 17:29:00.453234, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2013/05/23 17:29:00.453296, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key 'EB8C8185' stored [2013/05/23 17:29:00.453460, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xeb8c8185 (3951853957) open_persistent_id : 0x00000000eb8c8185 (3951853957) open_volatile_id : 0x0000000000003ac0 (15040) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2013/05/23 17:29:00.454058, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EB8C8185 [2013/05/23 17:29:00.454174, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.454233, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.454284, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2013/05/23 17:29:00.454314, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0xeb8c8185) stored [2013/05/23 17:29:00.454360, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x00003ac0 (15040) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) open_global_id : 0xeb8c8185 (3951853957) open_persistent_id : 0x00000000eb8c8185 (3951853957) open_volatile_id : 0x0000000000003ac0 (15040) open_owner : S-1-5-21-3444954069-1775359110-1805518212-500 open_time : Thu May 23 17:29:00 2013 CEST create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Thu May 23 17:29:00 2013 CEST compat : NULL [2013/05/23 17:29:00.455198, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:126(file_new) allocated file structure fnum 15040 (2 used) [2013/05/23 17:29:00.455268, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:700(file_name_hash) file_name_hash: /usr/local/samba/var/print/W32X86/__SKIP_01DD hash 0xab843d7a [2013/05/23 17:29:00.455334, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:349(fd_open) fd_open: name W32X86/__SKIP_01DD, flags = 0200000 mode = 00, fd = 35. [2013/05/23 17:29:00.455456, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.455519, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.455578, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000A447 [2013/05/23 17:29:00.455641, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85ca728 [2013/05/23 17:29:00.455716, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.455766, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/__SKIP_01DD' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47a4 (673700) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004541 (17729) op_type : 0x0000 (0) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.452859 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47a4 (673700) extid : 0x0000000000000000 (0) share_file_id : 0x0000000082c8420d (2194162189) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xab843d7a (2877570426) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:12 2013 CEST.357092290 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x01 (1) modified : 0x01 (1) record : * [2013/05/23 17:29:00.456740, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000A447 [2013/05/23 17:29:00.456808, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.456858, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.456909, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:3950(create_file_unixpath) create_file_unixpath: info=1 [2013/05/23 17:29:00.456954, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/open.c:4226(create_file_default) create_file: info=1 [2013/05/23 17:29:00.457146, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1028(set_delete_on_close) set_delete_on_close: Adding delete on close flag for fnum 15040, file W32X86/__SKIP_01DD [2013/05/23 17:29:00.457337, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.457396, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.457455, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000A447 [2013/05/23 17:29:00.457522, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85cabb8 [2013/05/23 17:29:00.457623, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.457680, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/__SKIP_01DD' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47a4 (673700) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004541 (17729) op_type : 0x0000 (0) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.452859 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47a4 (673700) extid : 0x0000000000000000 (0) share_file_id : 0x0000000082c8420d (2194162189) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xab843d7a (2877570426) num_delete_tokens : 0x00000000 (0) delete_tokens: ARRAY(0) old_write_time : Thu May 23 17:28:12 2013 CEST.357092290 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.458756, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/messages_local.c:282(messaging_tdb_store) messaging_tdb_store: [2013/05/23 17:29:00.458853, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) array: struct messaging_array num_messages : 0x00000001 (1) messages: ARRAY(1) messages: struct messaging_rec msg_version : 0x00000002 (2) msg_type : MSG_SMB_STAT_CACHE_DELETE (783) dest: struct server_id pid : 0x0000000000000947 (2375) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x27346ddafa9353a1 (2825003653542400929) src: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) buf : DATA_BLOB length=19 [0000] 57 33 32 58 38 36 2F 5F 5F 53 4B 49 50 5F 30 31 W32X86/_ _SKIP_01 [0010] 44 44 00 DD. [2013/05/23 17:29:00.460913, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/messages_local.c:282(messaging_tdb_store) messaging_tdb_store: [2013/05/23 17:29:00.461020, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) array: struct messaging_array num_messages : 0x00000001 (1) messages: ARRAY(1) messages: struct messaging_rec msg_version : 0x00000002 (2) msg_type : MSG_SMB_STAT_CACHE_DELETE (783) dest: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) src: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) buf : DATA_BLOB length=19 [0000] 57 33 32 58 38 36 2F 5F 5F 53 4B 49 50 5F 30 31 W32X86/_ _SKIP_01 [0010] 44 44 00 DD. [2013/05/23 17:29:00.461898, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.461979, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/__SKIP_01DD' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47a4 (673700) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004541 (17729) op_type : 0x0000 (0) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.452859 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47a4 (673700) extid : 0x0000000000000000 (0) share_file_id : 0x0000000082c8420d (2194162189) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xab843d7a (2877570426) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xab843d7a (2877570426) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Thu May 23 17:28:12 2013 CEST.357092290 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.464947, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000A447 [2013/05/23 17:29:00.465033, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.465135, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.465201, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.465252, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/locking.tdb 2: 3: [2013/05/23 17:29:00.465308, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0208000000000000A447 [2013/05/23 17:29:00.465366, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x85cbcb8 [2013/05/23 17:29:00.465554, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:144(parse_share_modes) parse_share_modes: [2013/05/23 17:29:00.465620, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/__SKIP_01DD' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47a4 (673700) extid : 0x0000000000000000 (0) num_share_modes : 0x00000001 (1) share_modes: ARRAY(1) share_modes: struct share_mode_entry pid: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) op_mid : 0x0000000000004541 (17729) op_type : 0x0000 (0) access_mask : 0x00010080 (65664) share_access : 0x00000007 (7) private_options : 0x00000000 (0) time : Thu May 23 17:29:00 2013 CEST.452859 id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47a4 (673700) extid : 0x0000000000000000 (0) share_file_id : 0x0000000082c8420d (2194162189) uid : 0x00000000 (0) flags : 0x0000 (0) name_hash : 0xab843d7a (2877570426) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xab843d7a (2877570426) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Thu May 23 17:28:12 2013 CEST.357092290 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x00 (0) record : NULL [2013/05/23 17:29:00.468481, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1064(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0xab843d7a [2013/05/23 17:29:00.468536, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/locking.c:1070(find_delete_on_close_token) find__delete_on_close_token: dt->name_hash = 0xab843d7a [2013/05/23 17:29:00.468586, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.468656, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.468710, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:00.469529, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:00.469839, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:164(unparse_share_modes) unparse_share_modes: [2013/05/23 17:29:00.469890, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) d: struct share_mode_data servicepath : * servicepath : '/usr/local/samba/var/print' base_name : * base_name : 'W32X86/__SKIP_01DD' stream_name : NULL id: struct file_id devid : 0x0000000000000802 (2050) inode : 0x00000000000a47a4 (673700) extid : 0x0000000000000000 (0) num_share_modes : 0x00000000 (0) share_modes: ARRAY(0) num_delete_tokens : 0x00000001 (1) delete_tokens: ARRAY(1) delete_tokens: struct delete_token name_hash : 0xab843d7a (2877570426) delete_nt_token : * delete_nt_token: struct security_token num_sids : 0x0000000e (14) sids: ARRAY(14) sids : S-1-5-21-3444954069-1775359110-1805518212-500 sids : S-1-5-21-3444954069-1775359110-1805518212-513 sids : S-1-5-21-3444954069-1775359110-1805518212-520 sids : S-1-5-21-3444954069-1775359110-1805518212-572 sids : S-1-5-21-3444954069-1775359110-1805518212-519 sids : S-1-5-21-3444954069-1775359110-1805518212-518 sids : S-1-5-21-3444954069-1775359110-1805518212-512 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-544 sids : S-1-5-32-550 sids : S-1-5-32-545 sids : S-1-5-32-554 privilege_mask : 0x000000001fffff20 (536870688) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000403 (1027) 1: LSA_POLICY_MODE_INTERACTIVE 1: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 1: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x403: LSA_POLICY_MODE_ALL (1027) 0x03: LSA_POLICY_MODE_ALL_NT4 (3) delete_token : * delete_token: struct security_unix_token uid : 0x0000000000000000 (0) gid : 0x0000000000005021 (20513) ngroups : 0x0000000d (13) groups: ARRAY(13) groups : 0x0000000000005021 (20513) groups : 0x00000000002dc6c1 (3000001) groups : 0x00000000002dc6c2 (3000002) groups : 0x00000000002dc6c3 (3000003) groups : 0x00000000002dc6c4 (3000004) groups : 0x00000000002dc6c5 (3000005) groups : 0x00000000002dc6c9 (3000009) groups : 0x00000000002dc6ca (3000010) groups : 0x00000000002dc6ce (3000014) groups : 0x00000000002dc6c0 (3000000) groups : 0x00000000002dc6dc (3000028) groups : 0x00000000002dc6c6 (3000006) groups : 0x00000000002dc6cf (3000015) old_write_time : Thu May 23 17:28:12 2013 CEST.357092290 changed_write_time : Thu Jan 1 01:00:00 1970 CET.0 fresh : 0x00 (0) modified : 0x01 (1) record : * [2013/05/23 17:29:00.476580, 10, pid=2404, effective(0, 20513), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:169(unparse_share_modes) No used share mode found [2013/05/23 17:29:00.476649, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0208000000000000A447 [2013/05/23 17:29:00.476710, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/locking.tdb [2013/05/23 17:29:00.476761, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.476937, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/notify_internal.c:604(notify_trigger) notify_trigger called action=0x2, filter=0x2, path=/usr/local/samba/var/print/W32X86/__SKIP_01DD [2013/05/23 17:29:00.478248, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:1226(close_directory) close_directory: W32X86/__SKIP_01DD. Delete on close was set - deleting directory returned NT_STATUS_OK. [2013/05/23 17:29:00.478418, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.478513, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.478566, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:00.478622, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key EB8C8185 [2013/05/23 17:29:00.478685, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8c84c48 [2013/05/23 17:29:00.478752, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key EB8C8185 [2013/05/23 17:29:00.478804, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:00.478853, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:00.478915, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 15040 (1 used) [2013/05/23 17:29:00.478977, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5970(reply_rmdir) rmdir W32X86/__SKIP_01DD [2013/05/23 17:29:00.479030, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.479059, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x1 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=17729 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:00.480452, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:00.480654, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/messages_local.c:75(messaging_tdb_signal_handler) messaging_tdb_signal_handler: sig[10] count[1] msgs[1] [2013/05/23 17:29:00.480768, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/messages_local.c:496(message_dispatch) message_dispatch: received_messages = 1 [2013/05/23 17:29:00.480859, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/messages_local.c:242(messaging_tdb_fetch) messaging_tdb_fetch: [2013/05/23 17:29:00.480910, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) result: struct messaging_array num_messages : 0x00000001 (1) messages: ARRAY(1) messages: struct messaging_rec msg_version : 0x00000002 (2) msg_type : MSG_SMB_STAT_CACHE_DELETE (783) dest: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) src: struct server_id pid : 0x0000000000000964 (2404) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3cfab8caf5b58c3d (4394027568298560573) buf : DATA_BLOB length=19 [0000] 57 33 32 58 38 36 2F 5F 5F 53 4B 49 50 5F 30 31 W32X86/_ _SKIP_01 [0010] 44 44 00 DD. [2013/05/23 17:29:00.483020, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/server.c:139(smb_stat_cache_delete) smb_stat_cache_delete: delete name W32X86/__SKIP_01DD [2013/05/23 17:29:00.483168, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/statcache.c:376(stat_cache_delete) stat_cache_delete: deleting name [W32X86/__SKIP_01DD] -> W32X86/__SKIP_01DD [2013/05/23 17:29:00.483244, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/messages_local.c:75(messaging_tdb_signal_handler) messaging_tdb_signal_handler: sig[10] count[1] msgs[1] [2013/05/23 17:29:00.483299, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/messages_local.c:496(message_dispatch) message_dispatch: received_messages = 1 [2013/05/23 17:29:00.494281, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1224 [2013/05/23 17:29:00.494435, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4c8 [2013/05/23 17:29:00.494490, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8104 of length 1228 (0 toread) [2013/05/23 17:29:00.494539, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.494568, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1224 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=17793 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1140 (0x474) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1140 (0x474) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1157 [2013/05/23 17:29:00.495017, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 04 00 00 4D 00 00 ........ .t...M.. [0020] 00 5C 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .\...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0F 00 00 00 00 00 00 .1...... ........ [0050] 00 0F 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 78 00 38 00 36 .s. .N.T . .x.8.6 [0070] 00 00 00 61 00 03 00 00 00 08 00 02 00 00 04 00 ...a.... ........ [0080] 00 B0 7E 84 02 78 01 3C 00 6D 00 61 00 6E 00 75 ..~..x.< .m.a.n.u [0090] 00 66 00 61 00 63 00 74 00 75 00 72 00 65 00 72 .f.a.c.t .u.r.e.r [00A0] 00 20 00 61 00 6E 00 64 00 20 00 6D 00 6F 00 64 . .a.n.d . .m.o.d [00B0] 00 65 00 6C 00 20 00 64 00 65 00 74 00 65 00 72 .e.l. .d .e.t.e.r [00C0] 00 6D 00 69 00 6E 00 65 00 20 00 77 00 68 00 69 .m.i.n.e . .w.h.i [00D0] 00 63 00 68 00 20 00 70 00 72 00 69 00 6E 00 74 .c.h. .p .r.i.n.t [00E0] 00 65 00 72 00 20 00 64 00 72 00 69 00 76 00 65 .e.r. .d .r.i.v.e [00F0] 00 72 00 20 00 74 00 6F 00 20 00 75 00 73 00 65 .r. .t.o . .u.s.e [0100] 00 2E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:00.496532, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:00.496613, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.496667, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:00.497664, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:00.497972, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:373(change_to_user_internal) Impersonated user: uid=(0,0), gid=(0,20513) [2013/05/23 17:29:00.498029, 4, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /tmp [2013/05/23 17:29:00.498404, 4, pid=2404, effective(0, 20513), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /tmp [2013/05/23 17:29:00.498551, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1140 params=0 setup=2 [2013/05/23 17:29:00.498613, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:00.498658, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:00.498721, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:00.498773, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:00.498825, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:00.498875, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1140 [2013/05/23 17:29:00.498923, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1140 [2013/05/23 17:29:00.498968, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1140 [2013/05/23 17:29:00.499015, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1140, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:00.499062, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:00.501260, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1124 [2013/05/23 17:29:00.501337, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1124 [2013/05/23 17:29:00.501395, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:00.501441, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1124 [2013/05/23 17:29:00.501486, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1124, incoming data = 1124 [2013/05/23 17:29:00.501537, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:00.501602, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0474 (1140) auth_length : 0x0000 (0) call_id : 0x0000004d (77) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x0000045c (1116) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1116 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0F 00 00 00 00 00 00 00 0F 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 78 00 38 00 36 00 00 00 61 00 03 00 00 00 .x.8.6. ..a..... [0050] 08 00 02 00 00 04 00 00 B0 7E 84 02 78 01 3C 00 ........ .~..x.<. [0060] 6D 00 61 00 6E 00 75 00 66 00 61 00 63 00 74 00 m.a.n.u. f.a.c.t. [0070] 75 00 72 00 65 00 72 00 20 00 61 00 6E 00 64 00 u.r.e.r. .a.n.d. [0080] 20 00 6D 00 6F 00 64 00 65 00 6C 00 20 00 64 00 .m.o.d. e.l. .d. [0090] 65 00 74 00 65 00 72 00 6D 00 69 00 6E 00 65 00 e.t.e.r. m.i.n.e. [00A0] 20 00 77 00 68 00 69 00 63 00 68 00 20 00 70 00 .w.h.i. c.h. .p. [00B0] 72 00 69 00 6E 00 74 00 65 00 72 00 20 00 64 00 r.i.n.t. e.r. .d. [00C0] 72 00 69 00 76 00 65 00 72 00 20 00 74 00 6F 00 r.i.v.e. r. .t.o. [00D0] 20 00 75 00 73 00 65 00 2E 00 00 00 00 00 00 00 .u.s.e. ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 42 00 42 00 50 01 08 01 50 00 72 00 69 00 6E 00 B.B.P... P.r.i.n. [0270] 74 00 65 00 72 00 20 00 44 00 72 00 69 00 76 00 t.e.r. . D.r.i.v. [0280] 65 00 72 00 20 00 53 00 65 00 6C 00 65 00 63 00 e.r. .S. e.l.e.c. [0290] 74 00 69 00 6F 00 6E 00 00 00 76 00 65 00 72 00 t.i.o.n. ..v.e.r. [02A0] 20 00 77 00 69 00 6C 00 6C 00 20 00 72 00 65 00 .w.i.l. l. .r.e. [02B0] 6D 00 6F 00 76 00 65 00 20 00 69 00 74 00 20 00 m.o.v.e. .i.t. . [02C0] 66 00 72 00 6F 00 6D 00 20 00 74 00 68 00 65 00 f.r.o.m. .t.h.e. [02D0] 20 00 73 00 79 00 73 00 74 00 65 00 6D 00 2E 00 .s.y.s. t.e.m... [02E0] 20 00 20 00 41 00 72 00 65 00 20 00 79 00 6F 00 . .A.r. e. .y.o. [02F0] 75 00 20 00 73 00 75 00 72 00 65 00 20 00 79 00 u. .s.u. r.e. .y. [0300] 6F 00 75 00 20 00 77 00 61 00 6E 00 74 00 20 00 o.u. .w. a.n.t. . [0310] 74 00 6F 00 20 00 64 00 65 00 6C 00 65 00 74 00 t.o. .d. e.l.e.t. [0320] 65 00 20 00 25 00 73 00 3F 00 00 00 00 00 00 00 e. .%.s. ?....... [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 7B 00 81 00 00 10 00 01 50 05 3C 00 50 05 3C 00 {....... P.<.P.<. [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 04 00 00 ........ .... [2013/05/23 17:29:00.512929, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:00.513000, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:00.513059, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.513143, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.513198, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:00.513968, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:00.517900, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:00.517981, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:00.518036, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:00.518161, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT x86' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] B0 7E 84 02 78 01 3C 00 6D 00 61 00 6E 00 75 00 .~..x.<. m.a.n.u. [0010] 66 00 61 00 63 00 74 00 75 00 72 00 65 00 72 00 f.a.c.t. u.r.e.r. [0020] 20 00 61 00 6E 00 64 00 20 00 6D 00 6F 00 64 00 .a.n.d. .m.o.d. [0030] 65 00 6C 00 20 00 64 00 65 00 74 00 65 00 72 00 e.l. .d. e.t.e.r. [0040] 6D 00 69 00 6E 00 65 00 20 00 77 00 68 00 69 00 m.i.n.e. .w.h.i. [0050] 63 00 68 00 20 00 70 00 72 00 69 00 6E 00 74 00 c.h. .p. r.i.n.t. [0060] 65 00 72 00 20 00 64 00 72 00 69 00 76 00 65 00 e.r. .d. r.i.v.e. [0070] 72 00 20 00 74 00 6F 00 20 00 75 00 73 00 65 00 r. .t.o. .u.s.e. [0080] 2E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 42 00 42 00 50 01 08 01 ........ B.B.P... [0210] 50 00 72 00 69 00 6E 00 74 00 65 00 72 00 20 00 P.r.i.n. t.e.r. . [0220] 44 00 72 00 69 00 76 00 65 00 72 00 20 00 53 00 D.r.i.v. e.r. .S. [0230] 65 00 6C 00 65 00 63 00 74 00 69 00 6F 00 6E 00 e.l.e.c. t.i.o.n. [0240] 00 00 76 00 65 00 72 00 20 00 77 00 69 00 6C 00 ..v.e.r. .w.i.l. [0250] 6C 00 20 00 72 00 65 00 6D 00 6F 00 76 00 65 00 l. .r.e. m.o.v.e. [0260] 20 00 69 00 74 00 20 00 66 00 72 00 6F 00 6D 00 .i.t. . f.r.o.m. [0270] 20 00 74 00 68 00 65 00 20 00 73 00 79 00 73 00 .t.h.e. .s.y.s. [0280] 74 00 65 00 6D 00 2E 00 20 00 20 00 41 00 72 00 t.e.m... . .A.r. [0290] 65 00 20 00 79 00 6F 00 75 00 20 00 73 00 75 00 e. .y.o. u. .s.u. [02A0] 72 00 65 00 20 00 79 00 6F 00 75 00 20 00 77 00 r.e. .y. o.u. .w. [02B0] 61 00 6E 00 74 00 20 00 74 00 6F 00 20 00 64 00 a.n.t. . t.o. .d. [02C0] 65 00 6C 00 65 00 74 00 65 00 20 00 25 00 73 00 e.l.e.t. e. .%.s. [02D0] 3F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ?....... ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 7B 00 81 00 00 10 00 01 ........ {....... [0390] 50 05 3C 00 50 05 3C 00 00 00 00 00 00 00 00 00 P.<.P.<. ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:00.523155, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:00.523260, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:00.523322, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:00.523374, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:00.523512, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:00.523619, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.523920, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.523977, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.524034, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.524083, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.524168, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.524214, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.524432, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.524515, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.524575, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.524622, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.524672, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.524717, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.524835, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 6C 00 00 00 00 00 00 00 9E 51 BC 35 ....l... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.524966, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006c-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.525441, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006c-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.526132, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6C 00 00 00 00 00 00 00 9E 51 BC 35 ....l... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.526273, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.526327, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.526382, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.526431, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.526483, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.526528, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.526634, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.526698, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.526754, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.526802, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.526854, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.526898, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.526995, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.527058, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.527162, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.527217, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.527271, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.527332, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.527456, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.527520, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.527575, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.527624, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.527679, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.527724, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.527838, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.527900, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.527955, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.528003, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.528057, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.528160, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.528276, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.528338, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.528395, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.528444, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.528499, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.528545, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.528651, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.528732, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.528790, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.528839, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.528894, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.528939, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.529034, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-0] [2013/05/23 17:29:00.529123, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.529184, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:00.529234, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:00.529289, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.529335, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:00.529408, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] not found [2013/05/23 17:29:00.529463, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.529514, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.529564, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.529613, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.529665, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.529715, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.529765, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.529829, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.529879, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.530237, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006c-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.530468, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6C 00 00 00 00 00 00 00 9E 51 BC 35 ....l... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.530594, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6C 00 00 00 00 00 00 00 9E 51 BC 35 ....l... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.530704, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.530753, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.530827, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.531053, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,0): WERR_BADFILE [2013/05/23 17:29:00.531178, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [0] [2013/05/23 17:29:00.531267, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.531834, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.531921, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.531980, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.532030, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.532077, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.532179, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.532389, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.532474, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.532533, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.532582, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.532631, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.532676, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.532793, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 6D 00 00 00 00 00 00 00 9E 51 BC 35 ....m... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.532925, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006d-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.533266, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006d-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.533890, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6D 00 00 00 00 00 00 00 9E 51 BC 35 ....m... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.534017, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.534068, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.535054, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.535264, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.535333, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.535422, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.535601, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.535708, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.535777, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.535827, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.535882, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.535927, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.536032, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.536141, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.536209, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.536260, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.536315, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.536360, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.536482, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.536664, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.536731, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.536780, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.536836, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.536881, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.537010, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.537076, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.537196, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.537250, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.537306, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.537351, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.537453, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.537515, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.537571, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.537622, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.537677, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.537722, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.537828, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.537890, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.537945, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.538018, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.538076, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.538156, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.538261, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-1] [2013/05/23 17:29:00.538323, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.538380, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:00.538429, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:00.538484, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.538528, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:00.538595, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] not found [2013/05/23 17:29:00.538649, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.538699, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.538748, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.538797, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.538847, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.538898, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.538947, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.538996, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.539046, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.539361, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006d-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.539559, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6D 00 00 00 00 00 00 00 9E 51 BC 35 ....m... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.539676, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6D 00 00 00 00 00 00 00 9E 51 BC 35 ....m... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.539783, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.539831, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.539905, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.540239, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,1): WERR_BADFILE [2013/05/23 17:29:00.540418, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [1] [2013/05/23 17:29:00.540522, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.540804, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.540860, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.540916, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.540992, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.541043, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.541136, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.541358, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.542847, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.542929, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.542979, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.543029, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.543074, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.543277, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 6E 00 00 00 00 00 00 00 9E 51 BC 35 ....n... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.543421, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006e-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.543704, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006e-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.545497, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6E 00 00 00 00 00 00 00 9E 51 BC 35 ....n... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.545661, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.545715, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.545771, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.545819, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.545874, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.545918, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.546026, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.546142, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.546222, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.546273, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.546327, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.546373, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.546484, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.546549, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.546604, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.546652, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.546707, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.546752, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.546861, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.546923, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.546978, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.547042, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.547124, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.547178, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.547306, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.547370, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.547425, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.547474, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.547529, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.547574, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.547663, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.547723, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.547778, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.547827, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.547881, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.547926, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.548029, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.548124, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.548189, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.548248, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.548321, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.548366, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.548470, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-2] [2013/05/23 17:29:00.548533, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.548588, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:00.548637, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:00.548691, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.548736, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:00.548807, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] not found [2013/05/23 17:29:00.548862, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.548913, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.548962, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.549011, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.549062, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.549144, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.549195, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.549244, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.549294, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.549572, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006e-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.549768, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6E 00 00 00 00 00 00 00 9E 51 BC 35 ....n... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.549882, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6E 00 00 00 00 00 00 00 9E 51 BC 35 ....n... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.549991, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.550040, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.550147, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.550476, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,2): WERR_BADFILE [2013/05/23 17:29:00.550555, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [2] [2013/05/23 17:29:00.550633, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.550912, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.550966, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.551023, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.551072, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.551182, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.551232, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.551468, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.551793, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.551873, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.551922, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.551972, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.552017, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.552190, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 6F 00 00 00 00 00 00 00 9E 51 BC 35 ....o... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.552350, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006f-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.552631, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006f-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.553377, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6F 00 00 00 00 00 00 00 9E 51 BC 35 ....o... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.553509, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.553577, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.553635, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.553684, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.553737, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.553783, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.553889, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.553954, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.554008, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.554056, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.554172, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.554228, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.554341, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.554406, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.554460, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.554510, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.554563, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.554609, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.554717, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.554779, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.554834, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.554882, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.554951, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.555000, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.555167, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.555350, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.555463, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.555518, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.555577, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.555624, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.555734, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.555798, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.555853, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.555902, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.555955, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.556001, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.556154, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.556244, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.556301, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.556351, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.556407, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.556452, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.556581, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-3] [2013/05/23 17:29:00.556650, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.556706, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.556756, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.556812, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.556856, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.556951, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.557011, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.557062, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.557160, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.557217, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.557268, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.557319, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.557373, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 70 00 00 00 00 00 00 00 9E 51 BC 35 ....p... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.557490, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000070-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.557760, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000070-0000-0000-9e51-bc3564090000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2013/05/23 17:29:00.558082, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 70 00 00 00 00 00 00 00 9E 51 BC 35 ....p... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.558277, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3' (ops 0xb697a420) [2013/05/23 17:29:00.558335, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.558431, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.558524, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000001 (1) max_subkeylen : * max_subkeylen : 0x0000002e (46) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:00.559191, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000070-0000-0000-9e51-bc3564090000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x0030 (48) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2013/05/23 17:29:00.571618, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 70 00 00 00 00 00 00 00 9E 51 BC 35 ....p... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.572175, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:421(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.572271, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0030 (48) size : 0x0030 (48) name : * name : 'HP Deskjet F2200 series' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:00.572768, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000070-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.572973, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 70 00 00 00 00 00 00 00 9E 51 BC 35 ....p... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.573116, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 70 00 00 00 00 00 00 00 9E 51 BC 35 ....p... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.573233, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.573282, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.573331, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.573560, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000006f-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.573740, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6F 00 00 00 00 00 00 00 9E 51 BC 35 ....o... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.573874, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 6F 00 00 00 00 00 00 00 9E 51 BC 35 ....o... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.573986, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.574035, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.574140, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.574383, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[1] drivers in environment [Windows NT x86] and version [3] [2013/05/23 17:29:00.574447, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7499(enumprinterdrivers_level_by_architecture) driver: [HP Deskjet F2200 series] [2013/05/23 17:29:00.574544, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.574828, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.574883, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.574938, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.574986, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.575032, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.575076, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.575460, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.575567, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.575628, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.575693, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.575745, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.575790, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.575911, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 71 00 00 00 00 00 00 00 9E 51 BC 35 ....q... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.576043, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000071-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.576385, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000071-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00da (218) name_size : 0x00da (218) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.576988, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 71 00 00 00 00 00 00 00 9E 51 BC 35 ....q... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.577160, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.577217, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.577272, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.577319, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.577386, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.577444, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.577551, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.577617, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.577671, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.577718, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.577769, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.577814, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.577910, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.577971, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.578024, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.578071, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.578189, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.578241, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.578363, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.578428, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.578483, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.578531, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.578584, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.578629, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.578742, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.578819, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.578875, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.578923, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.578978, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.579022, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.579170, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.579261, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.579319, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.579368, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.579424, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.579469, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.579578, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.579642, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.579698, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.579747, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.579801, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.579846, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.579938, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-3] [2013/05/23 17:29:00.579996, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.580051, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.580170, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.580235, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.580408, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.580537, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HP Deskjet F2200 series] [2013/05/23 17:29:00.580604, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (9->10) [2013/05/23 17:29:00.580663, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.580714, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.580774, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.580819, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.580912, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (10->9) [2013/05/23 17:29:00.580970, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.581020, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.581069, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.581178, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.581233, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.581284, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.581333, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.581386, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.581517, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.581786, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2013/05/23 17:29:00.582892, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.583039, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series' (ops 0xb697a420) [2013/05/23 17:29:00.583128, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.583251, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Version] len[4] [2013/05/23 17:29:00.583321, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[Driver] len[22] [2013/05/23 17:29:00.583377, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[2]: name[Data File] len[26] [2013/05/23 17:29:00.583431, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[3]: name[Configuration File] len[26] [2013/05/23 17:29:00.583484, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[4]: name[Help File] len[22] [2013/05/23 17:29:00.583544, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[5]: name[Dependent Files] len[726] [2013/05/23 17:29:00.583598, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[6]: name[Monitor] len[0] [2013/05/23 17:29:00.583650, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[7]: name[Datatype] len[0] [2013/05/23 17:29:00.583703, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[8]: name[Previous Names] len[2] [2013/05/23 17:29:00.583776, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[9]: name[DriverDate] len[22] [2013/05/23 17:29:00.583833, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[10]: name[DriverVersion] len[24] [2013/05/23 17:29:00.583888, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[11]: name[Manufacturer] len[32] [2013/05/23 17:29:00.583943, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[12]: name[OEM URL] len[130] [2013/05/23 17:29:00.583999, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[13]: name[HardwareID] len[68] [2013/05/23 17:29:00.584055, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[14]: name[Provider] len[32] [2013/05/23 17:29:00.584140, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[15]: name[Print Processor] len[0] [2013/05/23 17:29:00.584199, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[16]: name[VendorSetup] len[0] [2013/05/23 17:29:00.584255, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[17]: name[Color Profiles] len[2] [2013/05/23 17:29:00.584310, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[18]: name[InfPath] len[0] [2013/05/23 17:29:00.584366, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[19]: name[PrinterDriverAttributes] len[4] [2013/05/23 17:29:00.584421, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[20]: name[CoreDependencies] len[2] [2013/05/23 17:29:00.584478, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[21]: name[MinInboxDriverVerDate] len[22] [2013/05/23 17:29:00.584536, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[22]: name[MinInboxDriverVerVersion] len[16] [2013/05/23 17:29:00.584592, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.584697, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000017 (23) max_valnamelen : * max_valnamelen : 0x00000032 (50) max_valbufsize : * max_valbufsize : 0x000002d6 (726) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:00.585635, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000000 (0) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.586234, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.586356, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.586434, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'Version' type : * type : REG_DWORD (4) value : * value: ARRAY(4) [0] : 0x03 (3) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : * size : 0x00000004 (4) length : * length : 0x00000004 (4) result : WERR_OK [2013/05/23 17:29:00.593277, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000001 (1) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.594032, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.594250, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.594324, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x000e (14) size : 0x0034 (52) name : * name : 'Driver' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x2e (46) [13] : 0x00 (0) [14] : 0x44 (68) [15] : 0x00 (0) [16] : 0x4c (76) [17] : 0x00 (0) [18] : 0x4c (76) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:00.595435, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000002 (2) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.596003, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.596165, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.596233, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0014 (20) size : 0x0034 (52) name : * name : 'Data File' type : * type : REG_SZ (1) value : * value: ARRAY(26) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x70 (112) [3] : 0x00 (0) [4] : 0x6f (111) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x32 (50) [9] : 0x00 (0) [10] : 0x30 (48) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x33 (51) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x70 (112) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) size : * size : 0x0000001a (26) length : * length : 0x0000001a (26) result : WERR_OK [2013/05/23 17:29:00.597322, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000003 (3) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.597840, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.597956, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.598017, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0026 (38) size : 0x0034 (52) name : * name : 'Configuration File' type : * type : REG_SZ (1) value : * value: ARRAY(26) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x55 (85) [13] : 0x00 (0) [14] : 0x49 (73) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x44 (68) [19] : 0x00 (0) [20] : 0x4c (76) [21] : 0x00 (0) [22] : 0x4c (76) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) size : * size : 0x0000001a (26) length : * length : 0x0000001a (26) result : WERR_OK [2013/05/23 17:29:00.599126, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000004 (4) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.599654, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.599769, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.599828, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0014 (20) size : 0x0034 (52) name : * name : 'Help File' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x2e (46) [13] : 0x00 (0) [14] : 0x48 (72) [15] : 0x00 (0) [16] : 0x4c (76) [17] : 0x00 (0) [18] : 0x50 (80) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:00.600966, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000005 (5) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.601540, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.601659, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.601727, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0020 (32) size : 0x0034 (52) name : * name : 'Dependent Files' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(726) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x70 (112) [3] : 0x00 (0) [4] : 0x6f (111) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x32 (50) [9] : 0x00 (0) [10] : 0x30 (48) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x61 (97) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x6e (110) [21] : 0x00 (0) [22] : 0x69 (105) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) [26] : 0x68 (104) [27] : 0x00 (0) [28] : 0x70 (112) [29] : 0x00 (0) [30] : 0x7a (122) [31] : 0x00 (0) [32] : 0x73 (115) [33] : 0x00 (0) [34] : 0x74 (116) [35] : 0x00 (0) [36] : 0x35 (53) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x75 (117) [41] : 0x00 (0) [42] : 0x2e (46) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x6c (108) [47] : 0x00 (0) [48] : 0x6c (108) [49] : 0x00 (0) [50] : 0x00 (0) [51] : 0x00 (0) [52] : 0x68 (104) [53] : 0x00 (0) [54] : 0x70 (112) [55] : 0x00 (0) [56] : 0x7a (122) [57] : 0x00 (0) [58] : 0x33 (51) [59] : 0x00 (0) [60] : 0x63 (99) [61] : 0x00 (0) [62] : 0x35 (53) [63] : 0x00 (0) [64] : 0x6d (109) [65] : 0x00 (0) [66] : 0x75 (117) [67] : 0x00 (0) [68] : 0x2e (46) [69] : 0x00 (0) [70] : 0x64 (100) [71] : 0x00 (0) [72] : 0x6c (108) [73] : 0x00 (0) [74] : 0x6c (108) [75] : 0x00 (0) [76] : 0x00 (0) [77] : 0x00 (0) [78] : 0x68 (104) [79] : 0x00 (0) [80] : 0x70 (112) [81] : 0x00 (0) [82] : 0x7a (122) [83] : 0x00 (0) [84] : 0x75 (117) [85] : 0x00 (0) [86] : 0x72 (114) [87] : 0x00 (0) [88] : 0x35 (53) [89] : 0x00 (0) [90] : 0x6d (109) [91] : 0x00 (0) [92] : 0x75 (117) [93] : 0x00 (0) [94] : 0x2e (46) [95] : 0x00 (0) [96] : 0x64 (100) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x6c (108) [101] : 0x00 (0) [102] : 0x00 (0) [103] : 0x00 (0) [104] : 0x68 (104) [105] : 0x00 (0) [106] : 0x70 (112) [107] : 0x00 (0) [108] : 0x6f (111) [109] : 0x00 (0) [110] : 0x32 (50) [111] : 0x00 (0) [112] : 0x32 (50) [113] : 0x00 (0) [114] : 0x30 (48) [115] : 0x00 (0) [116] : 0x30 (48) [117] : 0x00 (0) [118] : 0x33 (51) [119] : 0x00 (0) [120] : 0x2e (46) [121] : 0x00 (0) [122] : 0x78 (120) [123] : 0x00 (0) [124] : 0x6d (109) [125] : 0x00 (0) [126] : 0x6c (108) [127] : 0x00 (0) [128] : 0x00 (0) [129] : 0x00 (0) [130] : 0x68 (104) [131] : 0x00 (0) [132] : 0x70 (112) [133] : 0x00 (0) [134] : 0x7a (122) [135] : 0x00 (0) [136] : 0x73 (115) [137] : 0x00 (0) [138] : 0x63 (99) [139] : 0x00 (0) [140] : 0x35 (53) [141] : 0x00 (0) [142] : 0x6d (109) [143] : 0x00 (0) [144] : 0x75 (117) [145] : 0x00 (0) [146] : 0x2e (46) [147] : 0x00 (0) [148] : 0x64 (100) [149] : 0x00 (0) [150] : 0x74 (116) [151] : 0x00 (0) [152] : 0x64 (100) [153] : 0x00 (0) [154] : 0x00 (0) [155] : 0x00 (0) [156] : 0x68 (104) [157] : 0x00 (0) [158] : 0x70 (112) [159] : 0x00 (0) [160] : 0x7a (122) [161] : 0x00 (0) [162] : 0x75 (117) [163] : 0x00 (0) [164] : 0x69 (105) [165] : 0x00 (0) [166] : 0x35 (53) [167] : 0x00 (0) [168] : 0x6d (109) [169] : 0x00 (0) [170] : 0x75 (117) [171] : 0x00 (0) [172] : 0x2e (46) [173] : 0x00 (0) [174] : 0x64 (100) [175] : 0x00 (0) [176] : 0x6c (108) [177] : 0x00 (0) [178] : 0x6c (108) [179] : 0x00 (0) [180] : 0x00 (0) [181] : 0x00 (0) [182] : 0x68 (104) [183] : 0x00 (0) [184] : 0x70 (112) [185] : 0x00 (0) [186] : 0x7a (122) [187] : 0x00 (0) [188] : 0x33 (51) [189] : 0x00 (0) [190] : 0x72 (114) [191] : 0x00 (0) [192] : 0x35 (53) [193] : 0x00 (0) [194] : 0x6d (109) [195] : 0x00 (0) [196] : 0x75 (117) [197] : 0x00 (0) [198] : 0x2e (46) [199] : 0x00 (0) [200] : 0x64 (100) [201] : 0x00 (0) [202] : 0x6c (108) [203] : 0x00 (0) [204] : 0x6c (108) [205] : 0x00 (0) [206] : 0x00 (0) [207] : 0x00 (0) [208] : 0x68 (104) [209] : 0x00 (0) [210] : 0x70 (112) [211] : 0x00 (0) [212] : 0x7a (122) [213] : 0x00 (0) [214] : 0x70 (112) [215] : 0x00 (0) [216] : 0x72 (114) [217] : 0x00 (0) [218] : 0x35 (53) [219] : 0x00 (0) [220] : 0x6d (109) [221] : 0x00 (0) [222] : 0x75 (117) [223] : 0x00 (0) [224] : 0x2e (46) [225] : 0x00 (0) [226] : 0x64 (100) [227] : 0x00 (0) [228] : 0x6c (108) [229] : 0x00 (0) [230] : 0x6c (108) [231] : 0x00 (0) [232] : 0x00 (0) [233] : 0x00 (0) [234] : 0x68 (104) [235] : 0x00 (0) [236] : 0x70 (112) [237] : 0x00 (0) [238] : 0x66 (102) [239] : 0x00 (0) [240] : 0x73 (115) [241] : 0x00 (0) [242] : 0x70 (112) [243] : 0x00 (0) [244] : 0x30 (48) [245] : 0x00 (0) [246] : 0x37 (55) [247] : 0x00 (0) [248] : 0x31 (49) [249] : 0x00 (0) [250] : 0x2e (46) [251] : 0x00 (0) [252] : 0x72 (114) [253] : 0x00 (0) [254] : 0x70 (112) [255] : 0x00 (0) [256] : 0x6f (111) [257] : 0x00 (0) [258] : 0x00 (0) [259] : 0x00 (0) [260] : 0x68 (104) [261] : 0x00 (0) [262] : 0x70 (112) [263] : 0x00 (0) [264] : 0x63 (99) [265] : 0x00 (0) [266] : 0x64 (100) [267] : 0x00 (0) [268] : 0x6d (109) [269] : 0x00 (0) [270] : 0x63 (99) [271] : 0x00 (0) [272] : 0x33 (51) [273] : 0x00 (0) [274] : 0x32 (50) [275] : 0x00 (0) [276] : 0x2e (46) [277] : 0x00 (0) [278] : 0x64 (100) [279] : 0x00 (0) [280] : 0x6c (108) [281] : 0x00 (0) [282] : 0x6c (108) [283] : 0x00 (0) [284] : 0x00 (0) [285] : 0x00 (0) [286] : 0x68 (104) [287] : 0x00 (0) [288] : 0x70 (112) [289] : 0x00 (0) [290] : 0x62 (98) [291] : 0x00 (0) [292] : 0x63 (99) [293] : 0x00 (0) [294] : 0x66 (102) [295] : 0x00 (0) [296] : 0x67 (103) [297] : 0x00 (0) [298] : 0x72 (114) [299] : 0x00 (0) [300] : 0x65 (101) [301] : 0x00 (0) [302] : 0x2e (46) [303] : 0x00 (0) [304] : 0x64 (100) [305] : 0x00 (0) [306] : 0x6c (108) [307] : 0x00 (0) [308] : 0x6c (108) [309] : 0x00 (0) [310] : 0x00 (0) [311] : 0x00 (0) [312] : 0x68 (104) [313] : 0x00 (0) [314] : 0x70 (112) [315] : 0x00 (0) [316] : 0x6f (111) [317] : 0x00 (0) [318] : 0x32 (50) [319] : 0x00 (0) [320] : 0x32 (50) [321] : 0x00 (0) [322] : 0x30 (48) [323] : 0x00 (0) [324] : 0x30 (48) [325] : 0x00 (0) [326] : 0x33 (51) [327] : 0x00 (0) [328] : 0x2e (46) [329] : 0x00 (0) [330] : 0x65 (101) [331] : 0x00 (0) [332] : 0x78 (120) [333] : 0x00 (0) [334] : 0x70 (112) [335] : 0x00 (0) [336] : 0x00 (0) [337] : 0x00 (0) [338] : 0x68 (104) [339] : 0x00 (0) [340] : 0x70 (112) [341] : 0x00 (0) [342] : 0x7a (122) [343] : 0x00 (0) [344] : 0x6c (108) [345] : 0x00 (0) [346] : 0x65 (101) [347] : 0x00 (0) [348] : 0x35 (53) [349] : 0x00 (0) [350] : 0x6d (109) [351] : 0x00 (0) [352] : 0x75 (117) [353] : 0x00 (0) [354] : 0x2e (46) [355] : 0x00 (0) [356] : 0x64 (100) [357] : 0x00 (0) [358] : 0x6c (108) [359] : 0x00 (0) [360] : 0x6c (108) [361] : 0x00 (0) [362] : 0x00 (0) [363] : 0x00 (0) [364] : 0x68 (104) [365] : 0x00 (0) [366] : 0x70 (112) [367] : 0x00 (0) [368] : 0x7a (122) [369] : 0x00 (0) [370] : 0x73 (115) [371] : 0x00 (0) [372] : 0x65 (101) [373] : 0x00 (0) [374] : 0x35 (53) [375] : 0x00 (0) [376] : 0x6d (109) [377] : 0x00 (0) [378] : 0x75 (117) [379] : 0x00 (0) [380] : 0x2e (46) [381] : 0x00 (0) [382] : 0x64 (100) [383] : 0x00 (0) [384] : 0x6c (108) [385] : 0x00 (0) [386] : 0x6c (108) [387] : 0x00 (0) [388] : 0x00 (0) [389] : 0x00 (0) [390] : 0x68 (104) [391] : 0x00 (0) [392] : 0x70 (112) [393] : 0x00 (0) [394] : 0x7a (122) [395] : 0x00 (0) [396] : 0x73 (115) [397] : 0x00 (0) [398] : 0x6d (109) [399] : 0x00 (0) [400] : 0x35 (53) [401] : 0x00 (0) [402] : 0x6d (109) [403] : 0x00 (0) [404] : 0x75 (117) [405] : 0x00 (0) [406] : 0x2e (46) [407] : 0x00 (0) [408] : 0x67 (103) [409] : 0x00 (0) [410] : 0x70 (112) [411] : 0x00 (0) [412] : 0x64 (100) [413] : 0x00 (0) [414] : 0x00 (0) [415] : 0x00 (0) [416] : 0x68 (104) [417] : 0x00 (0) [418] : 0x70 (112) [419] : 0x00 (0) [420] : 0x7a (122) [421] : 0x00 (0) [422] : 0x33 (51) [423] : 0x00 (0) [424] : 0x6d (109) [425] : 0x00 (0) [426] : 0x35 (53) [427] : 0x00 (0) [428] : 0x6d (109) [429] : 0x00 (0) [430] : 0x75 (117) [431] : 0x00 (0) [432] : 0x2e (46) [433] : 0x00 (0) [434] : 0x67 (103) [435] : 0x00 (0) [436] : 0x70 (112) [437] : 0x00 (0) [438] : 0x64 (100) [439] : 0x00 (0) [440] : 0x00 (0) [441] : 0x00 (0) [442] : 0x68 (104) [443] : 0x00 (0) [444] : 0x70 (112) [445] : 0x00 (0) [446] : 0x7a (122) [447] : 0x00 (0) [448] : 0x65 (101) [449] : 0x00 (0) [450] : 0x76 (118) [451] : 0x00 (0) [452] : 0x35 (53) [453] : 0x00 (0) [454] : 0x6d (109) [455] : 0x00 (0) [456] : 0x75 (117) [457] : 0x00 (0) [458] : 0x2e (46) [459] : 0x00 (0) [460] : 0x64 (100) [461] : 0x00 (0) [462] : 0x6c (108) [463] : 0x00 (0) [464] : 0x6c (108) [465] : 0x00 (0) [466] : 0x00 (0) [467] : 0x00 (0) [468] : 0x68 (104) [469] : 0x00 (0) [470] : 0x70 (112) [471] : 0x00 (0) [472] : 0x7a (122) [473] : 0x00 (0) [474] : 0x68 (104) [475] : 0x00 (0) [476] : 0x6c (108) [477] : 0x00 (0) [478] : 0x35 (53) [479] : 0x00 (0) [480] : 0x6d (109) [481] : 0x00 (0) [482] : 0x75 (117) [483] : 0x00 (0) [484] : 0x2e (46) [485] : 0x00 (0) [486] : 0x63 (99) [487] : 0x00 (0) [488] : 0x61 (97) [489] : 0x00 (0) [490] : 0x62 (98) [491] : 0x00 (0) [492] : 0x00 (0) [493] : 0x00 (0) [494] : 0x55 (85) [495] : 0x00 (0) [496] : 0x4e (78) [497] : 0x00 (0) [498] : 0x49 (73) [499] : 0x00 (0) [500] : 0x52 (82) [501] : 0x00 (0) [502] : 0x45 (69) [503] : 0x00 (0) [504] : 0x53 (83) [505] : 0x00 (0) [506] : 0x2e (46) [507] : 0x00 (0) [508] : 0x44 (68) [509] : 0x00 (0) [510] : 0x4c (76) [511] : 0x00 (0) [512] : 0x4c (76) [513] : 0x00 (0) [514] : 0x00 (0) [515] : 0x00 (0) [516] : 0x53 (83) [517] : 0x00 (0) [518] : 0x54 (84) [519] : 0x00 (0) [520] : 0x44 (68) [521] : 0x00 (0) [522] : 0x4e (78) [523] : 0x00 (0) [524] : 0x41 (65) [525] : 0x00 (0) [526] : 0x4d (77) [527] : 0x00 (0) [528] : 0x45 (69) [529] : 0x00 (0) [530] : 0x53 (83) [531] : 0x00 (0) [532] : 0x2e (46) [533] : 0x00 (0) [534] : 0x47 (71) [535] : 0x00 (0) [536] : 0x50 (80) [537] : 0x00 (0) [538] : 0x44 (68) [539] : 0x00 (0) [540] : 0x00 (0) [541] : 0x00 (0) [542] : 0x68 (104) [543] : 0x00 (0) [544] : 0x70 (112) [545] : 0x00 (0) [546] : 0x66 (102) [547] : 0x00 (0) [548] : 0x69 (105) [549] : 0x00 (0) [550] : 0x65 (101) [551] : 0x00 (0) [552] : 0x35 (53) [553] : 0x00 (0) [554] : 0x6d (109) [555] : 0x00 (0) [556] : 0x75 (117) [557] : 0x00 (0) [558] : 0x2e (46) [559] : 0x00 (0) [560] : 0x64 (100) [561] : 0x00 (0) [562] : 0x6c (108) [563] : 0x00 (0) [564] : 0x6c (108) [565] : 0x00 (0) [566] : 0x00 (0) [567] : 0x00 (0) [568] : 0x68 (104) [569] : 0x00 (0) [570] : 0x70 (112) [571] : 0x00 (0) [572] : 0x66 (102) [573] : 0x00 (0) [574] : 0x69 (105) [575] : 0x00 (0) [576] : 0x67 (103) [577] : 0x00 (0) [578] : 0x35 (53) [579] : 0x00 (0) [580] : 0x6d (109) [581] : 0x00 (0) [582] : 0x75 (117) [583] : 0x00 (0) [584] : 0x2e (46) [585] : 0x00 (0) [586] : 0x64 (100) [587] : 0x00 (0) [588] : 0x6c (108) [589] : 0x00 (0) [590] : 0x6c (108) [591] : 0x00 (0) [592] : 0x00 (0) [593] : 0x00 (0) [594] : 0x68 (104) [595] : 0x00 (0) [596] : 0x70 (112) [597] : 0x00 (0) [598] : 0x66 (102) [599] : 0x00 (0) [600] : 0x72 (114) [601] : 0x00 (0) [602] : 0x73 (115) [603] : 0x00 (0) [604] : 0x35 (53) [605] : 0x00 (0) [606] : 0x6d (109) [607] : 0x00 (0) [608] : 0x75 (117) [609] : 0x00 (0) [610] : 0x2e (46) [611] : 0x00 (0) [612] : 0x64 (100) [613] : 0x00 (0) [614] : 0x6c (108) [615] : 0x00 (0) [616] : 0x6c (108) [617] : 0x00 (0) [618] : 0x00 (0) [619] : 0x00 (0) [620] : 0x68 (104) [621] : 0x00 (0) [622] : 0x70 (112) [623] : 0x00 (0) [624] : 0x7a (122) [625] : 0x00 (0) [626] : 0x6c (108) [627] : 0x00 (0) [628] : 0x61 (97) [629] : 0x00 (0) [630] : 0x35 (53) [631] : 0x00 (0) [632] : 0x6d (109) [633] : 0x00 (0) [634] : 0x75 (117) [635] : 0x00 (0) [636] : 0x2e (46) [637] : 0x00 (0) [638] : 0x64 (100) [639] : 0x00 (0) [640] : 0x6c (108) [641] : 0x00 (0) [642] : 0x6c (108) [643] : 0x00 (0) [644] : 0x00 (0) [645] : 0x00 (0) [646] : 0x68 (104) [647] : 0x00 (0) [648] : 0x70 (112) [649] : 0x00 (0) [650] : 0x7a (122) [651] : 0x00 (0) [652] : 0x73 (115) [653] : 0x00 (0) [654] : 0x73 (115) [655] : 0x00 (0) [656] : 0x35 (53) [657] : 0x00 (0) [658] : 0x6d (109) [659] : 0x00 (0) [660] : 0x75 (117) [661] : 0x00 (0) [662] : 0x2e (46) [663] : 0x00 (0) [664] : 0x64 (100) [665] : 0x00 (0) [666] : 0x6c (108) [667] : 0x00 (0) [668] : 0x6c (108) [669] : 0x00 (0) [670] : 0x00 (0) [671] : 0x00 (0) [672] : 0x68 (104) [673] : 0x00 (0) [674] : 0x70 (112) [675] : 0x00 (0) [676] : 0x7a (122) [677] : 0x00 (0) [678] : 0x63 (99) [679] : 0x00 (0) [680] : 0x33 (51) [681] : 0x00 (0) [682] : 0x35 (53) [683] : 0x00 (0) [684] : 0x6d (109) [685] : 0x00 (0) [686] : 0x75 (117) [687] : 0x00 (0) [688] : 0x2e (46) [689] : 0x00 (0) [690] : 0x64 (100) [691] : 0x00 (0) [692] : 0x6c (108) [693] : 0x00 (0) [694] : 0x6c (108) [695] : 0x00 (0) [696] : 0x00 (0) [697] : 0x00 (0) [698] : 0x68 (104) [699] : 0x00 (0) [700] : 0x70 (112) [701] : 0x00 (0) [702] : 0x75 (117) [703] : 0x00 (0) [704] : 0x61 (97) [705] : 0x00 (0) [706] : 0x63 (99) [707] : 0x00 (0) [708] : 0x35 (53) [709] : 0x00 (0) [710] : 0x6d (109) [711] : 0x00 (0) [712] : 0x75 (117) [713] : 0x00 (0) [714] : 0x2e (46) [715] : 0x00 (0) [716] : 0x64 (100) [717] : 0x00 (0) [718] : 0x6c (108) [719] : 0x00 (0) [720] : 0x6c (108) [721] : 0x00 (0) [722] : 0x00 (0) [723] : 0x00 (0) [724] : 0x00 (0) [725] : 0x00 (0) size : * size : 0x000002d6 (726) length : * length : 0x000002d6 (726) result : WERR_OK [2013/05/23 17:29:00.622363, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000006 (6) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.622906, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.623023, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.623116, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'Monitor' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.623599, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000007 (7) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.624163, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.624284, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.624344, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0012 (18) size : 0x0034 (52) name : * name : 'Datatype' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.624809, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000008 (8) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.625748, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.625880, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.625959, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001e (30) size : 0x0034 (52) name : * name : 'Previous Names' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:00.626536, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000009 (9) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.627059, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.627206, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.627269, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0016 (22) size : 0x0034 (52) name : * name : 'DriverDate' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x31 (49) [1] : 0x00 (0) [2] : 0x30 (48) [3] : 0x00 (0) [4] : 0x2f (47) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x30 (48) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x32 (50) [13] : 0x00 (0) [14] : 0x30 (48) [15] : 0x00 (0) [16] : 0x30 (48) [17] : 0x00 (0) [18] : 0x37 (55) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:00.628255, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x0000000a (10) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.628774, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.628893, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.628952, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001c (28) size : 0x0034 (52) name : * name : 'DriverVersion' type : * type : REG_SZ (1) value : * value: ARRAY(24) [0] : 0x36 (54) [1] : 0x00 (0) [2] : 0x31 (49) [3] : 0x00 (0) [4] : 0x2e (46) [5] : 0x00 (0) [6] : 0x37 (55) [7] : 0x00 (0) [8] : 0x33 (51) [9] : 0x00 (0) [10] : 0x2e (46) [11] : 0x00 (0) [12] : 0x32 (50) [13] : 0x00 (0) [14] : 0x34 (52) [15] : 0x00 (0) [16] : 0x31 (49) [17] : 0x00 (0) [18] : 0x2e (46) [19] : 0x00 (0) [20] : 0x30 (48) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : * size : 0x00000018 (24) length : * length : 0x00000018 (24) result : WERR_OK [2013/05/23 17:29:00.630010, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x0000000b (11) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.630637, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.630763, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.630827, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001a (26) size : 0x0034 (52) name : * name : 'Manufacturer' type : * type : REG_SZ (1) value : * value: ARRAY(32) [0] : 0x48 (72) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x77 (119) [5] : 0x00 (0) [6] : 0x6c (108) [7] : 0x00 (0) [8] : 0x65 (101) [9] : 0x00 (0) [10] : 0x74 (116) [11] : 0x00 (0) [12] : 0x74 (116) [13] : 0x00 (0) [14] : 0x2d (45) [15] : 0x00 (0) [16] : 0x50 (80) [17] : 0x00 (0) [18] : 0x61 (97) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x6b (107) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x64 (100) [29] : 0x00 (0) [30] : 0x00 (0) [31] : 0x00 (0) size : * size : 0x00000020 (32) length : * length : 0x00000020 (32) result : WERR_OK [2013/05/23 17:29:00.632564, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x0000000c (12) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.633131, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.633253, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.633319, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'OEM URL' type : * type : REG_SZ (1) value : * value: ARRAY(130) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x74 (116) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x70 (112) [7] : 0x00 (0) [8] : 0x3a (58) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x2f (47) [13] : 0x00 (0) [14] : 0x67 (103) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x2e (46) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x69 (105) [23] : 0x00 (0) [24] : 0x63 (99) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x6f (111) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x6f (111) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x74 (116) [37] : 0x00 (0) [38] : 0x2e (46) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x6f (111) [43] : 0x00 (0) [44] : 0x6d (109) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x66 (102) [49] : 0x00 (0) [50] : 0x77 (119) [51] : 0x00 (0) [52] : 0x6c (108) [53] : 0x00 (0) [54] : 0x69 (105) [55] : 0x00 (0) [56] : 0x6e (110) [57] : 0x00 (0) [58] : 0x6b (107) [59] : 0x00 (0) [60] : 0x2f (47) [61] : 0x00 (0) [62] : 0x3f (63) [63] : 0x00 (0) [64] : 0x4c (76) [65] : 0x00 (0) [66] : 0x69 (105) [67] : 0x00 (0) [68] : 0x6e (110) [69] : 0x00 (0) [70] : 0x6b (107) [71] : 0x00 (0) [72] : 0x49 (73) [73] : 0x00 (0) [74] : 0x44 (68) [75] : 0x00 (0) [76] : 0x3d (61) [77] : 0x00 (0) [78] : 0x33 (51) [79] : 0x00 (0) [80] : 0x37 (55) [81] : 0x00 (0) [82] : 0x26 (38) [83] : 0x00 (0) [84] : 0x70 (112) [85] : 0x00 (0) [86] : 0x72 (114) [87] : 0x00 (0) [88] : 0x64 (100) [89] : 0x00 (0) [90] : 0x3d (61) [91] : 0x00 (0) [92] : 0x31 (49) [93] : 0x00 (0) [94] : 0x30 (48) [95] : 0x00 (0) [96] : 0x37 (55) [97] : 0x00 (0) [98] : 0x39 (57) [99] : 0x00 (0) [100] : 0x38 (56) [101] : 0x00 (0) [102] : 0x26 (38) [103] : 0x00 (0) [104] : 0x73 (115) [105] : 0x00 (0) [106] : 0x62 (98) [107] : 0x00 (0) [108] : 0x70 (112) [109] : 0x00 (0) [110] : 0x3d (61) [111] : 0x00 (0) [112] : 0x50 (80) [113] : 0x00 (0) [114] : 0x72 (114) [115] : 0x00 (0) [116] : 0x69 (105) [117] : 0x00 (0) [118] : 0x6e (110) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x73 (115) [127] : 0x00 (0) [128] : 0x00 (0) [129] : 0x00 (0) size : * size : 0x00000082 (130) length : * length : 0x00000082 (130) result : WERR_OK [2013/05/23 17:29:00.636947, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x0000000d (13) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.637518, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.637637, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.637701, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0016 (22) size : 0x0034 (52) name : * name : 'HardwareID' type : * type : REG_SZ (1) value : * value: ARRAY(68) [0] : 0x75 (117) [1] : 0x00 (0) [2] : 0x73 (115) [3] : 0x00 (0) [4] : 0x62 (98) [5] : 0x00 (0) [6] : 0x70 (112) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x69 (105) [11] : 0x00 (0) [12] : 0x6e (110) [13] : 0x00 (0) [14] : 0x74 (116) [15] : 0x00 (0) [16] : 0x5c (92) [17] : 0x00 (0) [18] : 0x68 (104) [19] : 0x00 (0) [20] : 0x70 (112) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x65 (101) [25] : 0x00 (0) [26] : 0x73 (115) [27] : 0x00 (0) [28] : 0x6b (107) [29] : 0x00 (0) [30] : 0x6a (106) [31] : 0x00 (0) [32] : 0x65 (101) [33] : 0x00 (0) [34] : 0x74 (116) [35] : 0x00 (0) [36] : 0x5f (95) [37] : 0x00 (0) [38] : 0x66 (102) [39] : 0x00 (0) [40] : 0x32 (50) [41] : 0x00 (0) [42] : 0x32 (50) [43] : 0x00 (0) [44] : 0x30 (48) [45] : 0x00 (0) [46] : 0x30 (48) [47] : 0x00 (0) [48] : 0x5f (95) [49] : 0x00 (0) [50] : 0x73 (115) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x69 (105) [57] : 0x00 (0) [58] : 0x38 (56) [59] : 0x00 (0) [60] : 0x37 (55) [61] : 0x00 (0) [62] : 0x63 (99) [63] : 0x00 (0) [64] : 0x37 (55) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) size : * size : 0x00000044 (68) length : * length : 0x00000044 (68) result : WERR_OK [2013/05/23 17:29:00.639707, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x0000000e (14) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.640277, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.640536, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.640612, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0012 (18) size : 0x0034 (52) name : * name : 'Provider' type : * type : REG_SZ (1) value : * value: ARRAY(32) [0] : 0x48 (72) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x77 (119) [5] : 0x00 (0) [6] : 0x6c (108) [7] : 0x00 (0) [8] : 0x65 (101) [9] : 0x00 (0) [10] : 0x74 (116) [11] : 0x00 (0) [12] : 0x74 (116) [13] : 0x00 (0) [14] : 0x2d (45) [15] : 0x00 (0) [16] : 0x50 (80) [17] : 0x00 (0) [18] : 0x61 (97) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x6b (107) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x64 (100) [29] : 0x00 (0) [30] : 0x00 (0) [31] : 0x00 (0) size : * size : 0x00000020 (32) length : * length : 0x00000020 (32) result : WERR_OK [2013/05/23 17:29:00.642066, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x0000000f (15) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.642659, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.642779, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.642843, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0020 (32) size : 0x0034 (52) name : * name : 'Print Processor' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.643339, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000010 (16) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.643853, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.645601, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.645704, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0018 (24) size : 0x0034 (52) name : * name : 'VendorSetup' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.646234, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000011 (17) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.646773, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.646889, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.646950, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001e (30) size : 0x0034 (52) name : * name : 'Color Profiles' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:00.647514, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000012 (18) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.648051, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.648197, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.648260, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'InfPath' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.648722, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000013 (19) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.649267, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.649401, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.649462, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0030 (48) size : 0x0034 (52) name : * name : 'PrinterDriverAttributes' type : * type : REG_DWORD (4) value : * value: ARRAY(4) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : * size : 0x00000004 (4) length : * length : 0x00000004 (4) result : WERR_OK [2013/05/23 17:29:00.650025, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000014 (20) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.650655, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.650781, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.650846, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0022 (34) size : 0x0034 (52) name : * name : 'CoreDependencies' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:00.651431, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000015 (21) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.652943, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.653209, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.653285, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x002c (44) size : 0x0034 (52) name : * name : 'MinInboxDriverVerDate' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x30 (48) [1] : 0x00 (0) [2] : 0x31 (49) [3] : 0x00 (0) [4] : 0x2f (47) [5] : 0x00 (0) [6] : 0x30 (48) [7] : 0x00 (0) [8] : 0x31 (49) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x31 (49) [13] : 0x00 (0) [14] : 0x36 (54) [15] : 0x00 (0) [16] : 0x30 (48) [17] : 0x00 (0) [18] : 0x31 (49) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:00.654323, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 enum_index : 0x00000016 (22) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.654862, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.654980, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.655041, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0032 (50) size : 0x0034 (52) name : * name : 'MinInboxDriverVerVersion' type : * type : REG_SZ (1) value : * value: ARRAY(16) [0] : 0x30 (48) [1] : 0x00 (0) [2] : 0x2e (46) [3] : 0x00 (0) [4] : 0x30 (48) [5] : 0x00 (0) [6] : 0x2e (46) [7] : 0x00 (0) [8] : 0x30 (48) [9] : 0x00 (0) [10] : 0x2e (46) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) size : * size : 0x00000010 (16) length : * length : 0x00000010 (16) result : WERR_OK [2013/05/23 17:29:00.656392, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000072-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.656636, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.656754, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 72 00 00 00 00 00 00 00 9E 51 BC 35 ....r... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.656862, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.656925, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.656976, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.657251, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000071-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.657440, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 71 00 00 00 00 00 00 00 9E 51 BC 35 ....q... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.657553, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 71 00 00 00 00 00 00 00 9E 51 BC 35 ....q... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.657660, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.657708, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.657785, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.658278, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:00.658547, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000950 (2384) result : WERR_INSUFFICIENT_BUFFER [2013/05/23 17:29:00.658830, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:00.658919, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.658978, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1124 [2013/05/23 17:29:00.659063, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:00.659190, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:00.659272, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x0000004d (77) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 50 09 00 00 00 00 00 00 ........ P....... [0410] 7A 00 00 00 z... [2013/05/23 17:29:00.664496, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 5821 [2013/05/23 17:29:00.664651, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:00.664723, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:00.664776, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.664805, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=17793 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:00.665221, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 4D 00 00 ........ .,...M.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:00.671454, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 2584 [2013/05/23 17:29:00.671641, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0xa18 [2013/05/23 17:29:00.671702, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8105 of length 2588 (0 toread) [2013/05/23 17:29:00.671751, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.671780, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=2584 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=17857 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2500 (0x9C4) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 2500 (0x9C4) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=2517 [2013/05/23 17:29:00.672357, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 C4 09 00 00 4E 00 00 ........ .....N.. [0020] 00 AC 09 00 00 00 00 0A 00 00 00 02 00 06 00 00 ........ ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0F 00 00 00 00 00 00 .1...... ........ [0050] 00 0F 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 78 00 38 00 36 .s. .N.T . .x.8.6 [0070] 00 00 00 61 00 03 00 00 00 08 00 02 00 50 09 00 ...a.... .....P.. [0080] 00 A0 51 84 02 C0 2F 84 02 00 00 00 00 00 00 00 ..Q.../. ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:00.673812, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:00.673889, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.673964, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=2500 params=0 setup=2 [2013/05/23 17:29:00.674022, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:00.674066, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:00.674149, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:00.674201, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:00.674252, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:00.674302, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 2500 [2013/05/23 17:29:00.674351, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 2500 [2013/05/23 17:29:00.674397, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 2500 [2013/05/23 17:29:00.674444, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 2500, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:00.674491, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:00.674535, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 2484 [2013/05/23 17:29:00.674579, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 2484 [2013/05/23 17:29:00.674630, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:00.674675, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 2484 [2013/05/23 17:29:00.674720, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 2484, incoming data = 2484 [2013/05/23 17:29:00.674771, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:00.674838, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x09c4 (2500) auth_length : 0x0000 (0) call_id : 0x0000004e (78) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x000009ac (2476) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=2476 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0F 00 00 00 00 00 00 00 0F 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 78 00 38 00 36 00 00 00 61 00 03 00 00 00 .x.8.6. ..a..... [0050] 08 00 02 00 50 09 00 00 A0 51 84 02 C0 2F 84 02 ....P... .Q.../.. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0460] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0470] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0480] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0490] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0500] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0510] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0520] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0530] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0560] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0590] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0600] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0610] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0620] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0630] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0640] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0650] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0660] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0670] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0680] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0690] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0700] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0710] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0720] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0730] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0740] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0750] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0760] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0770] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0780] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0790] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0800] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0810] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0820] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0830] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0840] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0850] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0860] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0870] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0880] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0890] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0900] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0910] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0920] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0930] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0940] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0950] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0960] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0970] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0980] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0990] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [09A0] 00 00 00 00 00 00 00 00 50 09 00 00 ........ P... [2013/05/23 17:29:00.686400, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:00.686470, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:00.686529, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.686587, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.686638, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:00.687440, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:00.687729, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:00.687788, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:00.687839, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:00.687927, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT x86' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=2384 [0000] A0 51 84 02 C0 2F 84 02 00 00 00 00 00 00 00 00 .Q.../.. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0460] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0470] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0480] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0490] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0500] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0510] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0520] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0530] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0560] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0590] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0600] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0610] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0620] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0630] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0640] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0650] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0660] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0670] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0680] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0690] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0700] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0710] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0720] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0730] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0740] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0750] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0760] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0770] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0780] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0790] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [07F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0800] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0810] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0820] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0830] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0840] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0850] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0860] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0870] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0880] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0890] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0900] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0910] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0920] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0930] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0940] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000950 (2384) [2013/05/23 17:29:00.696985, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:00.697111, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:00.697181, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:00.697232, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:00.697372, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:00.697475, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.697758, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.697812, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.697869, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.697918, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.697964, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.698008, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.698270, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.698366, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.698425, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.698475, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.698525, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.698569, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.698687, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 73 00 00 00 00 00 00 00 9E 51 BC 35 ....s... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.698839, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000073-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.699177, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000073-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.699803, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 73 00 00 00 00 00 00 00 9E 51 BC 35 ....s... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.699928, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.699979, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.700033, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.700080, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.700181, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.700230, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.700436, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.700547, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.700622, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.700671, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.700725, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.700770, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.700969, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.701041, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.701153, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.701224, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.701283, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.701329, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.701452, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.701517, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.701573, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.701621, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.701675, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.701940, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.702163, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.702248, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.702305, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.702355, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.702414, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.702477, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.702577, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.702638, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.702694, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.702744, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.702797, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.702843, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.703045, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.703170, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.703230, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.703280, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.703336, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.703381, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.703482, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-0] [2013/05/23 17:29:00.703544, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.703600, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:00.703651, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:00.703707, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.703751, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:00.703839, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] not found [2013/05/23 17:29:00.703907, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.703960, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.704009, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.704060, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.704138, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.704191, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.704241, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.704290, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.704342, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.704604, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000073-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.704795, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 73 00 00 00 00 00 00 00 9E 51 BC 35 ....s... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.704914, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 73 00 00 00 00 00 00 00 9E 51 BC 35 ....s... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.705026, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.705074, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.705184, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.705574, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,0): WERR_BADFILE [2013/05/23 17:29:00.705658, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [0] [2013/05/23 17:29:00.705737, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.706125, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.706204, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.706263, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.706312, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.706358, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.706403, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.706605, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.706691, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.706750, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.706799, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.706848, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.706893, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.707009, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 74 00 00 00 00 00 00 00 9E 51 BC 35 ....t... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.707204, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000074-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.707510, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000074-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.708165, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 74 00 00 00 00 00 00 00 9E 51 BC 35 ....t... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.708294, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.708345, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.708399, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.708446, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.708498, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.708543, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.708647, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.708712, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.708767, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.708814, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.708882, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.708928, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.709030, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.709150, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.709223, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.709273, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.709327, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.709372, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.709494, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.709560, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.709614, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.709663, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.709717, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.709762, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.709876, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.709937, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.709992, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.710041, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.710138, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.710198, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.710320, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.710393, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.710448, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.710498, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.710553, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.710598, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.710703, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.710766, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.710913, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.710998, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.711060, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.711157, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.711278, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-1] [2013/05/23 17:29:00.711344, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.711401, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:00.711450, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:00.711505, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.711550, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:00.711617, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] not found [2013/05/23 17:29:00.711690, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.711742, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.711791, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.712643, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.712750, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.712805, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.712855, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.712905, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.712957, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.713288, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000074-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.713490, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 74 00 00 00 00 00 00 00 9E 51 BC 35 ....t... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.713606, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 74 00 00 00 00 00 00 00 9E 51 BC 35 ....t... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.713714, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.713763, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.713838, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.714078, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,1): WERR_BADFILE [2013/05/23 17:29:00.714218, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [1] [2013/05/23 17:29:00.714303, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.714584, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.714638, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.714694, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.714742, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.714788, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.714832, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.715032, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.715174, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.715240, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.715288, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.715338, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.715429, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.715571, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 75 00 00 00 00 00 00 00 9E 51 BC 35 ....u... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.715709, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000075-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.716136, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000075-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.716766, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 75 00 00 00 00 00 00 00 9E 51 BC 35 ....u... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.716893, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.716944, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.716998, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.717045, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.717146, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.717207, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.717319, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.717386, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.717442, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.717490, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.717542, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.717586, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.717705, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.717773, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.717827, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.717875, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.717931, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.717988, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.718144, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.718233, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.718290, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.718338, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.718394, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.718439, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.718561, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.718624, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.718677, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.718726, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.718780, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.718825, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.718914, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.718975, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.719045, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.719145, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.719209, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.719255, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.719375, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.719441, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.719497, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.719641, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.719706, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.719751, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.719854, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-2] [2013/05/23 17:29:00.719916, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.719972, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:00.720021, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:00.720076, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.720177, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:00.720261, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] not found [2013/05/23 17:29:00.720409, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.720481, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.720549, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.720600, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.720651, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.720702, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.720751, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.720801, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.720851, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.721238, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000075-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.721447, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 75 00 00 00 00 00 00 00 9E 51 BC 35 ....u... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.721564, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 75 00 00 00 00 00 00 00 9E 51 BC 35 ....u... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.721671, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.721720, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.721795, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.722321, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,2): WERR_BADFILE [2013/05/23 17:29:00.722406, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [2] [2013/05/23 17:29:00.722504, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.722781, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.722835, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.722890, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.722938, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.722984, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.723028, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.723283, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.723379, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.723437, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.723486, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.723535, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.723580, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.723696, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 76 00 00 00 00 00 00 00 9E 51 BC 35 ....v... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.723832, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000076-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.724155, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000076-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.724789, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 76 00 00 00 00 00 00 00 9E 51 BC 35 ....v... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.724916, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.724967, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.725034, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.725082, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.725201, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.725249, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.725357, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.725563, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.725631, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.725679, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.725732, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.725777, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.725958, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.726057, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.726206, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.726265, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.726322, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.726367, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.726493, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.726559, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.726614, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.726661, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.726715, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.726759, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.726872, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.726934, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.726988, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.727037, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.727132, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.727192, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.727295, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.727357, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.727412, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.727461, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.727533, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.727579, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.727689, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.727846, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.727917, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.727967, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.728024, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.728069, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.728236, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-3] [2013/05/23 17:29:00.728307, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.728364, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.728414, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.728470, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.728514, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.728607, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.728668, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.728718, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.728769, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.728821, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.728886, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.728937, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.728992, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 77 00 00 00 00 00 00 00 9E 51 BC 35 ....w... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.729137, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000077-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.729410, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000077-0000-0000-9e51-bc3564090000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2013/05/23 17:29:00.729710, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 77 00 00 00 00 00 00 00 9E 51 BC 35 ....w... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.729831, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3' (ops 0xb697a420) [2013/05/23 17:29:00.729885, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.729979, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.730073, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000001 (1) max_subkeylen : * max_subkeylen : 0x0000002e (46) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:00.730735, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000077-0000-0000-9e51-bc3564090000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x0030 (48) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2013/05/23 17:29:00.731369, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 77 00 00 00 00 00 00 00 9E 51 BC 35 ....w... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.731497, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:421(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.731557, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0030 (48) size : 0x0030 (48) name : * name : 'HP Deskjet F2200 series' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:00.732032, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000077-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.732511, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 77 00 00 00 00 00 00 00 9E 51 BC 35 ....w... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.732655, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 77 00 00 00 00 00 00 00 9E 51 BC 35 ....w... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.732767, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.732816, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.732866, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.733142, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000076-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.733343, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 76 00 00 00 00 00 00 00 9E 51 BC 35 ....v... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.733460, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 76 00 00 00 00 00 00 00 9E 51 BC 35 ....v... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.733571, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.733620, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.733696, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.733920, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[1] drivers in environment [Windows NT x86] and version [3] [2013/05/23 17:29:00.733982, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7499(enumprinterdrivers_level_by_architecture) driver: [HP Deskjet F2200 series] [2013/05/23 17:29:00.734055, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.734402, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.734464, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.734521, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.734568, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.734615, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.734659, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.734860, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.734944, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.735004, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.735053, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.735157, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.735211, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.735336, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 78 00 00 00 00 00 00 00 9E 51 BC 35 ....x... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.735535, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000078-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.735828, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000078-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00da (218) name_size : 0x00da (218) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.736668, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 78 00 00 00 00 00 00 00 9E 51 BC 35 ....x... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.736806, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.736858, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.736914, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.736962, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.737014, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.737058, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.737231, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.737309, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.737364, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.737412, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.737464, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.737509, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.737605, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.737667, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.737721, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.737769, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.737821, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.737883, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.737995, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.738058, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.738165, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.738219, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.738274, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.738320, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.738447, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.738512, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.738568, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.738616, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.738669, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.738714, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.738805, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:00.738864, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.738919, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.738967, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.739021, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.739066, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:00.739259, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:00.739341, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:00.739398, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.739447, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.739503, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.739548, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:00.739640, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-3] [2013/05/23 17:29:00.739698, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:00.739751, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.739800, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.739855, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.739899, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:00.739989, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HP Deskjet F2200 series] [2013/05/23 17:29:00.740047, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (9->10) [2013/05/23 17:29:00.740148, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.740209, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.740267, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.740394, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.740525, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (10->9) [2013/05/23 17:29:00.740605, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:00.740657, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:00.740706, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.740757, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.740807, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.740856, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.740904, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.741027, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.741215, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.741496, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2013/05/23 17:29:00.741793, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.741919, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series' (ops 0xb697a420) [2013/05/23 17:29:00.741974, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.742117, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Version] len[4] [2013/05/23 17:29:00.742449, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[Driver] len[22] [2013/05/23 17:29:00.742539, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[2]: name[Data File] len[26] [2013/05/23 17:29:00.742597, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[3]: name[Configuration File] len[26] [2013/05/23 17:29:00.742650, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[4]: name[Help File] len[22] [2013/05/23 17:29:00.742709, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[5]: name[Dependent Files] len[726] [2013/05/23 17:29:00.742763, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[6]: name[Monitor] len[0] [2013/05/23 17:29:00.742816, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[7]: name[Datatype] len[0] [2013/05/23 17:29:00.742869, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[8]: name[Previous Names] len[2] [2013/05/23 17:29:00.742924, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[9]: name[DriverDate] len[22] [2013/05/23 17:29:00.742979, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[10]: name[DriverVersion] len[24] [2013/05/23 17:29:00.743034, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[11]: name[Manufacturer] len[32] [2013/05/23 17:29:00.743116, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[12]: name[OEM URL] len[130] [2013/05/23 17:29:00.743180, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[13]: name[HardwareID] len[68] [2013/05/23 17:29:00.743237, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[14]: name[Provider] len[32] [2013/05/23 17:29:00.743293, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[15]: name[Print Processor] len[0] [2013/05/23 17:29:00.743348, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[16]: name[VendorSetup] len[0] [2013/05/23 17:29:00.743404, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[17]: name[Color Profiles] len[2] [2013/05/23 17:29:00.743459, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[18]: name[InfPath] len[0] [2013/05/23 17:29:00.743516, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[19]: name[PrinterDriverAttributes] len[4] [2013/05/23 17:29:00.743591, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[20]: name[CoreDependencies] len[2] [2013/05/23 17:29:00.743649, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[21]: name[MinInboxDriverVerDate] len[22] [2013/05/23 17:29:00.743708, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[22]: name[MinInboxDriverVerVersion] len[16] [2013/05/23 17:29:00.743766, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.743880, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000017 (23) max_valnamelen : * max_valnamelen : 0x00000032 (50) max_valbufsize : * max_valbufsize : 0x000002d6 (726) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:00.745516, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000000 (0) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.746177, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.746302, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.746387, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'Version' type : * type : REG_DWORD (4) value : * value: ARRAY(4) [0] : 0x03 (3) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : * size : 0x00000004 (4) length : * length : 0x00000004 (4) result : WERR_OK [2013/05/23 17:29:00.746960, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000001 (1) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.747515, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.747632, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.747693, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x000e (14) size : 0x0034 (52) name : * name : 'Driver' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x2e (46) [13] : 0x00 (0) [14] : 0x44 (68) [15] : 0x00 (0) [16] : 0x4c (76) [17] : 0x00 (0) [18] : 0x4c (76) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:00.748706, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000002 (2) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.749254, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.749373, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.749433, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0014 (20) size : 0x0034 (52) name : * name : 'Data File' type : * type : REG_SZ (1) value : * value: ARRAY(26) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x70 (112) [3] : 0x00 (0) [4] : 0x6f (111) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x32 (50) [9] : 0x00 (0) [10] : 0x30 (48) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x33 (51) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x70 (112) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) size : * size : 0x0000001a (26) length : * length : 0x0000001a (26) result : WERR_OK [2013/05/23 17:29:00.750522, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000003 (3) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.751177, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.751307, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.751372, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0026 (38) size : 0x0034 (52) name : * name : 'Configuration File' type : * type : REG_SZ (1) value : * value: ARRAY(26) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x55 (85) [13] : 0x00 (0) [14] : 0x49 (73) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x44 (68) [19] : 0x00 (0) [20] : 0x4c (76) [21] : 0x00 (0) [22] : 0x4c (76) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) size : * size : 0x0000001a (26) length : * length : 0x0000001a (26) result : WERR_OK [2013/05/23 17:29:00.752708, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000004 (4) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.753376, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.753499, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.753563, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0014 (20) size : 0x0034 (52) name : * name : 'Help File' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x2e (46) [13] : 0x00 (0) [14] : 0x48 (72) [15] : 0x00 (0) [16] : 0x4c (76) [17] : 0x00 (0) [18] : 0x50 (80) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:00.754574, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000005 (5) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.755121, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.755244, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.755309, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0020 (32) size : 0x0034 (52) name : * name : 'Dependent Files' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(726) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x70 (112) [3] : 0x00 (0) [4] : 0x6f (111) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x32 (50) [9] : 0x00 (0) [10] : 0x30 (48) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x61 (97) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x6e (110) [21] : 0x00 (0) [22] : 0x69 (105) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) [26] : 0x68 (104) [27] : 0x00 (0) [28] : 0x70 (112) [29] : 0x00 (0) [30] : 0x7a (122) [31] : 0x00 (0) [32] : 0x73 (115) [33] : 0x00 (0) [34] : 0x74 (116) [35] : 0x00 (0) [36] : 0x35 (53) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x75 (117) [41] : 0x00 (0) [42] : 0x2e (46) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x6c (108) [47] : 0x00 (0) [48] : 0x6c (108) [49] : 0x00 (0) [50] : 0x00 (0) [51] : 0x00 (0) [52] : 0x68 (104) [53] : 0x00 (0) [54] : 0x70 (112) [55] : 0x00 (0) [56] : 0x7a (122) [57] : 0x00 (0) [58] : 0x33 (51) [59] : 0x00 (0) [60] : 0x63 (99) [61] : 0x00 (0) [62] : 0x35 (53) [63] : 0x00 (0) [64] : 0x6d (109) [65] : 0x00 (0) [66] : 0x75 (117) [67] : 0x00 (0) [68] : 0x2e (46) [69] : 0x00 (0) [70] : 0x64 (100) [71] : 0x00 (0) [72] : 0x6c (108) [73] : 0x00 (0) [74] : 0x6c (108) [75] : 0x00 (0) [76] : 0x00 (0) [77] : 0x00 (0) [78] : 0x68 (104) [79] : 0x00 (0) [80] : 0x70 (112) [81] : 0x00 (0) [82] : 0x7a (122) [83] : 0x00 (0) [84] : 0x75 (117) [85] : 0x00 (0) [86] : 0x72 (114) [87] : 0x00 (0) [88] : 0x35 (53) [89] : 0x00 (0) [90] : 0x6d (109) [91] : 0x00 (0) [92] : 0x75 (117) [93] : 0x00 (0) [94] : 0x2e (46) [95] : 0x00 (0) [96] : 0x64 (100) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x6c (108) [101] : 0x00 (0) [102] : 0x00 (0) [103] : 0x00 (0) [104] : 0x68 (104) [105] : 0x00 (0) [106] : 0x70 (112) [107] : 0x00 (0) [108] : 0x6f (111) [109] : 0x00 (0) [110] : 0x32 (50) [111] : 0x00 (0) [112] : 0x32 (50) [113] : 0x00 (0) [114] : 0x30 (48) [115] : 0x00 (0) [116] : 0x30 (48) [117] : 0x00 (0) [118] : 0x33 (51) [119] : 0x00 (0) [120] : 0x2e (46) [121] : 0x00 (0) [122] : 0x78 (120) [123] : 0x00 (0) [124] : 0x6d (109) [125] : 0x00 (0) [126] : 0x6c (108) [127] : 0x00 (0) [128] : 0x00 (0) [129] : 0x00 (0) [130] : 0x68 (104) [131] : 0x00 (0) [132] : 0x70 (112) [133] : 0x00 (0) [134] : 0x7a (122) [135] : 0x00 (0) [136] : 0x73 (115) [137] : 0x00 (0) [138] : 0x63 (99) [139] : 0x00 (0) [140] : 0x35 (53) [141] : 0x00 (0) [142] : 0x6d (109) [143] : 0x00 (0) [144] : 0x75 (117) [145] : 0x00 (0) [146] : 0x2e (46) [147] : 0x00 (0) [148] : 0x64 (100) [149] : 0x00 (0) [150] : 0x74 (116) [151] : 0x00 (0) [152] : 0x64 (100) [153] : 0x00 (0) [154] : 0x00 (0) [155] : 0x00 (0) [156] : 0x68 (104) [157] : 0x00 (0) [158] : 0x70 (112) [159] : 0x00 (0) [160] : 0x7a (122) [161] : 0x00 (0) [162] : 0x75 (117) [163] : 0x00 (0) [164] : 0x69 (105) [165] : 0x00 (0) [166] : 0x35 (53) [167] : 0x00 (0) [168] : 0x6d (109) [169] : 0x00 (0) [170] : 0x75 (117) [171] : 0x00 (0) [172] : 0x2e (46) [173] : 0x00 (0) [174] : 0x64 (100) [175] : 0x00 (0) [176] : 0x6c (108) [177] : 0x00 (0) [178] : 0x6c (108) [179] : 0x00 (0) [180] : 0x00 (0) [181] : 0x00 (0) [182] : 0x68 (104) [183] : 0x00 (0) [184] : 0x70 (112) [185] : 0x00 (0) [186] : 0x7a (122) [187] : 0x00 (0) [188] : 0x33 (51) [189] : 0x00 (0) [190] : 0x72 (114) [191] : 0x00 (0) [192] : 0x35 (53) [193] : 0x00 (0) [194] : 0x6d (109) [195] : 0x00 (0) [196] : 0x75 (117) [197] : 0x00 (0) [198] : 0x2e (46) [199] : 0x00 (0) [200] : 0x64 (100) [201] : 0x00 (0) [202] : 0x6c (108) [203] : 0x00 (0) [204] : 0x6c (108) [205] : 0x00 (0) [206] : 0x00 (0) [207] : 0x00 (0) [208] : 0x68 (104) [209] : 0x00 (0) [210] : 0x70 (112) [211] : 0x00 (0) [212] : 0x7a (122) [213] : 0x00 (0) [214] : 0x70 (112) [215] : 0x00 (0) [216] : 0x72 (114) [217] : 0x00 (0) [218] : 0x35 (53) [219] : 0x00 (0) [220] : 0x6d (109) [221] : 0x00 (0) [222] : 0x75 (117) [223] : 0x00 (0) [224] : 0x2e (46) [225] : 0x00 (0) [226] : 0x64 (100) [227] : 0x00 (0) [228] : 0x6c (108) [229] : 0x00 (0) [230] : 0x6c (108) [231] : 0x00 (0) [232] : 0x00 (0) [233] : 0x00 (0) [234] : 0x68 (104) [235] : 0x00 (0) [236] : 0x70 (112) [237] : 0x00 (0) [238] : 0x66 (102) [239] : 0x00 (0) [240] : 0x73 (115) [241] : 0x00 (0) [242] : 0x70 (112) [243] : 0x00 (0) [244] : 0x30 (48) [245] : 0x00 (0) [246] : 0x37 (55) [247] : 0x00 (0) [248] : 0x31 (49) [249] : 0x00 (0) [250] : 0x2e (46) [251] : 0x00 (0) [252] : 0x72 (114) [253] : 0x00 (0) [254] : 0x70 (112) [255] : 0x00 (0) [256] : 0x6f (111) [257] : 0x00 (0) [258] : 0x00 (0) [259] : 0x00 (0) [260] : 0x68 (104) [261] : 0x00 (0) [262] : 0x70 (112) [263] : 0x00 (0) [264] : 0x63 (99) [265] : 0x00 (0) [266] : 0x64 (100) [267] : 0x00 (0) [268] : 0x6d (109) [269] : 0x00 (0) [270] : 0x63 (99) [271] : 0x00 (0) [272] : 0x33 (51) [273] : 0x00 (0) [274] : 0x32 (50) [275] : 0x00 (0) [276] : 0x2e (46) [277] : 0x00 (0) [278] : 0x64 (100) [279] : 0x00 (0) [280] : 0x6c (108) [281] : 0x00 (0) [282] : 0x6c (108) [283] : 0x00 (0) [284] : 0x00 (0) [285] : 0x00 (0) [286] : 0x68 (104) [287] : 0x00 (0) [288] : 0x70 (112) [289] : 0x00 (0) [290] : 0x62 (98) [291] : 0x00 (0) [292] : 0x63 (99) [293] : 0x00 (0) [294] : 0x66 (102) [295] : 0x00 (0) [296] : 0x67 (103) [297] : 0x00 (0) [298] : 0x72 (114) [299] : 0x00 (0) [300] : 0x65 (101) [301] : 0x00 (0) [302] : 0x2e (46) [303] : 0x00 (0) [304] : 0x64 (100) [305] : 0x00 (0) [306] : 0x6c (108) [307] : 0x00 (0) [308] : 0x6c (108) [309] : 0x00 (0) [310] : 0x00 (0) [311] : 0x00 (0) [312] : 0x68 (104) [313] : 0x00 (0) [314] : 0x70 (112) [315] : 0x00 (0) [316] : 0x6f (111) [317] : 0x00 (0) [318] : 0x32 (50) [319] : 0x00 (0) [320] : 0x32 (50) [321] : 0x00 (0) [322] : 0x30 (48) [323] : 0x00 (0) [324] : 0x30 (48) [325] : 0x00 (0) [326] : 0x33 (51) [327] : 0x00 (0) [328] : 0x2e (46) [329] : 0x00 (0) [330] : 0x65 (101) [331] : 0x00 (0) [332] : 0x78 (120) [333] : 0x00 (0) [334] : 0x70 (112) [335] : 0x00 (0) [336] : 0x00 (0) [337] : 0x00 (0) [338] : 0x68 (104) [339] : 0x00 (0) [340] : 0x70 (112) [341] : 0x00 (0) [342] : 0x7a (122) [343] : 0x00 (0) [344] : 0x6c (108) [345] : 0x00 (0) [346] : 0x65 (101) [347] : 0x00 (0) [348] : 0x35 (53) [349] : 0x00 (0) [350] : 0x6d (109) [351] : 0x00 (0) [352] : 0x75 (117) [353] : 0x00 (0) [354] : 0x2e (46) [355] : 0x00 (0) [356] : 0x64 (100) [357] : 0x00 (0) [358] : 0x6c (108) [359] : 0x00 (0) [360] : 0x6c (108) [361] : 0x00 (0) [362] : 0x00 (0) [363] : 0x00 (0) [364] : 0x68 (104) [365] : 0x00 (0) [366] : 0x70 (112) [367] : 0x00 (0) [368] : 0x7a (122) [369] : 0x00 (0) [370] : 0x73 (115) [371] : 0x00 (0) [372] : 0x65 (101) [373] : 0x00 (0) [374] : 0x35 (53) [375] : 0x00 (0) [376] : 0x6d (109) [377] : 0x00 (0) [378] : 0x75 (117) [379] : 0x00 (0) [380] : 0x2e (46) [381] : 0x00 (0) [382] : 0x64 (100) [383] : 0x00 (0) [384] : 0x6c (108) [385] : 0x00 (0) [386] : 0x6c (108) [387] : 0x00 (0) [388] : 0x00 (0) [389] : 0x00 (0) [390] : 0x68 (104) [391] : 0x00 (0) [392] : 0x70 (112) [393] : 0x00 (0) [394] : 0x7a (122) [395] : 0x00 (0) [396] : 0x73 (115) [397] : 0x00 (0) [398] : 0x6d (109) [399] : 0x00 (0) [400] : 0x35 (53) [401] : 0x00 (0) [402] : 0x6d (109) [403] : 0x00 (0) [404] : 0x75 (117) [405] : 0x00 (0) [406] : 0x2e (46) [407] : 0x00 (0) [408] : 0x67 (103) [409] : 0x00 (0) [410] : 0x70 (112) [411] : 0x00 (0) [412] : 0x64 (100) [413] : 0x00 (0) [414] : 0x00 (0) [415] : 0x00 (0) [416] : 0x68 (104) [417] : 0x00 (0) [418] : 0x70 (112) [419] : 0x00 (0) [420] : 0x7a (122) [421] : 0x00 (0) [422] : 0x33 (51) [423] : 0x00 (0) [424] : 0x6d (109) [425] : 0x00 (0) [426] : 0x35 (53) [427] : 0x00 (0) [428] : 0x6d (109) [429] : 0x00 (0) [430] : 0x75 (117) [431] : 0x00 (0) [432] : 0x2e (46) [433] : 0x00 (0) [434] : 0x67 (103) [435] : 0x00 (0) [436] : 0x70 (112) [437] : 0x00 (0) [438] : 0x64 (100) [439] : 0x00 (0) [440] : 0x00 (0) [441] : 0x00 (0) [442] : 0x68 (104) [443] : 0x00 (0) [444] : 0x70 (112) [445] : 0x00 (0) [446] : 0x7a (122) [447] : 0x00 (0) [448] : 0x65 (101) [449] : 0x00 (0) [450] : 0x76 (118) [451] : 0x00 (0) [452] : 0x35 (53) [453] : 0x00 (0) [454] : 0x6d (109) [455] : 0x00 (0) [456] : 0x75 (117) [457] : 0x00 (0) [458] : 0x2e (46) [459] : 0x00 (0) [460] : 0x64 (100) [461] : 0x00 (0) [462] : 0x6c (108) [463] : 0x00 (0) [464] : 0x6c (108) [465] : 0x00 (0) [466] : 0x00 (0) [467] : 0x00 (0) [468] : 0x68 (104) [469] : 0x00 (0) [470] : 0x70 (112) [471] : 0x00 (0) [472] : 0x7a (122) [473] : 0x00 (0) [474] : 0x68 (104) [475] : 0x00 (0) [476] : 0x6c (108) [477] : 0x00 (0) [478] : 0x35 (53) [479] : 0x00 (0) [480] : 0x6d (109) [481] : 0x00 (0) [482] : 0x75 (117) [483] : 0x00 (0) [484] : 0x2e (46) [485] : 0x00 (0) [486] : 0x63 (99) [487] : 0x00 (0) [488] : 0x61 (97) [489] : 0x00 (0) [490] : 0x62 (98) [491] : 0x00 (0) [492] : 0x00 (0) [493] : 0x00 (0) [494] : 0x55 (85) [495] : 0x00 (0) [496] : 0x4e (78) [497] : 0x00 (0) [498] : 0x49 (73) [499] : 0x00 (0) [500] : 0x52 (82) [501] : 0x00 (0) [502] : 0x45 (69) [503] : 0x00 (0) [504] : 0x53 (83) [505] : 0x00 (0) [506] : 0x2e (46) [507] : 0x00 (0) [508] : 0x44 (68) [509] : 0x00 (0) [510] : 0x4c (76) [511] : 0x00 (0) [512] : 0x4c (76) [513] : 0x00 (0) [514] : 0x00 (0) [515] : 0x00 (0) [516] : 0x53 (83) [517] : 0x00 (0) [518] : 0x54 (84) [519] : 0x00 (0) [520] : 0x44 (68) [521] : 0x00 (0) [522] : 0x4e (78) [523] : 0x00 (0) [524] : 0x41 (65) [525] : 0x00 (0) [526] : 0x4d (77) [527] : 0x00 (0) [528] : 0x45 (69) [529] : 0x00 (0) [530] : 0x53 (83) [531] : 0x00 (0) [532] : 0x2e (46) [533] : 0x00 (0) [534] : 0x47 (71) [535] : 0x00 (0) [536] : 0x50 (80) [537] : 0x00 (0) [538] : 0x44 (68) [539] : 0x00 (0) [540] : 0x00 (0) [541] : 0x00 (0) [542] : 0x68 (104) [543] : 0x00 (0) [544] : 0x70 (112) [545] : 0x00 (0) [546] : 0x66 (102) [547] : 0x00 (0) [548] : 0x69 (105) [549] : 0x00 (0) [550] : 0x65 (101) [551] : 0x00 (0) [552] : 0x35 (53) [553] : 0x00 (0) [554] : 0x6d (109) [555] : 0x00 (0) [556] : 0x75 (117) [557] : 0x00 (0) [558] : 0x2e (46) [559] : 0x00 (0) [560] : 0x64 (100) [561] : 0x00 (0) [562] : 0x6c (108) [563] : 0x00 (0) [564] : 0x6c (108) [565] : 0x00 (0) [566] : 0x00 (0) [567] : 0x00 (0) [568] : 0x68 (104) [569] : 0x00 (0) [570] : 0x70 (112) [571] : 0x00 (0) [572] : 0x66 (102) [573] : 0x00 (0) [574] : 0x69 (105) [575] : 0x00 (0) [576] : 0x67 (103) [577] : 0x00 (0) [578] : 0x35 (53) [579] : 0x00 (0) [580] : 0x6d (109) [581] : 0x00 (0) [582] : 0x75 (117) [583] : 0x00 (0) [584] : 0x2e (46) [585] : 0x00 (0) [586] : 0x64 (100) [587] : 0x00 (0) [588] : 0x6c (108) [589] : 0x00 (0) [590] : 0x6c (108) [591] : 0x00 (0) [592] : 0x00 (0) [593] : 0x00 (0) [594] : 0x68 (104) [595] : 0x00 (0) [596] : 0x70 (112) [597] : 0x00 (0) [598] : 0x66 (102) [599] : 0x00 (0) [600] : 0x72 (114) [601] : 0x00 (0) [602] : 0x73 (115) [603] : 0x00 (0) [604] : 0x35 (53) [605] : 0x00 (0) [606] : 0x6d (109) [607] : 0x00 (0) [608] : 0x75 (117) [609] : 0x00 (0) [610] : 0x2e (46) [611] : 0x00 (0) [612] : 0x64 (100) [613] : 0x00 (0) [614] : 0x6c (108) [615] : 0x00 (0) [616] : 0x6c (108) [617] : 0x00 (0) [618] : 0x00 (0) [619] : 0x00 (0) [620] : 0x68 (104) [621] : 0x00 (0) [622] : 0x70 (112) [623] : 0x00 (0) [624] : 0x7a (122) [625] : 0x00 (0) [626] : 0x6c (108) [627] : 0x00 (0) [628] : 0x61 (97) [629] : 0x00 (0) [630] : 0x35 (53) [631] : 0x00 (0) [632] : 0x6d (109) [633] : 0x00 (0) [634] : 0x75 (117) [635] : 0x00 (0) [636] : 0x2e (46) [637] : 0x00 (0) [638] : 0x64 (100) [639] : 0x00 (0) [640] : 0x6c (108) [641] : 0x00 (0) [642] : 0x6c (108) [643] : 0x00 (0) [644] : 0x00 (0) [645] : 0x00 (0) [646] : 0x68 (104) [647] : 0x00 (0) [648] : 0x70 (112) [649] : 0x00 (0) [650] : 0x7a (122) [651] : 0x00 (0) [652] : 0x73 (115) [653] : 0x00 (0) [654] : 0x73 (115) [655] : 0x00 (0) [656] : 0x35 (53) [657] : 0x00 (0) [658] : 0x6d (109) [659] : 0x00 (0) [660] : 0x75 (117) [661] : 0x00 (0) [662] : 0x2e (46) [663] : 0x00 (0) [664] : 0x64 (100) [665] : 0x00 (0) [666] : 0x6c (108) [667] : 0x00 (0) [668] : 0x6c (108) [669] : 0x00 (0) [670] : 0x00 (0) [671] : 0x00 (0) [672] : 0x68 (104) [673] : 0x00 (0) [674] : 0x70 (112) [675] : 0x00 (0) [676] : 0x7a (122) [677] : 0x00 (0) [678] : 0x63 (99) [679] : 0x00 (0) [680] : 0x33 (51) [681] : 0x00 (0) [682] : 0x35 (53) [683] : 0x00 (0) [684] : 0x6d (109) [685] : 0x00 (0) [686] : 0x75 (117) [687] : 0x00 (0) [688] : 0x2e (46) [689] : 0x00 (0) [690] : 0x64 (100) [691] : 0x00 (0) [692] : 0x6c (108) [693] : 0x00 (0) [694] : 0x6c (108) [695] : 0x00 (0) [696] : 0x00 (0) [697] : 0x00 (0) [698] : 0x68 (104) [699] : 0x00 (0) [700] : 0x70 (112) [701] : 0x00 (0) [702] : 0x75 (117) [703] : 0x00 (0) [704] : 0x61 (97) [705] : 0x00 (0) [706] : 0x63 (99) [707] : 0x00 (0) [708] : 0x35 (53) [709] : 0x00 (0) [710] : 0x6d (109) [711] : 0x00 (0) [712] : 0x75 (117) [713] : 0x00 (0) [714] : 0x2e (46) [715] : 0x00 (0) [716] : 0x64 (100) [717] : 0x00 (0) [718] : 0x6c (108) [719] : 0x00 (0) [720] : 0x6c (108) [721] : 0x00 (0) [722] : 0x00 (0) [723] : 0x00 (0) [724] : 0x00 (0) [725] : 0x00 (0) size : * size : 0x000002d6 (726) length : * length : 0x000002d6 (726) result : WERR_OK [2013/05/23 17:29:00.773205, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000006 (6) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.773753, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.773870, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.773951, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'Monitor' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.774466, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000007 (7) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.774983, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.775131, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.775194, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0012 (18) size : 0x0034 (52) name : * name : 'Datatype' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.775751, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000008 (8) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.776388, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.776512, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.776576, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001e (30) size : 0x0034 (52) name : * name : 'Previous Names' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:00.777126, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000009 (9) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.777675, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.777792, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.777853, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0016 (22) size : 0x0034 (52) name : * name : 'DriverDate' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x31 (49) [1] : 0x00 (0) [2] : 0x30 (48) [3] : 0x00 (0) [4] : 0x2f (47) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x30 (48) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x32 (50) [13] : 0x00 (0) [14] : 0x30 (48) [15] : 0x00 (0) [16] : 0x30 (48) [17] : 0x00 (0) [18] : 0x37 (55) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:00.778826, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x0000000a (10) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.779397, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.779519, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.779580, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001c (28) size : 0x0034 (52) name : * name : 'DriverVersion' type : * type : REG_SZ (1) value : * value: ARRAY(24) [0] : 0x36 (54) [1] : 0x00 (0) [2] : 0x31 (49) [3] : 0x00 (0) [4] : 0x2e (46) [5] : 0x00 (0) [6] : 0x37 (55) [7] : 0x00 (0) [8] : 0x33 (51) [9] : 0x00 (0) [10] : 0x2e (46) [11] : 0x00 (0) [12] : 0x32 (50) [13] : 0x00 (0) [14] : 0x34 (52) [15] : 0x00 (0) [16] : 0x31 (49) [17] : 0x00 (0) [18] : 0x2e (46) [19] : 0x00 (0) [20] : 0x30 (48) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : * size : 0x00000018 (24) length : * length : 0x00000018 (24) result : WERR_OK [2013/05/23 17:29:00.780748, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x0000000b (11) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.781417, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.781543, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.781608, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001a (26) size : 0x0034 (52) name : * name : 'Manufacturer' type : * type : REG_SZ (1) value : * value: ARRAY(32) [0] : 0x48 (72) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x77 (119) [5] : 0x00 (0) [6] : 0x6c (108) [7] : 0x00 (0) [8] : 0x65 (101) [9] : 0x00 (0) [10] : 0x74 (116) [11] : 0x00 (0) [12] : 0x74 (116) [13] : 0x00 (0) [14] : 0x2d (45) [15] : 0x00 (0) [16] : 0x50 (80) [17] : 0x00 (0) [18] : 0x61 (97) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x6b (107) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x64 (100) [29] : 0x00 (0) [30] : 0x00 (0) [31] : 0x00 (0) size : * size : 0x00000020 (32) length : * length : 0x00000020 (32) result : WERR_OK [2013/05/23 17:29:00.783446, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x0000000c (12) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.783997, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.784146, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.784214, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'OEM URL' type : * type : REG_SZ (1) value : * value: ARRAY(130) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x74 (116) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x70 (112) [7] : 0x00 (0) [8] : 0x3a (58) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x2f (47) [13] : 0x00 (0) [14] : 0x67 (103) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x2e (46) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x69 (105) [23] : 0x00 (0) [24] : 0x63 (99) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x6f (111) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x6f (111) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x74 (116) [37] : 0x00 (0) [38] : 0x2e (46) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x6f (111) [43] : 0x00 (0) [44] : 0x6d (109) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x66 (102) [49] : 0x00 (0) [50] : 0x77 (119) [51] : 0x00 (0) [52] : 0x6c (108) [53] : 0x00 (0) [54] : 0x69 (105) [55] : 0x00 (0) [56] : 0x6e (110) [57] : 0x00 (0) [58] : 0x6b (107) [59] : 0x00 (0) [60] : 0x2f (47) [61] : 0x00 (0) [62] : 0x3f (63) [63] : 0x00 (0) [64] : 0x4c (76) [65] : 0x00 (0) [66] : 0x69 (105) [67] : 0x00 (0) [68] : 0x6e (110) [69] : 0x00 (0) [70] : 0x6b (107) [71] : 0x00 (0) [72] : 0x49 (73) [73] : 0x00 (0) [74] : 0x44 (68) [75] : 0x00 (0) [76] : 0x3d (61) [77] : 0x00 (0) [78] : 0x33 (51) [79] : 0x00 (0) [80] : 0x37 (55) [81] : 0x00 (0) [82] : 0x26 (38) [83] : 0x00 (0) [84] : 0x70 (112) [85] : 0x00 (0) [86] : 0x72 (114) [87] : 0x00 (0) [88] : 0x64 (100) [89] : 0x00 (0) [90] : 0x3d (61) [91] : 0x00 (0) [92] : 0x31 (49) [93] : 0x00 (0) [94] : 0x30 (48) [95] : 0x00 (0) [96] : 0x37 (55) [97] : 0x00 (0) [98] : 0x39 (57) [99] : 0x00 (0) [100] : 0x38 (56) [101] : 0x00 (0) [102] : 0x26 (38) [103] : 0x00 (0) [104] : 0x73 (115) [105] : 0x00 (0) [106] : 0x62 (98) [107] : 0x00 (0) [108] : 0x70 (112) [109] : 0x00 (0) [110] : 0x3d (61) [111] : 0x00 (0) [112] : 0x50 (80) [113] : 0x00 (0) [114] : 0x72 (114) [115] : 0x00 (0) [116] : 0x69 (105) [117] : 0x00 (0) [118] : 0x6e (110) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x73 (115) [127] : 0x00 (0) [128] : 0x00 (0) [129] : 0x00 (0) size : * size : 0x00000082 (130) length : * length : 0x00000082 (130) result : WERR_OK [2013/05/23 17:29:00.787893, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x0000000d (13) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.788465, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.788584, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.788647, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0016 (22) size : 0x0034 (52) name : * name : 'HardwareID' type : * type : REG_SZ (1) value : * value: ARRAY(68) [0] : 0x75 (117) [1] : 0x00 (0) [2] : 0x73 (115) [3] : 0x00 (0) [4] : 0x62 (98) [5] : 0x00 (0) [6] : 0x70 (112) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x69 (105) [11] : 0x00 (0) [12] : 0x6e (110) [13] : 0x00 (0) [14] : 0x74 (116) [15] : 0x00 (0) [16] : 0x5c (92) [17] : 0x00 (0) [18] : 0x68 (104) [19] : 0x00 (0) [20] : 0x70 (112) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x65 (101) [25] : 0x00 (0) [26] : 0x73 (115) [27] : 0x00 (0) [28] : 0x6b (107) [29] : 0x00 (0) [30] : 0x6a (106) [31] : 0x00 (0) [32] : 0x65 (101) [33] : 0x00 (0) [34] : 0x74 (116) [35] : 0x00 (0) [36] : 0x5f (95) [37] : 0x00 (0) [38] : 0x66 (102) [39] : 0x00 (0) [40] : 0x32 (50) [41] : 0x00 (0) [42] : 0x32 (50) [43] : 0x00 (0) [44] : 0x30 (48) [45] : 0x00 (0) [46] : 0x30 (48) [47] : 0x00 (0) [48] : 0x5f (95) [49] : 0x00 (0) [50] : 0x73 (115) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x69 (105) [57] : 0x00 (0) [58] : 0x38 (56) [59] : 0x00 (0) [60] : 0x37 (55) [61] : 0x00 (0) [62] : 0x63 (99) [63] : 0x00 (0) [64] : 0x37 (55) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) size : * size : 0x00000044 (68) length : * length : 0x00000044 (68) result : WERR_OK [2013/05/23 17:29:00.790718, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x0000000e (14) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.791390, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.791517, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.791582, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0012 (18) size : 0x0034 (52) name : * name : 'Provider' type : * type : REG_SZ (1) value : * value: ARRAY(32) [0] : 0x48 (72) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x77 (119) [5] : 0x00 (0) [6] : 0x6c (108) [7] : 0x00 (0) [8] : 0x65 (101) [9] : 0x00 (0) [10] : 0x74 (116) [11] : 0x00 (0) [12] : 0x74 (116) [13] : 0x00 (0) [14] : 0x2d (45) [15] : 0x00 (0) [16] : 0x50 (80) [17] : 0x00 (0) [18] : 0x61 (97) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x6b (107) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x64 (100) [29] : 0x00 (0) [30] : 0x00 (0) [31] : 0x00 (0) size : * size : 0x00000020 (32) length : * length : 0x00000020 (32) result : WERR_OK [2013/05/23 17:29:00.793342, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x0000000f (15) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.793880, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.793996, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.794057, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0020 (32) size : 0x0034 (52) name : * name : 'Print Processor' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.794557, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000010 (16) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.795115, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.795239, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.795301, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0018 (24) size : 0x0034 (52) name : * name : 'VendorSetup' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.795848, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000011 (17) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.796482, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.796624, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.796690, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001e (30) size : 0x0034 (52) name : * name : 'Color Profiles' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:00.797244, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000012 (18) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.797760, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.797875, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.797934, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'InfPath' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.798446, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000013 (19) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.798964, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.799078, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.799171, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0030 (48) size : 0x0034 (52) name : * name : 'PrinterDriverAttributes' type : * type : REG_DWORD (4) value : * value: ARRAY(4) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : * size : 0x00000004 (4) length : * length : 0x00000004 (4) result : WERR_OK [2013/05/23 17:29:00.799731, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000014 (20) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.800422, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.800551, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.800616, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0022 (34) size : 0x0034 (52) name : * name : 'CoreDependencies' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:00.801180, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000015 (21) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.801795, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.802174, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.802277, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x002c (44) size : 0x0034 (52) name : * name : 'MinInboxDriverVerDate' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x30 (48) [1] : 0x00 (0) [2] : 0x31 (49) [3] : 0x00 (0) [4] : 0x2f (47) [5] : 0x00 (0) [6] : 0x30 (48) [7] : 0x00 (0) [8] : 0x31 (49) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x31 (49) [13] : 0x00 (0) [14] : 0x36 (54) [15] : 0x00 (0) [16] : 0x30 (48) [17] : 0x00 (0) [18] : 0x31 (49) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:00.803406, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 enum_index : 0x00000016 (22) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:00.803932, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.804051, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:00.804171, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0032 (50) size : 0x0034 (52) name : * name : 'MinInboxDriverVerVersion' type : * type : REG_SZ (1) value : * value: ARRAY(16) [0] : 0x30 (48) [1] : 0x00 (0) [2] : 0x2e (46) [3] : 0x00 (0) [4] : 0x30 (48) [5] : 0x00 (0) [6] : 0x2e (46) [7] : 0x00 (0) [8] : 0x30 (48) [9] : 0x00 (0) [10] : 0x2e (46) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) size : * size : 0x00000010 (16) length : * length : 0x00000010 (16) result : WERR_OK [2013/05/23 17:29:00.805233, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000079-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.805602, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.805730, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 79 00 00 00 00 00 00 00 9E 51 BC 35 ....y... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.805837, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.805902, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.805953, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.806237, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000078-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.806535, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 78 00 00 00 00 00 00 00 9E 51 BC 35 ....x... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.806658, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 78 00 00 00 00 00 00 00 9E 51 BC 35 ....x... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.806766, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.806816, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.806890, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.807357, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:00.807568, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000001 (1) info : * info : * info: ARRAY(1) info : union spoolss_DriverInfo(case 3) info3: struct spoolss_DriverInfo3 version : SPOOLSS_DRIVER_VERSION_200X (3) driver_name : * driver_name : 'HP Deskjet F2200 series' architecture : * architecture : 'Windows NT x86' driver_path : * driver_path : '\\hh1\print$\W32X86\3\UNIDRV.DLL' data_file : * data_file : '\\hh1\print$\W32X86\3\hpo22003.gpd' config_file : * config_file : '\\hh1\print$\W32X86\3\UNIDRVUI.DLL' help_file : * help_file : '\\hh1\print$\W32X86\3\UNIDRV.HLP' dependent_files : * dependent_files: ARRAY(28) [0] : '\\hh1\print$\W32X86\3\hpo2200a.ini' [1] : '\\hh1\print$\W32X86\3\hpzst5mu.dll' [2] : '\\hh1\print$\W32X86\3\hpz3c5mu.dll' [3] : '\\hh1\print$\W32X86\3\hpzur5mu.dll' [4] : '\\hh1\print$\W32X86\3\hpo22003.xml' [5] : '\\hh1\print$\W32X86\3\hpzsc5mu.dtd' [6] : '\\hh1\print$\W32X86\3\hpzui5mu.dll' [7] : '\\hh1\print$\W32X86\3\hpz3r5mu.dll' [8] : '\\hh1\print$\W32X86\3\hpzpr5mu.dll' [9] : '\\hh1\print$\W32X86\3\hpfsp071.rpo' [10] : '\\hh1\print$\W32X86\3\hpcdmc32.dll' [11] : '\\hh1\print$\W32X86\3\hpbcfgre.dll' [12] : '\\hh1\print$\W32X86\3\hpo22003.exp' [13] : '\\hh1\print$\W32X86\3\hpzle5mu.dll' [14] : '\\hh1\print$\W32X86\3\hpzse5mu.dll' [15] : '\\hh1\print$\W32X86\3\hpzsm5mu.gpd' [16] : '\\hh1\print$\W32X86\3\hpz3m5mu.gpd' [17] : '\\hh1\print$\W32X86\3\hpzev5mu.dll' [18] : '\\hh1\print$\W32X86\3\hpzhl5mu.cab' [19] : '\\hh1\print$\W32X86\3\UNIRES.DLL' [20] : '\\hh1\print$\W32X86\3\STDNAMES.GPD' [21] : '\\hh1\print$\W32X86\3\hpfie5mu.dll' [22] : '\\hh1\print$\W32X86\3\hpfig5mu.dll' [23] : '\\hh1\print$\W32X86\3\hpfrs5mu.dll' [24] : '\\hh1\print$\W32X86\3\hpzla5mu.dll' [25] : '\\hh1\print$\W32X86\3\hpzss5mu.dll' [26] : '\\hh1\print$\W32X86\3\hpzc35mu.dll' [27] : '\\hh1\print$\W32X86\3\hpuac5mu.dll' monitor_name : * monitor_name : '' default_datatype : * default_datatype : '' needed : * needed : 0x00000950 (2384) result : WERR_OK [2013/05/23 17:29:00.809222, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:00.809362, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.809425, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 2484 [2013/05/23 17:29:00.809532, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:00.809598, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 2404. [2013/05/23 17:29:00.809676, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x097c (2428) auth_length : 0x0000 (0) call_id : 0x0000004e (78) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000964 (2404) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=2404 [0000] 0C 00 02 00 50 09 00 00 03 00 00 00 20 09 00 00 ....P... .... ... [0010] 02 09 00 00 C0 08 00 00 7A 08 00 00 34 08 00 00 ........ z...4... [0020] F2 07 00 00 4C 00 00 00 4A 00 00 00 48 00 00 00 ....L... J...H... [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 ....\.\. h.h.1.\. [0060] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [0070] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [0080] 68 00 70 00 6F 00 32 00 32 00 30 00 30 00 61 00 h.p.o.2. 2.0.0.a. [0090] 2E 00 69 00 6E 00 69 00 00 00 5C 00 5C 00 68 00 ..i.n.i. ..\.\.h. [00A0] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [00B0] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [00C0] 5C 00 33 00 5C 00 68 00 70 00 7A 00 73 00 74 00 \.3.\.h. p.z.s.t. [00D0] 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5.m.u... d.l.l... [00E0] 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 \.\.h.h. 1.\.p.r. [00F0] 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 i.n.t.$. \.W.3.2. [0100] 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 X.8.6.\. 3.\.h.p. [0110] 7A 00 33 00 63 00 35 00 6D 00 75 00 2E 00 64 00 z.3.c.5. m.u...d. [0120] 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 l.l...\. \.h.h.1. [0130] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [0140] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [0150] 5C 00 68 00 70 00 7A 00 75 00 72 00 35 00 6D 00 \.h.p.z. u.r.5.m. [0160] 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 u...d.l. l...\.\. [0170] 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 h.h.1.\. p.r.i.n. [0180] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [0190] 36 00 5C 00 33 00 5C 00 68 00 70 00 6F 00 32 00 6.\.3.\. h.p.o.2. [01A0] 32 00 30 00 30 00 33 00 2E 00 78 00 6D 00 6C 00 2.0.0.3. ..x.m.l. [01B0] 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 ..\.\.h. h.1.\.p. [01C0] 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 r.i.n.t. $.\.W.3. [01D0] 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 2.X.8.6. \.3.\.h. [01E0] 70 00 7A 00 73 00 63 00 35 00 6D 00 75 00 2E 00 p.z.s.c. 5.m.u... [01F0] 64 00 74 00 64 00 00 00 5C 00 5C 00 68 00 68 00 d.t.d... \.\.h.h. [0200] 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 1.\.p.r. i.n.t.$. [0210] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [0220] 33 00 5C 00 68 00 70 00 7A 00 75 00 69 00 35 00 3.\.h.p. z.u.i.5. [0230] 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 m.u...d. l.l...\. [0240] 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 \.h.h.1. \.p.r.i. [0250] 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 n.t.$.\. W.3.2.X. [0260] 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 7A 00 8.6.\.3. \.h.p.z. [0270] 33 00 72 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 3.r.5.m. u...d.l. [0280] 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 l...\.\. h.h.1.\. [0290] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [02A0] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [02B0] 68 00 70 00 7A 00 70 00 72 00 35 00 6D 00 75 00 h.p.z.p. r.5.m.u. [02C0] 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 68 00 ..d.l.l. ..\.\.h. [02D0] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [02E0] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [02F0] 5C 00 33 00 5C 00 68 00 70 00 66 00 73 00 70 00 \.3.\.h. p.f.s.p. [0300] 30 00 37 00 31 00 2E 00 72 00 70 00 6F 00 00 00 0.7.1... r.p.o... [0310] 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 \.\.h.h. 1.\.p.r. [0320] 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 i.n.t.$. \.W.3.2. [0330] 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 X.8.6.\. 3.\.h.p. [0340] 63 00 64 00 6D 00 63 00 33 00 32 00 2E 00 64 00 c.d.m.c. 3.2...d. [0350] 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 l.l...\. \.h.h.1. [0360] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [0370] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [0380] 5C 00 68 00 70 00 62 00 63 00 66 00 67 00 72 00 \.h.p.b. c.f.g.r. [0390] 65 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 e...d.l. l...\.\. [03A0] 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 h.h.1.\. p.r.i.n. [03B0] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [03C0] 36 00 5C 00 33 00 5C 00 68 00 70 00 6F 00 32 00 6.\.3.\. h.p.o.2. [03D0] 32 00 30 00 30 00 33 00 2E 00 65 00 78 00 70 00 2.0.0.3. ..e.x.p. [03E0] 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 ..\.\.h. h.1.\.p. [03F0] 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 r.i.n.t. $.\.W.3. [0400] 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 2.X.8.6. \.3.\.h. [0410] 70 00 7A 00 6C 00 65 00 35 00 6D 00 75 00 2E 00 p.z.l.e. 5.m.u... [0420] 64 00 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 d.l.l... \.\.h.h. [0430] 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 1.\.p.r. i.n.t.$. [0440] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [0450] 33 00 5C 00 68 00 70 00 7A 00 73 00 65 00 35 00 3.\.h.p. z.s.e.5. [0460] 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 m.u...d. l.l...\. [0470] 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 \.h.h.1. \.p.r.i. [0480] 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 n.t.$.\. W.3.2.X. [0490] 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 7A 00 8.6.\.3. \.h.p.z. [04A0] 73 00 6D 00 35 00 6D 00 75 00 2E 00 67 00 70 00 s.m.5.m. u...g.p. [04B0] 64 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 d...\.\. h.h.1.\. [04C0] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [04D0] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [04E0] 68 00 70 00 7A 00 33 00 6D 00 35 00 6D 00 75 00 h.p.z.3. m.5.m.u. [04F0] 2E 00 67 00 70 00 64 00 00 00 5C 00 5C 00 68 00 ..g.p.d. ..\.\.h. [0500] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [0510] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [0520] 5C 00 33 00 5C 00 68 00 70 00 7A 00 65 00 76 00 \.3.\.h. p.z.e.v. [0530] 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5.m.u... d.l.l... [0540] 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 \.\.h.h. 1.\.p.r. [0550] 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 i.n.t.$. \.W.3.2. [0560] 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 X.8.6.\. 3.\.h.p. [0570] 7A 00 68 00 6C 00 35 00 6D 00 75 00 2E 00 63 00 z.h.l.5. m.u...c. [0580] 61 00 62 00 00 00 5C 00 5C 00 68 00 68 00 31 00 a.b...\. \.h.h.1. [0590] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [05A0] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [05B0] 5C 00 55 00 4E 00 49 00 52 00 45 00 53 00 2E 00 \.U.N.I. R.E.S... [05C0] 44 00 4C 00 4C 00 00 00 5C 00 5C 00 68 00 68 00 D.L.L... \.\.h.h. [05D0] 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 1.\.p.r. i.n.t.$. [05E0] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [05F0] 33 00 5C 00 53 00 54 00 44 00 4E 00 41 00 4D 00 3.\.S.T. D.N.A.M. [0600] 45 00 53 00 2E 00 47 00 50 00 44 00 00 00 5C 00 E.S...G. P.D...\. [0610] 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 \.h.h.1. \.p.r.i. [0620] 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 n.t.$.\. W.3.2.X. [0630] 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 66 00 8.6.\.3. \.h.p.f. [0640] 69 00 65 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 i.e.5.m. u...d.l. [0650] 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 l...\.\. h.h.1.\. [0660] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [0670] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [0680] 68 00 70 00 66 00 69 00 67 00 35 00 6D 00 75 00 h.p.f.i. g.5.m.u. [0690] 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 68 00 ..d.l.l. ..\.\.h. [06A0] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [06B0] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [06C0] 5C 00 33 00 5C 00 68 00 70 00 66 00 72 00 73 00 \.3.\.h. p.f.r.s. [06D0] 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5.m.u... d.l.l... [06E0] 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 \.\.h.h. 1.\.p.r. [06F0] 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 i.n.t.$. \.W.3.2. [0700] 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 X.8.6.\. 3.\.h.p. [0710] 7A 00 6C 00 61 00 35 00 6D 00 75 00 2E 00 64 00 z.l.a.5. m.u...d. [0720] 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 l.l...\. \.h.h.1. [0730] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [0740] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [0750] 5C 00 68 00 70 00 7A 00 73 00 73 00 35 00 6D 00 \.h.p.z. s.s.5.m. [0760] 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 u...d.l. l...\.\. [0770] 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 h.h.1.\. p.r.i.n. [0780] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [0790] 36 00 5C 00 33 00 5C 00 68 00 70 00 7A 00 63 00 6.\.3.\. h.p.z.c. [07A0] 33 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 3.5.m.u. ..d.l.l. [07B0] 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 ..\.\.h. h.1.\.p. [07C0] 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 r.i.n.t. $.\.W.3. [07D0] 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 2.X.8.6. \.3.\.h. [07E0] 70 00 75 00 61 00 63 00 35 00 6D 00 75 00 2E 00 p.u.a.c. 5.m.u... [07F0] 64 00 6C 00 6C 00 00 00 00 00 5C 00 5C 00 68 00 d.l.l... ..\.\.h. [0800] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [0810] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [0820] 5C 00 33 00 5C 00 55 00 4E 00 49 00 44 00 52 00 \.3.\.U. N.I.D.R. [0830] 56 00 2E 00 48 00 4C 00 50 00 00 00 5C 00 5C 00 V...H.L. P...\.\. [0840] 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 h.h.1.\. p.r.i.n. [0850] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [0860] 36 00 5C 00 33 00 5C 00 55 00 4E 00 49 00 44 00 6.\.3.\. U.N.I.D. [0870] 52 00 56 00 55 00 49 00 2E 00 44 00 4C 00 4C 00 R.V.U.I. ..D.L.L. [0880] 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 ..\.\.h. h.1.\.p. [0890] 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 r.i.n.t. $.\.W.3. [08A0] 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 2.X.8.6. \.3.\.h. [08B0] 70 00 6F 00 32 00 32 00 30 00 30 00 33 00 2E 00 p.o.2.2. 0.0.3... [08C0] 67 00 70 00 64 00 00 00 5C 00 5C 00 68 00 68 00 g.p.d... \.\.h.h. [08D0] 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 1.\.p.r. i.n.t.$. [08E0] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [08F0] 33 00 5C 00 55 00 4E 00 49 00 44 00 52 00 56 00 3.\.U.N. I.D.R.V. [0900] 2E 00 44 00 4C 00 4C 00 00 00 57 00 69 00 6E 00 ..D.L.L. ..W.i.n. [0910] 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 20 00 d.o.w.s. .N.T. . [0920] 78 00 38 00 36 00 00 00 48 00 50 00 20 00 44 00 x.8.6... H.P. .D. [0930] 65 00 73 00 6B 00 6A 00 65 00 74 00 20 00 46 00 e.s.k.j. e.t. .F. [0940] 32 00 32 00 30 00 30 00 20 00 73 00 65 00 72 00 2.2.0.0. .s.e.r. [0950] 69 00 65 00 73 00 00 00 50 09 00 00 01 00 00 00 i.e.s... P....... [0960] 00 00 00 00 .... [2013/05/23 17:29:00.821140, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 5821 [2013/05/23 17:29:00.821311, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 2428 bytes. There is no more data outstanding [2013/05/23 17:29:00.821383, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..2428] (align 0) [2013/05/23 17:29:00.821518, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.821559, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=2484 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=17857 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2428 (0x97C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 2428 (0x97C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=2429 [2013/05/23 17:29:00.822179, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 7C 09 00 00 4E 00 00 ........ .|...N.. [0010] 00 64 09 00 00 00 00 00 00 0C 00 02 00 50 09 00 .d...... .....P.. [0020] 00 03 00 00 00 20 09 00 00 02 09 00 00 C0 08 00 ..... .. ........ [0030] 00 7A 08 00 00 34 08 00 00 F2 07 00 00 4C 00 00 .z...4.. .....L.. [0040] 00 4A 00 00 00 48 00 00 00 00 00 00 00 00 00 00 .J...H.. ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 5C 00 5C ........ .....\.\ [0070] 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E .h.h.1.\ .p.r.i.n [0080] 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 .t.$.\.W .3.2.X.8 [0090] 00 36 00 5C 00 33 00 5C 00 68 00 70 00 6F 00 32 .6.\.3.\ .h.p.o.2 [00A0] 00 32 00 30 00 30 00 61 00 2E 00 69 00 6E 00 69 .2.0.0.a ...i.n.i [00B0] 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 ...\.\.h .h.1.\.p [00C0] 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 .r.i.n.t .$.\.W.3 [00D0] 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 .2.X.8.6 .\.3.\.h [00E0] 00 70 00 7A 00 73 00 74 00 35 00 6D 00 75 00 2E .p.z.s.t .5.m.u.. [00F0] 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 .d.l.l.. .\.\.h.h [0100] 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 .1.\.p.r .i.n.t.$ [0110] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0120] 00 33 00 5C 00 68 00 70 00 7A 00 33 00 63 00 35 .3.\.h.p .z.3.c.5 [0130] 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C .m.u...d .l.l...\ [0140] 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 .\.h.h.1 .\.p.r.i [0150] 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 .n.t.$.\ .W.3.2.X [0160] 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 7A .8.6.\.3 .\.h.p.z [0170] 00 75 00 72 00 35 00 6D 00 75 00 2E 00 64 00 6C .u.r.5.m .u...d.l [0180] 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C .l...\.\ .h.h.1.\ [0190] 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 .p.r.i.n .t.$.\.W [01A0] 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C .3.2.X.8 .6.\.3.\ [01B0] 00 68 00 70 00 6F 00 32 00 32 00 30 00 30 00 33 .h.p.o.2 .2.0.0.3 [01C0] 00 2E 00 78 00 6D 00 6C 00 00 00 5C 00 5C 00 68 ...x.m.l ...\.\.h [01D0] 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 .h.1.\.p .r.i.n.t [01E0] 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 .$.\.W.3 .2.X.8.6 [01F0] 00 5C 00 33 00 5C 00 68 00 70 00 7A 00 73 00 63 .\.3.\.h .p.z.s.c [2013/05/23 17:29:00.828411, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1228 [2013/05/23 17:29:00.828631, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4cc [2013/05/23 17:29:00.828723, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8106 of length 1232 (0 toread) [2013/05/23 17:29:00.828794, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.828825, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1228 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=17921 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1144 (0x478) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1144 (0x478) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1161 [2013/05/23 17:29:00.829329, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 78 04 00 00 4F 00 00 ........ .x...O.. [0020] 00 60 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .`...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 11 00 00 00 00 00 00 .1...... ........ [0050] 00 11 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 52 00 34 00 30 .s. .N.T . .R.4.0 [0070] 00 30 00 30 00 00 00 00 00 03 00 00 00 08 00 02 .0.0.... ........ [0080] 00 00 04 00 00 B0 7E 84 02 78 01 3C 00 00 00 00 ......~. .x.<.... [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:00.831621, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:00.831703, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.831775, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1144 params=0 setup=2 [2013/05/23 17:29:00.831833, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:00.831877, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:00.831922, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:00.831970, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:00.832021, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:00.832069, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1144 [2013/05/23 17:29:00.832154, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1144 [2013/05/23 17:29:00.832202, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1144 [2013/05/23 17:29:00.832250, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1144, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:00.832298, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:00.832342, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1128 [2013/05/23 17:29:00.832385, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1128 [2013/05/23 17:29:00.832437, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:00.832482, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1128 [2013/05/23 17:29:00.832527, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1128, incoming data = 1128 [2013/05/23 17:29:00.832576, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:00.832640, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0478 (1144) auth_length : 0x0000 (0) call_id : 0x0000004f (79) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000460 (1120) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1120 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 11 00 00 00 00 00 00 00 11 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 52 00 34 00 30 00 30 00 30 00 00 00 00 00 .R.4.0. 0.0..... [0050] 03 00 00 00 08 00 02 00 00 04 00 00 B0 7E 84 02 ........ .....~.. [0060] 78 01 3C 00 00 00 00 00 00 00 00 00 00 00 00 00 x.<..... ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 ........ ........ [2013/05/23 17:29:00.837636, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:00.837713, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:00.837773, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.837831, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.837883, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:00.838721, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:00.839018, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:00.839078, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:00.839265, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:00.839344, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT R4000' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] B0 7E 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 .~..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:00.845028, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:00.845164, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:00.845237, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:00.845308, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:00.845557, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:00.845707, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.845993, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.846047, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.846136, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.846193, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.846241, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.846286, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.846492, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.846576, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.846635, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.846683, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.846733, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.846778, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.846896, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 7A 00 00 00 00 00 00 00 9E 51 BC 35 ....z... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.847029, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007a-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.847387, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007a-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00ae (174) name_size : 0x00ae (174) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.847988, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7A 00 00 00 00 00 00 00 9E 51 BC 35 ....z... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.848163, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.848222, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.848277, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.848326, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.848379, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.848423, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.848529, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.848597, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.848652, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.848700, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.848751, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.848796, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.848915, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.848981, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.849035, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.849083, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.849193, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.849240, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.849436, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.849535, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.849592, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.849641, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.849699, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.849744, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.849869, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.849933, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.849987, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.850036, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.850140, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.850204, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.850313, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT R4000] [2013/05/23 17:29:00.850378, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.850451, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.850501, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.850556, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.850601, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.850671, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] not found [2013/05/23 17:29:00.850724, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.850775, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.850826, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.850877, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.850927, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.850976, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.851027, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.851331, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007a-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.851527, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7A 00 00 00 00 00 00 00 9E 51 BC 35 ....z... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.851645, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7A 00 00 00 00 00 00 00 9E 51 BC 35 ....z... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.851768, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.851835, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.852187, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.852467, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT R4000,0): WERR_BADFILE [2013/05/23 17:29:00.852538, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT R4000] and version [0] [2013/05/23 17:29:00.852700, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.853003, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.853057, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.853171, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.853227, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.853274, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.853319, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.853521, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.853605, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.853664, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.853712, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.853762, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.853806, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.853938, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 7B 00 00 00 00 00 00 00 9E 51 BC 35 ....{... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.854077, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007b-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.854491, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007b-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00ae (174) name_size : 0x00ae (174) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.855142, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7B 00 00 00 00 00 00 00 9E 51 BC 35 ....{... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.855281, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.855334, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.855436, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.855498, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.855552, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.855597, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.855705, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.855774, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.855846, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.855895, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.855949, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.855993, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.856153, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.856251, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.856309, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.856357, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.856411, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.856456, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.856570, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.856633, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.856687, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.856735, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.856788, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.856833, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.856947, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.857007, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.857060, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.857159, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.857236, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.857285, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.857391, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT R4000] [2013/05/23 17:29:00.857456, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.857512, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.857560, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.857614, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.857659, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.857726, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] not found [2013/05/23 17:29:00.857779, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.857830, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.857881, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.857931, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.857981, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.858031, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.858081, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.858395, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007b-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.858590, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7B 00 00 00 00 00 00 00 9E 51 BC 35 ....{... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.858720, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7B 00 00 00 00 00 00 00 9E 51 BC 35 ....{... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.858841, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.858890, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.858964, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.859267, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT R4000,1): WERR_BADFILE [2013/05/23 17:29:00.859421, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT R4000] and version [1] [2013/05/23 17:29:00.859525, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.859805, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.859859, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.859915, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.859964, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.860010, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.860054, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.860328, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.860519, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.860596, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.860649, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.860700, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.860745, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.860870, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 7C 00 00 00 00 00 00 00 9E 51 BC 35 ....|... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.861005, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007c-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.861366, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007c-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00ae (174) name_size : 0x00ae (174) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.862520, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7C 00 00 00 00 00 00 00 9E 51 BC 35 ....|... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.862750, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.862807, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.862863, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.862912, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.862982, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.863029, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.863189, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.863284, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.863340, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.863389, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.863442, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.863487, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.863588, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.863650, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.863704, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.863752, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.863804, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.863849, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.863955, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.864015, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.864069, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.864181, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.864244, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.864289, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.864496, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.864604, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.864662, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.864713, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.864771, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.864817, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.864914, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT R4000] [2013/05/23 17:29:00.864974, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.865030, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.865079, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.865171, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.865218, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.865290, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] not found [2013/05/23 17:29:00.865346, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.865521, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.865587, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.865639, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.865690, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.865740, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.865791, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.866085, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007c-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.866326, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7C 00 00 00 00 00 00 00 9E 51 BC 35 ....|... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.866443, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7C 00 00 00 00 00 00 00 9E 51 BC 35 ....|... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.866551, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.866600, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.866674, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.866900, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT R4000,2): WERR_BADFILE [2013/05/23 17:29:00.866968, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT R4000] and version [2] [2013/05/23 17:29:00.867044, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.867377, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.867437, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.867495, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.867545, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.867591, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.867652, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.867857, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.867942, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.868000, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.868049, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.868149, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.868206, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.868330, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 7D 00 00 00 00 00 00 00 9E 51 BC 35 ....}... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.868464, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007d-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.868736, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007d-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00ae (174) name_size : 0x00ae (174) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.869551, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7D 00 00 00 00 00 00 00 9E 51 BC 35 ....}... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.869687, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.869756, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.869812, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.869860, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.869911, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.869956, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.870062, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.870205, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.870268, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.870317, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.870370, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.870415, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.870525, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.870591, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.870644, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.870692, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.870745, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.870790, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.870895, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.870955, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.871008, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.871054, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.871188, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.871240, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.871373, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.871439, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.871494, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.871543, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.871597, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.871642, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.871732, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT R4000] [2013/05/23 17:29:00.871791, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.871845, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.871894, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.871947, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.871992, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:00.872057, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] not found [2013/05/23 17:29:00.872408, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.872465, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.872517, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.872567, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.872636, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.872689, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.872739, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.873015, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007d-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.873262, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7D 00 00 00 00 00 00 00 9E 51 BC 35 ....}... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.873382, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7D 00 00 00 00 00 00 00 9E 51 BC 35 ....}... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.873490, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.873539, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.873613, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.873841, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT R4000,3): WERR_BADFILE [2013/05/23 17:29:00.873907, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT R4000] and version [3] [2013/05/23 17:29:00.873960, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:00.874023, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.874354, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:00.874547, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.874608, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1128 [2013/05/23 17:29:00.874698, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:00.874759, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:00.874836, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x0000004f (79) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:00.879003, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:00.879139, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:00.879220, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:00.879273, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.879303, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=17921 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:00.879749, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 4F 00 00 ........ .,...O.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:00.886150, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1236 [2013/05/23 17:29:00.886353, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d4 [2013/05/23 17:29:00.886442, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8107 of length 1240 (0 toread) [2013/05/23 17:29:00.886510, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.886542, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1236 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=17985 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1152 (0x480) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1152 (0x480) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1169 [2013/05/23 17:29:00.887040, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 80 04 00 00 50 00 00 ........ .....P.. [0020] 00 68 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .h...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 15 00 00 00 00 00 00 .1...... ........ [0050] 00 15 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 41 00 6C 00 70 .s. .N.T . .A.l.p [0070] 00 68 00 61 00 5F 00 41 00 58 00 50 00 00 00 02 .h.a._.A .X.P.... [0080] 00 03 00 00 00 08 00 02 00 00 04 00 00 B0 7E 84 ........ ......~. [0090] 02 78 01 3C 00 00 00 00 00 00 00 00 00 00 00 00 .x.<.... ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:00.888589, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:00.888660, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.888732, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1152 params=0 setup=2 [2013/05/23 17:29:00.888790, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:00.888835, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:00.888880, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:00.888927, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:00.888979, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:00.889043, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1152 [2013/05/23 17:29:00.889126, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1152 [2013/05/23 17:29:00.889181, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1152 [2013/05/23 17:29:00.889229, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1152, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:00.889277, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:00.889320, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1136 [2013/05/23 17:29:00.889364, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1136 [2013/05/23 17:29:00.889417, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:00.889462, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1136 [2013/05/23 17:29:00.889506, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1136, incoming data = 1136 [2013/05/23 17:29:00.889555, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:00.889620, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0480 (1152) auth_length : 0x0000 (0) call_id : 0x00000050 (80) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000468 (1128) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1128 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 15 00 00 00 00 00 00 00 15 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 41 00 6C 00 70 00 68 00 61 00 5F 00 41 00 .A.l.p. h.a._.A. [0050] 58 00 50 00 00 00 02 00 03 00 00 00 08 00 02 00 X.P..... ........ [0060] 00 04 00 00 B0 7E 84 02 78 01 3C 00 00 00 00 00 .....~.. x.<..... [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0460] 00 00 00 00 00 04 00 00 ........ [2013/05/23 17:29:00.895496, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:00.895566, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:00.895624, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.895683, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.895735, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:00.896554, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:00.896860, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:00.896924, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:00.896975, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:00.897043, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT Alpha_AXP' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] B0 7E 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 .~..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:00.901004, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:00.901139, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:00.901214, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:00.901266, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:00.901403, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:00.901505, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.901784, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.901855, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.901913, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.901961, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.902008, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.902052, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.902294, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.902659, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.902793, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.902846, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.902897, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.902942, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.903068, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 7E 00 00 00 00 00 00 00 9E 51 BC 35 ....~... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.903288, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007e-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.903577, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007e-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00b6 (182) name_size : 0x00b6 (182) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.904249, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7E 00 00 00 00 00 00 00 9E 51 BC 35 ....~... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.904379, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.904431, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.904485, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.904533, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.904584, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.904628, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.904733, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.904799, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.904854, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.904902, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.904953, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.904998, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.905137, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.905310, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.905409, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.905477, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.905536, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.905582, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.905711, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.905797, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.905855, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.905904, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.905959, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.906005, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.906182, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.906274, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.906331, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.906381, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.906437, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.906482, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.906578, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT Alpha_AXP] [2013/05/23 17:29:00.906639, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.906695, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.906743, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.906797, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.906841, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.906915, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] not found [2013/05/23 17:29:00.906971, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.907038, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.907116, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.907175, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.907227, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.907278, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.907328, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.907589, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007e-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.907780, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7E 00 00 00 00 00 00 00 9E 51 BC 35 ....~... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.907899, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7E 00 00 00 00 00 00 00 9E 51 BC 35 ....~... .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.908011, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.908060, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.908174, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.908407, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT Alpha_AXP,0): WERR_BADFILE [2013/05/23 17:29:00.908474, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [0] [2013/05/23 17:29:00.908550, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.908845, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.908899, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.908955, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.909004, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.909050, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.909162, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.909388, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.909475, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.909535, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.909584, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.909636, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.909681, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.909796, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 7F 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.909927, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007f-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.910333, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007f-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00b6 (182) name_size : 0x00b6 (182) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.910981, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7F 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.911161, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.911224, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.911279, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.911328, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.911382, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.911427, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.911534, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.911600, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.911656, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.911704, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.911756, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.911801, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.911899, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.911962, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.912017, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.912080, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.912203, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.912253, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.912380, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.912446, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.913207, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.913349, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.913412, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.913458, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.913600, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.913669, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.913725, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.913774, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.913828, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.913873, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.913962, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT Alpha_AXP] [2013/05/23 17:29:00.914021, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.914077, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.914188, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.914249, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.914311, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.914397, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] not found [2013/05/23 17:29:00.914455, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.914507, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.914558, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.914609, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.914662, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.914712, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.914762, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.915022, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000007f-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.915345, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7F 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.915519, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 7F 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.915633, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.915683, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.915757, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.916006, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT Alpha_AXP,1): WERR_BADFILE [2013/05/23 17:29:00.916075, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [1] [2013/05/23 17:29:00.916238, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.916521, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.916575, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.916630, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.916679, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.916726, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.916771, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.916972, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.917057, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.917171, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.917227, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.917278, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.917324, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.917447, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 80 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.917580, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000080-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.917877, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000080-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00b6 (182) name_size : 0x00b6 (182) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.918531, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 80 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.918657, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.918708, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.918762, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.918810, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.918862, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.918907, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.919011, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.919076, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.919298, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.919359, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.919413, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.919459, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.919588, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.919659, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.919713, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.919761, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.919814, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.919859, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.919965, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.920025, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.920078, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.920244, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.920332, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.920446, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.920592, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.920661, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.920716, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.920765, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.920821, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.920867, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.920957, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT Alpha_AXP] [2013/05/23 17:29:00.921018, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.921140, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.921209, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.921267, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.921313, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.921397, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] not found [2013/05/23 17:29:00.921455, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.921507, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.921557, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.921607, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.921658, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.921708, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.921758, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.922017, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000080-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.922270, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 80 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.922390, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 80 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.922498, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.922563, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.923310, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.923588, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT Alpha_AXP,2): WERR_BADFILE [2013/05/23 17:29:00.923660, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [2] [2013/05/23 17:29:00.923736, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.924010, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.924064, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.924181, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.924235, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.924282, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.924327, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.925479, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.925612, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.925676, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.925725, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.925776, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.925820, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.925961, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 81 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.926147, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000081-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.926447, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000081-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00b6 (182) name_size : 0x00b6 (182) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.927045, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 81 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.927240, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.927301, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.927356, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.927404, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.927455, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.927499, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.927603, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.927668, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.927741, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.927789, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.927842, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.927886, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.927989, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.928052, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.928173, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.928233, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.928288, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.928334, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.928457, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.928523, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.928578, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.928625, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.928678, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.928723, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.928836, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.928896, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.928950, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.928998, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.929068, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.929167, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.929287, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT Alpha_AXP] [2013/05/23 17:29:00.929354, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.929411, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.929460, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.929515, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.929560, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:00.929634, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] not found [2013/05/23 17:29:00.929690, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.929741, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.929791, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.929843, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.929892, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.929941, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.929990, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.930297, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000081-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.930607, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 81 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.930731, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 81 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.930840, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.930891, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.930964, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.931259, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT Alpha_AXP,3): WERR_BADFILE [2013/05/23 17:29:00.931333, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [3] [2013/05/23 17:29:00.931386, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:00.931449, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.931685, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:00.931770, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.931828, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1136 [2013/05/23 17:29:00.932720, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:00.932861, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:00.932946, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x00000050 (80) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:00.937357, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:00.937465, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:00.937528, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:00.937579, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.937608, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=17985 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:00.937967, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 50 00 00 ........ .,...P.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:00.942126, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1232 [2013/05/23 17:29:00.942347, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d0 [2013/05/23 17:29:00.942465, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8108 of length 1236 (0 toread) [2013/05/23 17:29:00.942516, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.942545, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1232 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18049 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1148 (0x47C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1148 (0x47C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1165 [2013/05/23 17:29:00.944756, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 7C 04 00 00 51 00 00 ........ .|...Q.. [0020] 00 64 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .d...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 13 00 00 00 00 00 00 .1...... ........ [0050] 00 13 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 50 00 6F 00 77 .s. .N.T . .P.o.w [0070] 00 65 00 72 00 50 00 43 00 00 00 50 00 03 00 00 .e.r.P.C ...P.... [0080] 00 08 00 02 00 00 04 00 00 B0 7E 84 02 78 01 3C ........ ..~..x.< [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:00.946298, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:00.946367, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:00.946440, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1148 params=0 setup=2 [2013/05/23 17:29:00.946497, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:00.946541, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:00.946587, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:00.946635, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:00.946685, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:00.946734, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1148 [2013/05/23 17:29:00.946783, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1148 [2013/05/23 17:29:00.946829, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1148 [2013/05/23 17:29:00.946876, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1148, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:00.946924, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:00.946968, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1132 [2013/05/23 17:29:00.947030, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1132 [2013/05/23 17:29:00.947122, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:00.947178, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1132 [2013/05/23 17:29:00.947224, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1132, incoming data = 1132 [2013/05/23 17:29:00.947275, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:00.947340, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x047c (1148) auth_length : 0x0000 (0) call_id : 0x00000051 (81) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000464 (1124) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1124 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 13 00 00 00 00 00 00 00 13 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 50 00 6F 00 77 00 65 00 72 00 50 00 43 00 .P.o.w. e.r.P.C. [0050] 00 00 50 00 03 00 00 00 08 00 02 00 00 04 00 00 ..P..... ........ [0060] B0 7E 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 .~..x.<. ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0460] 00 04 00 00 .... [2013/05/23 17:29:00.952339, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:00.952407, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:00.952580, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.952648, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.952700, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:00.953586, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:00.953891, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:00.953952, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:00.954004, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:00.954072, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT PowerPC' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] B0 7E 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 .~..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:00.958017, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:00.958135, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:00.958301, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:00.958362, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:00.958501, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:00.958605, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.958887, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.958941, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.958998, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.959048, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.959125, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.959176, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.959384, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.959469, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.959529, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.959594, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.959646, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.959691, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.959811, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 82 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.959944, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000082-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.960284, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000082-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00b2 (178) name_size : 0x00b2 (178) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.960994, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 82 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.961188, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.961254, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.961311, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.961358, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.961426, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.961474, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.961584, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.961650, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.961705, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.961752, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.961803, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.961848, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.961945, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.962005, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.962546, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.962629, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.962687, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.962733, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.962866, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.962935, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.962990, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.963038, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.963146, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.963285, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.963435, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.963520, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.963579, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.963629, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.963687, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.963733, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.963828, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT PowerPC] [2013/05/23 17:29:00.963889, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.963943, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.963992, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.964046, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.964121, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.964204, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] not found [2013/05/23 17:29:00.964261, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.964313, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.964364, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.964416, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.964477, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.964527, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.964578, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.964857, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000082-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.965056, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 82 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.965211, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 82 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.965326, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.965713, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.965879, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.966170, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT PowerPC,0): WERR_BADFILE [2013/05/23 17:29:00.966266, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT PowerPC] and version [0] [2013/05/23 17:29:00.966348, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.966624, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.966678, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.966735, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.966783, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.966830, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.966894, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.967146, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.967249, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.967309, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.967358, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.967407, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.967453, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.967573, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 83 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.967707, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000083-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.967980, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000083-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00b2 (178) name_size : 0x00b2 (178) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.968719, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 83 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.968854, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.968922, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.968978, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.969026, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.969245, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.969315, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.969426, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.969492, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.969548, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.969595, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.969647, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.969691, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.969788, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.969849, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.969902, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.969949, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.970001, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.970046, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.970223, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.970315, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.970372, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.970421, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.970493, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.970541, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.970664, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.970727, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.970782, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.970831, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.970885, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.970930, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.971018, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT PowerPC] [2013/05/23 17:29:00.971078, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.971196, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.971248, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.971304, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.971349, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.971429, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] not found [2013/05/23 17:29:00.971496, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.971547, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.971598, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.971648, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.971712, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.971765, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.971813, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.972072, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000083-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.973487, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 83 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.973619, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 83 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.973727, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.973777, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.973851, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.974085, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT PowerPC,1): WERR_BADFILE [2013/05/23 17:29:00.974228, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT PowerPC] and version [1] [2013/05/23 17:29:00.974311, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.974589, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.974660, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.974719, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.974768, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.974814, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.974860, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.975061, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.975207, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.975272, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.975321, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.975371, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.975474, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.975604, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 84 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.975741, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000084-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.976023, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000084-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00b2 (178) name_size : 0x00b2 (178) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.976693, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 84 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.976825, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.976877, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.976931, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.976977, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.977029, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.977073, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.977241, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.977317, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.977373, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.977420, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.977473, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.977517, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.977615, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.977677, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.977731, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.977778, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.977830, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.977876, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.978001, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.978068, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.978180, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.978310, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.978388, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.978435, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.978582, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.978653, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.978708, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.978757, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.978812, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.978857, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.978947, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT PowerPC] [2013/05/23 17:29:00.979007, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.979061, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.979162, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.979224, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.979270, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.979350, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] not found [2013/05/23 17:29:00.979407, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.979475, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.979528, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.979579, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.979628, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.979677, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.979727, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.979985, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000084-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.980228, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 84 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.980429, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 84 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.980550, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.980601, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.980674, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.980906, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT PowerPC,2): WERR_BADFILE [2013/05/23 17:29:00.980976, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT PowerPC] and version [2] [2013/05/23 17:29:00.981052, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.981436, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:00.981501, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.981559, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:00.981607, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:00.981656, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:00.981700, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:00.981896, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:00.981978, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:00.982037, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:00.982085, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:00.982196, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.982241, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:00.983645, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 85 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.983807, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000085-0000-0000-9e51-bc3564090000 result : WERR_OK [2013/05/23 17:29:00.984144, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000085-0000-0000-9e51-bc3564090000 keyname: struct winreg_String name_len : 0x00b2 (178) name_size : 0x00b2 (178) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:00.984793, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 85 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.984921, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:00.984974, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:00.985029, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:00.985077, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:00.985183, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.985232, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:00.985340, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:00.985470, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:00.985535, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.985593, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.985647, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.985692, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:00.985912, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:00.985979, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:00.986034, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.986150, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.986218, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.986264, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:00.986390, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:00.986455, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:00.986510, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.986558, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.986613, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.986659, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:00.986773, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:00.986834, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:00.986888, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.986938, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.986991, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.987036, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:00.987175, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT PowerPC] [2013/05/23 17:29:00.987261, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:00.987318, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.987367, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.987424, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:00.987486, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:00.987562, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] not found [2013/05/23 17:29:00.987620, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:00.987671, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:00.987722, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:00.987773, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:00.987824, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:00.987874, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:00.987924, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:00.988241, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000085-0000-0000-9e51-bc3564090000 [2013/05/23 17:29:00.988554, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 85 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.988680, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 85 00 00 00 00 00 00 00 9E 51 BC 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:00.988788, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:00.988837, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:00.988909, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:00.989212, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT PowerPC,3): WERR_BADFILE [2013/05/23 17:29:00.989291, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT PowerPC] and version [3] [2013/05/23 17:29:00.989344, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:00.989407, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:00.989645, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:00.989728, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:00.989784, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1132 [2013/05/23 17:29:00.989868, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:00.989929, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:00.990045, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x00000051 (81) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:00.994655, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:00.994762, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:00.994824, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:00.994876, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:00.994904, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18049 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:00.995314, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 51 00 00 ........ .,...Q.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:01.000664, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1216 [2013/05/23 17:29:01.000883, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4c0 [2013/05/23 17:29:01.000972, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8109 of length 1220 (0 toread) [2013/05/23 17:29:01.001043, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:01.001073, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1216 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18113 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1132 (0x46C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1132 (0x46C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1149 [2013/05/23 17:29:01.005201, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 6C 04 00 00 52 00 00 ........ .l...R.. [0020] 00 54 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .T...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0C 00 00 00 00 00 00 .1...... ........ [0050] 00 0C 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 34 00 2E 00 30 00 00 00 03 00 00 .s. .4.. .0...... [0070] 00 08 00 02 00 00 04 00 00 B0 7E 84 02 78 01 3C ........ ..~..x.< [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:01.006709, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:01.006780, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:01.006850, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1132 params=0 setup=2 [2013/05/23 17:29:01.006907, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:01.006951, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:01.006996, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:01.007044, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:01.007123, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:01.007179, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1132 [2013/05/23 17:29:01.007229, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1132 [2013/05/23 17:29:01.007274, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1132 [2013/05/23 17:29:01.007321, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1132, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:01.007369, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:01.007413, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1116 [2013/05/23 17:29:01.007457, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1116 [2013/05/23 17:29:01.007510, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:01.007555, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1116 [2013/05/23 17:29:01.007599, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1116, incoming data = 1116 [2013/05/23 17:29:01.007648, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:01.007712, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x046c (1132) auth_length : 0x0000 (0) call_id : 0x00000052 (82) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000454 (1108) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1108 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0C 00 00 00 00 00 00 00 0C 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 34 00 2E 00 n.d.o.w. s. .4... [0040] 30 00 00 00 03 00 00 00 08 00 02 00 00 04 00 00 0....... ........ [0050] B0 7E 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 .~..x.<. ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 04 00 00 .... [2013/05/23 17:29:01.016561, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:01.016631, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:01.016691, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.016750, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.016800, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:01.017618, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:01.017911, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:01.017971, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:01.018023, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:01.018159, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows 4.0' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] B0 7E 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 .~..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:01.023186, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:01.023296, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:01.023357, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:01.023424, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:01.023568, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:01.023669, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.023952, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.024006, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.024063, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.024148, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.024197, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.024242, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.024528, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.024627, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.024687, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.024734, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.024784, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.024829, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.024948, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 86 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.025083, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000086-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.025495, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000086-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.026176, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 86 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.026306, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.026358, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.026413, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.026461, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.026513, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.026559, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.026666, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.026732, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.026786, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.026832, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.026884, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.026929, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.027045, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.027168, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.027231, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.027280, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.027334, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.027379, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.027500, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.027565, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.027619, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.027667, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.027720, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.027765, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.027893, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.027957, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.028012, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.028060, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.028172, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.028225, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.028330, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows 4.0] [2013/05/23 17:29:01.028394, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.028449, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.028514, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.028568, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.028614, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.028684, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] not found [2013/05/23 17:29:01.028738, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.028789, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.028840, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.028891, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.028942, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.028992, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.029041, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.029333, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000086-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.029635, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 86 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.029758, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 86 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.029866, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.029915, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.030008, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.030296, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows 4.0,0): WERR_BADFILE [2013/05/23 17:29:01.030369, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows 4.0] and version [0] [2013/05/23 17:29:01.030445, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.030721, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.030774, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.030830, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.030880, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.030927, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.030971, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.031235, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.031331, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.031392, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.031440, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.031490, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.031535, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.031653, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 87 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.031805, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000087-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.032084, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000087-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.033007, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 87 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.033215, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.033275, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.033330, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.033378, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.033430, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.033476, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.033585, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.033651, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.033706, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.033770, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.033823, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.033868, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.033970, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.034033, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.034141, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.034212, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.034269, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.034314, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.034517, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.034596, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.034652, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.034701, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.034757, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.034802, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.034930, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.035082, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.035206, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.035259, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.035316, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.035362, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.035553, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows 4.0] [2013/05/23 17:29:01.035728, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.035792, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.035842, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.035900, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.035946, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.036022, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] not found [2013/05/23 17:29:01.036078, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.036193, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.036249, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.036300, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.036351, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.036400, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.036451, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.036713, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000087-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.036904, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 87 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.037035, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 87 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.037179, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.037232, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.037308, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.037537, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows 4.0,1): WERR_BADFILE [2013/05/23 17:29:01.037604, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows 4.0] and version [1] [2013/05/23 17:29:01.037681, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.037954, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.038007, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.038064, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.038168, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.038221, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.038266, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.038469, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.038555, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.038614, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.038676, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.038730, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.038775, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.038894, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 88 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.039027, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000088-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.039363, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000088-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.040057, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 88 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.040232, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.040288, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.040414, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.040483, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.040538, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.040584, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.040709, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.040778, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.040833, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.040880, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.040932, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.040977, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.041075, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.041223, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.041285, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.041333, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.041387, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.041432, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.041552, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.041618, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.041672, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.041720, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.041773, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.041818, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.041943, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.042008, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.042077, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.042183, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.042242, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.042288, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.042391, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows 4.0] [2013/05/23 17:29:01.043196, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.043276, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.043327, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.043388, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.044465, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.044576, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] not found [2013/05/23 17:29:01.044633, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.044686, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.044739, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.044790, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.044840, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.044891, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.044943, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.045269, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000088-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.045558, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 88 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.045683, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 88 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.045792, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.045845, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.045919, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.046200, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows 4.0,2): WERR_BADFILE [2013/05/23 17:29:01.046281, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows 4.0] and version [2] [2013/05/23 17:29:01.046359, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.046634, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.046688, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.046744, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.046794, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.046840, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.046885, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.047162, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.047264, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.047323, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.047372, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.047422, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.047467, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.047585, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 89 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.047718, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000089-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.047990, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000089-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.048641, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 89 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.048769, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.048822, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.048894, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.048953, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.049008, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.049053, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.049228, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.049313, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.049370, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.049531, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.049600, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.049646, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.049765, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.049832, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.049887, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.049935, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.049987, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.050031, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.050204, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.050299, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.050355, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.050404, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.050460, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.050522, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.050648, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.050714, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.050770, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.050819, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.050873, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.050919, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.051008, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows 4.0] [2013/05/23 17:29:01.051068, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.051185, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.051239, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.051295, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.051340, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:01.051416, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] not found [2013/05/23 17:29:01.051471, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.051522, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.051573, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.051623, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.051674, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.051724, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.051790, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.052049, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000089-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.052405, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 89 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.052756, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 89 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.052892, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.052944, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.053019, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.053310, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows 4.0,3): WERR_BADFILE [2013/05/23 17:29:01.053386, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows 4.0] and version [3] [2013/05/23 17:29:01.053438, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:01.053501, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:01.053738, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:01.053821, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:01.053897, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1116 [2013/05/23 17:29:01.053984, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:01.054045, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:01.054177, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x00000052 (82) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:01.058417, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:01.058521, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:01.058582, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:01.058633, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:01.058662, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18113 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:01.059029, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 52 00 00 ........ .,...R.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:01.064477, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1220 [2013/05/23 17:29:01.064695, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4c4 [2013/05/23 17:29:01.064805, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8110 of length 1224 (0 toread) [2013/05/23 17:29:01.064858, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:01.064888, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1220 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18177 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1136 (0x470) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1136 (0x470) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1153 [2013/05/23 17:29:01.066168, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 70 04 00 00 53 00 00 ........ .p...S.. [0020] 00 58 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .X...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0D 00 00 00 00 00 00 .1...... ........ [0050] 00 0D 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 49 00 41 00 36 00 34 00 00 00 00 .s. .I.A .6.4.... [0070] 00 03 00 00 00 08 00 02 00 00 04 00 00 B0 7E 84 ........ ......~. [0080] 02 78 01 3C 00 00 00 00 00 00 00 00 00 00 00 00 .x.<.... ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:01.067633, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:01.067696, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:01.067765, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1136 params=0 setup=2 [2013/05/23 17:29:01.067822, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:01.067866, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:01.067911, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:01.067958, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:01.068008, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:01.068057, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1136 [2013/05/23 17:29:01.068142, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1136 [2013/05/23 17:29:01.068208, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1136 [2013/05/23 17:29:01.068256, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1136, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:01.068305, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:01.068348, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1120 [2013/05/23 17:29:01.068393, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1120 [2013/05/23 17:29:01.068446, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:01.068490, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1120 [2013/05/23 17:29:01.068534, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1120, incoming data = 1120 [2013/05/23 17:29:01.068584, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:01.068650, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0470 (1136) auth_length : 0x0000 (0) call_id : 0x00000053 (83) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000458 (1112) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1112 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0D 00 00 00 00 00 00 00 0D 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 49 00 41 00 n.d.o.w. s. .I.A. [0040] 36 00 34 00 00 00 00 00 03 00 00 00 08 00 02 00 6.4..... ........ [0050] 00 04 00 00 B0 7E 84 02 78 01 3C 00 00 00 00 00 .....~.. x.<..... [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 04 00 00 ........ [2013/05/23 17:29:01.073726, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:01.073793, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:01.073852, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.073909, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.073960, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:01.074763, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:01.075053, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:01.075172, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:01.075254, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:01.075327, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows IA64' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] B0 7E 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 .~..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:01.079278, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:01.079374, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:01.079435, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:01.079485, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:01.079622, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:01.079725, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.080007, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.080061, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.080152, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.080219, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.080268, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.080421, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.080723, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.080824, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.080884, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.080932, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.080982, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.081027, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.081206, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 8A 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.081367, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008a-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.081648, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008a-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a6 (166) name_size : 0x00a6 (166) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.082320, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8A 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.083153, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.083247, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.083304, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.083354, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.083406, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.083451, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.083560, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.083626, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.083682, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.083730, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.083782, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.083827, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.083924, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.083987, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.084041, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.084139, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.084219, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.084266, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.084389, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.084454, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.084510, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.084576, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.084632, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.084677, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.084796, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.084859, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.084914, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.084963, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.085018, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.085063, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.085193, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows IA64] [2013/05/23 17:29:01.085258, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.085314, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.085363, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.085485, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.085714, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.085815, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] not found [2013/05/23 17:29:01.085874, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.085928, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.085980, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.086046, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.086132, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.086190, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.086243, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.086509, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008a-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.086699, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8A 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.086815, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8A 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.086924, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.086973, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.087049, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.087427, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows IA64,0): WERR_BADFILE [2013/05/23 17:29:01.087504, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows IA64] and version [0] [2013/05/23 17:29:01.087582, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.087877, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.087932, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.087988, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.088037, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.088084, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.088190, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.088398, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.088483, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.088541, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.088589, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.088639, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.088685, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.088801, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 8B 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.088933, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008b-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.089271, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008b-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a6 (166) name_size : 0x00a6 (166) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.089893, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8B 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.090018, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.090069, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.090228, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.090285, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.090338, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.090383, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.090491, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.090556, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.090611, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.090775, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.090839, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.090886, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.091005, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.091073, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.091219, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.091276, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.091331, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.091377, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.091528, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.091597, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.091653, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.091702, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.091757, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.091802, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.091918, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.091979, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.092033, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.092082, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.092195, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.092243, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.092346, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows IA64] [2013/05/23 17:29:01.092410, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.092465, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.092515, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.092838, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.092905, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.092996, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] not found [2013/05/23 17:29:01.093073, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.093195, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.093252, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.093304, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.093354, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.093404, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.093455, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.093715, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008b-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.093908, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8B 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.094025, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8B 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.094167, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.094220, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.094296, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.094524, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows IA64,1): WERR_BADFILE [2013/05/23 17:29:01.094591, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows IA64] and version [1] [2013/05/23 17:29:01.094686, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.094965, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.095019, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.095076, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.095182, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.095233, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.095278, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.095539, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.095709, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.095784, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.095834, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.095885, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.095931, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.096054, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 8C 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.096246, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008c-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.096534, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008c-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a6 (166) name_size : 0x00a6 (166) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.097200, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8C 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.097329, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.097383, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.097437, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.097485, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.097536, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.097581, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.097686, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.097751, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.097805, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.097855, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.097906, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.097951, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.098049, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.098175, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.098267, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.098319, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.098374, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.098419, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.098544, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.098609, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.098664, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.098713, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.098767, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.098811, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.098925, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.098985, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.099039, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.099130, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.099200, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.099248, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.099350, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows IA64] [2013/05/23 17:29:01.099415, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.099471, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.099521, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.099591, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.099637, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.099713, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] not found [2013/05/23 17:29:01.099769, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.099820, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.099871, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.099921, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.099971, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.100020, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.100069, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.100464, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008c-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.100755, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8C 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.100893, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8C 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.101004, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.101054, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.101180, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.101442, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows IA64,2): WERR_BADFILE [2013/05/23 17:29:01.101513, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows IA64] and version [2] [2013/05/23 17:29:01.101589, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.101865, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.101918, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.101973, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.102022, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.102069, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.102292, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.102505, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.102587, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.103191, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.103340, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.103398, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.103443, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.103575, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 8D 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.103715, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008d-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.104020, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008d-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a6 (166) name_size : 0x00a6 (166) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.104681, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8D 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.104810, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.104862, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.104917, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.104965, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.105017, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.105062, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.105225, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.105313, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.105371, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.105496, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.105553, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.105616, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.105802, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.105901, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.105959, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.106008, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.106065, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.106162, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.106291, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.106357, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.106412, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.106461, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.106517, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.106563, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.106679, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.106741, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.106795, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.106844, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.106899, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.106944, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.107033, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows IA64] [2013/05/23 17:29:01.107162, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.107228, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.107278, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.107335, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.107380, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:01.107462, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] not found [2013/05/23 17:29:01.107518, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.107570, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.107621, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.107673, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.107723, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.107774, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.107825, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.108133, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008d-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.108351, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8D 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.108468, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8D 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.108593, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.108644, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.108719, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.108949, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows IA64,3): WERR_BADFILE [2013/05/23 17:29:01.109014, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows IA64] and version [3] [2013/05/23 17:29:01.109066, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:01.109202, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:01.109452, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:01.109536, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:01.109594, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1120 [2013/05/23 17:29:01.109679, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:01.109740, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:01.109815, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x00000053 (83) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:01.119184, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:01.119295, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:01.119367, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:01.119420, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:01.119449, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18177 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:01.119807, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 53 00 00 ........ .,...S.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:01.134721, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1216 [2013/05/23 17:29:01.134935, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4c0 [2013/05/23 17:29:01.135023, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8111 of length 1220 (0 toread) [2013/05/23 17:29:01.135074, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:01.135138, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1216 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18241 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1132 (0x46C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1132 (0x46C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1149 [2013/05/23 17:29:01.135720, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 6C 04 00 00 54 00 00 ........ .l...T.. [0020] 00 54 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .T...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0C 00 00 00 00 00 00 .1...... ........ [0050] 00 0C 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 78 00 36 00 34 00 00 00 03 00 00 .s. .x.6 .4...... [0070] 00 08 00 02 00 00 04 00 00 B0 7E 84 02 78 01 3C ........ ..~..x.< [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:01.137290, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:01.137365, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:01.137435, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1132 params=0 setup=2 [2013/05/23 17:29:01.137570, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:01.137638, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:01.137685, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:01.137735, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:01.137788, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:01.137837, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1132 [2013/05/23 17:29:01.137885, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1132 [2013/05/23 17:29:01.137930, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1132 [2013/05/23 17:29:01.137977, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1132, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:01.138025, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:01.138069, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1116 [2013/05/23 17:29:01.138147, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1116 [2013/05/23 17:29:01.138203, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:01.138247, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1116 [2013/05/23 17:29:01.138292, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1116, incoming data = 1116 [2013/05/23 17:29:01.138359, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:01.138426, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x046c (1132) auth_length : 0x0000 (0) call_id : 0x00000054 (84) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000454 (1108) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1108 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0C 00 00 00 00 00 00 00 0C 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 78 00 36 00 n.d.o.w. s. .x.6. [0040] 34 00 00 00 03 00 00 00 08 00 02 00 00 04 00 00 4....... ........ [0050] B0 7E 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 .~..x.<. ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 04 00 00 .... [2013/05/23 17:29:01.145222, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:01.145292, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:01.145352, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.145471, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.145531, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:01.146451, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:01.146757, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:01.146818, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:01.146870, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:01.146937, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows x64' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] B0 7E 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 .~..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:01.150800, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:01.150892, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:01.150951, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:01.151002, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:01.151173, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:01.151364, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.151681, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.151737, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.151796, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.151845, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.151893, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.151937, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.154420, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.154537, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.154598, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.154647, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.154697, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.154742, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.154863, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 8E 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.155017, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008e-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.155359, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008e-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.156038, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8E 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.156215, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.156272, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.156380, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.156452, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.156509, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.156555, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.156663, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.156731, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.156800, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.156850, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.156902, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.156947, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.157049, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.157175, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.157239, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.157288, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.157342, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.157387, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.157508, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.157574, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.157629, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.157676, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.157730, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.157775, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.157889, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.157951, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.158005, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.158053, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.158139, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.158203, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.158306, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows x64] [2013/05/23 17:29:01.158367, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.158422, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.158470, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.158524, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.158569, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.158636, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] not found [2013/05/23 17:29:01.158689, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.158740, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.158791, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.158841, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.158891, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.158941, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.158990, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.159279, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008e-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.159469, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8E 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.159612, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8E 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.159721, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.159769, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.159845, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.160073, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows x64,0): WERR_BADFILE [2013/05/23 17:29:01.160208, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows x64] and version [0] [2013/05/23 17:29:01.160294, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.160676, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.160740, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.160798, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.160848, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.160895, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.160939, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.161202, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.161303, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.161365, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.161510, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.161573, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.161619, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.161746, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 8F 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.161882, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008f-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.162601, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008f-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.163343, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8F 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.163476, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.163529, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.163585, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.163633, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.163686, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.163748, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.163858, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.163924, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.163980, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.164029, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.164081, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.164203, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.164325, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.164392, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.164447, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.164495, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.164550, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.164595, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.164713, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.164780, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.164835, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.164884, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.164937, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.164982, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.165141, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.165225, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.165300, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.165350, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.165467, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.165521, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.165631, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows x64] [2013/05/23 17:29:01.165698, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.165754, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.165803, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.165857, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.165902, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.165970, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] not found [2013/05/23 17:29:01.166024, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.166075, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.166186, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.166241, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.166292, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.166342, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.166392, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.166752, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000008f-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.166954, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8F 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.167070, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 8F 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.167215, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.167268, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.167342, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.167570, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows x64,1): WERR_BADFILE [2013/05/23 17:29:01.167636, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows x64] and version [1] [2013/05/23 17:29:01.167711, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.167985, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.168039, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.168139, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.168203, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.168251, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.168296, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.168516, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.168602, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.168660, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.168803, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.168862, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.168908, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.169027, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 90 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.169215, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000090-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.169501, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000090-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.170157, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 90 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.170285, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.170352, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.170409, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.170457, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.170508, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.170553, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.170658, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.170723, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.170778, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.170826, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.170876, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.170921, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.171017, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.171077, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.171209, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.171263, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.171319, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.171365, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.171561, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.171663, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.171719, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.171768, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.171838, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.171886, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.172014, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.172080, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.172193, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.172474, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.172564, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.172611, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.172726, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows x64] [2013/05/23 17:29:01.172792, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.172847, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.172895, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.172950, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.172994, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.173061, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] not found [2013/05/23 17:29:01.173170, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.173227, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.173279, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.173330, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.173381, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.173450, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.173504, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.173766, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000090-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.173957, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 90 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.174073, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 90 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.174239, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.174292, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.174368, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.174601, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows x64,2): WERR_BADFILE [2013/05/23 17:29:01.174666, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows x64] and version [2] [2013/05/23 17:29:01.174743, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.175021, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:01.175074, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.175233, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:01.175293, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:01.175341, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:01.175436, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:01.175655, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:01.175739, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:01.175798, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:01.175846, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:01.175897, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.175943, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:01.176060, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 91 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.176258, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000091-0000-0000-9e51-bd3564090000 result : WERR_OK [2013/05/23 17:29:01.176617, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000091-0000-0000-9e51-bd3564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:01.177315, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 91 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.177447, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:01.177499, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:01.177555, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:01.177603, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:01.177655, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.177699, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:01.177806, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:01.177873, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:01.177928, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.177976, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.178027, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.178072, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:01.178248, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:01.178322, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:01.178378, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.178427, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.178482, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.178528, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:01.178637, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:01.178712, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:01.178769, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.178817, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.178871, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.178916, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:01.179034, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:01.179143, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:01.179212, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.179262, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.179318, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.179363, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:01.179465, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows x64] [2013/05/23 17:29:01.179527, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:01.179582, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.179631, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.179685, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:01.179730, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:01.179796, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] not found [2013/05/23 17:29:01.179850, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:01.179900, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:01.179967, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:01.180018, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:01.180069, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:01.180170, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:01.180224, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:01.180585, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000091-0000-0000-9e51-bd3564090000 [2013/05/23 17:29:01.180786, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 91 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.180902, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 91 00 00 00 00 00 00 00 9E 51 BD 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:01.181011, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:01.181061, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:01.181194, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:01.181433, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows x64,3): WERR_BADFILE [2013/05/23 17:29:01.181500, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows x64] and version [3] [2013/05/23 17:29:01.181551, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:01.181696, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:01.181969, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:01.182057, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:01.182189, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1116 [2013/05/23 17:29:01.182988, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:01.183194, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:01.183286, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x00000054 (84) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:01.187650, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:01.187757, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:01.187838, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:01.187892, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:01.187921, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18241 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:01.188326, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 54 00 00 ........ .,...T.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.183761, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1224 [2013/05/23 17:29:04.183927, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4c8 [2013/05/23 17:29:04.183984, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8112 of length 1228 (0 toread) [2013/05/23 17:29:04.184033, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.184078, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1224 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18305 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1140 (0x474) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1140 (0x474) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1157 [2013/05/23 17:29:04.184595, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 74 04 00 00 55 00 00 ........ .t...U.. [0020] 00 5C 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .\...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0F 00 00 00 00 00 00 .1...... ........ [0050] 00 0F 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 78 00 38 00 36 .s. .N.T . .x.8.6 [0070] 00 00 00 02 00 03 00 00 00 08 00 02 00 00 04 00 ........ ........ [0080] 00 38 7A 84 02 78 01 3C 00 00 00 00 00 00 00 00 .8z..x.< ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.186167, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:04.186239, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:04.186310, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1140 params=0 setup=2 [2013/05/23 17:29:04.186367, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:04.186412, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:04.186474, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:04.186524, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:04.186575, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:04.186625, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1140 [2013/05/23 17:29:04.186674, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1140 [2013/05/23 17:29:04.186719, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1140 [2013/05/23 17:29:04.186767, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1140, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:04.186815, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:04.186859, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1124 [2013/05/23 17:29:04.186904, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1124 [2013/05/23 17:29:04.186956, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:04.187001, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1124 [2013/05/23 17:29:04.187045, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1124, incoming data = 1124 [2013/05/23 17:29:04.187125, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:04.187197, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0474 (1140) auth_length : 0x0000 (0) call_id : 0x00000055 (85) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x0000045c (1116) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1116 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0F 00 00 00 00 00 00 00 0F 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 78 00 38 00 36 00 00 00 02 00 03 00 00 00 .x.8.6. ........ [0050] 08 00 02 00 00 04 00 00 38 7A 84 02 78 01 3C 00 ........ 8z..x.<. [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 04 00 00 ........ .... [2013/05/23 17:29:04.199070, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:04.199169, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:04.199230, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.199290, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.199342, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:04.200193, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:04.200623, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:04.200697, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:04.200751, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:04.200820, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT x86' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] 38 7A 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 8z..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:04.205495, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:04.205597, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:04.205659, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:04.205709, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:04.205860, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:04.205964, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.206298, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.206359, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.206416, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.206465, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.206512, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.206557, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.206762, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.206846, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.206905, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.206954, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.207004, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.207049, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.207227, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 92 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.207379, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000092-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.207659, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000092-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.208327, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 92 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.208522, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.208603, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.208660, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.208708, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.208760, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.208805, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.208912, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.208979, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.209034, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.209081, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.209192, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.209239, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.209350, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.209416, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.209472, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.209521, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.211018, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.211189, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.211338, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.211410, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.211466, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.211515, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.211570, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.211616, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.211732, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.211795, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.211849, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.211898, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.211952, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.211998, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.212115, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.212190, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.212247, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.212297, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.212352, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.212398, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.212511, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.212593, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.212650, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.212701, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.212757, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.212801, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.212896, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-0] [2013/05/23 17:29:04.212954, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.213133, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:04.213198, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:04.213256, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.213301, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:04.213380, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] not found [2013/05/23 17:29:04.213438, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.213489, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.213619, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.213684, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.213736, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.213787, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.213838, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.213905, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.213957, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.214256, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000092-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.214453, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 92 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.214568, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 92 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.214676, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.214725, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.214802, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.215025, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,0): WERR_BADFILE [2013/05/23 17:29:04.215139, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [0] [2013/05/23 17:29:04.215236, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.215574, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.215654, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.215716, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.215765, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.215812, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.215856, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.216061, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.216215, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.216281, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.216331, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.216381, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.216425, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.216547, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 93 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.216685, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000093-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.216964, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000093-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.217877, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 93 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.218017, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.218070, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.218188, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.218241, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.218295, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.218340, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.218448, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.218516, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.218571, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.218698, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.218762, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.218809, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.218923, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.218990, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.219044, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.219137, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.219206, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.219252, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.219374, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.219459, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.219517, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.219565, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.219621, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.219666, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.219784, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.219847, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.219901, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.219951, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.220005, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.220050, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.220199, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.220274, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.220413, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.220495, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.220557, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.220603, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.220731, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.220800, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.220856, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.220923, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.220980, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.221024, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.221179, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-1] [2013/05/23 17:29:04.221267, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.221325, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:04.221385, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:04.221442, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.221489, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:04.221561, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] not found [2013/05/23 17:29:04.221615, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.221666, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.221717, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.221767, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.221818, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.221869, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.221919, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.221969, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.222019, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.222362, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000093-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.222562, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 93 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.222677, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 93 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.222784, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.222833, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.222907, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.223181, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,1): WERR_BADFILE [2013/05/23 17:29:04.223271, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [1] [2013/05/23 17:29:04.223351, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.223630, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.223770, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.223833, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.223899, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.223950, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.223997, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.224253, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.224349, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.224409, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.224458, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.224509, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.224554, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.224671, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 94 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.224804, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000094-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.225084, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000094-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.225811, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 94 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.225960, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.226012, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.226067, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.226186, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.226246, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.226292, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.226401, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.226467, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.226522, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.226809, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.226889, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.226936, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.227059, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.227205, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.227267, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.227317, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.227372, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.227416, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.227538, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.227601, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.227655, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.227720, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.227776, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.227822, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.227941, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.228004, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.228057, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.228156, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.228219, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.228264, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.228365, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.228427, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.228482, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.228531, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.228585, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.228630, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.228812, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.228911, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.228969, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.229020, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.229143, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.229210, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.229322, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-2] [2013/05/23 17:29:04.229386, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.229443, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:04.229492, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:04.229547, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.229592, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:04.229769, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] not found [2013/05/23 17:29:04.229837, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.229888, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.229938, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.229987, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.230037, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.230116, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.230174, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.230225, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.230276, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.230558, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000094-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.230767, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 94 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.230884, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 94 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.230993, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.231041, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.231152, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.231395, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,2): WERR_BADFILE [2013/05/23 17:29:04.231462, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [2] [2013/05/23 17:29:04.231538, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.231828, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.231884, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.231941, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.231990, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.232038, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.232082, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.232378, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.232466, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.232526, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.232575, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.232625, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.232669, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.232785, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 95 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.232920, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000095-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.233259, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000095-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.233954, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 95 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.234135, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.234219, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.234280, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.234328, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.234381, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.234426, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.234534, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.234600, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.234656, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.234703, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.234755, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.234800, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.234897, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.234960, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.235013, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.235061, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.235175, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.235229, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.235351, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.235486, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.235550, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.235600, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.235673, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.235723, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.238560, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.238710, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.238773, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.238886, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.238962, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.239008, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.239170, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.239264, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.239322, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.239372, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.239428, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.239474, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.239585, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.239650, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.239707, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.239756, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.239811, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.239856, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.239969, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-3] [2013/05/23 17:29:04.240034, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.240137, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.240205, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.240262, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.240308, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.240530, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.240609, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.240662, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.240713, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.240765, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.240816, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.240866, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.240922, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 96 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.241039, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000096-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.241355, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000096-0000-0000-9e51-c03564090000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2013/05/23 17:29:04.241685, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 96 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.241815, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3' (ops 0xb697a420) [2013/05/23 17:29:04.241870, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.241965, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.242057, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000001 (1) max_subkeylen : * max_subkeylen : 0x0000002e (46) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:04.242711, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000096-0000-0000-9e51-c03564090000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x0030 (48) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2013/05/23 17:29:04.243272, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 96 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.243394, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:421(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.245027, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0030 (48) size : 0x0030 (48) name : * name : 'HP Deskjet F2200 series' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:04.245667, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000096-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.245883, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 96 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.245999, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 96 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.246139, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.246191, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.246240, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.246579, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000095-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.247562, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 95 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.247716, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 95 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.247829, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.247879, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.247956, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.248262, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[1] drivers in environment [Windows NT x86] and version [3] [2013/05/23 17:29:04.248337, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7499(enumprinterdrivers_level_by_architecture) driver: [HP Deskjet F2200 series] [2013/05/23 17:29:04.248413, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.248690, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.248744, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.248800, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.248850, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.248896, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.248941, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.249200, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.249302, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.249362, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.249506, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.249573, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.249619, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.249747, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 97 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.249887, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000097-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.250222, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000097-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00da (218) name_size : 0x00da (218) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.250843, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 97 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.250967, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.251019, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.251074, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.251206, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.251283, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.251333, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.251441, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.251509, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.251565, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.251613, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.251666, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.251711, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.251809, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.251871, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.251925, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.251973, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.252026, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.252071, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.252265, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.252340, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.252395, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.252443, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.252499, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.252544, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.252670, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.252753, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.252812, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.252863, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.252918, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.252964, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.253058, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.253175, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.253237, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.253288, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.253344, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.253390, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.253509, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.253576, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.253633, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.253683, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.253738, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.253783, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.253876, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-3] [2013/05/23 17:29:04.253936, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.253992, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.254057, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.254171, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.254224, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.254333, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HP Deskjet F2200 series] [2013/05/23 17:29:04.254397, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (9->10) [2013/05/23 17:29:04.254523, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.254600, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.254663, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.254710, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.254815, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (10->9) [2013/05/23 17:29:04.254876, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.254927, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.254978, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.255029, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.255080, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.255165, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.255217, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.255272, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.255461, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.255751, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2013/05/23 17:29:04.256055, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.256217, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series' (ops 0xb697a420) [2013/05/23 17:29:04.256275, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.256388, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Version] len[4] [2013/05/23 17:29:04.256456, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[Driver] len[22] [2013/05/23 17:29:04.256512, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[2]: name[Data File] len[26] [2013/05/23 17:29:04.256566, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[3]: name[Configuration File] len[26] [2013/05/23 17:29:04.256619, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[4]: name[Help File] len[22] [2013/05/23 17:29:04.256677, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[5]: name[Dependent Files] len[726] [2013/05/23 17:29:04.256997, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[6]: name[Monitor] len[0] [2013/05/23 17:29:04.257057, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[7]: name[Datatype] len[0] [2013/05/23 17:29:04.257144, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[8]: name[Previous Names] len[2] [2013/05/23 17:29:04.257223, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[9]: name[DriverDate] len[22] [2013/05/23 17:29:04.257282, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[10]: name[DriverVersion] len[24] [2013/05/23 17:29:04.257336, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[11]: name[Manufacturer] len[32] [2013/05/23 17:29:04.257392, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[12]: name[OEM URL] len[130] [2013/05/23 17:29:04.257447, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[13]: name[HardwareID] len[68] [2013/05/23 17:29:04.257501, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[14]: name[Provider] len[32] [2013/05/23 17:29:04.257557, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[15]: name[Print Processor] len[0] [2013/05/23 17:29:04.257611, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[16]: name[VendorSetup] len[0] [2013/05/23 17:29:04.257668, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[17]: name[Color Profiles] len[2] [2013/05/23 17:29:04.257723, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[18]: name[InfPath] len[0] [2013/05/23 17:29:04.257780, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[19]: name[PrinterDriverAttributes] len[4] [2013/05/23 17:29:04.257847, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[20]: name[CoreDependencies] len[2] [2013/05/23 17:29:04.257905, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[21]: name[MinInboxDriverVerDate] len[22] [2013/05/23 17:29:04.257964, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[22]: name[MinInboxDriverVerVersion] len[16] [2013/05/23 17:29:04.258023, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.258159, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000017 (23) max_valnamelen : * max_valnamelen : 0x00000032 (50) max_valbufsize : * max_valbufsize : 0x000002d6 (726) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:04.258837, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000000 (0) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.259396, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.259586, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.259664, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'Version' type : * type : REG_DWORD (4) value : * value: ARRAY(4) [0] : 0x03 (3) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : * size : 0x00000004 (4) length : * length : 0x00000004 (4) result : WERR_OK [2013/05/23 17:29:04.260273, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000001 (1) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.260925, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.261049, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.261153, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x000e (14) size : 0x0034 (52) name : * name : 'Driver' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x2e (46) [13] : 0x00 (0) [14] : 0x44 (68) [15] : 0x00 (0) [16] : 0x4c (76) [17] : 0x00 (0) [18] : 0x4c (76) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:04.262157, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000002 (2) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.262707, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.262827, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.262887, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0014 (20) size : 0x0034 (52) name : * name : 'Data File' type : * type : REG_SZ (1) value : * value: ARRAY(26) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x70 (112) [3] : 0x00 (0) [4] : 0x6f (111) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x32 (50) [9] : 0x00 (0) [10] : 0x30 (48) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x33 (51) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x70 (112) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) size : * size : 0x0000001a (26) length : * length : 0x0000001a (26) result : WERR_OK [2013/05/23 17:29:04.264133, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000003 (3) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.264754, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.264879, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.264943, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0026 (38) size : 0x0034 (52) name : * name : 'Configuration File' type : * type : REG_SZ (1) value : * value: ARRAY(26) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x55 (85) [13] : 0x00 (0) [14] : 0x49 (73) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x44 (68) [19] : 0x00 (0) [20] : 0x4c (76) [21] : 0x00 (0) [22] : 0x4c (76) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) size : * size : 0x0000001a (26) length : * length : 0x0000001a (26) result : WERR_OK [2013/05/23 17:29:04.266132, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000004 (4) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.266677, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.267040, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.267160, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0014 (20) size : 0x0034 (52) name : * name : 'Help File' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x2e (46) [13] : 0x00 (0) [14] : 0x48 (72) [15] : 0x00 (0) [16] : 0x4c (76) [17] : 0x00 (0) [18] : 0x50 (80) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:04.268194, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000005 (5) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.275706, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.275840, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.275912, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0020 (32) size : 0x0034 (52) name : * name : 'Dependent Files' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(726) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x70 (112) [3] : 0x00 (0) [4] : 0x6f (111) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x32 (50) [9] : 0x00 (0) [10] : 0x30 (48) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x61 (97) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x6e (110) [21] : 0x00 (0) [22] : 0x69 (105) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) [26] : 0x68 (104) [27] : 0x00 (0) [28] : 0x70 (112) [29] : 0x00 (0) [30] : 0x7a (122) [31] : 0x00 (0) [32] : 0x73 (115) [33] : 0x00 (0) [34] : 0x74 (116) [35] : 0x00 (0) [36] : 0x35 (53) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x75 (117) [41] : 0x00 (0) [42] : 0x2e (46) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x6c (108) [47] : 0x00 (0) [48] : 0x6c (108) [49] : 0x00 (0) [50] : 0x00 (0) [51] : 0x00 (0) [52] : 0x68 (104) [53] : 0x00 (0) [54] : 0x70 (112) [55] : 0x00 (0) [56] : 0x7a (122) [57] : 0x00 (0) [58] : 0x33 (51) [59] : 0x00 (0) [60] : 0x63 (99) [61] : 0x00 (0) [62] : 0x35 (53) [63] : 0x00 (0) [64] : 0x6d (109) [65] : 0x00 (0) [66] : 0x75 (117) [67] : 0x00 (0) [68] : 0x2e (46) [69] : 0x00 (0) [70] : 0x64 (100) [71] : 0x00 (0) [72] : 0x6c (108) [73] : 0x00 (0) [74] : 0x6c (108) [75] : 0x00 (0) [76] : 0x00 (0) [77] : 0x00 (0) [78] : 0x68 (104) [79] : 0x00 (0) [80] : 0x70 (112) [81] : 0x00 (0) [82] : 0x7a (122) [83] : 0x00 (0) [84] : 0x75 (117) [85] : 0x00 (0) [86] : 0x72 (114) [87] : 0x00 (0) [88] : 0x35 (53) [89] : 0x00 (0) [90] : 0x6d (109) [91] : 0x00 (0) [92] : 0x75 (117) [93] : 0x00 (0) [94] : 0x2e (46) [95] : 0x00 (0) [96] : 0x64 (100) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x6c (108) [101] : 0x00 (0) [102] : 0x00 (0) [103] : 0x00 (0) [104] : 0x68 (104) [105] : 0x00 (0) [106] : 0x70 (112) [107] : 0x00 (0) [108] : 0x6f (111) [109] : 0x00 (0) [110] : 0x32 (50) [111] : 0x00 (0) [112] : 0x32 (50) [113] : 0x00 (0) [114] : 0x30 (48) [115] : 0x00 (0) [116] : 0x30 (48) [117] : 0x00 (0) [118] : 0x33 (51) [119] : 0x00 (0) [120] : 0x2e (46) [121] : 0x00 (0) [122] : 0x78 (120) [123] : 0x00 (0) [124] : 0x6d (109) [125] : 0x00 (0) [126] : 0x6c (108) [127] : 0x00 (0) [128] : 0x00 (0) [129] : 0x00 (0) [130] : 0x68 (104) [131] : 0x00 (0) [132] : 0x70 (112) [133] : 0x00 (0) [134] : 0x7a (122) [135] : 0x00 (0) [136] : 0x73 (115) [137] : 0x00 (0) [138] : 0x63 (99) [139] : 0x00 (0) [140] : 0x35 (53) [141] : 0x00 (0) [142] : 0x6d (109) [143] : 0x00 (0) [144] : 0x75 (117) [145] : 0x00 (0) [146] : 0x2e (46) [147] : 0x00 (0) [148] : 0x64 (100) [149] : 0x00 (0) [150] : 0x74 (116) [151] : 0x00 (0) [152] : 0x64 (100) [153] : 0x00 (0) [154] : 0x00 (0) [155] : 0x00 (0) [156] : 0x68 (104) [157] : 0x00 (0) [158] : 0x70 (112) [159] : 0x00 (0) [160] : 0x7a (122) [161] : 0x00 (0) [162] : 0x75 (117) [163] : 0x00 (0) [164] : 0x69 (105) [165] : 0x00 (0) [166] : 0x35 (53) [167] : 0x00 (0) [168] : 0x6d (109) [169] : 0x00 (0) [170] : 0x75 (117) [171] : 0x00 (0) [172] : 0x2e (46) [173] : 0x00 (0) [174] : 0x64 (100) [175] : 0x00 (0) [176] : 0x6c (108) [177] : 0x00 (0) [178] : 0x6c (108) [179] : 0x00 (0) [180] : 0x00 (0) [181] : 0x00 (0) [182] : 0x68 (104) [183] : 0x00 (0) [184] : 0x70 (112) [185] : 0x00 (0) [186] : 0x7a (122) [187] : 0x00 (0) [188] : 0x33 (51) [189] : 0x00 (0) [190] : 0x72 (114) [191] : 0x00 (0) [192] : 0x35 (53) [193] : 0x00 (0) [194] : 0x6d (109) [195] : 0x00 (0) [196] : 0x75 (117) [197] : 0x00 (0) [198] : 0x2e (46) [199] : 0x00 (0) [200] : 0x64 (100) [201] : 0x00 (0) [202] : 0x6c (108) [203] : 0x00 (0) [204] : 0x6c (108) [205] : 0x00 (0) [206] : 0x00 (0) [207] : 0x00 (0) [208] : 0x68 (104) [209] : 0x00 (0) [210] : 0x70 (112) [211] : 0x00 (0) [212] : 0x7a (122) [213] : 0x00 (0) [214] : 0x70 (112) [215] : 0x00 (0) [216] : 0x72 (114) [217] : 0x00 (0) [218] : 0x35 (53) [219] : 0x00 (0) [220] : 0x6d (109) [221] : 0x00 (0) [222] : 0x75 (117) [223] : 0x00 (0) [224] : 0x2e (46) [225] : 0x00 (0) [226] : 0x64 (100) [227] : 0x00 (0) [228] : 0x6c (108) [229] : 0x00 (0) [230] : 0x6c (108) [231] : 0x00 (0) [232] : 0x00 (0) [233] : 0x00 (0) [234] : 0x68 (104) [235] : 0x00 (0) [236] : 0x70 (112) [237] : 0x00 (0) [238] : 0x66 (102) [239] : 0x00 (0) [240] : 0x73 (115) [241] : 0x00 (0) [242] : 0x70 (112) [243] : 0x00 (0) [244] : 0x30 (48) [245] : 0x00 (0) [246] : 0x37 (55) [247] : 0x00 (0) [248] : 0x31 (49) [249] : 0x00 (0) [250] : 0x2e (46) [251] : 0x00 (0) [252] : 0x72 (114) [253] : 0x00 (0) [254] : 0x70 (112) [255] : 0x00 (0) [256] : 0x6f (111) [257] : 0x00 (0) [258] : 0x00 (0) [259] : 0x00 (0) [260] : 0x68 (104) [261] : 0x00 (0) [262] : 0x70 (112) [263] : 0x00 (0) [264] : 0x63 (99) [265] : 0x00 (0) [266] : 0x64 (100) [267] : 0x00 (0) [268] : 0x6d (109) [269] : 0x00 (0) [270] : 0x63 (99) [271] : 0x00 (0) [272] : 0x33 (51) [273] : 0x00 (0) [274] : 0x32 (50) [275] : 0x00 (0) [276] : 0x2e (46) [277] : 0x00 (0) [278] : 0x64 (100) [279] : 0x00 (0) [280] : 0x6c (108) [281] : 0x00 (0) [282] : 0x6c (108) [283] : 0x00 (0) [284] : 0x00 (0) [285] : 0x00 (0) [286] : 0x68 (104) [287] : 0x00 (0) [288] : 0x70 (112) [289] : 0x00 (0) [290] : 0x62 (98) [291] : 0x00 (0) [292] : 0x63 (99) [293] : 0x00 (0) [294] : 0x66 (102) [295] : 0x00 (0) [296] : 0x67 (103) [297] : 0x00 (0) [298] : 0x72 (114) [299] : 0x00 (0) [300] : 0x65 (101) [301] : 0x00 (0) [302] : 0x2e (46) [303] : 0x00 (0) [304] : 0x64 (100) [305] : 0x00 (0) [306] : 0x6c (108) [307] : 0x00 (0) [308] : 0x6c (108) [309] : 0x00 (0) [310] : 0x00 (0) [311] : 0x00 (0) [312] : 0x68 (104) [313] : 0x00 (0) [314] : 0x70 (112) [315] : 0x00 (0) [316] : 0x6f (111) [317] : 0x00 (0) [318] : 0x32 (50) [319] : 0x00 (0) [320] : 0x32 (50) [321] : 0x00 (0) [322] : 0x30 (48) [323] : 0x00 (0) [324] : 0x30 (48) [325] : 0x00 (0) [326] : 0x33 (51) [327] : 0x00 (0) [328] : 0x2e (46) [329] : 0x00 (0) [330] : 0x65 (101) [331] : 0x00 (0) [332] : 0x78 (120) [333] : 0x00 (0) [334] : 0x70 (112) [335] : 0x00 (0) [336] : 0x00 (0) [337] : 0x00 (0) [338] : 0x68 (104) [339] : 0x00 (0) [340] : 0x70 (112) [341] : 0x00 (0) [342] : 0x7a (122) [343] : 0x00 (0) [344] : 0x6c (108) [345] : 0x00 (0) [346] : 0x65 (101) [347] : 0x00 (0) [348] : 0x35 (53) [349] : 0x00 (0) [350] : 0x6d (109) [351] : 0x00 (0) [352] : 0x75 (117) [353] : 0x00 (0) [354] : 0x2e (46) [355] : 0x00 (0) [356] : 0x64 (100) [357] : 0x00 (0) [358] : 0x6c (108) [359] : 0x00 (0) [360] : 0x6c (108) [361] : 0x00 (0) [362] : 0x00 (0) [363] : 0x00 (0) [364] : 0x68 (104) [365] : 0x00 (0) [366] : 0x70 (112) [367] : 0x00 (0) [368] : 0x7a (122) [369] : 0x00 (0) [370] : 0x73 (115) [371] : 0x00 (0) [372] : 0x65 (101) [373] : 0x00 (0) [374] : 0x35 (53) [375] : 0x00 (0) [376] : 0x6d (109) [377] : 0x00 (0) [378] : 0x75 (117) [379] : 0x00 (0) [380] : 0x2e (46) [381] : 0x00 (0) [382] : 0x64 (100) [383] : 0x00 (0) [384] : 0x6c (108) [385] : 0x00 (0) [386] : 0x6c (108) [387] : 0x00 (0) [388] : 0x00 (0) [389] : 0x00 (0) [390] : 0x68 (104) [391] : 0x00 (0) [392] : 0x70 (112) [393] : 0x00 (0) [394] : 0x7a (122) [395] : 0x00 (0) [396] : 0x73 (115) [397] : 0x00 (0) [398] : 0x6d (109) [399] : 0x00 (0) [400] : 0x35 (53) [401] : 0x00 (0) [402] : 0x6d (109) [403] : 0x00 (0) [404] : 0x75 (117) [405] : 0x00 (0) [406] : 0x2e (46) [407] : 0x00 (0) [408] : 0x67 (103) [409] : 0x00 (0) [410] : 0x70 (112) [411] : 0x00 (0) [412] : 0x64 (100) [413] : 0x00 (0) [414] : 0x00 (0) [415] : 0x00 (0) [416] : 0x68 (104) [417] : 0x00 (0) [418] : 0x70 (112) [419] : 0x00 (0) [420] : 0x7a (122) [421] : 0x00 (0) [422] : 0x33 (51) [423] : 0x00 (0) [424] : 0x6d (109) [425] : 0x00 (0) [426] : 0x35 (53) [427] : 0x00 (0) [428] : 0x6d (109) [429] : 0x00 (0) [430] : 0x75 (117) [431] : 0x00 (0) [432] : 0x2e (46) [433] : 0x00 (0) [434] : 0x67 (103) [435] : 0x00 (0) [436] : 0x70 (112) [437] : 0x00 (0) [438] : 0x64 (100) [439] : 0x00 (0) [440] : 0x00 (0) [441] : 0x00 (0) [442] : 0x68 (104) [443] : 0x00 (0) [444] : 0x70 (112) [445] : 0x00 (0) [446] : 0x7a (122) [447] : 0x00 (0) [448] : 0x65 (101) [449] : 0x00 (0) [450] : 0x76 (118) [451] : 0x00 (0) [452] : 0x35 (53) [453] : 0x00 (0) [454] : 0x6d (109) [455] : 0x00 (0) [456] : 0x75 (117) [457] : 0x00 (0) [458] : 0x2e (46) [459] : 0x00 (0) [460] : 0x64 (100) [461] : 0x00 (0) [462] : 0x6c (108) [463] : 0x00 (0) [464] : 0x6c (108) [465] : 0x00 (0) [466] : 0x00 (0) [467] : 0x00 (0) [468] : 0x68 (104) [469] : 0x00 (0) [470] : 0x70 (112) [471] : 0x00 (0) [472] : 0x7a (122) [473] : 0x00 (0) [474] : 0x68 (104) [475] : 0x00 (0) [476] : 0x6c (108) [477] : 0x00 (0) [478] : 0x35 (53) [479] : 0x00 (0) [480] : 0x6d (109) [481] : 0x00 (0) [482] : 0x75 (117) [483] : 0x00 (0) [484] : 0x2e (46) [485] : 0x00 (0) [486] : 0x63 (99) [487] : 0x00 (0) [488] : 0x61 (97) [489] : 0x00 (0) [490] : 0x62 (98) [491] : 0x00 (0) [492] : 0x00 (0) [493] : 0x00 (0) [494] : 0x55 (85) [495] : 0x00 (0) [496] : 0x4e (78) [497] : 0x00 (0) [498] : 0x49 (73) [499] : 0x00 (0) [500] : 0x52 (82) [501] : 0x00 (0) [502] : 0x45 (69) [503] : 0x00 (0) [504] : 0x53 (83) [505] : 0x00 (0) [506] : 0x2e (46) [507] : 0x00 (0) [508] : 0x44 (68) [509] : 0x00 (0) [510] : 0x4c (76) [511] : 0x00 (0) [512] : 0x4c (76) [513] : 0x00 (0) [514] : 0x00 (0) [515] : 0x00 (0) [516] : 0x53 (83) [517] : 0x00 (0) [518] : 0x54 (84) [519] : 0x00 (0) [520] : 0x44 (68) [521] : 0x00 (0) [522] : 0x4e (78) [523] : 0x00 (0) [524] : 0x41 (65) [525] : 0x00 (0) [526] : 0x4d (77) [527] : 0x00 (0) [528] : 0x45 (69) [529] : 0x00 (0) [530] : 0x53 (83) [531] : 0x00 (0) [532] : 0x2e (46) [533] : 0x00 (0) [534] : 0x47 (71) [535] : 0x00 (0) [536] : 0x50 (80) [537] : 0x00 (0) [538] : 0x44 (68) [539] : 0x00 (0) [540] : 0x00 (0) [541] : 0x00 (0) [542] : 0x68 (104) [543] : 0x00 (0) [544] : 0x70 (112) [545] : 0x00 (0) [546] : 0x66 (102) [547] : 0x00 (0) [548] : 0x69 (105) [549] : 0x00 (0) [550] : 0x65 (101) [551] : 0x00 (0) [552] : 0x35 (53) [553] : 0x00 (0) [554] : 0x6d (109) [555] : 0x00 (0) [556] : 0x75 (117) [557] : 0x00 (0) [558] : 0x2e (46) [559] : 0x00 (0) [560] : 0x64 (100) [561] : 0x00 (0) [562] : 0x6c (108) [563] : 0x00 (0) [564] : 0x6c (108) [565] : 0x00 (0) [566] : 0x00 (0) [567] : 0x00 (0) [568] : 0x68 (104) [569] : 0x00 (0) [570] : 0x70 (112) [571] : 0x00 (0) [572] : 0x66 (102) [573] : 0x00 (0) [574] : 0x69 (105) [575] : 0x00 (0) [576] : 0x67 (103) [577] : 0x00 (0) [578] : 0x35 (53) [579] : 0x00 (0) [580] : 0x6d (109) [581] : 0x00 (0) [582] : 0x75 (117) [583] : 0x00 (0) [584] : 0x2e (46) [585] : 0x00 (0) [586] : 0x64 (100) [587] : 0x00 (0) [588] : 0x6c (108) [589] : 0x00 (0) [590] : 0x6c (108) [591] : 0x00 (0) [592] : 0x00 (0) [593] : 0x00 (0) [594] : 0x68 (104) [595] : 0x00 (0) [596] : 0x70 (112) [597] : 0x00 (0) [598] : 0x66 (102) [599] : 0x00 (0) [600] : 0x72 (114) [601] : 0x00 (0) [602] : 0x73 (115) [603] : 0x00 (0) [604] : 0x35 (53) [605] : 0x00 (0) [606] : 0x6d (109) [607] : 0x00 (0) [608] : 0x75 (117) [609] : 0x00 (0) [610] : 0x2e (46) [611] : 0x00 (0) [612] : 0x64 (100) [613] : 0x00 (0) [614] : 0x6c (108) [615] : 0x00 (0) [616] : 0x6c (108) [617] : 0x00 (0) [618] : 0x00 (0) [619] : 0x00 (0) [620] : 0x68 (104) [621] : 0x00 (0) [622] : 0x70 (112) [623] : 0x00 (0) [624] : 0x7a (122) [625] : 0x00 (0) [626] : 0x6c (108) [627] : 0x00 (0) [628] : 0x61 (97) [629] : 0x00 (0) [630] : 0x35 (53) [631] : 0x00 (0) [632] : 0x6d (109) [633] : 0x00 (0) [634] : 0x75 (117) [635] : 0x00 (0) [636] : 0x2e (46) [637] : 0x00 (0) [638] : 0x64 (100) [639] : 0x00 (0) [640] : 0x6c (108) [641] : 0x00 (0) [642] : 0x6c (108) [643] : 0x00 (0) [644] : 0x00 (0) [645] : 0x00 (0) [646] : 0x68 (104) [647] : 0x00 (0) [648] : 0x70 (112) [649] : 0x00 (0) [650] : 0x7a (122) [651] : 0x00 (0) [652] : 0x73 (115) [653] : 0x00 (0) [654] : 0x73 (115) [655] : 0x00 (0) [656] : 0x35 (53) [657] : 0x00 (0) [658] : 0x6d (109) [659] : 0x00 (0) [660] : 0x75 (117) [661] : 0x00 (0) [662] : 0x2e (46) [663] : 0x00 (0) [664] : 0x64 (100) [665] : 0x00 (0) [666] : 0x6c (108) [667] : 0x00 (0) [668] : 0x6c (108) [669] : 0x00 (0) [670] : 0x00 (0) [671] : 0x00 (0) [672] : 0x68 (104) [673] : 0x00 (0) [674] : 0x70 (112) [675] : 0x00 (0) [676] : 0x7a (122) [677] : 0x00 (0) [678] : 0x63 (99) [679] : 0x00 (0) [680] : 0x33 (51) [681] : 0x00 (0) [682] : 0x35 (53) [683] : 0x00 (0) [684] : 0x6d (109) [685] : 0x00 (0) [686] : 0x75 (117) [687] : 0x00 (0) [688] : 0x2e (46) [689] : 0x00 (0) [690] : 0x64 (100) [691] : 0x00 (0) [692] : 0x6c (108) [693] : 0x00 (0) [694] : 0x6c (108) [695] : 0x00 (0) [696] : 0x00 (0) [697] : 0x00 (0) [698] : 0x68 (104) [699] : 0x00 (0) [700] : 0x70 (112) [701] : 0x00 (0) [702] : 0x75 (117) [703] : 0x00 (0) [704] : 0x61 (97) [705] : 0x00 (0) [706] : 0x63 (99) [707] : 0x00 (0) [708] : 0x35 (53) [709] : 0x00 (0) [710] : 0x6d (109) [711] : 0x00 (0) [712] : 0x75 (117) [713] : 0x00 (0) [714] : 0x2e (46) [715] : 0x00 (0) [716] : 0x64 (100) [717] : 0x00 (0) [718] : 0x6c (108) [719] : 0x00 (0) [720] : 0x6c (108) [721] : 0x00 (0) [722] : 0x00 (0) [723] : 0x00 (0) [724] : 0x00 (0) [725] : 0x00 (0) size : * size : 0x000002d6 (726) length : * length : 0x000002d6 (726) result : WERR_OK [2013/05/23 17:29:04.306997, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000006 (6) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.309697, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.309829, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.309904, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'Monitor' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.310426, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000007 (7) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.310966, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.311082, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.311187, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0012 (18) size : 0x0034 (52) name : * name : 'Datatype' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.311661, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000008 (8) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.317055, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.317239, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.317337, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001e (30) size : 0x0034 (52) name : * name : 'Previous Names' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:04.317883, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000009 (9) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.318440, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.318559, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.318621, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0016 (22) size : 0x0034 (52) name : * name : 'DriverDate' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x31 (49) [1] : 0x00 (0) [2] : 0x30 (48) [3] : 0x00 (0) [4] : 0x2f (47) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x30 (48) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x32 (50) [13] : 0x00 (0) [14] : 0x30 (48) [15] : 0x00 (0) [16] : 0x30 (48) [17] : 0x00 (0) [18] : 0x37 (55) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:04.319625, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x0000000a (10) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.324268, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.324426, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.324494, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001c (28) size : 0x0034 (52) name : * name : 'DriverVersion' type : * type : REG_SZ (1) value : * value: ARRAY(24) [0] : 0x36 (54) [1] : 0x00 (0) [2] : 0x31 (49) [3] : 0x00 (0) [4] : 0x2e (46) [5] : 0x00 (0) [6] : 0x37 (55) [7] : 0x00 (0) [8] : 0x33 (51) [9] : 0x00 (0) [10] : 0x2e (46) [11] : 0x00 (0) [12] : 0x32 (50) [13] : 0x00 (0) [14] : 0x34 (52) [15] : 0x00 (0) [16] : 0x31 (49) [17] : 0x00 (0) [18] : 0x2e (46) [19] : 0x00 (0) [20] : 0x30 (48) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : * size : 0x00000018 (24) length : * length : 0x00000018 (24) result : WERR_OK [2013/05/23 17:29:04.325600, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x0000000b (11) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.326163, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.326284, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.326346, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001a (26) size : 0x0034 (52) name : * name : 'Manufacturer' type : * type : REG_SZ (1) value : * value: ARRAY(32) [0] : 0x48 (72) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x77 (119) [5] : 0x00 (0) [6] : 0x6c (108) [7] : 0x00 (0) [8] : 0x65 (101) [9] : 0x00 (0) [10] : 0x74 (116) [11] : 0x00 (0) [12] : 0x74 (116) [13] : 0x00 (0) [14] : 0x2d (45) [15] : 0x00 (0) [16] : 0x50 (80) [17] : 0x00 (0) [18] : 0x61 (97) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x6b (107) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x64 (100) [29] : 0x00 (0) [30] : 0x00 (0) [31] : 0x00 (0) size : * size : 0x00000020 (32) length : * length : 0x00000020 (32) result : WERR_OK [2013/05/23 17:29:04.327586, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x0000000c (12) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.332047, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.332248, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.332320, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'OEM URL' type : * type : REG_SZ (1) value : * value: ARRAY(130) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x74 (116) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x70 (112) [7] : 0x00 (0) [8] : 0x3a (58) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x2f (47) [13] : 0x00 (0) [14] : 0x67 (103) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x2e (46) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x69 (105) [23] : 0x00 (0) [24] : 0x63 (99) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x6f (111) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x6f (111) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x74 (116) [37] : 0x00 (0) [38] : 0x2e (46) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x6f (111) [43] : 0x00 (0) [44] : 0x6d (109) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x66 (102) [49] : 0x00 (0) [50] : 0x77 (119) [51] : 0x00 (0) [52] : 0x6c (108) [53] : 0x00 (0) [54] : 0x69 (105) [55] : 0x00 (0) [56] : 0x6e (110) [57] : 0x00 (0) [58] : 0x6b (107) [59] : 0x00 (0) [60] : 0x2f (47) [61] : 0x00 (0) [62] : 0x3f (63) [63] : 0x00 (0) [64] : 0x4c (76) [65] : 0x00 (0) [66] : 0x69 (105) [67] : 0x00 (0) [68] : 0x6e (110) [69] : 0x00 (0) [70] : 0x6b (107) [71] : 0x00 (0) [72] : 0x49 (73) [73] : 0x00 (0) [74] : 0x44 (68) [75] : 0x00 (0) [76] : 0x3d (61) [77] : 0x00 (0) [78] : 0x33 (51) [79] : 0x00 (0) [80] : 0x37 (55) [81] : 0x00 (0) [82] : 0x26 (38) [83] : 0x00 (0) [84] : 0x70 (112) [85] : 0x00 (0) [86] : 0x72 (114) [87] : 0x00 (0) [88] : 0x64 (100) [89] : 0x00 (0) [90] : 0x3d (61) [91] : 0x00 (0) [92] : 0x31 (49) [93] : 0x00 (0) [94] : 0x30 (48) [95] : 0x00 (0) [96] : 0x37 (55) [97] : 0x00 (0) [98] : 0x39 (57) [99] : 0x00 (0) [100] : 0x38 (56) [101] : 0x00 (0) [102] : 0x26 (38) [103] : 0x00 (0) [104] : 0x73 (115) [105] : 0x00 (0) [106] : 0x62 (98) [107] : 0x00 (0) [108] : 0x70 (112) [109] : 0x00 (0) [110] : 0x3d (61) [111] : 0x00 (0) [112] : 0x50 (80) [113] : 0x00 (0) [114] : 0x72 (114) [115] : 0x00 (0) [116] : 0x69 (105) [117] : 0x00 (0) [118] : 0x6e (110) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x73 (115) [127] : 0x00 (0) [128] : 0x00 (0) [129] : 0x00 (0) size : * size : 0x00000082 (130) length : * length : 0x00000082 (130) result : WERR_OK [2013/05/23 17:29:04.348403, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x0000000d (13) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.348949, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.349069, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.349178, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0016 (22) size : 0x0034 (52) name : * name : 'HardwareID' type : * type : REG_SZ (1) value : * value: ARRAY(68) [0] : 0x75 (117) [1] : 0x00 (0) [2] : 0x73 (115) [3] : 0x00 (0) [4] : 0x62 (98) [5] : 0x00 (0) [6] : 0x70 (112) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x69 (105) [11] : 0x00 (0) [12] : 0x6e (110) [13] : 0x00 (0) [14] : 0x74 (116) [15] : 0x00 (0) [16] : 0x5c (92) [17] : 0x00 (0) [18] : 0x68 (104) [19] : 0x00 (0) [20] : 0x70 (112) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x65 (101) [25] : 0x00 (0) [26] : 0x73 (115) [27] : 0x00 (0) [28] : 0x6b (107) [29] : 0x00 (0) [30] : 0x6a (106) [31] : 0x00 (0) [32] : 0x65 (101) [33] : 0x00 (0) [34] : 0x74 (116) [35] : 0x00 (0) [36] : 0x5f (95) [37] : 0x00 (0) [38] : 0x66 (102) [39] : 0x00 (0) [40] : 0x32 (50) [41] : 0x00 (0) [42] : 0x32 (50) [43] : 0x00 (0) [44] : 0x30 (48) [45] : 0x00 (0) [46] : 0x30 (48) [47] : 0x00 (0) [48] : 0x5f (95) [49] : 0x00 (0) [50] : 0x73 (115) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x69 (105) [57] : 0x00 (0) [58] : 0x38 (56) [59] : 0x00 (0) [60] : 0x37 (55) [61] : 0x00 (0) [62] : 0x63 (99) [63] : 0x00 (0) [64] : 0x37 (55) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) size : * size : 0x00000044 (68) length : * length : 0x00000044 (68) result : WERR_OK [2013/05/23 17:29:04.351332, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x0000000e (14) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.351891, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.352010, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.352074, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0012 (18) size : 0x0034 (52) name : * name : 'Provider' type : * type : REG_SZ (1) value : * value: ARRAY(32) [0] : 0x48 (72) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x77 (119) [5] : 0x00 (0) [6] : 0x6c (108) [7] : 0x00 (0) [8] : 0x65 (101) [9] : 0x00 (0) [10] : 0x74 (116) [11] : 0x00 (0) [12] : 0x74 (116) [13] : 0x00 (0) [14] : 0x2d (45) [15] : 0x00 (0) [16] : 0x50 (80) [17] : 0x00 (0) [18] : 0x61 (97) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x6b (107) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x64 (100) [29] : 0x00 (0) [30] : 0x00 (0) [31] : 0x00 (0) size : * size : 0x00000020 (32) length : * length : 0x00000020 (32) result : WERR_OK [2013/05/23 17:29:04.353316, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x0000000f (15) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.353852, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.353973, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.354033, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0020 (32) size : 0x0034 (52) name : * name : 'Print Processor' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.355497, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000010 (16) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.356054, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.356278, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.356371, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0018 (24) size : 0x0034 (52) name : * name : 'VendorSetup' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.356870, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000011 (17) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.357425, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.357542, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.357602, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001e (30) size : 0x0034 (52) name : * name : 'Color Profiles' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:04.358143, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000012 (18) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.358686, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.358802, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.358862, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'InfPath' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.359355, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000013 (19) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.359874, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.360006, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.360067, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0030 (48) size : 0x0034 (52) name : * name : 'PrinterDriverAttributes' type : * type : REG_DWORD (4) value : * value: ARRAY(4) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : * size : 0x00000004 (4) length : * length : 0x00000004 (4) result : WERR_OK [2013/05/23 17:29:04.360790, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000014 (20) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.361442, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.361568, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.361634, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0022 (34) size : 0x0034 (52) name : * name : 'CoreDependencies' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:04.362213, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000015 (21) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.363072, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.363292, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.363364, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x002c (44) size : 0x0034 (52) name : * name : 'MinInboxDriverVerDate' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x30 (48) [1] : 0x00 (0) [2] : 0x31 (49) [3] : 0x00 (0) [4] : 0x2f (47) [5] : 0x00 (0) [6] : 0x30 (48) [7] : 0x00 (0) [8] : 0x31 (49) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x31 (49) [13] : 0x00 (0) [14] : 0x36 (54) [15] : 0x00 (0) [16] : 0x30 (48) [17] : 0x00 (0) [18] : 0x31 (49) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:04.364490, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 enum_index : 0x00000016 (22) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.365022, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.365170, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.365236, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0032 (50) size : 0x0034 (52) name : * name : 'MinInboxDriverVerVersion' type : * type : REG_SZ (1) value : * value: ARRAY(16) [0] : 0x30 (48) [1] : 0x00 (0) [2] : 0x2e (46) [3] : 0x00 (0) [4] : 0x30 (48) [5] : 0x00 (0) [6] : 0x2e (46) [7] : 0x00 (0) [8] : 0x30 (48) [9] : 0x00 (0) [10] : 0x2e (46) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) size : * size : 0x00000010 (16) length : * length : 0x00000010 (16) result : WERR_OK [2013/05/23 17:29:04.366463, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000098-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.366705, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.366822, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 98 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.366930, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.366994, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.367046, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.367329, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000097-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.367519, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 97 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.367632, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 97 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.367739, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.367789, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.367868, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.368354, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:04.368570, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000950 (2384) result : WERR_INSUFFICIENT_BUFFER [2013/05/23 17:29:04.368830, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:04.368918, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:04.368975, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1124 [2013/05/23 17:29:04.369061, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:04.369187, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:04.369271, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x00000055 (85) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 50 09 00 00 00 00 00 00 ........ P....... [0410] 7A 00 00 00 z... [2013/05/23 17:29:04.374011, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 5821 [2013/05/23 17:29:04.374210, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:04.374292, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:04.374346, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.374376, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18305 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:04.374739, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 55 00 00 ........ .,...U.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.380229, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 2584 [2013/05/23 17:29:04.380417, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0xa18 [2013/05/23 17:29:04.380481, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8113 of length 2588 (0 toread) [2013/05/23 17:29:04.380530, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.380559, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=2584 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18369 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2500 (0x9C4) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 2500 (0x9C4) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=2517 [2013/05/23 17:29:04.381853, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 C4 09 00 00 56 00 00 ........ .....V.. [0020] 00 AC 09 00 00 00 00 0A 00 00 00 02 00 06 00 00 ........ ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0F 00 00 00 00 00 00 .1...... ........ [0050] 00 0F 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 78 00 38 00 36 .s. .N.T . .x.8.6 [0070] 00 00 00 02 00 03 00 00 00 08 00 02 00 50 09 00 ........ .....P.. [0080] 00 B0 83 84 02 C0 2F 84 02 06 00 02 00 16 01 08 ....../. ........ [0090] 01 00 00 00 00 9C F5 45 02 73 74 72 67 D0 70 84 .......E .strg.p. [00A0] 02 73 74 72 67 A0 3F 84 02 73 74 72 67 E8 70 84 .strg.?. .strg.p. [00B0] 02 0C 00 00 00 00 00 00 00 94 00 08 00 1C 00 0C ........ ........ [00C0] 01 C0 2F 84 02 B0 7E 84 02 61 00 00 00 00 00 00 ../...~. .a...... [00D0] 00 91 00 03 00 19 00 0A 01 C0 2F 84 02 B0 7E 84 ........ ../...~. [00E0] 02 8F 00 02 00 1B 00 08 01 C0 2F 84 02 B0 7E 84 ........ ../...~. [00F0] 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 44 04 01 50 00 08 01 C0 00 00 00 .....D.. P....... [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 62 00 00 00 BE 00 00 00 53 02 00 00 F7 01 00 .b...... .S...... [01B0] 00 62 00 00 00 BE 00 00 00 53 02 00 00 F7 01 00 .b...... .S...... [01C0] 00 62 00 00 00 BE 00 00 00 53 02 00 00 F7 01 00 .b...... .S...... [01D0] 00 62 00 00 00 BE 00 00 00 53 02 00 00 F7 01 00 .b...... .S...... [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.383354, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:04.383436, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:04.383513, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=2500 params=0 setup=2 [2013/05/23 17:29:04.383573, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:04.383618, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:04.383664, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:04.383712, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:04.383763, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:04.383813, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 2500 [2013/05/23 17:29:04.383863, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 2500 [2013/05/23 17:29:04.383909, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 2500 [2013/05/23 17:29:04.383956, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 2500, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:04.384004, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:04.384048, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 2484 [2013/05/23 17:29:04.384126, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 2484 [2013/05/23 17:29:04.384187, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:04.384233, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 2484 [2013/05/23 17:29:04.384278, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 2484, incoming data = 2484 [2013/05/23 17:29:04.384330, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:04.384396, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x09c4 (2500) auth_length : 0x0000 (0) call_id : 0x00000056 (86) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x000009ac (2476) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=2476 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0F 00 00 00 00 00 00 00 0F 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 78 00 38 00 36 00 00 00 02 00 03 00 00 00 .x.8.6. ........ [0050] 08 00 02 00 50 09 00 00 B0 83 84 02 C0 2F 84 02 ....P... ...../.. [0060] 06 00 02 00 16 01 08 01 00 00 00 00 9C F5 45 02 ........ ......E. [0070] 73 74 72 67 D0 70 84 02 73 74 72 67 A0 3F 84 02 strg.p.. strg.?.. [0080] 73 74 72 67 E8 70 84 02 0C 00 00 00 00 00 00 00 strg.p.. ........ [0090] 94 00 08 00 1C 00 0C 01 C0 2F 84 02 B0 7E 84 02 ........ ./...~.. [00A0] 61 00 00 00 00 00 00 00 91 00 03 00 19 00 0A 01 a....... ........ [00B0] C0 2F 84 02 B0 7E 84 02 8F 00 02 00 1B 00 08 01 ./...~.. ........ [00C0] C0 2F 84 02 B0 7E 84 02 00 00 00 00 00 00 00 00 ./...~.. ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 44 04 01 50 ........ ....D..P [0100] 00 08 01 C0 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 62 00 00 00 BE 00 00 00 ........ b....... [0180] 53 02 00 00 F7 01 00 00 62 00 00 00 BE 00 00 00 S....... b....... [0190] 53 02 00 00 F7 01 00 00 62 00 00 00 BE 00 00 00 S....... b....... [01A0] 53 02 00 00 F7 01 00 00 62 00 00 00 BE 00 00 00 S....... b....... [01B0] 53 02 00 00 F7 01 00 00 00 00 00 00 00 00 00 00 S....... ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] F1 01 00 00 39 01 00 00 00 00 00 00 00 00 00 00 ....9... ........ [0320] F1 01 00 00 39 01 00 00 00 00 00 00 00 00 00 00 ....9... ........ [0330] F1 01 00 00 39 01 00 00 00 00 00 00 00 00 00 00 ....9... ........ [0340] F1 01 00 00 39 01 00 00 9E FF FF FF 42 FF FF FF ....9... ....B... [0350] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0360] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0370] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0380] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0390] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03A0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03B0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03C0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03D0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03E0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03F0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0400] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0410] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0420] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0430] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0440] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0450] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0460] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0470] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0480] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0490] 9E FF FF FF 42 FF FF FF 00 00 00 00 00 00 00 00 ....B... ........ [04A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04E0] 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04F0] 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF ........ ........ [0500] FE FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0510] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0520] 00 00 00 00 00 00 00 00 00 00 00 00 65 6E 64 00 ........ ....end. [0530] 8F 00 9C 00 A8 01 08 01 74 68 65 6D 65 77 6E 64 ........ themewnd [0540] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0550] 00 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 ........ ........ [0560] 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 C0 04 00 01 04 00 00 00 00 00 ........ ........ [0580] 02 00 00 00 01 00 00 00 07 00 00 00 08 00 00 00 ........ ........ [0590] 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05A0] 00 00 00 00 02 00 00 00 77 04 0A 05 D8 E4 F8 00 ........ w....... [05B0] 00 00 00 00 00 00 00 00 07 00 00 00 06 00 00 00 ........ ........ [05C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [05E0] 03 00 00 00 03 00 00 00 1D 00 00 00 03 00 00 00 ........ ........ [05F0] 42 00 00 00 57 00 00 00 BD 00 00 00 79 00 00 00 B...W... ....y... [0600] 45 00 00 00 74 00 00 00 BA 00 00 00 76 00 00 00 E...t... ....v... [0610] 45 00 00 00 74 00 00 00 BA 00 00 00 76 00 00 00 E...t... ....v... [0620] 45 00 00 00 74 00 00 00 BA 00 00 00 76 00 00 00 E...t... ....v... [0630] 45 00 00 00 74 00 00 00 BA 00 00 00 74 00 00 00 E...t... ....t... [0640] 42 00 00 00 57 00 00 00 BD 00 00 00 74 00 00 00 B...W... ....t... [0650] 42 00 00 00 74 00 00 00 45 00 00 00 76 00 00 00 B...t... E...v... [0660] BA 00 00 00 74 00 00 00 BD 00 00 00 76 00 00 00 ....t... ....v... [0670] 42 00 00 00 76 00 00 00 BD 00 00 00 79 00 00 00 B...v... ....y... [0680] 49 00 00 00 67 00 00 00 B7 00 00 00 67 00 00 00 I...g... ....g... [0690] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0700] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0710] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0720] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0730] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0740] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0750] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0760] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0770] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0780] 00 00 00 00 00 00 00 00 7B 00 00 00 22 00 00 00 ........ {..."... [0790] 03 00 00 00 1D 00 00 00 78 00 00 00 1F 00 00 00 ........ x....... [07A0] 03 00 00 00 1D 00 00 00 78 00 00 00 1F 00 00 00 ........ x....... [07B0] 03 00 00 00 1D 00 00 00 78 00 00 00 1F 00 00 00 ........ x....... [07C0] 03 00 00 00 1D 00 00 00 78 00 00 00 1D 00 00 00 ........ x....... [07D0] 00 00 00 00 00 00 00 00 7B 00 00 00 1D 00 00 00 ........ {....... [07E0] 00 00 00 00 1D 00 00 00 03 00 00 00 1F 00 00 00 ........ ........ [07F0] 78 00 00 00 1D 00 00 00 7B 00 00 00 1F 00 00 00 x....... {....... [0800] 00 00 00 00 1F 00 00 00 7B 00 00 00 22 00 00 00 ........ {..."... [0810] 07 00 00 00 10 00 00 00 75 00 00 00 10 00 00 00 ........ u....... [0820] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0830] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0840] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0850] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0860] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0870] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0880] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0890] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [08A0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [08B0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [08C0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [08D0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [08E0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [08F0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0900] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0910] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0920] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0930] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0940] 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ........ [0950] 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ........ [0960] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0970] 7B 00 00 00 22 00 00 00 FE FF FF FF 00 00 00 00 {..."... ........ [0980] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0990] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [09A0] 00 00 00 00 65 6E 64 00 50 09 00 00 ....end. P... [2013/05/23 17:29:04.394536, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:04.394604, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:04.394664, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.394723, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.394775, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:04.395632, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:04.395935, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:04.396132, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:04.396212, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:04.396301, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT x86' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=2384 [0000] B0 83 84 02 C0 2F 84 02 06 00 02 00 16 01 08 01 ...../.. ........ [0010] 00 00 00 00 9C F5 45 02 73 74 72 67 D0 70 84 02 ......E. strg.p.. [0020] 73 74 72 67 A0 3F 84 02 73 74 72 67 E8 70 84 02 strg.?.. strg.p.. [0030] 0C 00 00 00 00 00 00 00 94 00 08 00 1C 00 0C 01 ........ ........ [0040] C0 2F 84 02 B0 7E 84 02 61 00 00 00 00 00 00 00 ./...~.. a....... [0050] 91 00 03 00 19 00 0A 01 C0 2F 84 02 B0 7E 84 02 ........ ./...~.. [0060] 8F 00 02 00 1B 00 08 01 C0 2F 84 02 B0 7E 84 02 ........ ./...~.. [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 44 04 01 50 00 08 01 C0 00 00 00 00 ....D..P ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 62 00 00 00 BE 00 00 00 53 02 00 00 F7 01 00 00 b....... S....... [0130] 62 00 00 00 BE 00 00 00 53 02 00 00 F7 01 00 00 b....... S....... [0140] 62 00 00 00 BE 00 00 00 53 02 00 00 F7 01 00 00 b....... S....... [0150] 62 00 00 00 BE 00 00 00 53 02 00 00 F7 01 00 00 b....... S....... [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 F1 01 00 00 39 01 00 00 ........ ....9... [02C0] 00 00 00 00 00 00 00 00 F1 01 00 00 39 01 00 00 ........ ....9... [02D0] 00 00 00 00 00 00 00 00 F1 01 00 00 39 01 00 00 ........ ....9... [02E0] 00 00 00 00 00 00 00 00 F1 01 00 00 39 01 00 00 ........ ....9... [02F0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0300] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0310] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0320] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0330] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0340] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0350] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0360] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0370] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0380] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0390] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03A0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03B0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03C0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03D0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03E0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [03F0] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0400] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0410] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0420] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0430] 9E FF FF FF 42 FF FF FF 9E FF FF FF 42 FF FF FF ....B... ....B... [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0460] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0470] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0480] 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ........ [0490] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04A0] FF FF FF FF FF FF FF FF FE FF FF FF 00 00 00 00 ........ ........ [04B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [04D0] 00 00 00 00 65 6E 64 00 8F 00 9C 00 A8 01 08 01 ....end. ........ [04E0] 74 68 65 6D 65 77 6E 64 00 00 00 00 00 00 00 00 themewnd ........ [04F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0500] 02 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 ........ ........ [0510] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C0 04 ........ ........ [0520] 00 01 04 00 00 00 00 00 02 00 00 00 01 00 00 00 ........ ........ [0530] 07 00 00 00 08 00 00 00 09 00 00 00 00 00 00 00 ........ ........ [0540] 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 ........ ........ [0550] 77 04 0A 05 D8 E4 F8 00 00 00 00 00 00 00 00 00 w....... ........ [0560] 07 00 00 00 06 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0570] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0580] 00 00 00 00 00 00 00 00 03 00 00 00 03 00 00 00 ........ ........ [0590] 1D 00 00 00 03 00 00 00 42 00 00 00 57 00 00 00 ........ B...W... [05A0] BD 00 00 00 79 00 00 00 45 00 00 00 74 00 00 00 ....y... E...t... [05B0] BA 00 00 00 76 00 00 00 45 00 00 00 74 00 00 00 ....v... E...t... [05C0] BA 00 00 00 76 00 00 00 45 00 00 00 74 00 00 00 ....v... E...t... [05D0] BA 00 00 00 76 00 00 00 45 00 00 00 74 00 00 00 ....v... E...t... [05E0] BA 00 00 00 74 00 00 00 42 00 00 00 57 00 00 00 ....t... B...W... [05F0] BD 00 00 00 74 00 00 00 42 00 00 00 74 00 00 00 ....t... B...t... [0600] 45 00 00 00 76 00 00 00 BA 00 00 00 74 00 00 00 E...v... ....t... [0610] BD 00 00 00 76 00 00 00 42 00 00 00 76 00 00 00 ....v... B...v... [0620] BD 00 00 00 79 00 00 00 49 00 00 00 67 00 00 00 ....y... I...g... [0630] B7 00 00 00 67 00 00 00 00 00 00 00 00 00 00 00 ....g... ........ [0640] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0650] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0660] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0670] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0680] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0690] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [06F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0700] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0710] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0720] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0730] 7B 00 00 00 22 00 00 00 03 00 00 00 1D 00 00 00 {..."... ........ [0740] 78 00 00 00 1F 00 00 00 03 00 00 00 1D 00 00 00 x....... ........ [0750] 78 00 00 00 1F 00 00 00 03 00 00 00 1D 00 00 00 x....... ........ [0760] 78 00 00 00 1F 00 00 00 03 00 00 00 1D 00 00 00 x....... ........ [0770] 78 00 00 00 1D 00 00 00 00 00 00 00 00 00 00 00 x....... ........ [0780] 7B 00 00 00 1D 00 00 00 00 00 00 00 1D 00 00 00 {....... ........ [0790] 03 00 00 00 1F 00 00 00 78 00 00 00 1D 00 00 00 ........ x....... [07A0] 7B 00 00 00 1F 00 00 00 00 00 00 00 1F 00 00 00 {....... ........ [07B0] 7B 00 00 00 22 00 00 00 07 00 00 00 10 00 00 00 {..."... ........ [07C0] 75 00 00 00 10 00 00 00 BE FF FF FF A9 FF FF FF u....... ........ [07D0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [07E0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [07F0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0800] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0810] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0820] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0830] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0840] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0850] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0860] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0870] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0880] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [0890] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [08A0] BE FF FF FF A9 FF FF FF BE FF FF FF A9 FF FF FF ........ ........ [08B0] BE FF FF FF A9 FF FF FF 00 00 00 00 00 00 00 00 ........ ........ [08C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [08E0] 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ........ ........ [08F0] 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0900] 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0910] 00 00 00 00 00 00 00 00 7B 00 00 00 22 00 00 00 ........ {..."... [0920] FE FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0930] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0940] 00 00 00 00 00 00 00 00 00 00 00 00 65 6E 64 00 ........ ....end. offered : 0x00000950 (2384) [2013/05/23 17:29:04.405653, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:04.405755, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:04.405817, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:04.405868, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:04.406010, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:04.406144, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.406444, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.406500, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.406557, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.406685, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.406745, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.406792, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.407259, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.407362, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.407422, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.407471, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.407522, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.407568, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.407687, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 99 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.407842, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000099-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.408175, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000099-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.408800, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 99 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.408934, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.408987, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.409041, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.409128, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.409193, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.409240, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.409346, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.409412, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.409481, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.409532, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.409584, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.409629, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.409731, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.409796, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.409851, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.409899, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.409951, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.409996, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.410158, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.410251, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.410307, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.410357, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.410412, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.410457, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.410580, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.410644, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.410699, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.410747, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.410801, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.410862, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.410959, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.411020, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.411077, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.411169, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.411226, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.411272, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.411387, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.411452, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.411509, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.411559, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.411614, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.411742, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.411863, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-0] [2013/05/23 17:29:04.411929, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.411986, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:04.412036, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:04.412124, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.412178, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] [2013/05/23 17:29:04.412271, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-0] not found [2013/05/23 17:29:04.412331, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.412384, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.412435, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.412485, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.412536, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.412586, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.412733, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.412792, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.412845, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.413137, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000099-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.413346, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 99 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.413465, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 99 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.413577, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.413626, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.413700, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.413948, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,0): WERR_BADFILE [2013/05/23 17:29:04.414018, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [0] [2013/05/23 17:29:04.414152, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.414456, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.414511, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.414568, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.414702, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.414771, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.414817, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.415023, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.415163, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.415230, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.415279, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.415329, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.415415, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.415562, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 9A 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.415700, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009a-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.416002, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009a-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.416662, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9A 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.416879, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.417218, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.417284, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.417334, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.417389, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.417434, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.417545, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.417611, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.417667, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.417717, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.417787, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.417834, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.417939, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.418003, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.418058, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.418178, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.418243, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.418291, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.418413, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.418479, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.418536, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.418586, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.418641, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.418686, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.418801, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.418862, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.418917, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.418967, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.419022, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.419068, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.419221, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.419320, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.419378, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.419428, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.419486, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.419532, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.419645, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.419709, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.419765, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.419814, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.419869, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.419914, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.420005, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-1] [2013/05/23 17:29:04.420065, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.420172, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:04.420227, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:04.420284, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.420421, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] [2013/05/23 17:29:04.420524, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-1] not found [2013/05/23 17:29:04.420602, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.420656, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.420708, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.420759, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.420811, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.420862, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.420911, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.420961, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.421012, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.421342, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009a-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.421543, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9A 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.421658, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9A 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.421842, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.421905, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.421980, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.422281, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,1): WERR_BADFILE [2013/05/23 17:29:04.422360, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [1] [2013/05/23 17:29:04.422438, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.422716, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.422770, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.422827, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.422876, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.422923, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.422968, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.423225, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.423325, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.423384, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.423433, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.423483, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.423528, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.423644, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 9B 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.423778, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009b-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.424071, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009b-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.424747, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9B 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.424875, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.424927, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.424981, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.425029, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.425081, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.425193, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.425305, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.425419, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.425496, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.425547, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.425601, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.425646, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.425779, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.425848, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.425902, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.425951, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.426003, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.426048, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.426232, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.426320, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.426378, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.426426, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.426482, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.426527, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.426644, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.426707, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.426761, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.426900, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.427226, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.427289, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.427404, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.427469, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.427541, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.427594, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.427649, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.427695, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.427806, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.427871, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.427927, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.427977, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.428032, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.428077, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.428241, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-2] [2013/05/23 17:29:04.428311, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.428368, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:04.428419, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:04.428476, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.428522, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] [2013/05/23 17:29:04.428596, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-2] not found [2013/05/23 17:29:04.428654, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.428705, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.428772, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.428823, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.428874, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.428925, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.428974, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.429024, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.429074, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.429465, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009b-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.429665, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9B 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.429793, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9B 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.429901, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.429950, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.430026, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.430306, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT x86,2): WERR_BADFILE [2013/05/23 17:29:04.430380, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT x86] and version [2] [2013/05/23 17:29:04.430477, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.430757, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.430812, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.430868, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.430917, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.430963, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.431007, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.431273, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.431370, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.431429, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.431477, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.431528, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.431573, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.431689, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 9C 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.431821, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009c-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.432236, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009c-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00aa (170) name_size : 0x00aa (170) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.432868, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9C 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.432995, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.433046, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.433167, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.433235, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.433291, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.433336, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.433444, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.433510, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.433563, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.433611, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.433663, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.433708, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.433805, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.433867, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.433937, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.433986, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.434039, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.434084, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.434281, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.434352, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.434409, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.434456, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.434511, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.434555, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.434669, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.434730, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.434784, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.434832, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.434896, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.434943, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.435034, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.435137, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.435208, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.435258, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.435331, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.435424, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.435570, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.435640, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.435697, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.435747, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.435805, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.435850, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.435942, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-3] [2013/05/23 17:29:04.436001, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.436056, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.436160, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.436223, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.436268, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.436376, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.436439, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.436490, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.436540, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.436591, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.436657, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.436707, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.436763, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 9D 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.437910, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009d-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.438333, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009d-0000-0000-9e51-c03564090000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2013/05/23 17:29:04.438645, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9D 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.438769, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3' (ops 0xb697a420) [2013/05/23 17:29:04.438823, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.438921, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.439015, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000001 (1) max_subkeylen : * max_subkeylen : 0x0000002e (46) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:04.439680, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009d-0000-0000-9e51-c03564090000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x0030 (48) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2013/05/23 17:29:04.440235, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9D 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.440457, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:421(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.440533, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0030 (48) size : 0x0030 (48) name : * name : 'HP Deskjet F2200 series' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:04.441021, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009d-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.441264, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9D 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.441397, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9D 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.441508, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.441557, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.441606, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.441839, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009c-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.442132, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9C 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.442264, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9C 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.442376, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.442426, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.442500, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.442732, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[1] drivers in environment [Windows NT x86] and version [3] [2013/05/23 17:29:04.442797, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7499(enumprinterdrivers_level_by_architecture) driver: [HP Deskjet F2200 series] [2013/05/23 17:29:04.442871, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.443219, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.443280, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.443338, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.443387, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.443434, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.443479, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.443680, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.443766, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.443826, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.443875, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.443925, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.443970, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.444084, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 9E 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.445615, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009e-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.446004, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009e-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00da (218) name_size : 0x00da (218) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.446714, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9E 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.446900, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.448302, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.448375, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.448425, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.448479, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.448524, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.448634, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.448703, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.448758, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.448807, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.448859, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.448904, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.449001, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.449064, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.449175, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.449229, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.449285, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.449348, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.449471, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.449538, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.449593, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.449641, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.449695, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.449740, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.449855, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.449915, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.449970, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.450019, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.450073, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.450190, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.450303, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT x86] [2013/05/23 17:29:04.450367, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.450424, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.450473, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.450539, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.450586, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] [2013/05/23 17:29:04.450712, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Drivers] [2013/05/23 17:29:04.450783, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (7->8) [2013/05/23 17:29:04.450840, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.450890, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.450944, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.450989, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers] [2013/05/23 17:29:04.451082, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Version-3] [2013/05/23 17:29:04.451192, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (8->9) [2013/05/23 17:29:04.451250, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.451300, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.451355, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.451400, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3] [2013/05/23 17:29:04.451497, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HP Deskjet F2200 series] [2013/05/23 17:29:04.451559, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (9->10) [2013/05/23 17:29:04.451616, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.451667, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.451722, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.451768, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.451857, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (10->9) [2013/05/23 17:29:04.451932, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (9->8) [2013/05/23 17:29:04.451985, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (8->7) [2013/05/23 17:29:04.452034, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.452084, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.452168, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.452300, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.452356, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.452412, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.452527, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.452803, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2013/05/23 17:29:04.453142, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.453272, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series' (ops 0xb697a420) [2013/05/23 17:29:04.453328, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.453442, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Version] len[4] [2013/05/23 17:29:04.453529, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[Driver] len[22] [2013/05/23 17:29:04.453586, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[2]: name[Data File] len[26] [2013/05/23 17:29:04.453640, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[3]: name[Configuration File] len[26] [2013/05/23 17:29:04.453695, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[4]: name[Help File] len[22] [2013/05/23 17:29:04.453755, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[5]: name[Dependent Files] len[726] [2013/05/23 17:29:04.453810, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[6]: name[Monitor] len[0] [2013/05/23 17:29:04.453863, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[7]: name[Datatype] len[0] [2013/05/23 17:29:04.453917, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[8]: name[Previous Names] len[2] [2013/05/23 17:29:04.453972, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[9]: name[DriverDate] len[22] [2013/05/23 17:29:04.454028, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[10]: name[DriverVersion] len[24] [2013/05/23 17:29:04.454083, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[11]: name[Manufacturer] len[32] [2013/05/23 17:29:04.454175, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[12]: name[OEM URL] len[130] [2013/05/23 17:29:04.454232, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[13]: name[HardwareID] len[68] [2013/05/23 17:29:04.454287, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[14]: name[Provider] len[32] [2013/05/23 17:29:04.454343, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[15]: name[Print Processor] len[0] [2013/05/23 17:29:04.454398, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[16]: name[VendorSetup] len[0] [2013/05/23 17:29:04.454454, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[17]: name[Color Profiles] len[2] [2013/05/23 17:29:04.454510, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[18]: name[InfPath] len[0] [2013/05/23 17:29:04.454568, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[19]: name[PrinterDriverAttributes] len[4] [2013/05/23 17:29:04.454637, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[20]: name[CoreDependencies] len[2] [2013/05/23 17:29:04.454696, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[21]: name[MinInboxDriverVerDate] len[22] [2013/05/23 17:29:04.454755, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[22]: name[MinInboxDriverVerVersion] len[16] [2013/05/23 17:29:04.454811, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.454917, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000017 (23) max_valnamelen : * max_valnamelen : 0x00000032 (50) max_valbufsize : * max_valbufsize : 0x000002d6 (726) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2013/05/23 17:29:04.455651, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000000 (0) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.456224, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.456344, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.456424, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'Version' type : * type : REG_DWORD (4) value : * value: ARRAY(4) [0] : 0x03 (3) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : * size : 0x00000004 (4) length : * length : 0x00000004 (4) result : WERR_OK [2013/05/23 17:29:04.457227, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000001 (1) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.457845, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.457967, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.458031, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x000e (14) size : 0x0034 (52) name : * name : 'Driver' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x2e (46) [13] : 0x00 (0) [14] : 0x44 (68) [15] : 0x00 (0) [16] : 0x4c (76) [17] : 0x00 (0) [18] : 0x4c (76) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:04.459048, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000002 (2) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.459607, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.459728, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.459789, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0014 (20) size : 0x0034 (52) name : * name : 'Data File' type : * type : REG_SZ (1) value : * value: ARRAY(26) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x70 (112) [3] : 0x00 (0) [4] : 0x6f (111) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x32 (50) [9] : 0x00 (0) [10] : 0x30 (48) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x33 (51) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x70 (112) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) size : * size : 0x0000001a (26) length : * length : 0x0000001a (26) result : WERR_OK [2013/05/23 17:29:04.461004, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000003 (3) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.461575, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.461696, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.461759, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0026 (38) size : 0x0034 (52) name : * name : 'Configuration File' type : * type : REG_SZ (1) value : * value: ARRAY(26) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x55 (85) [13] : 0x00 (0) [14] : 0x49 (73) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x44 (68) [19] : 0x00 (0) [20] : 0x4c (76) [21] : 0x00 (0) [22] : 0x4c (76) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) size : * size : 0x0000001a (26) length : * length : 0x0000001a (26) result : WERR_OK [2013/05/23 17:29:04.463017, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000004 (4) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.463584, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.463701, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.463764, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0014 (20) size : 0x0034 (52) name : * name : 'Help File' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x55 (85) [1] : 0x00 (0) [2] : 0x4e (78) [3] : 0x00 (0) [4] : 0x49 (73) [5] : 0x00 (0) [6] : 0x44 (68) [7] : 0x00 (0) [8] : 0x52 (82) [9] : 0x00 (0) [10] : 0x56 (86) [11] : 0x00 (0) [12] : 0x2e (46) [13] : 0x00 (0) [14] : 0x48 (72) [15] : 0x00 (0) [16] : 0x4c (76) [17] : 0x00 (0) [18] : 0x50 (80) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:04.464764, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000005 (5) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.465311, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.465485, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.465564, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0020 (32) size : 0x0034 (52) name : * name : 'Dependent Files' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(726) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x70 (112) [3] : 0x00 (0) [4] : 0x6f (111) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x32 (50) [9] : 0x00 (0) [10] : 0x30 (48) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x61 (97) [15] : 0x00 (0) [16] : 0x2e (46) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x6e (110) [21] : 0x00 (0) [22] : 0x69 (105) [23] : 0x00 (0) [24] : 0x00 (0) [25] : 0x00 (0) [26] : 0x68 (104) [27] : 0x00 (0) [28] : 0x70 (112) [29] : 0x00 (0) [30] : 0x7a (122) [31] : 0x00 (0) [32] : 0x73 (115) [33] : 0x00 (0) [34] : 0x74 (116) [35] : 0x00 (0) [36] : 0x35 (53) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x75 (117) [41] : 0x00 (0) [42] : 0x2e (46) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x6c (108) [47] : 0x00 (0) [48] : 0x6c (108) [49] : 0x00 (0) [50] : 0x00 (0) [51] : 0x00 (0) [52] : 0x68 (104) [53] : 0x00 (0) [54] : 0x70 (112) [55] : 0x00 (0) [56] : 0x7a (122) [57] : 0x00 (0) [58] : 0x33 (51) [59] : 0x00 (0) [60] : 0x63 (99) [61] : 0x00 (0) [62] : 0x35 (53) [63] : 0x00 (0) [64] : 0x6d (109) [65] : 0x00 (0) [66] : 0x75 (117) [67] : 0x00 (0) [68] : 0x2e (46) [69] : 0x00 (0) [70] : 0x64 (100) [71] : 0x00 (0) [72] : 0x6c (108) [73] : 0x00 (0) [74] : 0x6c (108) [75] : 0x00 (0) [76] : 0x00 (0) [77] : 0x00 (0) [78] : 0x68 (104) [79] : 0x00 (0) [80] : 0x70 (112) [81] : 0x00 (0) [82] : 0x7a (122) [83] : 0x00 (0) [84] : 0x75 (117) [85] : 0x00 (0) [86] : 0x72 (114) [87] : 0x00 (0) [88] : 0x35 (53) [89] : 0x00 (0) [90] : 0x6d (109) [91] : 0x00 (0) [92] : 0x75 (117) [93] : 0x00 (0) [94] : 0x2e (46) [95] : 0x00 (0) [96] : 0x64 (100) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x6c (108) [101] : 0x00 (0) [102] : 0x00 (0) [103] : 0x00 (0) [104] : 0x68 (104) [105] : 0x00 (0) [106] : 0x70 (112) [107] : 0x00 (0) [108] : 0x6f (111) [109] : 0x00 (0) [110] : 0x32 (50) [111] : 0x00 (0) [112] : 0x32 (50) [113] : 0x00 (0) [114] : 0x30 (48) [115] : 0x00 (0) [116] : 0x30 (48) [117] : 0x00 (0) [118] : 0x33 (51) [119] : 0x00 (0) [120] : 0x2e (46) [121] : 0x00 (0) [122] : 0x78 (120) [123] : 0x00 (0) [124] : 0x6d (109) [125] : 0x00 (0) [126] : 0x6c (108) [127] : 0x00 (0) [128] : 0x00 (0) [129] : 0x00 (0) [130] : 0x68 (104) [131] : 0x00 (0) [132] : 0x70 (112) [133] : 0x00 (0) [134] : 0x7a (122) [135] : 0x00 (0) [136] : 0x73 (115) [137] : 0x00 (0) [138] : 0x63 (99) [139] : 0x00 (0) [140] : 0x35 (53) [141] : 0x00 (0) [142] : 0x6d (109) [143] : 0x00 (0) [144] : 0x75 (117) [145] : 0x00 (0) [146] : 0x2e (46) [147] : 0x00 (0) [148] : 0x64 (100) [149] : 0x00 (0) [150] : 0x74 (116) [151] : 0x00 (0) [152] : 0x64 (100) [153] : 0x00 (0) [154] : 0x00 (0) [155] : 0x00 (0) [156] : 0x68 (104) [157] : 0x00 (0) [158] : 0x70 (112) [159] : 0x00 (0) [160] : 0x7a (122) [161] : 0x00 (0) [162] : 0x75 (117) [163] : 0x00 (0) [164] : 0x69 (105) [165] : 0x00 (0) [166] : 0x35 (53) [167] : 0x00 (0) [168] : 0x6d (109) [169] : 0x00 (0) [170] : 0x75 (117) [171] : 0x00 (0) [172] : 0x2e (46) [173] : 0x00 (0) [174] : 0x64 (100) [175] : 0x00 (0) [176] : 0x6c (108) [177] : 0x00 (0) [178] : 0x6c (108) [179] : 0x00 (0) [180] : 0x00 (0) [181] : 0x00 (0) [182] : 0x68 (104) [183] : 0x00 (0) [184] : 0x70 (112) [185] : 0x00 (0) [186] : 0x7a (122) [187] : 0x00 (0) [188] : 0x33 (51) [189] : 0x00 (0) [190] : 0x72 (114) [191] : 0x00 (0) [192] : 0x35 (53) [193] : 0x00 (0) [194] : 0x6d (109) [195] : 0x00 (0) [196] : 0x75 (117) [197] : 0x00 (0) [198] : 0x2e (46) [199] : 0x00 (0) [200] : 0x64 (100) [201] : 0x00 (0) [202] : 0x6c (108) [203] : 0x00 (0) [204] : 0x6c (108) [205] : 0x00 (0) [206] : 0x00 (0) [207] : 0x00 (0) [208] : 0x68 (104) [209] : 0x00 (0) [210] : 0x70 (112) [211] : 0x00 (0) [212] : 0x7a (122) [213] : 0x00 (0) [214] : 0x70 (112) [215] : 0x00 (0) [216] : 0x72 (114) [217] : 0x00 (0) [218] : 0x35 (53) [219] : 0x00 (0) [220] : 0x6d (109) [221] : 0x00 (0) [222] : 0x75 (117) [223] : 0x00 (0) [224] : 0x2e (46) [225] : 0x00 (0) [226] : 0x64 (100) [227] : 0x00 (0) [228] : 0x6c (108) [229] : 0x00 (0) [230] : 0x6c (108) [231] : 0x00 (0) [232] : 0x00 (0) [233] : 0x00 (0) [234] : 0x68 (104) [235] : 0x00 (0) [236] : 0x70 (112) [237] : 0x00 (0) [238] : 0x66 (102) [239] : 0x00 (0) [240] : 0x73 (115) [241] : 0x00 (0) [242] : 0x70 (112) [243] : 0x00 (0) [244] : 0x30 (48) [245] : 0x00 (0) [246] : 0x37 (55) [247] : 0x00 (0) [248] : 0x31 (49) [249] : 0x00 (0) [250] : 0x2e (46) [251] : 0x00 (0) [252] : 0x72 (114) [253] : 0x00 (0) [254] : 0x70 (112) [255] : 0x00 (0) [256] : 0x6f (111) [257] : 0x00 (0) [258] : 0x00 (0) [259] : 0x00 (0) [260] : 0x68 (104) [261] : 0x00 (0) [262] : 0x70 (112) [263] : 0x00 (0) [264] : 0x63 (99) [265] : 0x00 (0) [266] : 0x64 (100) [267] : 0x00 (0) [268] : 0x6d (109) [269] : 0x00 (0) [270] : 0x63 (99) [271] : 0x00 (0) [272] : 0x33 (51) [273] : 0x00 (0) [274] : 0x32 (50) [275] : 0x00 (0) [276] : 0x2e (46) [277] : 0x00 (0) [278] : 0x64 (100) [279] : 0x00 (0) [280] : 0x6c (108) [281] : 0x00 (0) [282] : 0x6c (108) [283] : 0x00 (0) [284] : 0x00 (0) [285] : 0x00 (0) [286] : 0x68 (104) [287] : 0x00 (0) [288] : 0x70 (112) [289] : 0x00 (0) [290] : 0x62 (98) [291] : 0x00 (0) [292] : 0x63 (99) [293] : 0x00 (0) [294] : 0x66 (102) [295] : 0x00 (0) [296] : 0x67 (103) [297] : 0x00 (0) [298] : 0x72 (114) [299] : 0x00 (0) [300] : 0x65 (101) [301] : 0x00 (0) [302] : 0x2e (46) [303] : 0x00 (0) [304] : 0x64 (100) [305] : 0x00 (0) [306] : 0x6c (108) [307] : 0x00 (0) [308] : 0x6c (108) [309] : 0x00 (0) [310] : 0x00 (0) [311] : 0x00 (0) [312] : 0x68 (104) [313] : 0x00 (0) [314] : 0x70 (112) [315] : 0x00 (0) [316] : 0x6f (111) [317] : 0x00 (0) [318] : 0x32 (50) [319] : 0x00 (0) [320] : 0x32 (50) [321] : 0x00 (0) [322] : 0x30 (48) [323] : 0x00 (0) [324] : 0x30 (48) [325] : 0x00 (0) [326] : 0x33 (51) [327] : 0x00 (0) [328] : 0x2e (46) [329] : 0x00 (0) [330] : 0x65 (101) [331] : 0x00 (0) [332] : 0x78 (120) [333] : 0x00 (0) [334] : 0x70 (112) [335] : 0x00 (0) [336] : 0x00 (0) [337] : 0x00 (0) [338] : 0x68 (104) [339] : 0x00 (0) [340] : 0x70 (112) [341] : 0x00 (0) [342] : 0x7a (122) [343] : 0x00 (0) [344] : 0x6c (108) [345] : 0x00 (0) [346] : 0x65 (101) [347] : 0x00 (0) [348] : 0x35 (53) [349] : 0x00 (0) [350] : 0x6d (109) [351] : 0x00 (0) [352] : 0x75 (117) [353] : 0x00 (0) [354] : 0x2e (46) [355] : 0x00 (0) [356] : 0x64 (100) [357] : 0x00 (0) [358] : 0x6c (108) [359] : 0x00 (0) [360] : 0x6c (108) [361] : 0x00 (0) [362] : 0x00 (0) [363] : 0x00 (0) [364] : 0x68 (104) [365] : 0x00 (0) [366] : 0x70 (112) [367] : 0x00 (0) [368] : 0x7a (122) [369] : 0x00 (0) [370] : 0x73 (115) [371] : 0x00 (0) [372] : 0x65 (101) [373] : 0x00 (0) [374] : 0x35 (53) [375] : 0x00 (0) [376] : 0x6d (109) [377] : 0x00 (0) [378] : 0x75 (117) [379] : 0x00 (0) [380] : 0x2e (46) [381] : 0x00 (0) [382] : 0x64 (100) [383] : 0x00 (0) [384] : 0x6c (108) [385] : 0x00 (0) [386] : 0x6c (108) [387] : 0x00 (0) [388] : 0x00 (0) [389] : 0x00 (0) [390] : 0x68 (104) [391] : 0x00 (0) [392] : 0x70 (112) [393] : 0x00 (0) [394] : 0x7a (122) [395] : 0x00 (0) [396] : 0x73 (115) [397] : 0x00 (0) [398] : 0x6d (109) [399] : 0x00 (0) [400] : 0x35 (53) [401] : 0x00 (0) [402] : 0x6d (109) [403] : 0x00 (0) [404] : 0x75 (117) [405] : 0x00 (0) [406] : 0x2e (46) [407] : 0x00 (0) [408] : 0x67 (103) [409] : 0x00 (0) [410] : 0x70 (112) [411] : 0x00 (0) [412] : 0x64 (100) [413] : 0x00 (0) [414] : 0x00 (0) [415] : 0x00 (0) [416] : 0x68 (104) [417] : 0x00 (0) [418] : 0x70 (112) [419] : 0x00 (0) [420] : 0x7a (122) [421] : 0x00 (0) [422] : 0x33 (51) [423] : 0x00 (0) [424] : 0x6d (109) [425] : 0x00 (0) [426] : 0x35 (53) [427] : 0x00 (0) [428] : 0x6d (109) [429] : 0x00 (0) [430] : 0x75 (117) [431] : 0x00 (0) [432] : 0x2e (46) [433] : 0x00 (0) [434] : 0x67 (103) [435] : 0x00 (0) [436] : 0x70 (112) [437] : 0x00 (0) [438] : 0x64 (100) [439] : 0x00 (0) [440] : 0x00 (0) [441] : 0x00 (0) [442] : 0x68 (104) [443] : 0x00 (0) [444] : 0x70 (112) [445] : 0x00 (0) [446] : 0x7a (122) [447] : 0x00 (0) [448] : 0x65 (101) [449] : 0x00 (0) [450] : 0x76 (118) [451] : 0x00 (0) [452] : 0x35 (53) [453] : 0x00 (0) [454] : 0x6d (109) [455] : 0x00 (0) [456] : 0x75 (117) [457] : 0x00 (0) [458] : 0x2e (46) [459] : 0x00 (0) [460] : 0x64 (100) [461] : 0x00 (0) [462] : 0x6c (108) [463] : 0x00 (0) [464] : 0x6c (108) [465] : 0x00 (0) [466] : 0x00 (0) [467] : 0x00 (0) [468] : 0x68 (104) [469] : 0x00 (0) [470] : 0x70 (112) [471] : 0x00 (0) [472] : 0x7a (122) [473] : 0x00 (0) [474] : 0x68 (104) [475] : 0x00 (0) [476] : 0x6c (108) [477] : 0x00 (0) [478] : 0x35 (53) [479] : 0x00 (0) [480] : 0x6d (109) [481] : 0x00 (0) [482] : 0x75 (117) [483] : 0x00 (0) [484] : 0x2e (46) [485] : 0x00 (0) [486] : 0x63 (99) [487] : 0x00 (0) [488] : 0x61 (97) [489] : 0x00 (0) [490] : 0x62 (98) [491] : 0x00 (0) [492] : 0x00 (0) [493] : 0x00 (0) [494] : 0x55 (85) [495] : 0x00 (0) [496] : 0x4e (78) [497] : 0x00 (0) [498] : 0x49 (73) [499] : 0x00 (0) [500] : 0x52 (82) [501] : 0x00 (0) [502] : 0x45 (69) [503] : 0x00 (0) [504] : 0x53 (83) [505] : 0x00 (0) [506] : 0x2e (46) [507] : 0x00 (0) [508] : 0x44 (68) [509] : 0x00 (0) [510] : 0x4c (76) [511] : 0x00 (0) [512] : 0x4c (76) [513] : 0x00 (0) [514] : 0x00 (0) [515] : 0x00 (0) [516] : 0x53 (83) [517] : 0x00 (0) [518] : 0x54 (84) [519] : 0x00 (0) [520] : 0x44 (68) [521] : 0x00 (0) [522] : 0x4e (78) [523] : 0x00 (0) [524] : 0x41 (65) [525] : 0x00 (0) [526] : 0x4d (77) [527] : 0x00 (0) [528] : 0x45 (69) [529] : 0x00 (0) [530] : 0x53 (83) [531] : 0x00 (0) [532] : 0x2e (46) [533] : 0x00 (0) [534] : 0x47 (71) [535] : 0x00 (0) [536] : 0x50 (80) [537] : 0x00 (0) [538] : 0x44 (68) [539] : 0x00 (0) [540] : 0x00 (0) [541] : 0x00 (0) [542] : 0x68 (104) [543] : 0x00 (0) [544] : 0x70 (112) [545] : 0x00 (0) [546] : 0x66 (102) [547] : 0x00 (0) [548] : 0x69 (105) [549] : 0x00 (0) [550] : 0x65 (101) [551] : 0x00 (0) [552] : 0x35 (53) [553] : 0x00 (0) [554] : 0x6d (109) [555] : 0x00 (0) [556] : 0x75 (117) [557] : 0x00 (0) [558] : 0x2e (46) [559] : 0x00 (0) [560] : 0x64 (100) [561] : 0x00 (0) [562] : 0x6c (108) [563] : 0x00 (0) [564] : 0x6c (108) [565] : 0x00 (0) [566] : 0x00 (0) [567] : 0x00 (0) [568] : 0x68 (104) [569] : 0x00 (0) [570] : 0x70 (112) [571] : 0x00 (0) [572] : 0x66 (102) [573] : 0x00 (0) [574] : 0x69 (105) [575] : 0x00 (0) [576] : 0x67 (103) [577] : 0x00 (0) [578] : 0x35 (53) [579] : 0x00 (0) [580] : 0x6d (109) [581] : 0x00 (0) [582] : 0x75 (117) [583] : 0x00 (0) [584] : 0x2e (46) [585] : 0x00 (0) [586] : 0x64 (100) [587] : 0x00 (0) [588] : 0x6c (108) [589] : 0x00 (0) [590] : 0x6c (108) [591] : 0x00 (0) [592] : 0x00 (0) [593] : 0x00 (0) [594] : 0x68 (104) [595] : 0x00 (0) [596] : 0x70 (112) [597] : 0x00 (0) [598] : 0x66 (102) [599] : 0x00 (0) [600] : 0x72 (114) [601] : 0x00 (0) [602] : 0x73 (115) [603] : 0x00 (0) [604] : 0x35 (53) [605] : 0x00 (0) [606] : 0x6d (109) [607] : 0x00 (0) [608] : 0x75 (117) [609] : 0x00 (0) [610] : 0x2e (46) [611] : 0x00 (0) [612] : 0x64 (100) [613] : 0x00 (0) [614] : 0x6c (108) [615] : 0x00 (0) [616] : 0x6c (108) [617] : 0x00 (0) [618] : 0x00 (0) [619] : 0x00 (0) [620] : 0x68 (104) [621] : 0x00 (0) [622] : 0x70 (112) [623] : 0x00 (0) [624] : 0x7a (122) [625] : 0x00 (0) [626] : 0x6c (108) [627] : 0x00 (0) [628] : 0x61 (97) [629] : 0x00 (0) [630] : 0x35 (53) [631] : 0x00 (0) [632] : 0x6d (109) [633] : 0x00 (0) [634] : 0x75 (117) [635] : 0x00 (0) [636] : 0x2e (46) [637] : 0x00 (0) [638] : 0x64 (100) [639] : 0x00 (0) [640] : 0x6c (108) [641] : 0x00 (0) [642] : 0x6c (108) [643] : 0x00 (0) [644] : 0x00 (0) [645] : 0x00 (0) [646] : 0x68 (104) [647] : 0x00 (0) [648] : 0x70 (112) [649] : 0x00 (0) [650] : 0x7a (122) [651] : 0x00 (0) [652] : 0x73 (115) [653] : 0x00 (0) [654] : 0x73 (115) [655] : 0x00 (0) [656] : 0x35 (53) [657] : 0x00 (0) [658] : 0x6d (109) [659] : 0x00 (0) [660] : 0x75 (117) [661] : 0x00 (0) [662] : 0x2e (46) [663] : 0x00 (0) [664] : 0x64 (100) [665] : 0x00 (0) [666] : 0x6c (108) [667] : 0x00 (0) [668] : 0x6c (108) [669] : 0x00 (0) [670] : 0x00 (0) [671] : 0x00 (0) [672] : 0x68 (104) [673] : 0x00 (0) [674] : 0x70 (112) [675] : 0x00 (0) [676] : 0x7a (122) [677] : 0x00 (0) [678] : 0x63 (99) [679] : 0x00 (0) [680] : 0x33 (51) [681] : 0x00 (0) [682] : 0x35 (53) [683] : 0x00 (0) [684] : 0x6d (109) [685] : 0x00 (0) [686] : 0x75 (117) [687] : 0x00 (0) [688] : 0x2e (46) [689] : 0x00 (0) [690] : 0x64 (100) [691] : 0x00 (0) [692] : 0x6c (108) [693] : 0x00 (0) [694] : 0x6c (108) [695] : 0x00 (0) [696] : 0x00 (0) [697] : 0x00 (0) [698] : 0x68 (104) [699] : 0x00 (0) [700] : 0x70 (112) [701] : 0x00 (0) [702] : 0x75 (117) [703] : 0x00 (0) [704] : 0x61 (97) [705] : 0x00 (0) [706] : 0x63 (99) [707] : 0x00 (0) [708] : 0x35 (53) [709] : 0x00 (0) [710] : 0x6d (109) [711] : 0x00 (0) [712] : 0x75 (117) [713] : 0x00 (0) [714] : 0x2e (46) [715] : 0x00 (0) [716] : 0x64 (100) [717] : 0x00 (0) [718] : 0x6c (108) [719] : 0x00 (0) [720] : 0x6c (108) [721] : 0x00 (0) [722] : 0x00 (0) [723] : 0x00 (0) [724] : 0x00 (0) [725] : 0x00 (0) size : * size : 0x000002d6 (726) length : * length : 0x000002d6 (726) result : WERR_OK [2013/05/23 17:29:04.483165, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000006 (6) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.483711, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.483828, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.483908, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'Monitor' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.484412, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000007 (7) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.484928, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.485045, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.485134, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0012 (18) size : 0x0034 (52) name : * name : 'Datatype' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.485679, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000008 (8) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.486254, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.486374, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.486436, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001e (30) size : 0x0034 (52) name : * name : 'Previous Names' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:04.486947, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000009 (9) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.487812, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.487942, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.488008, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0016 (22) size : 0x0034 (52) name : * name : 'DriverDate' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x31 (49) [1] : 0x00 (0) [2] : 0x30 (48) [3] : 0x00 (0) [4] : 0x2f (47) [5] : 0x00 (0) [6] : 0x32 (50) [7] : 0x00 (0) [8] : 0x30 (48) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x32 (50) [13] : 0x00 (0) [14] : 0x30 (48) [15] : 0x00 (0) [16] : 0x30 (48) [17] : 0x00 (0) [18] : 0x37 (55) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:04.488994, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x0000000a (10) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.489566, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.489689, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.489750, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001c (28) size : 0x0034 (52) name : * name : 'DriverVersion' type : * type : REG_SZ (1) value : * value: ARRAY(24) [0] : 0x36 (54) [1] : 0x00 (0) [2] : 0x31 (49) [3] : 0x00 (0) [4] : 0x2e (46) [5] : 0x00 (0) [6] : 0x37 (55) [7] : 0x00 (0) [8] : 0x33 (51) [9] : 0x00 (0) [10] : 0x2e (46) [11] : 0x00 (0) [12] : 0x32 (50) [13] : 0x00 (0) [14] : 0x34 (52) [15] : 0x00 (0) [16] : 0x31 (49) [17] : 0x00 (0) [18] : 0x2e (46) [19] : 0x00 (0) [20] : 0x30 (48) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : * size : 0x00000018 (24) length : * length : 0x00000018 (24) result : WERR_OK [2013/05/23 17:29:04.490788, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x0000000b (11) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.491361, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.491482, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.491544, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001a (26) size : 0x0034 (52) name : * name : 'Manufacturer' type : * type : REG_SZ (1) value : * value: ARRAY(32) [0] : 0x48 (72) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x77 (119) [5] : 0x00 (0) [6] : 0x6c (108) [7] : 0x00 (0) [8] : 0x65 (101) [9] : 0x00 (0) [10] : 0x74 (116) [11] : 0x00 (0) [12] : 0x74 (116) [13] : 0x00 (0) [14] : 0x2d (45) [15] : 0x00 (0) [16] : 0x50 (80) [17] : 0x00 (0) [18] : 0x61 (97) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x6b (107) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x64 (100) [29] : 0x00 (0) [30] : 0x00 (0) [31] : 0x00 (0) size : * size : 0x00000020 (32) length : * length : 0x00000020 (32) result : WERR_OK [2013/05/23 17:29:04.492853, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x0000000c (12) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.493434, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.493554, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.493618, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'OEM URL' type : * type : REG_SZ (1) value : * value: ARRAY(130) [0] : 0x68 (104) [1] : 0x00 (0) [2] : 0x74 (116) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x70 (112) [7] : 0x00 (0) [8] : 0x3a (58) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x2f (47) [13] : 0x00 (0) [14] : 0x67 (103) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x2e (46) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x69 (105) [23] : 0x00 (0) [24] : 0x63 (99) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x6f (111) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x6f (111) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x74 (116) [37] : 0x00 (0) [38] : 0x2e (46) [39] : 0x00 (0) [40] : 0x63 (99) [41] : 0x00 (0) [42] : 0x6f (111) [43] : 0x00 (0) [44] : 0x6d (109) [45] : 0x00 (0) [46] : 0x2f (47) [47] : 0x00 (0) [48] : 0x66 (102) [49] : 0x00 (0) [50] : 0x77 (119) [51] : 0x00 (0) [52] : 0x6c (108) [53] : 0x00 (0) [54] : 0x69 (105) [55] : 0x00 (0) [56] : 0x6e (110) [57] : 0x00 (0) [58] : 0x6b (107) [59] : 0x00 (0) [60] : 0x2f (47) [61] : 0x00 (0) [62] : 0x3f (63) [63] : 0x00 (0) [64] : 0x4c (76) [65] : 0x00 (0) [66] : 0x69 (105) [67] : 0x00 (0) [68] : 0x6e (110) [69] : 0x00 (0) [70] : 0x6b (107) [71] : 0x00 (0) [72] : 0x49 (73) [73] : 0x00 (0) [74] : 0x44 (68) [75] : 0x00 (0) [76] : 0x3d (61) [77] : 0x00 (0) [78] : 0x33 (51) [79] : 0x00 (0) [80] : 0x37 (55) [81] : 0x00 (0) [82] : 0x26 (38) [83] : 0x00 (0) [84] : 0x70 (112) [85] : 0x00 (0) [86] : 0x72 (114) [87] : 0x00 (0) [88] : 0x64 (100) [89] : 0x00 (0) [90] : 0x3d (61) [91] : 0x00 (0) [92] : 0x31 (49) [93] : 0x00 (0) [94] : 0x30 (48) [95] : 0x00 (0) [96] : 0x37 (55) [97] : 0x00 (0) [98] : 0x39 (57) [99] : 0x00 (0) [100] : 0x38 (56) [101] : 0x00 (0) [102] : 0x26 (38) [103] : 0x00 (0) [104] : 0x73 (115) [105] : 0x00 (0) [106] : 0x62 (98) [107] : 0x00 (0) [108] : 0x70 (112) [109] : 0x00 (0) [110] : 0x3d (61) [111] : 0x00 (0) [112] : 0x50 (80) [113] : 0x00 (0) [114] : 0x72 (114) [115] : 0x00 (0) [116] : 0x69 (105) [117] : 0x00 (0) [118] : 0x6e (110) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x73 (115) [127] : 0x00 (0) [128] : 0x00 (0) [129] : 0x00 (0) size : * size : 0x00000082 (130) length : * length : 0x00000082 (130) result : WERR_OK [2013/05/23 17:29:04.497788, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x0000000d (13) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.498379, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.498500, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.498565, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0016 (22) size : 0x0034 (52) name : * name : 'HardwareID' type : * type : REG_SZ (1) value : * value: ARRAY(68) [0] : 0x75 (117) [1] : 0x00 (0) [2] : 0x73 (115) [3] : 0x00 (0) [4] : 0x62 (98) [5] : 0x00 (0) [6] : 0x70 (112) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x69 (105) [11] : 0x00 (0) [12] : 0x6e (110) [13] : 0x00 (0) [14] : 0x74 (116) [15] : 0x00 (0) [16] : 0x5c (92) [17] : 0x00 (0) [18] : 0x68 (104) [19] : 0x00 (0) [20] : 0x70 (112) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x65 (101) [25] : 0x00 (0) [26] : 0x73 (115) [27] : 0x00 (0) [28] : 0x6b (107) [29] : 0x00 (0) [30] : 0x6a (106) [31] : 0x00 (0) [32] : 0x65 (101) [33] : 0x00 (0) [34] : 0x74 (116) [35] : 0x00 (0) [36] : 0x5f (95) [37] : 0x00 (0) [38] : 0x66 (102) [39] : 0x00 (0) [40] : 0x32 (50) [41] : 0x00 (0) [42] : 0x32 (50) [43] : 0x00 (0) [44] : 0x30 (48) [45] : 0x00 (0) [46] : 0x30 (48) [47] : 0x00 (0) [48] : 0x5f (95) [49] : 0x00 (0) [50] : 0x73 (115) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x69 (105) [57] : 0x00 (0) [58] : 0x38 (56) [59] : 0x00 (0) [60] : 0x37 (55) [61] : 0x00 (0) [62] : 0x63 (99) [63] : 0x00 (0) [64] : 0x37 (55) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) size : * size : 0x00000044 (68) length : * length : 0x00000044 (68) result : WERR_OK [2013/05/23 17:29:04.500694, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x0000000e (14) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.501266, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.501384, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.501448, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0012 (18) size : 0x0034 (52) name : * name : 'Provider' type : * type : REG_SZ (1) value : * value: ARRAY(32) [0] : 0x48 (72) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x77 (119) [5] : 0x00 (0) [6] : 0x6c (108) [7] : 0x00 (0) [8] : 0x65 (101) [9] : 0x00 (0) [10] : 0x74 (116) [11] : 0x00 (0) [12] : 0x74 (116) [13] : 0x00 (0) [14] : 0x2d (45) [15] : 0x00 (0) [16] : 0x50 (80) [17] : 0x00 (0) [18] : 0x61 (97) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x6b (107) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x64 (100) [29] : 0x00 (0) [30] : 0x00 (0) [31] : 0x00 (0) size : * size : 0x00000020 (32) length : * length : 0x00000020 (32) result : WERR_OK [2013/05/23 17:29:04.502660, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x0000000f (15) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.503296, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.503420, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.503484, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0020 (32) size : 0x0034 (52) name : * name : 'Print Processor' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.503959, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000010 (16) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.504528, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.504647, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.504707, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0018 (24) size : 0x0034 (52) name : * name : 'VendorSetup' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.505270, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000011 (17) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.505884, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.506024, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.506117, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x001e (30) size : 0x0034 (52) name : * name : 'Color Profiles' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:04.506657, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000012 (18) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.507463, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.507594, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.507661, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0010 (16) size : 0x0034 (52) name : * name : 'InfPath' type : * type : REG_SZ (1) value : * value: ARRAY(0) size : * size : 0x00000000 (0) length : * length : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.508269, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000013 (19) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.508798, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.508913, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.508975, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0030 (48) size : 0x0034 (52) name : * name : 'PrinterDriverAttributes' type : * type : REG_DWORD (4) value : * value: ARRAY(4) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : * size : 0x00000004 (4) length : * length : 0x00000004 (4) result : WERR_OK [2013/05/23 17:29:04.509569, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000014 (20) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.510137, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.510258, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.510319, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0022 (34) size : 0x0034 (52) name : * name : 'CoreDependencies' type : * type : REG_MULTI_SZ (7) value : * value: ARRAY(2) [0] : 0x00 (0) [1] : 0x00 (0) size : * size : 0x00000002 (2) length : * length : 0x00000002 (2) result : WERR_OK [2013/05/23 17:29:04.510834, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000015 (21) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.511393, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.511511, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.511587, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x002c (44) size : 0x0034 (52) name : * name : 'MinInboxDriverVerDate' type : * type : REG_SZ (1) value : * value: ARRAY(22) [0] : 0x30 (48) [1] : 0x00 (0) [2] : 0x31 (49) [3] : 0x00 (0) [4] : 0x2f (47) [5] : 0x00 (0) [6] : 0x30 (48) [7] : 0x00 (0) [8] : 0x31 (49) [9] : 0x00 (0) [10] : 0x2f (47) [11] : 0x00 (0) [12] : 0x31 (49) [13] : 0x00 (0) [14] : 0x36 (54) [15] : 0x00 (0) [16] : 0x30 (48) [17] : 0x00 (0) [18] : 0x31 (49) [19] : 0x00 (0) [20] : 0x00 (0) [21] : 0x00 (0) size : * size : 0x00000016 (22) length : * length : 0x00000016 (22) result : WERR_OK [2013/05/23 17:29:04.512680, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue in: struct winreg_EnumValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 enum_index : 0x00000016 (22) name : * name: struct winreg_ValNameBuf length : 0x0002 (2) size : 0x0034 (52) name : * name : '' type : * type : REG_NONE (0) value : * value: ARRAY(0) size : * size : 0x000002d6 (726) length : * length : 0x00000000 (0) [2013/05/23 17:29:04.513326, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.513454, 8, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:451(_winreg_EnumValue) _winreg_EnumValue: enumerating values for key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Deskjet F2200 series] [2013/05/23 17:29:04.513536, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_EnumValue: struct winreg_EnumValue out: struct winreg_EnumValue name : * name: struct winreg_ValNameBuf length : 0x0032 (50) size : 0x0034 (52) name : * name : 'MinInboxDriverVerVersion' type : * type : REG_SZ (1) value : * value: ARRAY(16) [0] : 0x30 (48) [1] : 0x00 (0) [2] : 0x2e (46) [3] : 0x00 (0) [4] : 0x30 (48) [5] : 0x00 (0) [6] : 0x2e (46) [7] : 0x00 (0) [8] : 0x30 (48) [9] : 0x00 (0) [10] : 0x2e (46) [11] : 0x00 (0) [12] : 0x30 (48) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) size : * size : 0x00000010 (16) length : * length : 0x00000010 (16) result : WERR_OK [2013/05/23 17:29:04.514605, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009f-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.514836, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.514952, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9F 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.515060, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.515162, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.515219, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.515531, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000009e-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.515749, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9E 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.515866, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 9E 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.515974, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.516023, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.516147, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.516590, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:04.516777, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000001 (1) info : * info : * info: ARRAY(1) info : union spoolss_DriverInfo(case 3) info3: struct spoolss_DriverInfo3 version : SPOOLSS_DRIVER_VERSION_200X (3) driver_name : * driver_name : 'HP Deskjet F2200 series' architecture : * architecture : 'Windows NT x86' driver_path : * driver_path : '\\hh1\print$\W32X86\3\UNIDRV.DLL' data_file : * data_file : '\\hh1\print$\W32X86\3\hpo22003.gpd' config_file : * config_file : '\\hh1\print$\W32X86\3\UNIDRVUI.DLL' help_file : * help_file : '\\hh1\print$\W32X86\3\UNIDRV.HLP' dependent_files : * dependent_files: ARRAY(28) [0] : '\\hh1\print$\W32X86\3\hpo2200a.ini' [1] : '\\hh1\print$\W32X86\3\hpzst5mu.dll' [2] : '\\hh1\print$\W32X86\3\hpz3c5mu.dll' [3] : '\\hh1\print$\W32X86\3\hpzur5mu.dll' [4] : '\\hh1\print$\W32X86\3\hpo22003.xml' [5] : '\\hh1\print$\W32X86\3\hpzsc5mu.dtd' [6] : '\\hh1\print$\W32X86\3\hpzui5mu.dll' [7] : '\\hh1\print$\W32X86\3\hpz3r5mu.dll' [8] : '\\hh1\print$\W32X86\3\hpzpr5mu.dll' [9] : '\\hh1\print$\W32X86\3\hpfsp071.rpo' [10] : '\\hh1\print$\W32X86\3\hpcdmc32.dll' [11] : '\\hh1\print$\W32X86\3\hpbcfgre.dll' [12] : '\\hh1\print$\W32X86\3\hpo22003.exp' [13] : '\\hh1\print$\W32X86\3\hpzle5mu.dll' [14] : '\\hh1\print$\W32X86\3\hpzse5mu.dll' [15] : '\\hh1\print$\W32X86\3\hpzsm5mu.gpd' [16] : '\\hh1\print$\W32X86\3\hpz3m5mu.gpd' [17] : '\\hh1\print$\W32X86\3\hpzev5mu.dll' [18] : '\\hh1\print$\W32X86\3\hpzhl5mu.cab' [19] : '\\hh1\print$\W32X86\3\UNIRES.DLL' [20] : '\\hh1\print$\W32X86\3\STDNAMES.GPD' [21] : '\\hh1\print$\W32X86\3\hpfie5mu.dll' [22] : '\\hh1\print$\W32X86\3\hpfig5mu.dll' [23] : '\\hh1\print$\W32X86\3\hpfrs5mu.dll' [24] : '\\hh1\print$\W32X86\3\hpzla5mu.dll' [25] : '\\hh1\print$\W32X86\3\hpzss5mu.dll' [26] : '\\hh1\print$\W32X86\3\hpzc35mu.dll' [27] : '\\hh1\print$\W32X86\3\hpuac5mu.dll' monitor_name : * monitor_name : '' default_datatype : * default_datatype : '' needed : * needed : 0x00000950 (2384) result : WERR_OK [2013/05/23 17:29:04.518808, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:04.518933, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:04.518994, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 2484 [2013/05/23 17:29:04.519149, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:04.519246, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 2404. [2013/05/23 17:29:04.519330, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x097c (2428) auth_length : 0x0000 (0) call_id : 0x00000056 (86) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000964 (2404) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=2404 [0000] 0C 00 02 00 50 09 00 00 03 00 00 00 20 09 00 00 ....P... .... ... [0010] 02 09 00 00 C0 08 00 00 7A 08 00 00 34 08 00 00 ........ z...4... [0020] F2 07 00 00 4C 00 00 00 4A 00 00 00 48 00 00 00 ....L... J...H... [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 ....\.\. h.h.1.\. [0060] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [0070] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [0080] 68 00 70 00 6F 00 32 00 32 00 30 00 30 00 61 00 h.p.o.2. 2.0.0.a. [0090] 2E 00 69 00 6E 00 69 00 00 00 5C 00 5C 00 68 00 ..i.n.i. ..\.\.h. [00A0] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [00B0] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [00C0] 5C 00 33 00 5C 00 68 00 70 00 7A 00 73 00 74 00 \.3.\.h. p.z.s.t. [00D0] 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5.m.u... d.l.l... [00E0] 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 \.\.h.h. 1.\.p.r. [00F0] 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 i.n.t.$. \.W.3.2. [0100] 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 X.8.6.\. 3.\.h.p. [0110] 7A 00 33 00 63 00 35 00 6D 00 75 00 2E 00 64 00 z.3.c.5. m.u...d. [0120] 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 l.l...\. \.h.h.1. [0130] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [0140] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [0150] 5C 00 68 00 70 00 7A 00 75 00 72 00 35 00 6D 00 \.h.p.z. u.r.5.m. [0160] 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 u...d.l. l...\.\. [0170] 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 h.h.1.\. p.r.i.n. [0180] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [0190] 36 00 5C 00 33 00 5C 00 68 00 70 00 6F 00 32 00 6.\.3.\. h.p.o.2. [01A0] 32 00 30 00 30 00 33 00 2E 00 78 00 6D 00 6C 00 2.0.0.3. ..x.m.l. [01B0] 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 ..\.\.h. h.1.\.p. [01C0] 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 r.i.n.t. $.\.W.3. [01D0] 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 2.X.8.6. \.3.\.h. [01E0] 70 00 7A 00 73 00 63 00 35 00 6D 00 75 00 2E 00 p.z.s.c. 5.m.u... [01F0] 64 00 74 00 64 00 00 00 5C 00 5C 00 68 00 68 00 d.t.d... \.\.h.h. [0200] 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 1.\.p.r. i.n.t.$. [0210] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [0220] 33 00 5C 00 68 00 70 00 7A 00 75 00 69 00 35 00 3.\.h.p. z.u.i.5. [0230] 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 m.u...d. l.l...\. [0240] 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 \.h.h.1. \.p.r.i. [0250] 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 n.t.$.\. W.3.2.X. [0260] 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 7A 00 8.6.\.3. \.h.p.z. [0270] 33 00 72 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 3.r.5.m. u...d.l. [0280] 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 l...\.\. h.h.1.\. [0290] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [02A0] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [02B0] 68 00 70 00 7A 00 70 00 72 00 35 00 6D 00 75 00 h.p.z.p. r.5.m.u. [02C0] 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 68 00 ..d.l.l. ..\.\.h. [02D0] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [02E0] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [02F0] 5C 00 33 00 5C 00 68 00 70 00 66 00 73 00 70 00 \.3.\.h. p.f.s.p. [0300] 30 00 37 00 31 00 2E 00 72 00 70 00 6F 00 00 00 0.7.1... r.p.o... [0310] 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 \.\.h.h. 1.\.p.r. [0320] 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 i.n.t.$. \.W.3.2. [0330] 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 X.8.6.\. 3.\.h.p. [0340] 63 00 64 00 6D 00 63 00 33 00 32 00 2E 00 64 00 c.d.m.c. 3.2...d. [0350] 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 l.l...\. \.h.h.1. [0360] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [0370] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [0380] 5C 00 68 00 70 00 62 00 63 00 66 00 67 00 72 00 \.h.p.b. c.f.g.r. [0390] 65 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 e...d.l. l...\.\. [03A0] 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 h.h.1.\. p.r.i.n. [03B0] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [03C0] 36 00 5C 00 33 00 5C 00 68 00 70 00 6F 00 32 00 6.\.3.\. h.p.o.2. [03D0] 32 00 30 00 30 00 33 00 2E 00 65 00 78 00 70 00 2.0.0.3. ..e.x.p. [03E0] 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 ..\.\.h. h.1.\.p. [03F0] 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 r.i.n.t. $.\.W.3. [0400] 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 2.X.8.6. \.3.\.h. [0410] 70 00 7A 00 6C 00 65 00 35 00 6D 00 75 00 2E 00 p.z.l.e. 5.m.u... [0420] 64 00 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 d.l.l... \.\.h.h. [0430] 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 1.\.p.r. i.n.t.$. [0440] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [0450] 33 00 5C 00 68 00 70 00 7A 00 73 00 65 00 35 00 3.\.h.p. z.s.e.5. [0460] 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 m.u...d. l.l...\. [0470] 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 \.h.h.1. \.p.r.i. [0480] 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 n.t.$.\. W.3.2.X. [0490] 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 7A 00 8.6.\.3. \.h.p.z. [04A0] 73 00 6D 00 35 00 6D 00 75 00 2E 00 67 00 70 00 s.m.5.m. u...g.p. [04B0] 64 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 d...\.\. h.h.1.\. [04C0] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [04D0] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [04E0] 68 00 70 00 7A 00 33 00 6D 00 35 00 6D 00 75 00 h.p.z.3. m.5.m.u. [04F0] 2E 00 67 00 70 00 64 00 00 00 5C 00 5C 00 68 00 ..g.p.d. ..\.\.h. [0500] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [0510] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [0520] 5C 00 33 00 5C 00 68 00 70 00 7A 00 65 00 76 00 \.3.\.h. p.z.e.v. [0530] 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5.m.u... d.l.l... [0540] 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 \.\.h.h. 1.\.p.r. [0550] 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 i.n.t.$. \.W.3.2. [0560] 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 X.8.6.\. 3.\.h.p. [0570] 7A 00 68 00 6C 00 35 00 6D 00 75 00 2E 00 63 00 z.h.l.5. m.u...c. [0580] 61 00 62 00 00 00 5C 00 5C 00 68 00 68 00 31 00 a.b...\. \.h.h.1. [0590] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [05A0] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [05B0] 5C 00 55 00 4E 00 49 00 52 00 45 00 53 00 2E 00 \.U.N.I. R.E.S... [05C0] 44 00 4C 00 4C 00 00 00 5C 00 5C 00 68 00 68 00 D.L.L... \.\.h.h. [05D0] 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 1.\.p.r. i.n.t.$. [05E0] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [05F0] 33 00 5C 00 53 00 54 00 44 00 4E 00 41 00 4D 00 3.\.S.T. D.N.A.M. [0600] 45 00 53 00 2E 00 47 00 50 00 44 00 00 00 5C 00 E.S...G. P.D...\. [0610] 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 \.h.h.1. \.p.r.i. [0620] 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 n.t.$.\. W.3.2.X. [0630] 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 66 00 8.6.\.3. \.h.p.f. [0640] 69 00 65 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 i.e.5.m. u...d.l. [0650] 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 l...\.\. h.h.1.\. [0660] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [0670] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [0680] 68 00 70 00 66 00 69 00 67 00 35 00 6D 00 75 00 h.p.f.i. g.5.m.u. [0690] 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 68 00 ..d.l.l. ..\.\.h. [06A0] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [06B0] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [06C0] 5C 00 33 00 5C 00 68 00 70 00 66 00 72 00 73 00 \.3.\.h. p.f.r.s. [06D0] 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5.m.u... d.l.l... [06E0] 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 \.\.h.h. 1.\.p.r. [06F0] 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 i.n.t.$. \.W.3.2. [0700] 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 X.8.6.\. 3.\.h.p. [0710] 7A 00 6C 00 61 00 35 00 6D 00 75 00 2E 00 64 00 z.l.a.5. m.u...d. [0720] 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 l.l...\. \.h.h.1. [0730] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [0740] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [0750] 5C 00 68 00 70 00 7A 00 73 00 73 00 35 00 6D 00 \.h.p.z. s.s.5.m. [0760] 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 u...d.l. l...\.\. [0770] 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 h.h.1.\. p.r.i.n. [0780] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [0790] 36 00 5C 00 33 00 5C 00 68 00 70 00 7A 00 63 00 6.\.3.\. h.p.z.c. [07A0] 33 00 35 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 3.5.m.u. ..d.l.l. [07B0] 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 ..\.\.h. h.1.\.p. [07C0] 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 r.i.n.t. $.\.W.3. [07D0] 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 2.X.8.6. \.3.\.h. [07E0] 70 00 75 00 61 00 63 00 35 00 6D 00 75 00 2E 00 p.u.a.c. 5.m.u... [07F0] 64 00 6C 00 6C 00 00 00 00 00 5C 00 5C 00 68 00 d.l.l... ..\.\.h. [0800] 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 h.1.\.p. r.i.n.t. [0810] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [0820] 5C 00 33 00 5C 00 55 00 4E 00 49 00 44 00 52 00 \.3.\.U. N.I.D.R. [0830] 56 00 2E 00 48 00 4C 00 50 00 00 00 5C 00 5C 00 V...H.L. P...\.\. [0840] 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 h.h.1.\. p.r.i.n. [0850] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [0860] 36 00 5C 00 33 00 5C 00 55 00 4E 00 49 00 44 00 6.\.3.\. U.N.I.D. [0870] 52 00 56 00 55 00 49 00 2E 00 44 00 4C 00 4C 00 R.V.U.I. ..D.L.L. [0880] 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 00 ..\.\.h. h.1.\.p. [0890] 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 r.i.n.t. $.\.W.3. [08A0] 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 00 2.X.8.6. \.3.\.h. [08B0] 70 00 6F 00 32 00 32 00 30 00 30 00 33 00 2E 00 p.o.2.2. 0.0.3... [08C0] 67 00 70 00 64 00 00 00 5C 00 5C 00 68 00 68 00 g.p.d... \.\.h.h. [08D0] 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 1.\.p.r. i.n.t.$. [08E0] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [08F0] 33 00 5C 00 55 00 4E 00 49 00 44 00 52 00 56 00 3.\.U.N. I.D.R.V. [0900] 2E 00 44 00 4C 00 4C 00 00 00 57 00 69 00 6E 00 ..D.L.L. ..W.i.n. [0910] 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 20 00 d.o.w.s. .N.T. . [0920] 78 00 38 00 36 00 00 00 48 00 50 00 20 00 44 00 x.8.6... H.P. .D. [0930] 65 00 73 00 6B 00 6A 00 65 00 74 00 20 00 46 00 e.s.k.j. e.t. .F. [0940] 32 00 32 00 30 00 30 00 20 00 73 00 65 00 72 00 2.2.0.0. .s.e.r. [0950] 69 00 65 00 73 00 00 00 50 09 00 00 01 00 00 00 i.e.s... P....... [0960] 00 00 00 00 .... [2013/05/23 17:29:04.529889, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 5821 [2013/05/23 17:29:04.530055, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 2428 bytes. There is no more data outstanding [2013/05/23 17:29:04.530166, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..2428] (align 0) [2013/05/23 17:29:04.530222, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.530253, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=2484 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18369 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2428 (0x97C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 2428 (0x97C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=2429 [2013/05/23 17:29:04.530614, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 7C 09 00 00 56 00 00 ........ .|...V.. [0010] 00 64 09 00 00 00 00 00 00 0C 00 02 00 50 09 00 .d...... .....P.. [0020] 00 03 00 00 00 20 09 00 00 02 09 00 00 C0 08 00 ..... .. ........ [0030] 00 7A 08 00 00 34 08 00 00 F2 07 00 00 4C 00 00 .z...4.. .....L.. [0040] 00 4A 00 00 00 48 00 00 00 00 00 00 00 00 00 00 .J...H.. ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 5C 00 5C ........ .....\.\ [0070] 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E .h.h.1.\ .p.r.i.n [0080] 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 .t.$.\.W .3.2.X.8 [0090] 00 36 00 5C 00 33 00 5C 00 68 00 70 00 6F 00 32 .6.\.3.\ .h.p.o.2 [00A0] 00 32 00 30 00 30 00 61 00 2E 00 69 00 6E 00 69 .2.0.0.a ...i.n.i [00B0] 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C 00 70 ...\.\.h .h.1.\.p [00C0] 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 .r.i.n.t .$.\.W.3 [00D0] 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 68 .2.X.8.6 .\.3.\.h [00E0] 00 70 00 7A 00 73 00 74 00 35 00 6D 00 75 00 2E .p.z.s.t .5.m.u.. [00F0] 00 64 00 6C 00 6C 00 00 00 5C 00 5C 00 68 00 68 .d.l.l.. .\.\.h.h [0100] 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 .1.\.p.r .i.n.t.$ [0110] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [0120] 00 33 00 5C 00 68 00 70 00 7A 00 33 00 63 00 35 .3.\.h.p .z.3.c.5 [0130] 00 6D 00 75 00 2E 00 64 00 6C 00 6C 00 00 00 5C .m.u...d .l.l...\ [0140] 00 5C 00 68 00 68 00 31 00 5C 00 70 00 72 00 69 .\.h.h.1 .\.p.r.i [0150] 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 .n.t.$.\ .W.3.2.X [0160] 00 38 00 36 00 5C 00 33 00 5C 00 68 00 70 00 7A .8.6.\.3 .\.h.p.z [0170] 00 75 00 72 00 35 00 6D 00 75 00 2E 00 64 00 6C .u.r.5.m .u...d.l [0180] 00 6C 00 00 00 5C 00 5C 00 68 00 68 00 31 00 5C .l...\.\ .h.h.1.\ [0190] 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 .p.r.i.n .t.$.\.W [01A0] 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C .3.2.X.8 .6.\.3.\ [01B0] 00 68 00 70 00 6F 00 32 00 32 00 30 00 30 00 33 .h.p.o.2 .2.0.0.3 [01C0] 00 2E 00 78 00 6D 00 6C 00 00 00 5C 00 5C 00 68 ...x.m.l ...\.\.h [01D0] 00 68 00 31 00 5C 00 70 00 72 00 69 00 6E 00 74 .h.1.\.p .r.i.n.t [01E0] 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 .$.\.W.3 .2.X.8.6 [01F0] 00 5C 00 33 00 5C 00 68 00 70 00 7A 00 73 00 63 .\.3.\.h .p.z.s.c [2013/05/23 17:29:04.538214, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1228 [2013/05/23 17:29:04.538366, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4cc [2013/05/23 17:29:04.538421, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8114 of length 1232 (0 toread) [2013/05/23 17:29:04.538470, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.538498, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1228 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18433 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1144 (0x478) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1144 (0x478) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1161 [2013/05/23 17:29:04.539563, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 78 04 00 00 57 00 00 ........ .x...W.. [0020] 00 60 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .`...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 11 00 00 00 00 00 00 .1...... ........ [0050] 00 11 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 52 00 34 00 30 .s. .N.T . .R.4.0 [0070] 00 30 00 30 00 00 00 00 00 03 00 00 00 08 00 02 .0.0.... ........ [0080] 00 00 04 00 00 C0 2F 84 02 78 01 3C 00 00 00 00 ....../. .x.<.... [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.541056, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:04.541153, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:04.541227, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1144 params=0 setup=2 [2013/05/23 17:29:04.541284, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:04.541328, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:04.541372, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:04.541421, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:04.541472, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:04.541521, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1144 [2013/05/23 17:29:04.541570, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1144 [2013/05/23 17:29:04.541615, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1144 [2013/05/23 17:29:04.541662, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1144, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:04.541711, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:04.541755, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1128 [2013/05/23 17:29:04.541799, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1128 [2013/05/23 17:29:04.541851, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:04.541897, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1128 [2013/05/23 17:29:04.541942, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1128, incoming data = 1128 [2013/05/23 17:29:04.541991, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:04.542057, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0478 (1144) auth_length : 0x0000 (0) call_id : 0x00000057 (87) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000460 (1120) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1120 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 11 00 00 00 00 00 00 00 11 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 52 00 34 00 30 00 30 00 30 00 00 00 00 00 .R.4.0. 0.0..... [0050] 03 00 00 00 08 00 02 00 00 04 00 00 C0 2F 84 02 ........ ...../.. [0060] 78 01 3C 00 00 00 00 00 00 00 00 00 00 00 00 00 x.<..... ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 ........ ........ [2013/05/23 17:29:04.553869, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:04.553941, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:04.554001, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.554060, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.559266, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:04.560125, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:04.560430, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:04.560491, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:04.560544, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:04.560613, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT R4000' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] C0 2F 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 ./..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:04.565737, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:04.565840, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:04.565902, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:04.565971, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:04.566145, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:04.566266, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.566553, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.566608, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.566666, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.566715, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.566762, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.566807, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.567008, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.570191, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.570363, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.570419, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.570470, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.570516, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.570647, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A0 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.570788, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a0-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.571128, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a0-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00ae (174) name_size : 0x00ae (174) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.571757, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A0 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.571881, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.571933, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.571988, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.572036, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.572111, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.572164, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.572270, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.572338, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.572392, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.572440, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.572491, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.572536, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.572653, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.572720, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.572774, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.572822, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.572875, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.572919, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.573027, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.573117, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.573179, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.573229, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.573283, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.573328, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.573451, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.573516, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.573569, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.573618, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.573672, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.573718, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.573808, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT R4000] [2013/05/23 17:29:04.573869, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.573939, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.573989, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.574044, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.575854, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.576049, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] not found [2013/05/23 17:29:04.576148, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.576205, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.576258, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.576310, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.576361, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.576412, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.576463, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.576728, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a0-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.576920, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A0 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.577042, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A0 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.577188, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.577259, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.577337, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.577823, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT R4000,0): WERR_BADFILE [2013/05/23 17:29:04.577909, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT R4000] and version [0] [2013/05/23 17:29:04.577987, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.578322, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.578381, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.578438, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.578487, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.578533, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.578577, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.578781, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.578867, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.578926, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.579065, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.579184, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.579299, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.579454, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A1 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.579599, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a1-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.579880, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a1-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00ae (174) name_size : 0x00ae (174) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.580622, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A1 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.580769, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.580822, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.580879, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.580928, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.580979, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.581024, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.581192, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.581293, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.581367, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.581417, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.581470, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.581515, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.581622, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.581690, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.581744, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.581793, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.581847, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.581892, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.581998, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.582060, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.582168, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.582222, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.582278, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.582323, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.582451, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.582516, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.582570, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.582619, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.582688, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.582737, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.582833, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT R4000] [2013/05/23 17:29:04.582896, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.582952, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.583002, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.583057, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.583151, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.583232, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] not found [2013/05/23 17:29:04.583289, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.583340, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.583391, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.583442, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.583492, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.583542, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.583592, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.583850, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a1-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.584039, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A1 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.584226, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A1 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.584416, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.584475, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.584548, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.584780, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT R4000,1): WERR_BADFILE [2013/05/23 17:29:04.584849, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT R4000] and version [1] [2013/05/23 17:29:04.584927, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.586926, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.587000, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.587061, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.587165, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.587217, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.587262, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.587471, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.587800, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.587895, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.587948, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.588000, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.588044, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.588236, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A2 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.588402, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a2-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.588687, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a2-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00ae (174) name_size : 0x00ae (174) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.589409, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A2 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.589546, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.589599, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.589654, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.589703, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.589772, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.589818, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.589927, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.589993, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.590050, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.590146, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.590208, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.590253, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.590362, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.590429, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.590484, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.590532, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.590586, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.590631, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.590738, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.590798, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.590852, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.590901, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.590955, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.591000, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.591180, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.591292, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.591351, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.591402, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.591459, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.591504, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.591603, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT R4000] [2013/05/23 17:29:04.591665, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.591720, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.591770, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.591824, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.591869, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.591936, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] not found [2013/05/23 17:29:04.591990, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.592041, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.592119, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.592178, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.592230, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.592280, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.592329, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.592606, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a2-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.592797, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A2 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.592911, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A2 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.593019, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.593068, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.593326, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.597482, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT R4000,2): WERR_BADFILE [2013/05/23 17:29:04.597570, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT R4000] and version [2] [2013/05/23 17:29:04.597649, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.597930, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.597984, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.598040, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.599181, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.599346, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.599413, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.599629, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.599716, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.599776, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.599826, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.599876, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.599920, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.600038, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A3 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.601362, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a3-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.601677, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a3-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00ae (174) name_size : 0x00ae (174) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.603029, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A3 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.603207, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.603280, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.603336, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.603385, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.603438, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.603483, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.603590, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.603654, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.603710, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.603758, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.603809, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.603854, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.603953, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.604013, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.604067, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.604147, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.604204, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.604249, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.604363, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.604425, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.604481, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.604529, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.604598, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.604644, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.604762, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.604825, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.604878, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.604927, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.604980, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.605024, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.605142, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT R4000] [2013/05/23 17:29:04.605295, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.605363, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.605464, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.605536, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.605584, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] [2013/05/23 17:29:04.605664, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT R4000] not found [2013/05/23 17:29:04.605720, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.605773, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.605825, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.605876, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.605944, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.605997, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.606047, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.606354, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a3-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.606551, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A3 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.606668, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A3 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.606776, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.606826, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.606900, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.608863, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT R4000,3): WERR_BADFILE [2013/05/23 17:29:04.609016, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT R4000] and version [3] [2013/05/23 17:29:04.609074, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:04.609198, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.609465, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:04.609557, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:04.609614, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1128 [2013/05/23 17:29:04.609700, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:04.609761, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:04.609835, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x00000057 (87) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:04.614193, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:04.614299, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:04.614363, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:04.614413, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.614443, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18433 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:04.614829, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 57 00 00 ........ .,...W.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.623840, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1236 [2013/05/23 17:29:04.624020, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d4 [2013/05/23 17:29:04.624076, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8115 of length 1240 (0 toread) [2013/05/23 17:29:04.624182, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.624214, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1236 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18497 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1152 (0x480) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1152 (0x480) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1169 [2013/05/23 17:29:04.624761, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 80 04 00 00 58 00 00 ........ .....X.. [0020] 00 68 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .h...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 15 00 00 00 00 00 00 .1...... ........ [0050] 00 15 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 41 00 6C 00 70 .s. .N.T . .A.l.p [0070] 00 68 00 61 00 5F 00 41 00 58 00 50 00 00 00 00 .h.a._.A .X.P.... [0080] 00 03 00 00 00 08 00 02 00 00 04 00 00 C0 2F 84 ........ ....../. [0090] 02 78 01 3C 00 00 00 00 00 00 00 00 00 00 00 00 .x.<.... ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.626275, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:04.626341, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:04.626412, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1152 params=0 setup=2 [2013/05/23 17:29:04.626469, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:04.626513, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:04.626557, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:04.626605, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:04.626655, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:04.627537, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1152 [2013/05/23 17:29:04.627609, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1152 [2013/05/23 17:29:04.627656, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1152 [2013/05/23 17:29:04.627704, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1152, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:04.627752, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:04.627795, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1136 [2013/05/23 17:29:04.627839, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1136 [2013/05/23 17:29:04.627893, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:04.627937, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1136 [2013/05/23 17:29:04.627981, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1136, incoming data = 1136 [2013/05/23 17:29:04.628030, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:04.628125, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0480 (1152) auth_length : 0x0000 (0) call_id : 0x00000058 (88) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000468 (1128) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1128 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 15 00 00 00 00 00 00 00 15 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 41 00 6C 00 70 00 68 00 61 00 5F 00 41 00 .A.l.p. h.a._.A. [0050] 58 00 50 00 00 00 00 00 03 00 00 00 08 00 02 00 X.P..... ........ [0060] 00 04 00 00 C0 2F 84 02 78 01 3C 00 00 00 00 00 ...../.. x.<..... [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0460] 00 00 00 00 00 04 00 00 ........ [2013/05/23 17:29:04.632949, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:04.633014, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:04.633072, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.633156, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.633209, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:04.633974, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:04.634298, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:04.634365, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:04.634418, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:04.634485, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT Alpha_AXP' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] C0 2F 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 ./..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:04.638751, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:04.638851, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:04.638911, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:04.638962, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:04.639129, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:04.639249, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.639534, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.639606, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.639665, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.639715, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.639762, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.639806, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.640022, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.640162, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.640229, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.640278, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.640403, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.640473, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.640603, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A4 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.640738, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a4-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.641016, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a4-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00b6 (182) name_size : 0x00b6 (182) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.641690, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A4 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.641820, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.641872, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.642003, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.642062, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.642158, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.642207, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.642315, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.642381, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.642437, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.642484, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.642536, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.642580, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.642675, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.642737, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.642791, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.642838, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.642890, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.642934, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.643039, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.643181, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.643247, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.643297, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.643352, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.643397, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.643528, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.643593, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.643647, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.643696, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.645045, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.645148, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.645271, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT Alpha_AXP] [2013/05/23 17:29:04.645342, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.645463, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.645614, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.645683, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.645730, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.645817, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] not found [2013/05/23 17:29:04.645876, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.645946, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.645998, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.646050, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.646135, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.646190, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.646241, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.646505, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a4-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.646696, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A4 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.646815, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A4 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.646927, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.647115, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.647204, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.647690, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT Alpha_AXP,0): WERR_BADFILE [2013/05/23 17:29:04.647773, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [0] [2013/05/23 17:29:04.647852, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.648215, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.648277, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.648334, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.648383, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.648430, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.648474, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.648676, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.648763, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.648822, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.648871, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.648921, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.648967, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.649083, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A5 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.649293, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a5-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.649574, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a5-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00b6 (182) name_size : 0x00b6 (182) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.650240, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A5 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.650368, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.650420, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.650475, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.650523, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.650575, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.650620, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.650725, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.650792, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.650848, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.650896, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.650948, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.650993, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.651147, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.651244, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.651303, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.651368, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.651425, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.651471, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.651594, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.651659, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.651713, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.651761, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.651814, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.651859, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.651972, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.652170, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.652240, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.652290, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.652349, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.652394, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.652501, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT Alpha_AXP] [2013/05/23 17:29:04.652563, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.652618, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.652668, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.652722, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.652783, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.652861, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] not found [2013/05/23 17:29:04.652918, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.652969, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.653021, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.653072, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.653178, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.653233, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.653285, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.653544, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a5-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.653734, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A5 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.653849, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A5 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.653957, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.654005, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.654079, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.654407, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT Alpha_AXP,1): WERR_BADFILE [2013/05/23 17:29:04.654484, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [1] [2013/05/23 17:29:04.654561, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.654837, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.654890, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.654945, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.654994, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.655040, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.655084, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.655364, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.655518, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.655581, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.655629, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.655679, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.655724, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.655845, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A6 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.655992, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a6-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.656362, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a6-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00b6 (182) name_size : 0x00b6 (182) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.656966, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A6 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.657212, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.657277, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.657333, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.658378, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.658455, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.658500, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.658614, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.658684, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.658740, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.658788, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.658839, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.658884, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.659005, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.659071, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.659194, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.659248, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.659303, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.659349, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.659469, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.659534, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.659588, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.659636, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.659690, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.659735, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.659849, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.659909, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.659964, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.660014, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.660068, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.660146, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.660247, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT Alpha_AXP] [2013/05/23 17:29:04.660309, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.660487, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.660548, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.660608, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.660654, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.660741, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] not found [2013/05/23 17:29:04.660799, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.660852, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.660904, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.660955, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.661005, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.661056, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.661145, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.661412, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a6-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.661601, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A6 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.661718, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A6 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.661825, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.661890, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.661967, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.662566, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT Alpha_AXP,2): WERR_BADFILE [2013/05/23 17:29:04.662683, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [2] [2013/05/23 17:29:04.662770, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.663050, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.663156, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.663221, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.663271, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.663318, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.663362, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.663563, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.663648, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.663706, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.663754, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.663804, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.663849, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.663998, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A7 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.664192, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a7-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.664475, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a7-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00b6 (182) name_size : 0x00b6 (182) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.665073, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A7 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.665263, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.665320, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.665417, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.665484, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.665539, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.665585, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.665694, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.665761, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.665835, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.665885, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.665937, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.665982, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.666084, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.666241, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.666301, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.666350, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.666404, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.666449, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.666567, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.666631, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.666685, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.666732, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.666786, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.666831, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.666946, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.667009, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.667062, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.667159, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.669540, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.669686, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.669812, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT Alpha_AXP] [2013/05/23 17:29:04.669881, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.669937, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.669987, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.670045, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.670120, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] [2013/05/23 17:29:04.670208, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP] not found [2013/05/23 17:29:04.670266, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.670318, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.670370, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.670421, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.670471, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.670522, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.670572, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.670832, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a7-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.671038, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A7 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.671201, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A7 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.671315, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.671364, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.671441, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.671670, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT Alpha_AXP,3): WERR_BADFILE [2013/05/23 17:29:04.671736, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [3] [2013/05/23 17:29:04.671788, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:04.671851, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.672144, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:04.672254, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:04.672376, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1136 [2013/05/23 17:29:04.672492, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:04.672560, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:04.672638, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x00000058 (88) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:04.676838, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:04.676942, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:04.677006, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:04.677057, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.677126, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18497 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:04.677728, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 58 00 00 ........ .,...X.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.684674, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1232 [2013/05/23 17:29:04.684821, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4d0 [2013/05/23 17:29:04.684877, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8116 of length 1236 (0 toread) [2013/05/23 17:29:04.684926, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.684954, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1232 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18561 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1148 (0x47C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1148 (0x47C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1165 [2013/05/23 17:29:04.685527, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 7C 04 00 00 59 00 00 ........ .|...Y.. [0020] 00 64 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .d...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 13 00 00 00 00 00 00 .1...... ........ [0050] 00 13 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 4E 00 54 00 20 00 50 00 6F 00 77 .s. .N.T . .P.o.w [0070] 00 65 00 72 00 50 00 43 00 00 00 50 00 03 00 00 .e.r.P.C ...P.... [0080] 00 08 00 02 00 00 04 00 00 C0 2F 84 02 78 01 3C ........ ../..x.< [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.687007, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:04.687073, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:04.687168, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1148 params=0 setup=2 [2013/05/23 17:29:04.687228, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:04.687273, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:04.688217, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:04.688295, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:04.688351, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:04.688403, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1148 [2013/05/23 17:29:04.688453, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1148 [2013/05/23 17:29:04.688498, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1148 [2013/05/23 17:29:04.688545, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1148, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:04.688593, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:04.688636, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1132 [2013/05/23 17:29:04.688681, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1132 [2013/05/23 17:29:04.688749, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:04.688794, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1132 [2013/05/23 17:29:04.688839, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1132, incoming data = 1132 [2013/05/23 17:29:04.688889, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:04.688954, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x047c (1148) auth_length : 0x0000 (0) call_id : 0x00000059 (89) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000464 (1124) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1124 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 13 00 00 00 00 00 00 00 13 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 n.d.o.w. s. .N.T. [0040] 20 00 50 00 6F 00 77 00 65 00 72 00 50 00 43 00 .P.o.w. e.r.P.C. [0050] 00 00 50 00 03 00 00 00 08 00 02 00 00 04 00 00 ..P..... ........ [0060] C0 2F 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 ./..x.<. ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0460] 00 04 00 00 .... [2013/05/23 17:29:04.693634, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:04.693695, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:04.693767, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.693828, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.693880, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:04.694732, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:04.695030, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:04.695127, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:04.695194, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:04.695264, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows NT PowerPC' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] C0 2F 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 ./..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:04.699583, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:04.699684, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:04.699744, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:04.699795, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:04.699933, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:04.700033, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.700442, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.700509, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.700569, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.700619, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.700666, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.700710, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.700912, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.700997, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.701056, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.701206, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.701276, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.701323, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.701448, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A8 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.701584, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a8-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.701862, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a8-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00b2 (178) name_size : 0x00b2 (178) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.702515, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A8 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.702644, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.702696, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.702750, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.702796, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.702935, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.703009, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.703164, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.703255, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.703312, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.703360, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.703413, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.703458, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.703558, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.703621, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.703674, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.703722, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.703775, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.703819, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.703937, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.704001, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.704056, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.704159, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.704222, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.704268, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.704397, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.704479, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.704536, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.704585, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.704641, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.704686, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.704780, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT PowerPC] [2013/05/23 17:29:04.704842, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.704897, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.704945, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.704999, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.705044, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.705146, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] not found [2013/05/23 17:29:04.705213, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.705265, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.705317, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.705368, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.705485, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.705537, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.705588, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.705865, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a8-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.706055, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A8 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.706208, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A8 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.706322, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.706372, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.706448, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.706676, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT PowerPC,0): WERR_BADFILE [2013/05/23 17:29:04.706743, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT PowerPC] and version [0] [2013/05/23 17:29:04.706820, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.707145, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.707213, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.707273, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.707324, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.707371, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.707679, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.707912, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.708083, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.708202, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.708253, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.708303, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.708348, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.708472, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 A9 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.708609, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a9-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.708888, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a9-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00b2 (178) name_size : 0x00b2 (178) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.709535, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A9 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.709663, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.709731, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.709787, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.709835, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.709887, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.709931, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.710036, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.710156, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.710225, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.710275, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.710328, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.710373, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.710483, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.710547, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.710601, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.710648, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.710701, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.710746, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.710853, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.710913, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.710967, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.711014, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.711083, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.711196, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.711330, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.711396, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.711451, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.711501, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.711555, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.711600, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.711689, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT PowerPC] [2013/05/23 17:29:04.711748, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.711803, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.711852, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.711918, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.711963, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.712035, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] not found [2013/05/23 17:29:04.712263, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.712326, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.712378, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.712429, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.712493, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.712546, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.712595, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.712850, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000a9-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.713165, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A9 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.713292, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 A9 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.713400, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.713449, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.713523, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.713753, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT PowerPC,1): WERR_BADFILE [2013/05/23 17:29:04.713820, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT PowerPC] and version [1] [2013/05/23 17:29:04.713897, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.714244, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.714325, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.714383, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.714431, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.714478, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.714522, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.714722, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.714805, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.714865, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.714913, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.714962, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.715006, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.715173, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 AA 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.715329, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000aa-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.715672, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000aa-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00b2 (178) name_size : 0x00b2 (178) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.716348, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AA 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.716480, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.716533, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.716587, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.716634, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.716686, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.716730, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.716836, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.716901, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.716955, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.717003, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.717053, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.717156, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.717278, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.717345, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.717400, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.717911, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.717993, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.718040, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.718305, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.718392, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.718449, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.718498, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.718556, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.718602, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.718721, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.718784, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.718840, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.718889, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.718942, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.718989, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.719080, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT PowerPC] [2013/05/23 17:29:04.719210, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.719270, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.719320, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.719376, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.719421, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.719499, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] not found [2013/05/23 17:29:04.719557, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.719626, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.719678, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.719729, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.719779, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.719830, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.719892, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.720196, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000aa-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.720503, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AA 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.720625, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AA 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.720733, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.720783, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.720856, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.721148, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT PowerPC,2): WERR_BADFILE [2013/05/23 17:29:04.721254, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT PowerPC] and version [2] [2013/05/23 17:29:04.721337, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.721633, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.721689, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.721745, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.721793, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.721840, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.721979, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.722247, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.722346, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.722405, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.722453, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.722502, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.722547, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.722665, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 AB 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.722797, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ab-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.723070, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ab-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00b2 (178) name_size : 0x00b2 (178) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.723822, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AB 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.723957, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.724008, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.724062, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.724176, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.724238, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.724283, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.724393, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.724459, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.724514, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.724562, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.724613, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.724657, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.724753, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.724816, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.724869, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.724932, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.724987, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.725032, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.725209, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.725303, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.725359, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.725466, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.725531, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.725577, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.725711, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.725780, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.725835, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.725885, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.725939, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.725984, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.726073, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows NT PowerPC] [2013/05/23 17:29:04.726198, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.726258, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.726308, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.726364, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.726426, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] [2013/05/23 17:29:04.726507, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT PowerPC] not found [2013/05/23 17:29:04.726564, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.726614, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.726665, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.726716, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.726766, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.726815, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.726866, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.727175, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ab-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.727394, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AB 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.727759, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AB 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.727898, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.727950, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.728026, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.728396, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows NT PowerPC,3): WERR_BADFILE [2013/05/23 17:29:04.728479, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows NT PowerPC] and version [3] [2013/05/23 17:29:04.728532, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:04.728595, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.728930, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:04.729023, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:04.729078, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1132 [2013/05/23 17:29:04.729225, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:04.729293, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:04.729368, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x00000059 (89) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:04.733571, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:04.733676, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:04.733737, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:04.733788, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.733818, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18561 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:04.734223, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 59 00 00 ........ .,...Y.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.740579, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1216 [2013/05/23 17:29:04.740747, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4c0 [2013/05/23 17:29:04.740805, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8117 of length 1220 (0 toread) [2013/05/23 17:29:04.740853, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.740883, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1216 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18625 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1132 (0x46C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1132 (0x46C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1149 [2013/05/23 17:29:04.741476, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 6C 04 00 00 5A 00 00 ........ .l...Z.. [0020] 00 54 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .T...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0C 00 00 00 00 00 00 .1...... ........ [0050] 00 0C 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 34 00 2E 00 30 00 00 00 03 00 00 .s. .4.. .0...... [0070] 00 08 00 02 00 00 04 00 00 C0 2F 84 02 78 01 3C ........ ../..x.< [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.742954, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:04.743022, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:04.743117, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1132 params=0 setup=2 [2013/05/23 17:29:04.743183, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:04.743229, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:04.743274, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:04.743323, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:04.745419, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:04.745521, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1132 [2013/05/23 17:29:04.745574, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1132 [2013/05/23 17:29:04.745620, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1132 [2013/05/23 17:29:04.745667, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1132, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:04.745715, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:04.745758, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1116 [2013/05/23 17:29:04.745803, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1116 [2013/05/23 17:29:04.745855, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:04.745900, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1116 [2013/05/23 17:29:04.745944, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1116, incoming data = 1116 [2013/05/23 17:29:04.745994, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:04.746059, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x046c (1132) auth_length : 0x0000 (0) call_id : 0x0000005a (90) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000454 (1108) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1108 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0C 00 00 00 00 00 00 00 0C 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 34 00 2E 00 n.d.o.w. s. .4... [0040] 30 00 00 00 03 00 00 00 08 00 02 00 00 04 00 00 0....... ........ [0050] C0 2F 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 ./..x.<. ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 04 00 00 .... [2013/05/23 17:29:04.751013, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:04.751080, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:04.751169, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.751229, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.751280, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:04.752079, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:04.752402, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:04.752461, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:04.752514, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:04.752580, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows 4.0' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] C0 2F 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 ./..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:04.756511, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:04.756607, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:04.756666, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:04.756733, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:04.756873, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:04.756975, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.757311, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.757639, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.757708, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.757758, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.757806, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.757851, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.758055, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.758202, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.758266, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.758315, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.758366, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.758411, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.758532, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 AC 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.758668, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ac-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.758962, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ac-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.759692, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AC 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.759826, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.759888, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.759943, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.759991, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.760043, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.760125, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.760248, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.760316, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.760467, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.760526, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.760580, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.760625, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.760758, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.760832, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.760889, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.760936, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.760988, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.761033, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.761213, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.761309, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.761366, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.761414, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.761470, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.761514, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.761634, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.761696, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.761750, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.761799, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.761852, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.761898, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.762081, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows 4.0] [2013/05/23 17:29:04.762209, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.762267, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.762332, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.762389, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.762434, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.762509, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] not found [2013/05/23 17:29:04.762564, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.762614, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.762665, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.762715, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.762765, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.762815, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.762865, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.763153, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ac-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.763357, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AC 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.763472, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AC 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.763579, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.763628, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.763721, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.763950, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows 4.0,0): WERR_BADFILE [2013/05/23 17:29:04.764015, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows 4.0] and version [0] [2013/05/23 17:29:04.764137, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.764511, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.764576, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.764634, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.764683, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.764730, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.764776, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.764977, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.765062, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.765181, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.765236, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.765286, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.765331, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.765508, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 AD 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.765683, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ad-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.765966, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ad-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.766617, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AD 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.766745, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.766797, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.766851, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.766898, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.766951, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.766996, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.767151, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.767249, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.767308, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.768509, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.768590, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.768637, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.768762, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.768832, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.768888, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.768936, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.768989, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.769034, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.769198, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.769288, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.769433, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.769493, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.769551, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.769597, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.769732, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.769799, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.769854, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.769904, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.769959, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.770004, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.770166, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows 4.0] [2013/05/23 17:29:04.770255, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.770313, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.770363, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.770419, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.770464, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.770535, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] not found [2013/05/23 17:29:04.770589, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.770640, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.770691, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.770741, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.770791, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.770840, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.770891, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.771211, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ad-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.771438, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AD 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.771570, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AD 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.771680, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.771729, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.771804, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.772034, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows 4.0,1): WERR_BADFILE [2013/05/23 17:29:04.772152, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows 4.0] and version [1] [2013/05/23 17:29:04.772246, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.772524, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.772579, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.772635, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.772685, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.772731, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.772776, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.772977, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.773062, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.773178, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.773249, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.773302, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.773347, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.773469, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 AE 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.773602, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ae-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.773875, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ae-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.774594, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AE 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.774731, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.774783, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.774838, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.774885, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.774947, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.774992, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.775170, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.775270, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.775327, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.775421, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.775496, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.775543, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.775660, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.775725, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.775779, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.775828, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.775882, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.775928, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.776035, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.776144, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.776210, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.776260, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.776315, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.776361, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.776488, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.776553, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.776623, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.776674, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.776729, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.776774, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.776868, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows 4.0] [2013/05/23 17:29:04.776928, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.776984, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.777033, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.777130, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.777191, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.777270, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] not found [2013/05/23 17:29:04.777326, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.777591, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.777687, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.777740, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.777790, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.777840, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.777891, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.778196, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000ae-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.778434, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AE 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.778551, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AE 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.778751, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.778808, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.778883, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.779179, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows 4.0,2): WERR_BADFILE [2013/05/23 17:29:04.779279, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows 4.0] and version [2] [2013/05/23 17:29:04.779360, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.779722, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.779788, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.779845, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.779895, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.779941, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.779985, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.780262, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.780452, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.780523, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.780572, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.780623, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.780667, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.780790, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 AF 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.780927, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000af-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.781269, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000af-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.781878, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AF 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.782012, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.782064, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.782211, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.782270, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.782322, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.782366, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.782473, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.782541, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.782596, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.782644, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.782694, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.782738, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.782834, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.782896, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.782948, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.782996, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.783048, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.783148, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.783294, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.783360, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.783416, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.783464, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.783520, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.783581, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.783700, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.783764, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.783819, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.783869, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.783923, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.783969, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.784059, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows 4.0] [2013/05/23 17:29:04.784173, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.784235, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.784284, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.784339, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.784385, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] [2013/05/23 17:29:04.784525, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0] not found [2013/05/23 17:29:04.784614, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.784667, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.784718, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.784769, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.784818, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.784868, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.784935, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.785254, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000af-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.785515, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AF 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.785636, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 AF 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.785743, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.785793, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.785866, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.786142, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows 4.0,3): WERR_BADFILE [2013/05/23 17:29:04.786236, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows 4.0] and version [3] [2013/05/23 17:29:04.786290, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:04.786354, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.786592, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:04.786678, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:04.786752, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1116 [2013/05/23 17:29:04.786840, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:04.786903, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:04.786979, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x0000005a (90) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:04.791543, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:04.791652, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:04.791713, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:04.791764, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.791794, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18625 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:04.792215, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 5A 00 00 ........ .,...Z.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.796893, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1220 [2013/05/23 17:29:04.797043, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4c4 [2013/05/23 17:29:04.797134, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8118 of length 1224 (0 toread) [2013/05/23 17:29:04.797186, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.797215, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1220 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18689 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1136 (0x470) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1136 (0x470) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1153 [2013/05/23 17:29:04.798578, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 70 04 00 00 5B 00 00 ........ .p...[.. [0020] 00 58 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .X...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0D 00 00 00 00 00 00 .1...... ........ [0050] 00 0D 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 49 00 41 00 36 00 34 00 00 00 00 .s. .I.A .6.4.... [0070] 00 03 00 00 00 08 00 02 00 00 04 00 00 C0 2F 84 ........ ....../. [0080] 02 78 01 3C 00 00 00 00 00 00 00 00 00 00 00 00 .x.<.... ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.800129, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:04.800209, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:04.800281, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1136 params=0 setup=2 [2013/05/23 17:29:04.800411, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:04.800481, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:04.800529, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:04.800579, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:04.800631, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:04.800681, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1136 [2013/05/23 17:29:04.800729, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1136 [2013/05/23 17:29:04.800791, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1136 [2013/05/23 17:29:04.800839, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1136, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:04.800888, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:04.800931, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1120 [2013/05/23 17:29:04.800975, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1120 [2013/05/23 17:29:04.801028, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:04.801071, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1120 [2013/05/23 17:29:04.801164, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1120, incoming data = 1120 [2013/05/23 17:29:04.801218, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:04.801282, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0470 (1136) auth_length : 0x0000 (0) call_id : 0x0000005b (91) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000458 (1112) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1112 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0D 00 00 00 00 00 00 00 0D 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 49 00 41 00 n.d.o.w. s. .I.A. [0040] 36 00 34 00 00 00 00 00 03 00 00 00 08 00 02 00 6.4..... ........ [0050] 00 04 00 00 C0 2F 84 02 78 01 3C 00 00 00 00 00 ...../.. x.<..... [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 00 00 00 00 04 00 00 ........ [2013/05/23 17:29:04.805944, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:04.806009, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:04.806066, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.806153, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.806207, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:04.806981, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:04.807290, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:04.807352, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:04.807418, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:04.807488, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows IA64' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] C0 2F 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 ./..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:04.811723, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:04.811823, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:04.811976, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:04.812042, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:04.812206, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:04.812319, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.812604, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.812658, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.812715, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.812779, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.812829, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.812873, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.813079, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.813230, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.813292, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.813341, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.813391, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.813436, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.813558, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 B0 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.813691, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b0-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.813966, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b0-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a6 (166) name_size : 0x00a6 (166) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.814621, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B0 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.814846, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.814911, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.814966, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.815015, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.815067, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.815166, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.815290, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.815362, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.815476, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.815530, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.815584, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.815629, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.815744, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.815810, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.815865, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.815914, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.815967, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.816011, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.816173, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.816266, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.816322, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.816388, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.816444, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.816489, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.816614, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.816679, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.816733, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.816781, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.816835, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.816879, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.816968, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows IA64] [2013/05/23 17:29:04.817026, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.817080, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.817171, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.817228, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.817273, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.817349, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] not found [2013/05/23 17:29:04.817404, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.817455, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.817506, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.817570, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.819822, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.819919, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.819972, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.820273, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b0-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.820564, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B0 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.820686, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B0 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.820794, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.820843, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.820917, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.821201, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows IA64,0): WERR_BADFILE [2013/05/23 17:29:04.821283, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows IA64] and version [0] [2013/05/23 17:29:04.821361, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.821655, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.821710, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.821766, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.821814, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.821860, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.821905, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.822161, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.822263, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.822323, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.822372, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.822422, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.822467, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.822587, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 B1 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.822721, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b1-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.822998, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b1-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a6 (166) name_size : 0x00a6 (166) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.823672, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B1 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.823803, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.823856, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.823910, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.823958, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.824009, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.824054, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.824297, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.824415, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.824474, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.824524, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.824577, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.824623, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.824735, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.824874, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.824956, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.825007, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.825064, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.825171, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.825329, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.825461, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.825527, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.825577, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.825634, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.825679, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.825810, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.825875, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.825930, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.825979, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.826035, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.826079, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.826240, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows IA64] [2013/05/23 17:29:04.826307, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.826363, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.826411, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.826467, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.826512, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.826584, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] not found [2013/05/23 17:29:04.826658, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.826710, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.826762, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.826813, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.826863, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.826912, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.826962, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.827281, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b1-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.827480, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B1 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.827594, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B1 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.827946, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.828018, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.828134, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.828392, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows IA64,1): WERR_BADFILE [2013/05/23 17:29:04.828463, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows IA64] and version [1] [2013/05/23 17:29:04.828663, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.828952, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.829007, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.829065, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.829172, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.829225, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.829269, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.829472, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.829556, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.829615, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.829663, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.829714, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.829759, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.829962, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 B2 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.830182, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b2-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.830471, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b2-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a6 (166) name_size : 0x00a6 (166) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.831150, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B2 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.831309, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.831365, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.831421, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.831469, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.831521, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.831567, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.831674, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.831739, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.831794, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.831842, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.831893, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.831938, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.832034, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.832156, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.832251, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.832302, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.832357, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.832403, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.832528, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.832593, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.832648, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.832696, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.832750, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.832794, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.832908, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.832969, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.833023, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.833072, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.833179, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.833229, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.833332, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows IA64] [2013/05/23 17:29:04.833397, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.833452, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.833501, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.833574, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.833623, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.833699, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] not found [2013/05/23 17:29:04.833755, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.833807, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.833857, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.833909, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.833959, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.834008, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.834057, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.834369, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b2-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.834566, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B2 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.834682, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B2 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.834791, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.834840, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.834981, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.835310, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows IA64,2): WERR_BADFILE [2013/05/23 17:29:04.835440, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows IA64] and version [2] [2013/05/23 17:29:04.835538, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.835820, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.835874, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.835929, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.835978, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.836025, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.836070, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.836330, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.836417, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.836475, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.836523, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.836574, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.836619, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.836735, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 B3 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.836868, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b3-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.837215, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b3-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a6 (166) name_size : 0x00a6 (166) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.838158, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B3 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.838323, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.838378, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.838434, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.838482, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.838535, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.838579, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.838688, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.838754, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.838809, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.838857, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.838907, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.838973, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.839078, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.839230, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.839293, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.839342, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.839397, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.839442, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.839562, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.839627, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.839682, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.839730, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.839784, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.839829, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.839943, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.840129, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.840207, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.840258, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.840317, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.840438, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.840565, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows IA64] [2013/05/23 17:29:04.840651, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.840709, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.840757, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.840816, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.840862, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] [2013/05/23 17:29:04.840936, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64] not found [2013/05/23 17:29:04.840992, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.841044, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.841153, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.841224, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.841277, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.841328, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.841379, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.841642, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b3-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.841832, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B3 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.841948, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B3 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.842070, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.842156, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.842234, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.842463, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows IA64,3): WERR_BADFILE [2013/05/23 17:29:04.842531, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows IA64] and version [3] [2013/05/23 17:29:04.842584, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:04.842646, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.842880, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:04.842962, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:04.843018, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1120 [2013/05/23 17:29:04.843152, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:04.843240, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:04.843318, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x0000005b (91) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:04.848326, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:04.848437, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:04.848499, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:04.848550, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.848581, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18689 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:04.848937, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 5B 00 00 ........ .,...[.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.854282, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 1216 [2013/05/23 17:29:04.854501, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x4c0 [2013/05/23 17:29:04.854590, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8119 of length 1220 (0 toread) [2013/05/23 17:29:04.854660, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.854691, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1216 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18753 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1132 (0x46C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1132 (0x46C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=1149 [2013/05/23 17:29:04.855196, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 6C 04 00 00 5C 00 00 ........ .l...\.. [0020] 00 54 04 00 00 00 00 0A 00 00 00 02 00 06 00 00 .T...... ........ [0030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 68 00 68 ........ .\.\.h.h [0040] 00 31 00 00 00 04 00 02 00 0C 00 00 00 00 00 00 .1...... ........ [0050] 00 0C 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [0060] 00 73 00 20 00 78 00 36 00 34 00 00 00 03 00 00 .s. .x.6 .4...... [0070] 00 08 00 02 00 00 04 00 00 C0 2F 84 02 78 01 3C ........ ../..x.< [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:04.857438, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:04.857519, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:04.857590, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=1132 params=0 setup=2 [2013/05/23 17:29:04.857646, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:04.857691, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:04.857976, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:04.858045, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:04.858144, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:04.858198, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 1132 [2013/05/23 17:29:04.858248, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1132 [2013/05/23 17:29:04.858294, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 1132 [2013/05/23 17:29:04.858341, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 1132, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:04.858388, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:04.858432, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1116 [2013/05/23 17:29:04.858476, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 1116 [2013/05/23 17:29:04.858528, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:04.858572, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 1116 [2013/05/23 17:29:04.858616, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 1116, incoming data = 1116 [2013/05/23 17:29:04.858683, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:04.858749, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x046c (1132) auth_length : 0x0000 (0) call_id : 0x0000005c (92) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000454 (1108) context_id : 0x0000 (0) opnum : 0x000a (10) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1108 [0000] 00 00 02 00 06 00 00 00 00 00 00 00 06 00 00 00 ........ ........ [0010] 5C 00 5C 00 68 00 68 00 31 00 00 00 04 00 02 00 \.\.h.h. 1....... [0020] 0C 00 00 00 00 00 00 00 0C 00 00 00 57 00 69 00 ........ ....W.i. [0030] 6E 00 64 00 6F 00 77 00 73 00 20 00 78 00 36 00 n.d.o.w. s. .x.6. [0040] 34 00 00 00 03 00 00 00 08 00 02 00 00 04 00 00 4....... ........ [0050] C0 2F 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 ./..x.<. ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0420] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0430] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0440] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0450] 00 04 00 00 .... [2013/05/23 17:29:04.863503, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:04.863568, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:04.863625, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.863682, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.863733, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:04.864549, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:04.864841, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:04.864900, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2013/05/23 17:29:04.864951, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[10].fn == 0xb7518d69 [2013/05/23 17:29:04.865019, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers in: struct spoolss_EnumPrinterDrivers server : * server : '\\hh1' environment : * environment : 'Windows x64' level : 0x00000003 (3) buffer : * buffer : DATA_BLOB length=1024 [0000] C0 2F 84 02 78 01 3C 00 00 00 00 00 00 00 00 00 ./..x.<. ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ offered : 0x00000400 (1024) [2013/05/23 17:29:04.870030, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7633(_spoolss_EnumPrinterDrivers) _spoolss_EnumPrinterDrivers [2013/05/23 17:29:04.870157, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2013/05/23 17:29:04.870223, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2013/05/23 17:29:04.870276, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2013/05/23 17:29:04.870414, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2013/05/23 17:29:04.870617, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.870914, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.870969, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.871025, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.871074, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.871162, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.871211, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.871417, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.871504, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.871563, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.871611, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.871661, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.871706, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.871823, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 B4 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.871974, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b4-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.872333, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b4-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers\Version-0' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.872944, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B4 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.873065, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.873171, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.873228, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.873276, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.873328, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.873373, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.873478, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.873555, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.873626, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.873676, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.873729, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.873773, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.873876, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.873940, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.873996, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.874045, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.874144, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.874202, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.874324, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.874389, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.874444, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.874491, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.874546, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.874593, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.874707, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.874767, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.874820, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.874868, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.874922, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.874983, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.875077, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows x64] [2013/05/23 17:29:04.875212, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.875273, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.875322, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.875427, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.875491, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.875645, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] not found [2013/05/23 17:29:04.875709, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.875762, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.875815, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.875866, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.875917, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.875967, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.876017, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.876311, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b4-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.876504, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B4 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.876634, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B4 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.876742, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.876792, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.876867, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.877141, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows x64,0): WERR_BADFILE [2013/05/23 17:29:04.877232, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows x64] and version [0] [2013/05/23 17:29:04.877314, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.877592, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.877646, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.877702, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.877976, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.878061, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.878158, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.878371, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.878551, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.878618, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.878683, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.878735, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.878780, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.878903, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 B5 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.879040, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b5-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.879382, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b5-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers\Version-1' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.879984, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B5 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.880167, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.880230, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.880286, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.880420, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.880489, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.880607, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.880740, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.880811, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.880866, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.880914, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.880968, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.881013, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.881184, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.881284, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.881341, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.881388, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.881443, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.881487, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.881601, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.881663, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.881717, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.881765, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.881819, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.881864, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.881979, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.882039, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.882163, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.882221, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.882278, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.882324, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.882428, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows x64] [2013/05/23 17:29:04.882492, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.882547, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.882595, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.882648, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.882693, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.882760, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] not found [2013/05/23 17:29:04.882814, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.882865, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.882916, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.882966, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.883016, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.883065, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.883177, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.883462, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b5-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.883658, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B5 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.883773, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B5 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.883881, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.883931, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.884005, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.884293, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows x64,1): WERR_BADFILE [2013/05/23 17:29:04.884366, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows x64] and version [1] [2013/05/23 17:29:04.884442, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.884717, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.884771, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.884828, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.884876, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.884923, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.884968, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.885241, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.885340, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.885459, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.885516, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.885568, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.885685, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.885821, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 B6 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.885958, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b6-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.886293, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b6-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers\Version-2' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.886897, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B6 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.887019, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.887147, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.887235, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.887285, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.887337, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.887383, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.887489, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.887556, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.887621, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.887670, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.887721, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.887766, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.888190, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.888298, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.888355, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.888404, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.888460, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.888504, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.888618, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.888680, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.888734, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.888782, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.888853, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.888901, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.889021, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.889083, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.889196, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.889247, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.889303, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.889348, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.889450, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows x64] [2013/05/23 17:29:04.889513, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.889569, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.889617, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.889670, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.889716, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.889782, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] not found [2013/05/23 17:29:04.889835, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.889886, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.889936, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.889986, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.890035, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.890149, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.890218, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.890482, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b6-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.890770, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B6 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.890897, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B6 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.891007, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.891057, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.891169, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.891408, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows x64,2): WERR_BADFILE [2013/05/23 17:29:04.891474, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows x64] and version [2] [2013/05/23 17:29:04.891550, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.891825, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2013/05/23 17:29:04.891880, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.891954, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:495(push_conn_ctx) push_conn_ctx(60019) : conn_ctx_stack_ndx = 0 [2013/05/23 17:29:04.892006, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2013/05/23 17:29:04.892053, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:04.892149, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:04.892363, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:04.892447, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2013/05/23 17:29:04.892506, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2013/05/23 17:29:04.892555, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2013/05/23 17:29:04.892605, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.892650, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM] [2013/05/23 17:29:04.892766, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 B7 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.892901, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b7-0000-0000-9e51-c03564090000 result : WERR_OK [2013/05/23 17:29:04.893228, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b7-0000-0000-9e51-c03564090000 keyname: struct winreg_String name_len : 0x00a4 (164) name_size : 0x00a4 (164) name : * name : 'SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers\Version-3' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2013/05/23 17:29:04.893864, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B7 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.893990, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2013/05/23 17:29:04.894042, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2013/05/23 17:29:04.894144, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2013/05/23 17:29:04.894207, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2013/05/23 17:29:04.894259, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.894337, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM] [2013/05/23 17:29:04.894451, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2013/05/23 17:29:04.894519, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2013/05/23 17:29:04.894574, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.894622, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.894686, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.894730, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet] [2013/05/23 17:29:04.894829, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Control] [2013/05/23 17:29:04.894891, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2013/05/23 17:29:04.894944, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.894992, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.895179, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.895272, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control] [2013/05/23 17:29:04.895455, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Print] [2013/05/23 17:29:04.895565, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2013/05/23 17:29:04.895625, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.895741, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.895820, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.895867, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print] [2013/05/23 17:29:04.896002, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Environments] [2013/05/23 17:29:04.896070, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (5->6) [2013/05/23 17:29:04.896181, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.896234, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.896290, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.896335, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] [2013/05/23 17:29:04.896438, 7, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_api.c:142(regkey_open_onelevel) regkey_open_onelevel: name = [Windows x64] [2013/05/23 17:29:04.896501, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (6->7) [2013/05/23 17:29:04.896555, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.896604, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.896657, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2013/05/23 17:29:04.896702, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0xb697a420 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] [2013/05/23 17:29:04.896769, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64] not found [2013/05/23 17:29:04.896823, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (7->6) [2013/05/23 17:29:04.896874, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (6->5) [2013/05/23 17:29:04.896942, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2013/05/23 17:29:04.896993, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2013/05/23 17:29:04.897043, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2013/05/23 17:29:04.897136, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2013/05/23 17:29:04.897201, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_BADFILE [2013/05/23 17:29:04.897463, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 000000b7-0000-0000-9e51-c03564090000 [2013/05/23 17:29:04.897653, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B7 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.897768, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 B7 00 00 00 00 00 00 00 9E 51 C0 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:04.898245, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:04.898321, 10, pid=2404, effective(0, 20513), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2013/05/23 17:29:04.898396, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:04.898633, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/rpc_client/cli_winreg_spoolss.c:3897(winreg_get_driver_list) winreg_get_driver_list: Could not open key (Windows x64,3): WERR_BADFILE [2013/05/23 17:29:04.898701, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/spoolss/srv_spoolss_nt.c:7484(enumprinterdrivers_level_by_architecture) we have:[0] drivers in environment [Windows x64] and version [3] [2013/05/23 17:29:04.898753, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2013/05/23 17:29:04.898817, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_EnumPrinterDrivers: struct spoolss_EnumPrinterDrivers out: struct spoolss_EnumPrinterDrivers count : * count : 0x00000000 (0) info : * info : NULL needed : * needed : 0x00000000 (0) result : WERR_OK [2013/05/23 17:29:04.899078, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:04.899257, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:04.899318, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 1116 [2013/05/23 17:29:04.899407, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:04.899468, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 1044. [2013/05/23 17:29:04.899542, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x042c (1068) auth_length : 0x0000 (0) call_id : 0x0000005c (92) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000414 (1044) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=1044 [0000] 0C 00 02 00 00 04 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0200] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0210] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0220] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0230] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0240] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0250] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0260] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0270] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0280] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0290] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [02F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0300] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0310] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0320] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0330] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0340] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0350] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0360] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0370] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0380] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0390] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [03F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0400] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0410] 00 00 00 00 .... [2013/05/23 17:29:04.903786, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:04.903890, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 1068 bytes. There is no more data outstanding [2013/05/23 17:29:04.903966, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1068] (align 0) [2013/05/23 17:29:04.904019, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:04.904049, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18753 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2013/05/23 17:29:04.904452, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 5C 00 00 ........ .,...\.. [0010] 00 14 04 00 00 00 00 00 00 0C 00 02 00 00 04 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [00F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [01F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2013/05/23 17:29:05.254529, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 128 [2013/05/23 17:29:05.254681, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x80 [2013/05/23 17:29:05.254737, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8120 of length 132 (0 toread) [2013/05/23 17:29:05.254785, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:05.254829, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18817 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=61 [2013/05/23 17:29:05.255312, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 5D 00 00 ........ .,...].. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 11 00 00 ........ ........ [0030] 00 00 00 00 00 9E 51 2E 35 64 09 00 00 ......Q. 5d... [2013/05/23 17:29:05.255579, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:05.255645, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:05.255711, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2013/05/23 17:29:05.255766, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:05.255810, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:05.255854, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:05.255901, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:05.255951, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:05.256016, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 44 [2013/05/23 17:29:05.256070, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 44 [2013/05/23 17:29:05.256147, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 44 [2013/05/23 17:29:05.256196, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:05.256245, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:05.256287, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 28 [2013/05/23 17:29:05.256330, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 28 [2013/05/23 17:29:05.256377, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:05.256420, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 28 [2013/05/23 17:29:05.256479, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 28, incoming data = 28 [2013/05/23 17:29:05.256602, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:05.256679, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x002c (44) auth_length : 0x0000 (0) call_id : 0x0000005d (93) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000014 (20) context_id : 0x0000 (0) opnum : 0x001d (29) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=20 [0000] 00 00 00 00 11 00 00 00 00 00 00 00 9E 51 2E 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:05.257284, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:05.257334, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:05.257383, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:05.257442, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:05.257493, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:05.258301, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:05.258594, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:05.258652, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2013/05/23 17:29:05.258704, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[29].fn == 0xb751c7da [2013/05/23 17:29:05.258757, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000011-0000-0000-9e51-2e3564090000 [2013/05/23 17:29:05.258919, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 11 00 00 00 00 00 00 00 9E 51 2E 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:05.259029, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 11 00 00 00 00 00 00 00 9E 51 2E 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:05.261308, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 11 00 00 00 00 00 00 00 9E 51 2E 35 ........ .....Q.5 [0010] 64 09 00 00 d... [2013/05/23 17:29:05.261439, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:05.261488, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:05.261686, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:05.261768, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:05.261824, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 28 [2013/05/23 17:29:05.261924, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:05.261986, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 24. [2013/05/23 17:29:05.262060, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0030 (48) auth_length : 0x0000 (0) call_id : 0x0000005d (93) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000018 (24) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=24 [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 ........ [2013/05/23 17:29:05.263758, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:05.263863, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 48 bytes. There is no more data outstanding [2013/05/23 17:29:05.263923, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2013/05/23 17:29:05.263972, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:05.264001, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18817 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2013/05/23 17:29:05.265530, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 5D 00 00 ........ .0...].. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2013/05/23 17:29:07.534931, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 128 [2013/05/23 17:29:07.535119, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x80 [2013/05/23 17:29:07.535185, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8121 of length 132 (0 toread) [2013/05/23 17:29:07.535235, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.535263, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18881 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=61 [2013/05/23 17:29:07.535748, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 5E 00 00 ........ .,...^.. [0020] 00 14 00 00 00 00 00 38 00 00 00 00 00 0F 00 00 .......8 ........ [0030] 00 00 00 00 00 9E 51 27 35 64 09 00 00 ......Q' 5d... [2013/05/23 17:29:07.535971, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:07.536029, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:07.536119, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2013/05/23 17:29:07.536183, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:07.536228, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:07.536273, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:07.536323, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:07.536373, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:07.536421, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 44 [2013/05/23 17:29:07.536469, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 44 [2013/05/23 17:29:07.536512, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 44 [2013/05/23 17:29:07.536559, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:07.536606, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:07.536650, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 28 [2013/05/23 17:29:07.536693, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 28 [2013/05/23 17:29:07.536741, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:07.536785, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 28 [2013/05/23 17:29:07.536844, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 28, incoming data = 28 [2013/05/23 17:29:07.536895, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:07.536956, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x002c (44) auth_length : 0x0000 (0) call_id : 0x0000005e (94) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000014 (20) context_id : 0x0000 (0) opnum : 0x0038 (56) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=20 [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 9E 51 27 35 ........ .....Q'5 [0010] 64 09 00 00 d... [2013/05/23 17:29:07.537558, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:07.537608, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:07.537657, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:07.537717, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:07.537769, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:07.542736, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:07.543052, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:07.543167, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0x38 - api_rpcTNP: rpc command: SPOOLSS_FINDCLOSEPRINTERNOTIFY [2013/05/23 17:29:07.543227, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[56].fn == 0xb752175c [2013/05/23 17:29:07.543288, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_FindClosePrinterNotify: struct spoolss_FindClosePrinterNotify in: struct spoolss_FindClosePrinterNotify handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000f-0000-0000-9e51-273564090000 [2013/05/23 17:29:07.543481, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 9E 51 27 35 ........ .....Q'5 [0010] 64 09 00 00 d... [2013/05/23 17:29:07.543714, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_ReplyClosePrinter: struct spoolss_ReplyClosePrinter in: struct spoolss_ReplyClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : fd82873e-f0aa-4fa4-8356-ad97e7d21bf8 [2013/05/23 17:29:07.543962, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0018 (24) auth_length : 0x0000 (0) call_id : 0x00000003 (3) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000014 (20) context_id : 0x0000 (0) opnum : 0x003c (60) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=0 [2013/05/23 17:29:07.544508, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:741(rpc_api_pipe_send) rpc_api_pipe: host HH20 [2013/05/23 17:29:07.544621, 10, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/smb/smb1cli_trans.c:334(smb1cli_trans_format) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=44, this_data=44, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0 [2013/05/23 17:29:07.555164, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:100(rpc_read_send) rpc_read_send: data_to_read: 32 [2013/05/23 17:29:07.555359, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0030 (48) auth_length : 0x0000 (0) call_id : 0x00000003 (3) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000018 (24) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=1 [0000] 00 . stub_and_verifier : DATA_BLOB length=24 [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 ........ [2013/05/23 17:29:07.556016, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:440(cli_pipe_validate_current_pdu) Got pdu len 48, data_len 24, ss_len 0 [2013/05/23 17:29:07.556077, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:885(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2013/05/23 17:29:07.556220, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_cli] ../source3/rpc_client/cli_pipe.c:940(rpc_api_pipe_got_pdu) rpc_api_pipe: host HH20 returned 24 bytes. [2013/05/23 17:29:07.556314, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_ReplyClosePrinter: struct spoolss_ReplyClosePrinter out: struct spoolss_ReplyClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:07.561628, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) Deregistering messaging pointer for type 514 - private_data=(nil) [2013/05/23 17:29:07.561785, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_FindClosePrinterNotify: struct spoolss_FindClosePrinterNotify out: struct spoolss_FindClosePrinterNotify result : WERR_OK [2013/05/23 17:29:07.561913, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:07.561998, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.562056, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 28 [2013/05/23 17:29:07.562204, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:07.562338, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 4. [2013/05/23 17:29:07.562439, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x001c (28) auth_length : 0x0000 (0) call_id : 0x0000005e (94) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000004 (4) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=4 [0000] 00 00 00 00 .... [2013/05/23 17:29:07.562959, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:07.563058, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 28 bytes. There is no more data outstanding [2013/05/23 17:29:07.563320, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..28] (align 0) [2013/05/23 17:29:07.563408, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.563441, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=84 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18881 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 28 (0x1C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 28 (0x1C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2013/05/23 17:29:07.563815, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 1C 00 00 00 5E 00 00 ........ .....^.. [0010] 00 04 00 00 00 00 00 00 00 00 00 00 00 ........ ..... [2013/05/23 17:29:07.568310, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 128 [2013/05/23 17:29:07.568460, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x80 [2013/05/23 17:29:07.568515, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8122 of length 132 (0 toread) [2013/05/23 17:29:07.568563, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.568592, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18945 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=27712 (0x6C40) smb_bcc=61 [2013/05/23 17:29:07.569058, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 5F 00 00 ........ .,..._.. [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 0F 00 00 ........ ........ [0030] 00 00 00 00 00 9E 51 27 35 64 09 00 00 ......Q' 5d... [2013/05/23 17:29:07.569309, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtrans (pid 2404) conn 0x90a4740 [2013/05/23 17:29:07.569368, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:07.569434, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:589(handle_trans) trans <\PIPE\> data=44 params=0 setup=2 [2013/05/23 17:29:07.569491, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:622(handle_trans) calling named_pipe [2013/05/23 17:29:07.569535, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:540(named_pipe) named pipe command on <> name [2013/05/23 17:29:07.569591, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:462(api_fd_reply) api_fd_reply [2013/05/23 17:29:07.569639, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:504(api_fd_reply) Got API command 0x26 on pipe "spoolss" (pnum 6c40) [2013/05/23 17:29:07.569689, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) api_fd_reply: p:0x898dd18 max_trans_reply: 4280 [2013/05/23 17:29:07.569736, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 44 [2013/05/23 17:29:07.569784, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 44 [2013/05/23 17:29:07.569828, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 44 [2013/05/23 17:29:07.569874, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 [2013/05/23 17:29:07.569923, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2013/05/23 17:29:07.569967, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 28 [2013/05/23 17:29:07.570010, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 28 [2013/05/23 17:29:07.570059, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2013/05/23 17:29:07.570131, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 28 [2013/05/23 17:29:07.570177, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 28, incoming data = 28 [2013/05/23 17:29:07.570226, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1612(process_complete_pdu) PDU is in Little Endian format! [2013/05/23 17:29:07.570307, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x002c (44) auth_length : 0x0000 (0) call_id : 0x0000005f (95) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000014 (20) context_id : 0x0000 (0) opnum : 0x001d (29) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=20 [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 9E 51 27 35 ........ .....Q'5 [0010] 64 09 00 00 d... [2013/05/23 17:29:07.570872, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1625(process_complete_pdu) Processing packet type 0 [2013/05/23 17:29:07.570918, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1470(dcesrv_auth_request) Checking request auth. [2013/05/23 17:29:07.570966, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 20513) : sec_ctx_stack_ndx = 1 [2013/05/23 17:29:07.571025, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 20513) - sec_ctx_stack_ndx = 1 [2013/05/23 17:29:07.571076, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (14): SID[ 0]: S-1-5-21-3444954069-1775359110-1805518212-500 SID[ 1]: S-1-5-21-3444954069-1775359110-1805518212-513 SID[ 2]: S-1-5-21-3444954069-1775359110-1805518212-520 SID[ 3]: S-1-5-21-3444954069-1775359110-1805518212-572 SID[ 4]: S-1-5-21-3444954069-1775359110-1805518212-519 SID[ 5]: S-1-5-21-3444954069-1775359110-1805518212-518 SID[ 6]: S-1-5-21-3444954069-1775359110-1805518212-512 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-544 SID[ 11]: S-1-5-32-550 SID[ 12]: S-1-5-32-545 SID[ 13]: S-1-5-32-554 Privileges (0x 1FFFFF20): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SePrintOperatorPrivilege Privilege[ 5]: SeSecurityPrivilege Privilege[ 6]: SeSystemtimePrivilege Privilege[ 7]: SeShutdownPrivilege Privilege[ 8]: SeDebugPrivilege Privilege[ 9]: SeSystemEnvironmentPrivilege Privilege[ 10]: SeSystemProfilePrivilege Privilege[ 11]: SeProfileSingleProcessPrivilege Privilege[ 12]: SeIncreaseBasePriorityPrivilege Privilege[ 13]: SeLoadDriverPrivilege Privilege[ 14]: SeCreatePagefilePrivilege Privilege[ 15]: SeIncreaseQuotaPrivilege Privilege[ 16]: SeChangeNotifyPrivilege Privilege[ 17]: SeUndockPrivilege Privilege[ 18]: SeManageVolumePrivilege Privilege[ 19]: SeImpersonatePrivilege Privilege[ 20]: SeCreateGlobalPrivilege Privilege[ 21]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2013/05/23 17:29:07.571900, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 20513 and contains 13 supplementary groups Group[ 0]: 20513 Group[ 1]: 3000001 Group[ 2]: 3000002 Group[ 3]: 3000003 Group[ 4]: 3000004 Group[ 5]: 3000005 Group[ 6]: 3000009 Group[ 7]: 3000010 Group[ 8]: 3000014 Group[ 9]: 3000000 Group[ 10]: 3000028 Group[ 11]: 3000006 Group[ 12]: 3000015 [2013/05/23 17:29:07.574635, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1322(api_pipe_request) Requested \spoolss rpc service [2013/05/23 17:29:07.574719, 4, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1354(api_rpcTNP) api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2013/05/23 17:29:07.574772, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1388(api_rpcTNP) api_rpc_cmds[29].fn == 0xb751c7da [2013/05/23 17:29:07.574827, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter in: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000f-0000-0000-9e51-273564090000 [2013/05/23 17:29:07.574992, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 9E 51 27 35 ........ .....Q'5 [0010] 64 09 00 00 d... [2013/05/23 17:29:07.575157, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 9E 51 27 35 ........ .....Q'5 [0010] 64 09 00 00 d... [2013/05/23 17:29:07.575697, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 9E 51 27 35 ........ .....Q'5 [0010] 64 09 00 00 d... [2013/05/23 17:29:07.575893, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2013/05/23 17:29:07.575946, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:282(ndr_print_function_debug) spoolss_ClosePrinter: struct spoolss_ClosePrinter out: struct spoolss_ClosePrinter handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2013/05/23 17:29:07.576197, 5, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1415(api_rpcTNP) api_rpcTNP: called \spoolss successfully [2013/05/23 17:29:07.576286, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 20513) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.576342, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 28 [2013/05/23 17:29:07.576424, 6, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \spoolss len: 4280 [2013/05/23 17:29:07.576481, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 24. [2013/05/23 17:29:07.576575, 1, pid=2404, effective(0, 20513), real(0, 0)] ../librpc/ndr/ndr.c:245(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0030 (48) auth_length : 0x0000 (0) call_id : 0x0000005f (95) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x00000018 (24) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=24 [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 ........ [2013/05/23 17:29:07.580319, 3, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 24 [2013/05/23 17:29:07.580436, 10, pid=2404, effective(0, 20513), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 48 bytes. There is no more data outstanding [2013/05/23 17:29:07.580496, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..48] (align 0) [2013/05/23 17:29:07.580546, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.580575, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=1664 smb_uid=60019 smb_mid=18945 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2013/05/23 17:29:07.580932, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 5F 00 00 ........ .0..._.. [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 . [2013/05/23 17:29:07.584642, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2013/05/23 17:29:07.584794, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x29 [2013/05/23 17:29:07.584850, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8123 of length 45 (0 toread) [2013/05/23 17:29:07.584898, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.584926, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=65279 smb_uid=60019 smb_mid=19009 smt_wct=3 smb_vwv[ 0]=27712 (0x6C40) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2013/05/23 17:29:07.585210, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:07.585273, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBclose (pid 2404) conn 0x90a4740 [2013/05/23 17:29:07.585334, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/uid.c:394(change_to_user) Skipping user change - already user [2013/05/23 17:29:07.585409, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/reply.c:5047(reply_close) Close file fd=-1 fnum 27712 (numopen=1) [2013/05/23 17:29:07.585467, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/close.c:609(set_close_write_time) close_write_time: Thu Jan 1 00:59:59 1970 [2013/05/23 17:29:07.585529, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:07.585579, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_open_global.tdb 2: 3: [2013/05/23 17:29:07.585633, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key E766B466 [2013/05/23 17:29:07.585697, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8b24e00 [2013/05/23 17:29:07.585765, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key E766B466 [2013/05/23 17:29:07.585816, 5, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_open_global.tdb [2013/05/23 17:29:07.585863, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:07.585939, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/files.c:526(file_free) freed files structure 27712 (0 used) [2013/05/23 17:29:07.585995, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.586024, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=65279 smb_uid=60019 smb_mid=19009 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:07.586266, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:07.883330, 10, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 35 [2013/05/23 17:29:07.883538, 6, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x23 [2013/05/23 17:29:07.883629, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8124 of length 39 (0 toread) [2013/05/23 17:29:07.883711, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.883760, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=19073 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:07.884157, 10, pid=2404, effective(0, 20513), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:07.884227, 3, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtdis (pid 2404) conn 0x8fba650 [2013/05/23 17:29:07.884321, 4, pid=2404, effective(0, 20513), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.884404, 5, pid=2404, effective(0, 20513), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:07.884505, 5, pid=2404, effective(0, 20513), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:07.884639, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:435(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2013/05/23 17:29:07.884730, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /usr/local/samba/var/print [2013/05/23 17:29:07.884849, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /usr/local/samba/var/print [2013/05/23 17:29:07.884954, 5, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_tcon_global.tdb [2013/05/23 17:29:07.885042, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_tcon_global.tdb 2: 3: [2013/05/23 17:29:07.885214, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 053907F4 [2013/05/23 17:29:07.885327, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8a71fb0 [2013/05/23 17:29:07.885488, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 053907F4 [2013/05/23 17:29:07.885585, 5, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_tcon_global.tdb [2013/05/23 17:29:07.885669, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:07.885774, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.885858, 5, pid=2404, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:07.885933, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:07.886057, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:435(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2013/05/23 17:29:07.886210, 1, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1121(close_cnum) 192.168.1.45 (ipv4:192.168.1.45:1126) closed connection to service print$ [2013/05/23 17:29:07.886328, 10, pid=2404, effective(0, 0), real(0, 0), class=dfs_samba4] ../source3/modules/vfs_dfs_samba4.c:99(dfs_samba4_disconnect) dfs_samba4_disconnect() connect to service[print$]. [2013/05/23 17:29:07.886417, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to / [2013/05/23 17:29:07.886523, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got / [2013/05/23 17:29:07.886607, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.887924, 5, pid=2404, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:07.888030, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:07.891145, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:435(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2013/05/23 17:29:07.891769, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.891908, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=17630 smb_pid=65279 smb_uid=60019 smb_mid=19073 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:07.892379, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:07.895968, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 39 [2013/05/23 17:29:07.896206, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x27 [2013/05/23 17:29:07.896301, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8125 of length 43 (0 toread) [2013/05/23 17:29:07.896383, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.896432, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=60019 smb_mid=19137 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:07.896890, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:07.896957, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBulogoffX (pid 2404) conn 0x0 [2013/05/23 17:29:07.897053, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.897173, 5, pid=2404, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:07.897267, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:07.897408, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:435(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2013/05/23 17:29:07.897503, 5, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2013/05/23 17:29:07.897587, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2013/05/23 17:29:07.897682, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 5DBF4200 [2013/05/23 17:29:07.897792, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8be5fb8 [2013/05/23 17:29:07.897941, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 5DBF4200 [2013/05/23 17:29:07.898035, 5, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2013/05/23 17:29:07.898306, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:07.898646, 5, pid=2404, effective(0, 0), real(0, 0)] ../source4/lib/messaging/messaging.c:554(imessaging_cleanup) imessaging: cleaning up /usr/local/samba/private/smbd.tmp/msg/msg.2404.1 [2013/05/23 17:29:07.900844, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:2279(reply_ulogoffX) ulogoffX vuid=60019 [2013/05/23 17:29:07.901042, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.901172, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=60019 smb_mid=19137 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2013/05/23 17:29:07.901651, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:07.908754, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 35 [2013/05/23 17:29:07.908978, 6, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1792(process_smb) got message type 0x0 of len 0x23 [2013/05/23 17:29:07.909075, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1794(process_smb) Transaction 8126 of length 39 (0 toread) [2013/05/23 17:29:07.909204, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.909254, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=28285 smb_pid=65279 smb_uid=60019 smb_mid=19201 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:07.909625, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:07.909693, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1397(switch_message) switch message SMBtdis (pid 2404) conn 0x90a4740 [2013/05/23 17:29:07.909794, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.909877, 5, pid=2404, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:07.909963, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:07.910143, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:435(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2013/05/23 17:29:07.910310, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /tmp [2013/05/23 17:29:07.910432, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /tmp [2013/05/23 17:29:07.910522, 5, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_tcon_global.tdb [2013/05/23 17:29:07.910609, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_tcon_global.tdb 2: 3: [2013/05/23 17:29:07.910703, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0CB815AE [2013/05/23 17:29:07.910807, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x8e29e58 [2013/05/23 17:29:07.910917, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0CB815AE [2013/05/23 17:29:07.911007, 5, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_tcon_global.tdb [2013/05/23 17:29:07.911151, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2013/05/23 17:29:07.911279, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.911365, 5, pid=2404, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:07.911441, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:07.911591, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:435(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2013/05/23 17:29:07.911678, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1121(close_cnum) 192.168.1.45 (ipv4:192.168.1.45:1126) closed connection to service IPC$ [2013/05/23 17:29:07.911789, 10, pid=2404, effective(0, 0), real(0, 0), class=dfs_samba4] ../source3/modules/vfs_dfs_samba4.c:99(dfs_samba4_disconnect) dfs_samba4_disconnect() connect to service[IPC$]. [2013/05/23 17:29:07.911878, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to / [2013/05/23 17:29:07.911985, 4, pid=2404, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got / [2013/05/23 17:29:07.912085, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.913385, 5, pid=2404, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:07.913469, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:07.913599, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:435(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2013/05/23 17:29:07.914917, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2013/05/23 17:29:07.915080, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51207 smb_tid=28285 smb_pid=65279 smb_uid=60019 smb_mid=19201 smt_wct=0 smb_bcc=0 [2013/05/23 17:29:07.915537, 10, pid=2404, effective(0, 0), real(0, 0)] ../lib/util/util.c:457(dump_data) [2013/05/23 17:29:07.925070, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:137(read_fd_with_timeout) read_fd_with_timeout: blocking read. EOF from client. [2013/05/23 17:29:07.925291, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:481(receive_smb_talloc) receive_smb_raw_talloc failed for client ipv4:192.168.1.45:1126 read error = NT_STATUS_END_OF_FILE. [2013/05/23 17:29:07.925457, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.925553, 5, pid=2404, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:07.925631, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:07.925773, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:435(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2013/05/23 17:29:07.925915, 4, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2013/05/23 17:29:07.926002, 5, pid=2404, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2013/05/23 17:29:07.926076, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2013/05/23 17:29:07.926272, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:435(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2013/05/23 17:29:07.926395, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) Deregistering messaging pointer for type 1536 - private_data=0x9036e20 [2013/05/23 17:29:07.926526, 10, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/notify_internal.c:181(notify_context_destructor) notify_context_destructor called [2013/05/23 17:29:07.926609, 5, pid=2404, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) Deregistering messaging pointer for type 784 - private_data=0x8361928 [2013/05/23 17:29:07.927048, 3, pid=2404, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:218(exit_server_common) Server exit (failed to receive smb request) lock order: 1: 2: 3: [2013/05/23 17:29:56.344797, 2, pid=2375, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:436(remove_child_pid) Could not find child 2464 -- ignoring [2013/05/23 17:30:56.401191, 2, pid=2375, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:436(remove_child_pid) Could not find child 2539 -- ignoring