Bug 1951 - strange log entries in log.winbind when entering "man smb.conf"
Summary: strange log entries in log.winbind when entering "man smb.conf"
Status: RESOLVED INVALID
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: winbind (show other bugs)
Version: 3.0.4
Hardware: x86 Linux
: P3 normal
Target Milestone: none
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-10-20 08:26 UTC by Ingo Freund
Modified: 2004-10-20 08:55 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ingo Freund 2004-10-20 08:26:25 UTC 
After setting up the samba suite to work in a W2K domain I watch
some strange logfile entries in the log.winbind file.

Typing e.g. any "man" command produces an entry like:
[2004/10/20 16:54:10, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'man' does not exist

This likely happens with the entry 
*/5 * * * *   root  net time set >/dev/null 2>&1
when cron runs the commandline for user root:
[2004/10/20 16:55:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist

There is no difference, when commenting the line
auth     sufficient     pam_winbind.so
in "/etc/pam.d/login"

The samba version I use is made by SuSE which I upgraded today to the
newest patch level:
# rpm -qi samba
Name        : samba                        Relocations: (not relocatable)
Version     : 3.0.4                             Vendor: SuSE Linux AG,
Nuernberg, Germany
Release     : 1.32                          Build Date: Sun Sep 12 22:03:14 2004
Install date: Wed Oct 20 16:20:45 2004      Build Host: subbotin.suse.de
Group       : Productivity/Networking/Samba   Source RPM: samba-3.0.4-1.32.src.rpm
Size        : 15146547                         License: GPL
Signature   : DSA/SHA1, Sun Sep 12 22:09:58 2004, Key ID a84edae89c800aca
Packager    : http://www.suse.de/feedback
URL         : http://www.samba.org/
Summary     : A SMB/ CIFS File Server

Why is winbind involved when using local accounts and commands
this is the output with debug level 10:

----------------------------------------

[2004/10/20 17:15:01, 6] nsswitch/winbindd.c:new_connection(343)
  accepted socket 19
[2004/10/20 17:15:01, 6] nsswitch/winbindd.c:new_connection(343)
  accepted socket 20
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn INTERFACE_VERSION
[2004/10/20 17:15:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261)
  [ 3115]: request interface version
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn INTERFACE_VERSION
[2004/10/20 17:15:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261)
  [ 3117]: request interface version
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2004/10/20 17:15:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
  [ 3115]: request location of privileged pipe
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(557)
  client_write: need to write 35 extra data bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 35 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(546)
  client_write: client_write: complete response written.
[2004/10/20 17:15:01, 6] nsswitch/winbindd.c:new_connection(343)
  accepted socket 21
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 0 bytes. Need 1824 more for a full request.
[2004/10/20 17:15:01, 5] nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 19, pid 3115: EOF
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn GETGROUPS
[2004/10/20 17:15:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(1003)
  [ 3115]: getgroups root
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(355)
  refresh_sequence_number: SBWI time ok
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(380)
  refresh_sequence_number: SBWI seq number is now 1147
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:name_to_sid(976)
  name_to_sid: [Cached] - doing backend query for name for domain SBWI
[2004/10/20 17:15:01, 3] nsswitch/winbindd_rpc.c:msrpc_name_to_sid(291)
  rpc: name_to_sid name=root
[2004/10/20 17:15:01, 3] nsswitch/winbindd_rpc.c:msrpc_name_to_sid(300)
  name_to_sid [rpc] root for domain SBWI
[2004/10/20 17:15:01, 5] rpc_parse/parse_lsa.c:init_q_lookup_names(1062)
  init_q_lookup_names
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 lsa_io_q_lookup_names 
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0000 data1: 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0004 data2: 5d3b5d6b
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
          0008 data3: 4dc0
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
          000a data4: 4cb4
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
          000c data5: 8b 29 1b 05 5f 08 9b 39 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0014 num_entries    : 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0018 num_entries2   : 00000001
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      00001c smb_io_unihdr hdr_name
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
          001c uni_str_len: 0012
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
          001e uni_max_len: 0012
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0020 buffer     : 00000001
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000024 smb_io_unistr2 dom_name
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0024 uni_max_len: 00000009
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0028 offset     : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          002c uni_str_len: 00000009
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
          0030 buffer     : S.B.W.I.\.r.o.o.t.
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0044 num_trans_entries : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0048 ptr_trans_sids : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      004c lookup_level   : 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0050 mapped_count   : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000058 smb_io_rpc_hdr_auth hdr_auth
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0058 auth_type    : 44
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0059 auth_level   : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      005a padding      : 04
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      005b reserved     : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      005c auth_context : 00000001
[2004/10/20 17:15:01, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1034)
  SCHANNEL seq_num=8
[2004/10/20 17:15:01, 10] rpc_parse/parse_prs.c:netsec_encode(1462)
  SCHANNEL: netsec_encode seq_num=8 data_len=88
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000060 smb_io_rpc_auth_netsec_chk 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0060 sig  : 77 00 ff ff ff ff 00 00 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0068 seq_num: 7d f8 f8 c4 6b a9 44 67 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0070 packet_digest: 82 0c 6f 1f 87 f6 66 44 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0078 confounder: 19 e9 9b 94 cc 5d ed 9a 
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
  create_rpc_request: opnum: 0xe data_len: 0x98
[2004/10/20 17:15:01, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
  create_rpc_request: data_len: 98 auth_len: 20 alloc_hint: 60
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr hdr    
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0000 major     : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0001 minor     : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0002 pkt_type  : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0003 flags     : 03
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0004 pack_type0: 10
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0005 pack_type1: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0006 pack_type2: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0007 pack_type3: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0008 frag_len  : 0098
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      000a auth_len  : 0020
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      000c call_id   : 00000016
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_req hdr_req
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0010 alloc_hint: 00000060
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0014 context_id: 0000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0016 opnum     : 000e
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
  rpc_api_pipe: fnum:4007
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(456)
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(466)
  size=234
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=8
  smb_flg2=51201
  smb_tid=2054
  smb_pid=3096
  smb_uid=4098
  smb_mid=15
  smt_wct=16
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=  152 (0x98)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 4280 (0x10B8)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=   82 (0x52)
  smb_vwv[11]=  152 (0x98)
  smb_vwv[12]=   82 (0x52)
  smb_vwv[13]=    2 (0x2)
  smb_vwv[14]=   38 (0x26)
  smb_vwv[15]=16391 (0x4007)
  smb_bcc=167
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
  [010] 00 00 03 10 00 00 00 98  00 20 00 16 00 00 00 60  ........ . .....`
  [020] 00 00 00 00 00 0E 00 00  00 00 00 6B 5D 3B 5D C0  ........ ...k];].
  [030] 4D B4 4C 8B 29 1B 05 5F  08 9B 39 01 00 00 00 01  M.L.).._ ..9.....
  [040] 00 00 00 12 00 12 00 01  00 00 00 09 00 00 00 00  ........ ........
  [050] 00 00 00 09 00 00 00 53  00 42 00 57 00 49 00 5C  .......S .B.W.I.\
  [060] 00 72 00 6F 00 6F 00 74  00 00 00 00 00 00 00 00  .r.o.o.t ........
  [070] 00 00 00 01 00 00 00 00  00 00 00 00 00 00 00 44  ........ .......D
  [080] 05 04 00 01 00 00 00 77  00 FF FF FF FF 00 00 7D  .......w .......}
  [090] F8 F8 C4 6B A9 44 67 82  0C 6F 1F 87 F6 66 44 19  ...k.Dg. .o...fD.
  [0A0] E9 9B 94 CC 5D ED 9A                              ....].. 
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:simple_packet_signature(258)
  simple_packet_signature: sequence number 24
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:client_sign_outgoing_message(319)
  client_sign_outgoing_message: sent SMB signature of
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] 0D 91 C8 40 F4 C4 24 1E                           ...@..$. 
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:store_sequence_for_reply(67)
  store_sequence_for_reply: stored seq = 25 mid = 15
[2004/10/20 17:15:01, 6] lib/util_sock.c:write_socket(432)
  write_socket(15,238)
[2004/10/20 17:15:01, 6] lib/util_sock.c:write_socket(435)
  write_socket(15,238) wrote 238
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:cli_signing_trans_start(508)
  cli_signing_trans_start: storing mid = 15, reply_seq_num = 25, send_seq_num =
24 data->send_seq_num = 
26
[2004/10/20 17:15:01, 10] lib/util_sock.c:read_smb_length_return_keepalive(488)
  got smb length of 232
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(456)
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(466)
  size=232
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51205
  smb_tid=2054
  smb_pid=3096
  smb_uid=4098
  smb_mid=15
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=  176 (0xB0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=  176 (0xB0)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=177
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] 00 05 00 02 03 10 00 00  00 B0 00 20 00 16 00 00  ........ ... ....
  [010] 00 70 00 00 00 00 00 00  00 B8 92 05 0D 01 00 00  .p...... ........
  [020] 00 A0 2C 09 00 20 00 00  00 01 00 00 00 08 00 0A  ..,.. .. ........
  [030] 00 D0 7B 15 00 E0 7D 16  00 05 00 00 00 00 00 00  ..{...}. ........
  [040] 00 04 00 00 00 53 00 42  00 57 00 49 00 04 00 00  .....S.B .W.I....
  [050] 00 01 04 00 00 00 00 00  05 15 00 00 00 DD E8 E4  ........ ........
  [060] 1C 4D 64 49 2E 43 17 0A  32 01 00 00 00 40 60 16  .MdI.C.. 2....@`.
  [070] 00 01 00 00 00 08 00 63  00 00 00 00 00 00 00 00  .......c ........
  [080] 00 00 00 00 00 73 00 00  C0 44 05 00 00 01 00 00  .....s.. .D......
  [090] 00 77 00 FF FF FF FF 00  00 8A E6 57 25 30 45 65  .w...... ...W%0Ee
  [0A0] 99 28 A7 7A 70 D1 F6 DA  B1 00 00 00 00 00 00 00  .(.zp... ........
  [0B0] 00                                                . 
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:simple_packet_signature(258)
  simple_packet_signature: sequence number 25
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:client_check_incoming_message(395)
  client_check_incoming_message: seq 25: got good SMB signature of
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] E8 32 DA F3 C6 6A 72 0D                           .2...jr. 
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(456)
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(466)
  size=232
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51205
  smb_tid=2054
  smb_pid=3096
  smb_uid=4098
  smb_mid=15
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=  176 (0xB0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=  176 (0xB0)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=177
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] 00 05 00 02 03 10 00 00  00 B0 00 20 00 16 00 00  ........ ... ....
  [010] 00 70 00 00 00 00 00 00  00 B8 92 05 0D 01 00 00  .p...... ........
  [020] 00 A0 2C 09 00 20 00 00  00 01 00 00 00 08 00 0A  ..,.. .. ........
  [030] 00 D0 7B 15 00 E0 7D 16  00 05 00 00 00 00 00 00  ..{...}. ........
  [040] 00 04 00 00 00 53 00 42  00 57 00 49 00 04 00 00  .....S.B .W.I....
  [050] 00 01 04 00 00 00 00 00  05 15 00 00 00 DD E8 E4  ........ ........
  [060] 1C 4D 64 49 2E 43 17 0A  32 01 00 00 00 40 60 16  .MdI.C.. 2....@`.
  [070] 00 01 00 00 00 08 00 63  00 00 00 00 00 00 00 00  .......c ........
  [080] 00 00 00 00 00 73 00 00  C0 44 05 00 00 01 00 00  .....s.. .D......
  [090] 00 77 00 FF FF FF FF 00  00 8A E6 57 25 30 45 65  .w...... ...W%0Ee
  [0A0] 99 28 A7 7A 70 D1 F6 DA  B1 00 00 00 00 00 00 00  .(.zp... ........
  [0B0] 00                                                . 
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:cli_signing_trans_stop(527)
  cli_signing_trans_stop: freeing mid = 15, reply_seq_num = 25, send_seq_num =
24 data->send_seq_num = 26
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
  rpc_check_hdr: rdata->data_size = 176
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr rpc_hdr   
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0000 major     : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0001 minor     : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0002 pkt_type  : 02
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0003 flags     : 03
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0004 pack_type0: 10
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0005 pack_type1: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0006 pack_type2: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0007 pack_type3: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0008 frag_len  : 00b0
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      000a auth_len  : 0020
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      000c call_id   : 00000016
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0010 alloc_hint: 00000070
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0014 context_id: 0000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0016 cancel_ct : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0017 reserved  : 00
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
  rpc_api_pipe: len left: 0 smbtrans read: 176
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
  rpc_auth_pipe: pkt_type: 2 len: 176 auth_len: 32 NTLMSSP No schannel Yes sign
Yes seal No 
[2004/10/20 17:15:01, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
  rpc_auth_pipe: packet:
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr_auth auth_hdr
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0000 auth_type    : 44
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0001 auth_level   : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0002 padding      : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0003 reserved     : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0004 auth_context : 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0008 sig  : 77 00 ff ff ff ff 00 00 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0010 seq_num: 8a e6 57 25 30 45 65 99 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0018 packet_digest: 28 a7 7a 70 d1 f6 da b1 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0020 confounder: 00 00 00 00 00 00 00 00 
[2004/10/20 17:15:01, 10] rpc_parse/parse_prs.c:netsec_decode(1539)
  SCHANNEL: netsec_encode seq_num=9 data_len=112
[2004/10/20 17:15:01, 10] rpc_parse/parse_prs.c:netsec_decode(1559)
  SCHANNEL: netsec_decode seq_num=9 data_len=112
[2004/10/20 17:15:01, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
  rpc_api_pipe: fragment first and last both set
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000018 lsa_io_r_lookup_names 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0018 ptr_dom_ref: 0d0592b8
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      00001c lsa_io_dom_r_ref 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          001c num_ref_doms_1: 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0020 ptr_ref_dom   : 00092ca0
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0024 max_entries   : 00000020
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0028 num_ref_doms_2: 00000001
[2004/10/20 17:15:01, 7] rpc_parse/parse_prs.c:prs_debug(82)
          00002c smb_io_unihdr dom_ref[0] 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
              002c uni_str_len: 0008
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
              002e uni_max_len: 000a
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              0030 buffer     : 00157bd0
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0034 sid_ptr[0] : 00167de0
[2004/10/20 17:15:01, 7] rpc_parse/parse_prs.c:prs_debug(82)
          000038 smb_io_unistr2 dom_ref[0] 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              0038 uni_max_len: 00000005
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              003c offset     : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              0040 uni_str_len: 00000004
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
              0044 buffer     : S.B.W.I.
[2004/10/20 17:15:01, 7] rpc_parse/parse_prs.c:prs_debug(82)
          00004c smb_io_dom_sid2 sid_ptr[0] 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              004c num_auths: 00000004
[2004/10/20 17:15:01, 8] rpc_parse/parse_prs.c:prs_debug(82)
              000050 smb_io_dom_sid sid
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0050 sid_rev_num: 01
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0051 num_auths  : 04
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0052 id_auth[0] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0053 id_auth[1] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0054 id_auth[2] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0055 id_auth[3] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0056 id_auth[4] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0057 id_auth[5] : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32s(862)
                  0058 sub_auths : 00000015 1ce4e8dd 2e49644d 320a1743 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0068 num_entries: 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      006c ptr_entries: 00166040
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0070 num_entries2: 00000001
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000074 smb_io_dom_rid2 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
          0074 type   : 08
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0078 rid    : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          007c rid_idx: 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0080 mapped_count: 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_ntstatus(665)
      0084 status      : NT_STATUS_NONE_MAPPED
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:wcache_save_name_to_sid(616)
  wcache_save_name_to_sid: ROOT -> 
[2004/10/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2004/10/20 17:15:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
  [ 3117]: request location of privileged pipe
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(557)
  client_write: need to write 35 extra data bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 35 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(546)
  client_write: client_write: complete response written.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 0 bytes. Need 1824 more for a full request.
[2004/10/20 17:15:01, 5] nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 21, pid 3115: EOF
[2004/10/20 17:15:01, 6] nsswitch/winbindd.c:new_connection(343)
  accepted socket 19
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 0 bytes. Need 1824 more for a full request.
[2004/10/20 17:15:01, 5] nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 20, pid 3117: EOF
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn GETGROUPS
[2004/10/20 17:15:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(1003)
  [ 3117]: getgroups root
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(355)
  refresh_sequence_number: SBWI time ok
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(380)
  refresh_sequence_number: SBWI seq number is now 1147
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:centry_expired(404)
  centry_expired: Key NS/SBWI/ROOT for domain SBWI is good.
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:wcache_fetch(483)
  wcache_fetch: returning entry NS/SBWI/ROOT for domain SBWI
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:name_to_sid(956)
  name_to_sid: [Cached] - cached name for domain SBWI status NT_STATUS_NONE_MAPPED
[2004/10/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 0 bytes. Need 1824 more for a full request.
[2004/10/20 17:15:01, 5] nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 19, pid 3117: EOF
[2004/10/20 17:15:01, 6] nsswitch/winbindd.c:new_connection(343)
  accepted socket 19
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn INTERFACE_VERSION
[2004/10/20 17:15:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261)
  [ 3117]: request interface version
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2004/10/20 17:15:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
  [ 3117]: request location of privileged pipe
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(557)
  client_write: need to write 35 extra data bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 35 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(546)
  client_write: client_write: complete response written.
[2004/10/20 17:15:01, 6] nsswitch/winbindd.c:new_connection(343)
  accepted socket 20
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 0 bytes. Need 1824 more for a full request.
[2004/10/20 17:15:01, 5] nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 19, pid 3117: EOF
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn GETGROUPS
[2004/10/20 17:15:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(1003)
  [ 3117]: getgroups transfer
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(355)
  refresh_sequence_number: SBWI time ok
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(380)
  refresh_sequence_number: SBWI seq number is now 1147
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:name_to_sid(976)
  name_to_sid: [Cached] - doing backend query for name for domain SBWI
[2004/10/20 17:15:01, 3] nsswitch/winbindd_rpc.c:msrpc_name_to_sid(291)
  rpc: name_to_sid name=transfer
[2004/10/20 17:15:01, 3] nsswitch/winbindd_rpc.c:msrpc_name_to_sid(300)
  name_to_sid [rpc] transfer for domain SBWI
[2004/10/20 17:15:01, 5] rpc_parse/parse_lsa.c:init_q_lookup_names(1062)
  init_q_lookup_names
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 lsa_io_q_lookup_names 
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0000 data1: 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0004 data2: 5d3b5d6b
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
          0008 data3: 4dc0
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
          000a data4: 4cb4
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
          000c data5: 8b 29 1b 05 5f 08 9b 39 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0014 num_entries    : 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0018 num_entries2   : 00000001
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      00001c smb_io_unihdr hdr_name
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
          001c uni_str_len: 001a
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
          001e uni_max_len: 001a
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0020 buffer     : 00000001
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000024 smb_io_unistr2 dom_name
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0024 uni_max_len: 0000000d
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0028 offset     : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          002c uni_str_len: 0000000d
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
          0030 buffer     : S.B.W.I.\.t.r.a.n.s.f.e.r.
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      004c num_trans_entries : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0050 ptr_trans_sids : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0054 lookup_level   : 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0058 mapped_count   : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000060 smb_io_rpc_hdr_auth hdr_auth
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0060 auth_type    : 44
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0061 auth_level   : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0062 padding      : 04
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0063 reserved     : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0064 auth_context : 00000001
[2004/10/20 17:15:01, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1034)
  SCHANNEL seq_num=10
[2004/10/20 17:15:01, 10] rpc_parse/parse_prs.c:netsec_encode(1462)
  SCHANNEL: netsec_encode seq_num=10 data_len=96
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000068 smb_io_rpc_auth_netsec_chk 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0068 sig  : 77 00 ff ff ff ff 00 00 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0070 seq_num: 33 5b f3 67 b1 1b d7 08 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0078 packet_digest: 12 0b 9a 8f 5d 95 b5 d6 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0080 confounder: 2d 4d 07 99 f5 a9 53 42 
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
  create_rpc_request: opnum: 0xe data_len: 0xa0
[2004/10/20 17:15:01, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
  create_rpc_request: data_len: a0 auth_len: 20 alloc_hint: 68
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr hdr    
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0000 major     : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0001 minor     : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0002 pkt_type  : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0003 flags     : 03
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0004 pack_type0: 10
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0005 pack_type1: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0006 pack_type2: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0007 pack_type3: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0008 frag_len  : 00a0
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      000a auth_len  : 0020
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      000c call_id   : 00000017
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_req hdr_req
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0010 alloc_hint: 00000068
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0014 context_id: 0000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0016 opnum     : 000e
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
  rpc_api_pipe: fnum:4007
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(456)
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(466)
  size=242
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=8
  smb_flg2=51201
  smb_tid=2054
  smb_pid=3096
  smb_uid=4098
  smb_mid=16
  smt_wct=16
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=  160 (0xA0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 4280 (0x10B8)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=   82 (0x52)
  smb_vwv[11]=  160 (0xA0)
  smb_vwv[12]=   82 (0x52)
  smb_vwv[13]=    2 (0x2)
  smb_vwv[14]=   38 (0x26)
  smb_vwv[15]=16391 (0x4007)
  smb_bcc=175
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
  [010] 00 00 03 10 00 00 00 A0  00 20 00 17 00 00 00 68  ........ . .....h
  [020] 00 00 00 00 00 0E 00 00  00 00 00 6B 5D 3B 5D C0  ........ ...k];].
  [030] 4D B4 4C 8B 29 1B 05 5F  08 9B 39 01 00 00 00 01  M.L.).._ ..9.....
  [040] 00 00 00 1A 00 1A 00 01  00 00 00 0D 00 00 00 00  ........ ........
  [050] 00 00 00 0D 00 00 00 53  00 42 00 57 00 49 00 5C  .......S .B.W.I.\
  [060] 00 74 00 72 00 61 00 6E  00 73 00 66 00 65 00 72  .t.r.a.n .s.f.e.r
  [070] 00 00 00 00 00 00 00 00  00 00 00 01 00 00 00 00  ........ ........
  [080] 00 00 00 00 00 00 00 44  05 04 00 01 00 00 00 77  .......D .......w
  [090] 00 FF FF FF FF 00 00 33  5B F3 67 B1 1B D7 08 12  .......3 [.g.....
  [0A0] 0B 9A 8F 5D 95 B5 D6 2D  4D 07 99 F5 A9 53 42     ...]...- M....SB
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:simple_packet_signature(258)
  simple_packet_signature: sequence number 26
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:client_sign_outgoing_message(319)
  client_sign_outgoing_message: sent SMB signature of
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] 56 F5 8D 98 4E A3 51 52                           V...N.QR 
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:store_sequence_for_reply(67)
  store_sequence_for_reply: stored seq = 27 mid = 16
[2004/10/20 17:15:01, 6] lib/util_sock.c:write_socket(432)
  write_socket(15,246)
[2004/10/20 17:15:01, 6] lib/util_sock.c:write_socket(435)
  write_socket(15,246) wrote 246
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:cli_signing_trans_start(508)
  cli_signing_trans_start: storing mid = 16, reply_seq_num = 27, send_seq_num =
26 data->send_seq_num = 28
[2004/10/20 17:15:01, 10] lib/util_sock.c:read_smb_length_return_keepalive(488)
  got smb length of 232
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(456)
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(466)
  size=232
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51205
  smb_tid=2054
  smb_pid=3096
  smb_uid=4098
  smb_mid=16
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=  176 (0xB0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=  176 (0xB0)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=177
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] 00 05 00 02 03 10 00 00  00 B0 00 20 00 17 00 00  ........ ... ....
  [010] 00 70 00 00 00 00 00 00  00 D0 7B 15 00 01 00 00  .p...... ..{.....
  [020] 00 A0 2C 09 00 20 00 00  00 01 00 00 00 08 00 0A  ..,.. .. ........
  [030] 00 68 2A 08 01 20 59 13  00 05 00 00 00 00 00 00  .h*.. Y. ........
  [040] 00 04 00 00 00 53 00 42  00 57 00 49 00 04 00 00  .....S.B .W.I....
  [050] 00 01 04 00 00 00 00 00  05 15 00 00 00 DD E8 E4  ........ ........
  [060] 1C 4D 64 49 2E 43 17 0A  32 01 00 00 00 40 60 16  .MdI.C.. 2....@`.
  [070] 00 01 00 00 00 08 00 63  00 00 00 00 00 00 00 00  .......c ........
  [080] 00 00 00 00 00 73 00 00  C0 44 05 00 00 01 00 00  .....s.. .D......
  [090] 00 77 00 FF FF FF FF 00  00 04 99 F2 95 52 7E 79  .w...... .....R~y
  [0A0] 53 7B 7F F7 30 CA 51 F9  30 00 00 00 00 00 00 00  S{..0.Q. 0.......
  [0B0] 00                                                . 
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:simple_packet_signature(258)
  simple_packet_signature: sequence number 27
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:client_check_incoming_message(395)
  client_check_incoming_message: seq 27: got good SMB signature of
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] 78 26 73 44 6B DE 0C FD                           x&sDk... 
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(456)
[2004/10/20 17:15:01, 5] lib/util.c:show_msg(466)
  size=232
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51205
  smb_tid=2054
  smb_pid=3096
  smb_uid=4098
  smb_mid=16
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=  176 (0xB0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=  176 (0xB0)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=177
[2004/10/20 17:15:01, 10] lib/util.c:dump_data(1846)
  [000] 00 05 00 02 03 10 00 00  00 B0 00 20 00 17 00 00  ........ ... ....
  [010] 00 70 00 00 00 00 00 00  00 D0 7B 15 00 01 00 00  .p...... ..{.....
  [020] 00 A0 2C 09 00 20 00 00  00 01 00 00 00 08 00 0A  ..,.. .. ........
  [030] 00 68 2A 08 01 20 59 13  00 05 00 00 00 00 00 00  .h*.. Y. ........
  [040] 00 04 00 00 00 53 00 42  00 57 00 49 00 04 00 00  .....S.B .W.I....
  [050] 00 01 04 00 00 00 00 00  05 15 00 00 00 DD E8 E4  ........ ........
  [060] 1C 4D 64 49 2E 43 17 0A  32 01 00 00 00 40 60 16  .MdI.C.. 2....@`.
  [070] 00 01 00 00 00 08 00 63  00 00 00 00 00 00 00 00  .......c ........
  [080] 00 00 00 00 00 73 00 00  C0 44 05 00 00 01 00 00  .....s.. .D......
  [090] 00 77 00 FF FF FF FF 00  00 04 99 F2 95 52 7E 79  .w...... .....R~y
  [0A0] 53 7B 7F F7 30 CA 51 F9  30 00 00 00 00 00 00 00  S{..0.Q. 0.......
  [0B0] 00                                                . 
[2004/10/20 17:15:01, 10] libsmb/smb_signing.c:cli_signing_trans_stop(527)
  cli_signing_trans_stop: freeing mid = 16, reply_seq_num = 27, send_seq_num =
26 data->send_seq_num = 28
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
  rpc_check_hdr: rdata->data_size = 176
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr rpc_hdr   
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0000 major     : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0001 minor     : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0002 pkt_type  : 02
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0003 flags     : 03
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0004 pack_type0: 10
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0005 pack_type1: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0006 pack_type2: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0007 pack_type3: 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0008 frag_len  : 00b0
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      000a auth_len  : 0020
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      000c call_id   : 00000017
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0010 alloc_hint: 00000070
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0014 context_id: 0000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0016 cancel_ct : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0017 reserved  : 00
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
  rpc_api_pipe: len left: 0 smbtrans read: 176
[2004/10/20 17:15:01, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
  rpc_auth_pipe: pkt_type: 2 len: 176 auth_len: 32 NTLMSSP No schannel Yes sign
Yes seal No 
[2004/10/20 17:15:01, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
  rpc_auth_pipe: packet:
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr_auth auth_hdr
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0000 auth_type    : 44
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0001 auth_level   : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0002 padding      : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0003 reserved     : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0004 auth_context : 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0008 sig  : 77 00 ff ff ff ff 00 00 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0010 seq_num: 04 99 f2 95 52 7e 79 53 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0018 packet_digest: 7b 7f f7 30 ca 51 f9 30 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0020 confounder: 00 00 00 00 00 00 00 00 
[2004/10/20 17:15:01, 10] rpc_parse/parse_prs.c:netsec_decode(1539)
  SCHANNEL: netsec_encode seq_num=11 data_len=112
[2004/10/20 17:15:01, 10] rpc_parse/parse_prs.c:netsec_decode(1559)
  SCHANNEL: netsec_decode seq_num=11 data_len=112
[2004/10/20 17:15:01, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
  rpc_api_pipe: fragment first and last both set
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000018 lsa_io_r_lookup_names 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0018 ptr_dom_ref: 00157bd0
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      00001c lsa_io_dom_r_ref 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          001c num_ref_doms_1: 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0020 ptr_ref_dom   : 00092ca0
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0024 max_entries   : 00000020
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0028 num_ref_doms_2: 00000001
[2004/10/20 17:15:01, 7] rpc_parse/parse_prs.c:prs_debug(82)
          00002c smb_io_unihdr dom_ref[0] 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
              002c uni_str_len: 0008
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint16(606)
              002e uni_max_len: 000a
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              0030 buffer     : 01082a68
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0034 sid_ptr[0] : 00135920
[2004/10/20 17:15:01, 7] rpc_parse/parse_prs.c:prs_debug(82)
          000038 smb_io_unistr2 dom_ref[0] 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              0038 uni_max_len: 00000005
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              003c offset     : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              0040 uni_str_len: 00000004
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
              0044 buffer     : S.B.W.I.
[2004/10/20 17:15:01, 7] rpc_parse/parse_prs.c:prs_debug(82)
          00004c smb_io_dom_sid2 sid_ptr[0] 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              004c num_auths: 00000004
[2004/10/20 17:15:01, 8] rpc_parse/parse_prs.c:prs_debug(82)
              000050 smb_io_dom_sid sid
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0050 sid_rev_num: 01
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0051 num_auths  : 04
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0052 id_auth[0] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0053 id_auth[1] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0054 id_auth[2] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0055 id_auth[3] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0056 id_auth[4] : 00
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
                  0057 id_auth[5] : 05
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32s(862)
                  0058 sub_auths : 00000015 1ce4e8dd 2e49644d 320a1743 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0068 num_entries: 00000001
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      006c ptr_entries: 00166040
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0070 num_entries2: 00000001
[2004/10/20 17:15:01, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000074 smb_io_dom_rid2 
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint8(577)
          0074 type   : 08
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0078 rid    : 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          007c rid_idx: 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0080 mapped_count: 00000000
[2004/10/20 17:15:01, 5] rpc_parse/parse_prs.c:prs_ntstatus(665)
      0084 status      : NT_STATUS_NONE_MAPPED
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:wcache_save_name_to_sid(616)
  wcache_save_name_to_sid: TRANSFER -> 
[2004/10/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'transfer' does not exist
[2004/10/20 17:15:01, 6] nsswitch/winbindd.c:new_connection(343)
  accepted socket 19
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn INTERFACE_VERSION
[2004/10/20 17:15:01, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261)
  [ 3119]: request interface version
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2004/10/20 17:15:01, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
  [ 3119]: request location of privileged pipe
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(557)
  client_write: need to write 35 extra data bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 35 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(546)
  client_write: client_write: complete response written.
[2004/10/20 17:15:01, 6] nsswitch/winbindd.c:new_connection(343)
  accepted socket 21
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 0 bytes. Need 1824 more for a full request.
[2004/10/20 17:15:01, 5] nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 19, pid 3119: EOF
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 1824 bytes. Need 0 more for a full request.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:process_request(308)
  process_request: request fn GETGROUPS
[2004/10/20 17:15:01, 3] nsswitch/winbindd_group.c:winbindd_getgroups(1003)
  [ 3119]: getgroups root
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(355)
  refresh_sequence_number: SBWI time ok
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:refresh_sequence_number(380)
  refresh_sequence_number: SBWI seq number is now 1147
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:centry_expired(404)
  centry_expired: Key NS/SBWI/ROOT for domain SBWI is good.
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:wcache_fetch(483)
  wcache_fetch: returning entry NS/SBWI/ROOT for domain SBWI
[2004/10/20 17:15:01, 10] nsswitch/winbindd_cache.c:name_to_sid(956)
  name_to_sid: [Cached] - cached name for domain SBWI status NT_STATUS_NONE_MAPPED
[2004/10/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:client_write(512)
  client_write: wrote 1300 bytes.
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 0 bytes. Need 1824 more for a full request.
[2004/10/20 17:15:01, 5] nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 21, pid 3119: EOF
[2004/10/20 17:15:01, 10] nsswitch/winbindd.c:winbind_client_read(458)
  client_read: read 0 bytes. Need 1824 more for a full request.
[2004/10/20 17:15:01, 5] nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 20, pid 3117: EOF

----------------------------------------

This happens when smbd is running without winbind:
# man smb.conf
Reformatting smb.conf(5), please wait...
man: command exited with status 2: (echo '.ll 136n'; /usr/bin/zsoelim
/usr/share/man/man5/smb.conf.5) | /usr/bin/tbl | /usr/bin/nroff -mandocdb
-rLL=136n -rLT=136n -Tlatin1 | less

The man command is working as expected, when smbd is switched off.

-Ingo.
Comment 1 Guenther Deschner 2004-10-20 08:55:00 UTC 
As long as you have winbind in /etc/nsswitch.conf configured for resolution of
groups and users these log entries can just not be avoided.

several system-calls like initgroups iterate over all nss-backends to collect
group-membership information. when called for e.g. root, winbind is queried for
root's memberships, although winbindd does not know root.

sorry, there is nothing we can do about that.