API tools faq
paste
Advertisement
Guest User

error_log2

a guest
Oct 31st, 2014
135
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 323.26 KB | None | 0 0
raw download clone embed print report
  1. lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty
  2. params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty"
  3. Processing section "[global]"
  4. INFO: Current debug levels:
  5. all: 100
  6. tdb: 100
  7. printdrivers: 100
  8. lanman: 100
  9. smb: 100
  10. rpc_parse: 100
  11. rpc_srv: 100
  12. rpc_cli: 100
  13. passdb: 100
  14. sam: 100
  15. auth: 100
  16. winbind: 100
  17. vfs: 100
  18. idmap: 100
  19. quota: 100
  20. acls: 100
  21. locking: 100
  22. msdfs: 100
  23. dmapi: 100
  24. registry: 100
  25. scavenger: 100
  26. dns: 100
  27. ldb: 100
  28. pm_process() returned Yes
  29. Using binding ncacn_np:ipa1.rdu.lulu.com[,]
  30. s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7fb6ec3d1ed0
  31. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec3c6760
  32. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec3a87c0
  33. s4_tevent: Running timer event 0x7fb6ec3c6760 "composite_trigger"
  34. s4_tevent: Destroying timer event 0x7fb6ec3a87c0 "composite_trigger"
  35. Mapped to DCERPC endpoint \pipe\lsarpc
  36. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  37. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  38. s4_tevent: Ending timer event 0x7fb6ec3c6760 "composite_trigger"
  39. s4_tevent: Added timed event "connect_multi_timer": 0x7fb6ec16e9f0
  40. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec250250
  41. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec250250
  42. s4_tevent: Destroying timer event 0x7fb6ec16e9f0 "connect_multi_timer"
  43. Socket options:
  44. SO_KEEPALIVE = 0
  45. SO_REUSEADDR = 0
  46. SO_BROADCAST = 0
  47. TCP_NODELAY = 1
  48. TCP_KEEPCNT = 9
  49. TCP_KEEPIDLE = 7200
  50. TCP_KEEPINTVL = 75
  51. IPTOS_LOWDELAY = 0
  52. IPTOS_THROUGHPUT = 0
  53. SO_REUSEPORT = 0
  54. SO_SNDBUF = 663430
  55. SO_RCVBUF = 261942
  56. SO_SNDLOWAT = 1
  57. SO_RCVLOWAT = 1
  58. SO_SNDTIMEO = 0
  59. SO_RCVTIMEO = 0
  60. TCP_QUICKACK = 1
  61. TCP_DEFER_ACCEPT = 0
  62. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3d5f20
  63. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  64. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  65. s4_tevent: Destroying timer event 0x7fb6ec3d5f20 "tevent_req_timedout"
  66. Starting GENSEC mechanism spnego
  67. Starting GENSEC submechanism gssapi_krb5
  68. Ticket in credentials cache for @IPA will expire in 85570 secs
  69. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3da000
  70. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  71. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  72. s4_tevent: Destroying timer event 0x7fb6ec3da000 "tevent_req_timedout"
  73. gensec_gssapi: NO credentials were delegated
  74. GSSAPI Connection will be cryptographically sealed
  75. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec272990
  76. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  77. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  78. s4_tevent: Destroying timer event 0x7fb6ec272990 "tevent_req_timedout"
  79. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3d8ab0
  80. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  81. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  82. s4_tevent: Destroying timer event 0x7fb6ec3d8ab0 "tevent_req_timedout"
  83. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  84. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3e21b0
  85. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  86. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec1466f0
  87. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  88. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3bd580
  89. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3bd580
  90. s4_tevent: Destroying timer event 0x7fb6ec3e21b0 "tevent_req_timedout"
  91. s4_tevent: Destroying timer event 0x7fb6ec1466f0 "dcerpc_timeout_handler"
  92. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec0a8880
  93. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec0a8880
  94. s4_tevent: Destroying timer event 0x7fb6ec3d1ed0 "dcerpc_connect_timeout_handler"
  95. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  96. in: struct lsa_OpenPolicy2
  97. system_name : *
  98. system_name : ''
  99. attr : *
  100. attr: struct lsa_ObjectAttribute
  101. len : 0x00000000 (0)
  102. root_dir : NULL
  103. object_name : NULL
  104. attributes : 0x00000000 (0)
  105. sec_desc : NULL
  106. sec_qos : *
  107. sec_qos: struct lsa_QosInfo
  108. len : 0x00000000 (0)
  109. impersonation_level : 0x0000 (0)
  110. context_mode : 0x00 (0)
  111. effective_only : 0x00 (0)
  112. access_mask : 0x02000000 (33554432)
  113. 0: LSA_POLICY_VIEW_LOCAL_INFORMATION
  114. 0: LSA_POLICY_VIEW_AUDIT_INFORMATION
  115. 0: LSA_POLICY_GET_PRIVATE_INFORMATION
  116. 0: LSA_POLICY_TRUST_ADMIN
  117. 0: LSA_POLICY_CREATE_ACCOUNT
  118. 0: LSA_POLICY_CREATE_SECRET
  119. 0: LSA_POLICY_CREATE_PRIVILEGE
  120. 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
  121. 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS
  122. 0: LSA_POLICY_AUDIT_LOG_ADMIN
  123. 0: LSA_POLICY_SERVER_ADMIN
  124. 0: LSA_POLICY_LOOKUP_NAMES
  125. 0: LSA_POLICY_NOTIFICATION
  126. rpc request data:
  127. [0000] 00 00 02 00 01 00 00 00 00 00 00 00 01 00 00 00 ........ ........
  128. [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  129. [0020] 00 00 00 00 00 00 00 00 04 00 02 00 00 00 00 00 ........ ........
  130. [0030] 00 00 00 00 00 00 00 02 ........
  131. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3d98c0
  132. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ed3decc0
  133. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3d98c0
  134. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3d98c0
  135. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=80, this_data=80, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  136. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3e21b0
  137. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  138. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3d98c0
  139. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  140. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec097e10
  141. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec097e10
  142. s4_tevent: Destroying timer event 0x7fb6ec3e21b0 "tevent_req_timedout"
  143. s4_tevent: Destroying timer event 0x7fb6ed3decc0 "dcerpc_timeout_handler"
  144. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ed3dd200
  145. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ed3dd200
  146. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  147. out: struct lsa_OpenPolicy2
  148. handle : *
  149. handle: struct policy_handle
  150. handle_type : 0x00000000 (0)
  151. uuid : 00000011-0000-0000-5354-3b8430200000
  152. result : NT_STATUS_OK
  153. rpc reply data:
  154. [0000] 00 00 00 00 11 00 00 00 00 00 00 00 53 54 3B 84 ........ ....ST;.
  155. [0010] 30 20 00 00 00 00 00 00 0 ......
  156. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  157. in: struct lsa_QueryInfoPolicy2
  158. handle : *
  159. handle: struct policy_handle
  160. handle_type : 0x00000000 (0)
  161. uuid : 00000011-0000-0000-5354-3b8430200000
  162. level : LSA_POLICY_INFO_DNS (12)
  163. rpc request data:
  164. [0000] 00 00 00 00 11 00 00 00 00 00 00 00 53 54 3B 84 ........ ....ST;.
  165. [0010] 30 20 00 00 0C 00 0 ....
  166. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3d98c0
  167. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3a0100
  168. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3d98c0
  169. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3d98c0
  170. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=46, this_data=46, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  171. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3e21b0
  172. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  173. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3d98c0
  174. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  175. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec24cb30
  176. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec24cb30
  177. s4_tevent: Destroying timer event 0x7fb6ec3e21b0 "tevent_req_timedout"
  178. s4_tevent: Destroying timer event 0x7fb6ec3a0100 "dcerpc_timeout_handler"
  179. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec178e70
  180. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec178e70
  181. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  182. out: struct lsa_QueryInfoPolicy2
  183. info : *
  184. info : *
  185. info : union lsa_PolicyInformation(case 12)
  186. dns: struct lsa_DnsDomainInfo
  187. name: struct lsa_StringLarge
  188. length : 0x0006 (6)
  189. size : 0x0008 (8)
  190. string : *
  191. string : 'IPA'
  192. dns_domain: struct lsa_StringLarge
  193. length : 0x0018 (24)
  194. size : 0x001a (26)
  195. string : *
  196. string : 'rdu.lulu.com'
  197. dns_forest: struct lsa_StringLarge
  198. length : 0x0018 (24)
  199. size : 0x001a (26)
  200. string : *
  201. string : 'rdu.lulu.com'
  202. domain_guid : 00000015-8c8c-9a11-cee9-58cb68be9bba
  203. sid : *
  204. sid : S-1-5-21-2584841356-3411601870-3130769000
  205. result : NT_STATUS_OK
  206. rpc reply data:
  207. [0000] 00 00 02 00 0C 00 00 00 06 00 08 00 04 00 02 00 ........ ........
  208. [0010] 18 00 1A 00 08 00 02 00 18 00 1A 00 0C 00 02 00 ........ ........
  209. [0020] 15 00 00 00 8C 8C 11 9A CE E9 58 CB 68 BE 9B BA ........ ..X.h...
  210. [0030] 10 00 02 00 04 00 00 00 00 00 00 00 03 00 00 00 ........ ........
  211. [0040] 49 00 50 00 41 00 00 00 0D 00 00 00 00 00 00 00 I.P.A... ........
  212. [0050] 0C 00 00 00 72 00 64 00 75 00 2E 00 6C 00 75 00 ....r.d. u...l.u.
  213. [0060] 6C 00 75 00 2E 00 63 00 6F 00 6D 00 0D 00 00 00 l.u...c. o.m.....
  214. [0070] 00 00 00 00 0C 00 00 00 72 00 64 00 75 00 2E 00 ........ r.d.u...
  215. [0080] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  216. [0090] 04 00 00 00 01 04 00 00 00 00 00 05 15 00 00 00 ........ ........
  217. [00A0] 8C 8C 11 9A CE E9 58 CB 68 BE 9B BA 00 00 00 00 ......X. h.......
  218. lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty
  219. params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty"
  220. Processing section "[global]"
  221. INFO: Current debug levels:
  222. all: 100
  223. tdb: 100
  224. printdrivers: 100
  225. lanman: 100
  226. smb: 100
  227. rpc_parse: 100
  228. rpc_srv: 100
  229. rpc_cli: 100
  230. passdb: 100
  231. sam: 100
  232. auth: 100
  233. winbind: 100
  234. vfs: 100
  235. idmap: 100
  236. quota: 100
  237. acls: 100
  238. locking: 100
  239. msdfs: 100
  240. dmapi: 100
  241. registry: 100
  242. scavenger: 100
  243. dns: 100
  244. ldb: 100
  245. pm_process() returned Yes
  246. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  247. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  248. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  249. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  250. finddcs: searching for a DC by DNS domain windows.rdu.lulu.com
  251. finddcs: looking for SRV records for _ldap._tcp.windows.rdu.lulu.com
  252. ads_dns_lookup_srv: 1 records returned in the answer section.
  253. ads_dns_parse_rr_srv: Parsed addc1.windows.rdu.lulu.com [0, 100, 389]
  254. Addrs = 10.4.15.43@389/addc1
  255. finddcs: DNS SRV response 0 at '10.4.15.43'
  256. finddcs: performing CLDAP query on 10.4.15.43
  257. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec23e580
  258. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3bfa40
  259. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3bfa40
  260. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec22e440
  261. s4_tevent: Destroying timer event 0x7fb6ec22e440 "tevent_req_timedout"
  262. s4_tevent: Destroying timer event 0x7fb6ec23e580 "tevent_req_timedout"
  263. &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX
  264. command : LOGON_SAM_LOGON_RESPONSE_EX (23)
  265. sbz : 0x0000 (0)
  266. server_type : 0x000073fd (29693)
  267. 1: NBT_SERVER_PDC
  268. 1: NBT_SERVER_GC
  269. 1: NBT_SERVER_LDAP
  270. 1: NBT_SERVER_DS
  271. 1: NBT_SERVER_KDC
  272. 1: NBT_SERVER_TIMESERV
  273. 1: NBT_SERVER_CLOSEST
  274. 1: NBT_SERVER_WRITABLE
  275. 1: NBT_SERVER_GOOD_TIMESERV
  276. 0: NBT_SERVER_NDNC
  277. 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6
  278. 1: NBT_SERVER_FULL_SECRET_DOMAIN_6
  279. 1: NBT_SERVER_ADS_WEB_SERVICE
  280. 0: NBT_SERVER_HAS_DNS_NAME
  281. 0: NBT_SERVER_IS_DEFAULT_NC
  282. 0: NBT_SERVER_FOREST_ROOT
  283. domain_uuid : de890a7f-c4a2-4556-8e53-a44ba907278c
  284. forest : 'windows.rdu.lulu.com'
  285. dns_domain : 'windows.rdu.lulu.com'
  286. pdc_dns_name : 'addc1.windows.rdu.lulu.com'
  287. domain_name : 'WINDOWS-RDU'
  288. pdc_name : 'ADDC1'
  289. user_name : ''
  290. server_site : 'Default-First-Site-Name'
  291. client_site : 'Default-First-Site-Name'
  292. sockaddr_size : 0x00 (0)
  293. sockaddr: struct nbt_sockaddr
  294. sockaddr_family : 0x00000000 (0)
  295. pdc_ip : (null)
  296. remaining : DATA_BLOB length=0
  297. next_closest_site : NULL
  298. nt_version : 0x00000005 (5)
  299. 1: NETLOGON_NT_VERSION_1
  300. 0: NETLOGON_NT_VERSION_5
  301. 1: NETLOGON_NT_VERSION_5EX
  302. 0: NETLOGON_NT_VERSION_5EX_WITH_IP
  303. 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE
  304. 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL
  305. 0: NETLOGON_NT_VERSION_PDC
  306. 0: NETLOGON_NT_VERSION_IP
  307. 0: NETLOGON_NT_VERSION_LOCAL
  308. 0: NETLOGON_NT_VERSION_GC
  309. lmnt_token : 0xffff (65535)
  310. lm20_token : 0xffff (65535)
  311. finddcs: Found matching DC 10.4.15.43 with server_type=0x000073fd
  312. Using binding ncacn_np:addc1.windows.rdu.lulu.com[,]
  313. s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7fb6ec3c3160
  314. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec3dc5d0
  315. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec3af600
  316. s4_tevent: Running timer event 0x7fb6ec3dc5d0 "composite_trigger"
  317. s4_tevent: Destroying timer event 0x7fb6ec3af600 "composite_trigger"
  318. Mapped to DCERPC endpoint \pipe\lsarpc
  319. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  320. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  321. s4_tevent: Ending timer event 0x7fb6ec3dc5d0 "composite_trigger"
  322. s4_tevent: Added timed event "connect_multi_timer": 0x7fb6ec26c480
  323. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec2e1b00
  324. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec2e1b00
  325. s4_tevent: Destroying timer event 0x7fb6ec26c480 "connect_multi_timer"
  326. Socket options:
  327. SO_KEEPALIVE = 0
  328. SO_REUSEADDR = 0
  329. SO_BROADCAST = 0
  330. TCP_NODELAY = 1
  331. TCP_KEEPCNT = 9
  332. TCP_KEEPIDLE = 7200
  333. TCP_KEEPINTVL = 75
  334. IPTOS_LOWDELAY = 0
  335. IPTOS_THROUGHPUT = 0
  336. SO_REUSEPORT = 0
  337. SO_SNDBUF = 23080
  338. SO_RCVBUF = 87380
  339. SO_SNDLOWAT = 1
  340. SO_RCVLOWAT = 1
  341. SO_SNDTIMEO = 0
  342. SO_RCVTIMEO = 0
  343. TCP_QUICKACK = 1
  344. TCP_DEFER_ACCEPT = 0
  345. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3dd5f0
  346. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec2c86c0
  347. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec2c86c0
  348. s4_tevent: Destroying timer event 0x7fb6ec3dd5f0 "tevent_req_timedout"
  349. Starting GENSEC mechanism spnego
  350. Starting GENSEC submechanism gssapi_krb5
  351. Ticket in credentials cache for @IPA will expire in 86400 secs
  352. GSS client Update(krb5)(1) Update failed: Unspecified GSS failure. Minor code may provide more information: KDC policy rejects request
  353. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3e00e0
  354. smb_signing_sign_pdu: sent SMB signature of
  355. [0000] 42 53 52 53 50 59 4C 20 BSRSPYL
  356. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec2c86c0
  357. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec2c86c0
  358. s4_tevent: Destroying timer event 0x7fb6ec3e00e0 "tevent_req_timedout"
  359. GENSEC SPNEGO: client GENSEC accepted, but server rejected (bad password?)
  360. SPNEGO(gssapi_krb5) login failed: NT_STATUS_INVALID_PARAMETER
  361. s4_tevent: Destroying timer event 0x7fb6ec3c3160 "dcerpc_connect_timeout_handler"
  362. [Fri Oct 31 08:44:43.160272 2014] [:error] [pid 4759] ipa: INFO: admin@RDU.LULU.COM: trust_fetch_domains(u'windows.rdu.lulu.com', rights=False, all=False, raw=False, version=u'2.65'): RemoteRetrieveError
  363. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ed3d98c0
  364. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3d5b30
  365. s4_tevent: Destroying timer event 0x7fb6ed3d98c0 "tevent_req_timedout"
  366. s4_tevent: Cancel immediate event 0x7fb6ec3d5b30 "tevent_queue_immediate_trigger"
  367. lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty
  368. params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty"
  369. Processing section "[global]"
  370. INFO: Current debug levels:
  371. all: 100
  372. tdb: 100
  373. printdrivers: 100
  374. lanman: 100
  375. smb: 100
  376. rpc_parse: 100
  377. rpc_srv: 100
  378. rpc_cli: 100
  379. passdb: 100
  380. sam: 100
  381. auth: 100
  382. winbind: 100
  383. vfs: 100
  384. idmap: 100
  385. quota: 100
  386. acls: 100
  387. locking: 100
  388. msdfs: 100
  389. dmapi: 100
  390. registry: 100
  391. scavenger: 100
  392. dns: 100
  393. ldb: 100
  394. pm_process() returned Yes
  395. Using binding ncacn_np:ipa1.rdu.lulu.com[,]
  396. s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7fb6f4248eb0
  397. s4_tevent: Added timed event "composite_trigger": 0x7fb6f424d830
  398. s4_tevent: Added timed event "composite_trigger": 0x7fb6f4162d20
  399. s4_tevent: Running timer event 0x7fb6f424d830 "composite_trigger"
  400. s4_tevent: Destroying timer event 0x7fb6f4162d20 "composite_trigger"
  401. Mapped to DCERPC endpoint \pipe\lsarpc
  402. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  403. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  404. s4_tevent: Ending timer event 0x7fb6f424d830 "composite_trigger"
  405. s4_tevent: Added timed event "connect_multi_timer": 0x7fb6f41707b0
  406. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f4267ed0
  407. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f4267ed0
  408. s4_tevent: Destroying timer event 0x7fb6f41707b0 "connect_multi_timer"
  409. Socket options:
  410. SO_KEEPALIVE = 0
  411. SO_REUSEADDR = 0
  412. SO_BROADCAST = 0
  413. TCP_NODELAY = 1
  414. TCP_KEEPCNT = 9
  415. TCP_KEEPIDLE = 7200
  416. TCP_KEEPINTVL = 75
  417. IPTOS_LOWDELAY = 0
  418. IPTOS_THROUGHPUT = 0
  419. SO_REUSEPORT = 0
  420. SO_SNDBUF = 663430
  421. SO_RCVBUF = 261942
  422. SO_SNDLOWAT = 1
  423. SO_RCVLOWAT = 1
  424. SO_SNDTIMEO = 0
  425. SO_RCVTIMEO = 0
  426. TCP_QUICKACK = 1
  427. TCP_DEFER_ACCEPT = 0
  428. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f434c4e0
  429. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  430. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  431. s4_tevent: Destroying timer event 0x7fb6f434c4e0 "tevent_req_timedout"
  432. Starting GENSEC mechanism spnego
  433. Starting GENSEC submechanism gssapi_krb5
  434. Ticket in credentials cache for @IPA will expire in 85035 secs
  435. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f4272430
  436. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  437. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  438. s4_tevent: Destroying timer event 0x7fb6f4272430 "tevent_req_timedout"
  439. gensec_gssapi: NO credentials were delegated
  440. GSSAPI Connection will be cryptographically sealed
  441. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f42371e0
  442. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  443. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  444. s4_tevent: Destroying timer event 0x7fb6f42371e0 "tevent_req_timedout"
  445. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f42647b0
  446. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  447. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  448. s4_tevent: Destroying timer event 0x7fb6f42647b0 "tevent_req_timedout"
  449. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  450. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f42558d0
  451. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  452. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6f4266340
  453. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  454. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f40bcd50
  455. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f40bcd50
  456. s4_tevent: Destroying timer event 0x7fb6f42558d0 "tevent_req_timedout"
  457. s4_tevent: Destroying timer event 0x7fb6f4266340 "dcerpc_timeout_handler"
  458. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f424cf00
  459. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f424cf00
  460. s4_tevent: Destroying timer event 0x7fb6f4248eb0 "dcerpc_connect_timeout_handler"
  461. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  462. in: struct lsa_OpenPolicy2
  463. system_name : *
  464. system_name : ''
  465. attr : *
  466. attr: struct lsa_ObjectAttribute
  467. len : 0x00000000 (0)
  468. root_dir : NULL
  469. object_name : NULL
  470. attributes : 0x00000000 (0)
  471. sec_desc : NULL
  472. sec_qos : *
  473. sec_qos: struct lsa_QosInfo
  474. len : 0x00000000 (0)
  475. impersonation_level : 0x0000 (0)
  476. context_mode : 0x00 (0)
  477. effective_only : 0x00 (0)
  478. access_mask : 0x02000000 (33554432)
  479. 0: LSA_POLICY_VIEW_LOCAL_INFORMATION
  480. 0: LSA_POLICY_VIEW_AUDIT_INFORMATION
  481. 0: LSA_POLICY_GET_PRIVATE_INFORMATION
  482. 0: LSA_POLICY_TRUST_ADMIN
  483. 0: LSA_POLICY_CREATE_ACCOUNT
  484. 0: LSA_POLICY_CREATE_SECRET
  485. 0: LSA_POLICY_CREATE_PRIVILEGE
  486. 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
  487. 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS
  488. 0: LSA_POLICY_AUDIT_LOG_ADMIN
  489. 0: LSA_POLICY_SERVER_ADMIN
  490. 0: LSA_POLICY_LOOKUP_NAMES
  491. 0: LSA_POLICY_NOTIFICATION
  492. rpc request data:
  493. [0000] 00 00 02 00 01 00 00 00 00 00 00 00 01 00 00 00 ........ ........
  494. [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  495. [0020] 00 00 00 00 00 00 00 00 04 00 02 00 00 00 00 00 ........ ........
  496. [0030] 00 00 00 00 00 00 00 02 ........
  497. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6f4349540
  498. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6f40993b0
  499. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6f4349540
  500. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6f4349540
  501. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=80, this_data=80, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  502. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f4257460
  503. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  504. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6f4349540
  505. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  506. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f43c27d0
  507. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f43c27d0
  508. s4_tevent: Destroying timer event 0x7fb6f4257460 "tevent_req_timedout"
  509. s4_tevent: Destroying timer event 0x7fb6f40993b0 "dcerpc_timeout_handler"
  510. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f43a4a20
  511. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f43a4a20
  512. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  513. out: struct lsa_OpenPolicy2
  514. handle : *
  515. handle: struct policy_handle
  516. handle_type : 0x00000000 (0)
  517. uuid : 00000012-0000-0000-5354-528630200000
  518. result : NT_STATUS_OK
  519. rpc reply data:
  520. [0000] 00 00 00 00 12 00 00 00 00 00 00 00 53 54 52 86 ........ ....STR.
  521. [0010] 30 20 00 00 00 00 00 00 0 ......
  522. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  523. in: struct lsa_QueryInfoPolicy2
  524. handle : *
  525. handle: struct policy_handle
  526. handle_type : 0x00000000 (0)
  527. uuid : 00000012-0000-0000-5354-528630200000
  528. level : LSA_POLICY_INFO_DNS (12)
  529. rpc request data:
  530. [0000] 00 00 00 00 12 00 00 00 00 00 00 00 53 54 52 86 ........ ....STR.
  531. [0010] 30 20 00 00 0C 00 0 ....
  532. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6f4349540
  533. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6f439ee40
  534. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6f4349540
  535. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6f4349540
  536. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=46, this_data=46, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  537. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f43377c0
  538. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  539. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6f4349540
  540. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f43c3100
  541. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f40b1590
  542. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f40b1590
  543. s4_tevent: Destroying timer event 0x7fb6f43377c0 "tevent_req_timedout"
  544. s4_tevent: Destroying timer event 0x7fb6f439ee40 "dcerpc_timeout_handler"
  545. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f4256b30
  546. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f4256b30
  547. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  548. out: struct lsa_QueryInfoPolicy2
  549. info : *
  550. info : *
  551. info : union lsa_PolicyInformation(case 12)
  552. dns: struct lsa_DnsDomainInfo
  553. name: struct lsa_StringLarge
  554. length : 0x0006 (6)
  555. size : 0x0008 (8)
  556. string : *
  557. string : 'IPA'
  558. dns_domain: struct lsa_StringLarge
  559. length : 0x0018 (24)
  560. size : 0x001a (26)
  561. string : *
  562. string : 'rdu.lulu.com'
  563. dns_forest: struct lsa_StringLarge
  564. length : 0x0018 (24)
  565. size : 0x001a (26)
  566. string : *
  567. string : 'rdu.lulu.com'
  568. domain_guid : 00000015-8c8c-9a11-cee9-58cb68be9bba
  569. sid : *
  570. sid : S-1-5-21-2584841356-3411601870-3130769000
  571. result : NT_STATUS_OK
  572. rpc reply data:
  573. [0000] 00 00 02 00 0C 00 00 00 06 00 08 00 04 00 02 00 ........ ........
  574. [0010] 18 00 1A 00 08 00 02 00 18 00 1A 00 0C 00 02 00 ........ ........
  575. [0020] 15 00 00 00 8C 8C 11 9A CE E9 58 CB 68 BE 9B BA ........ ..X.h...
  576. [0030] 10 00 02 00 04 00 00 00 00 00 00 00 03 00 00 00 ........ ........
  577. [0040] 49 00 50 00 41 00 00 00 0D 00 00 00 00 00 00 00 I.P.A... ........
  578. [0050] 0C 00 00 00 72 00 64 00 75 00 2E 00 6C 00 75 00 ....r.d. u...l.u.
  579. [0060] 6C 00 75 00 2E 00 63 00 6F 00 6D 00 0D 00 00 00 l.u...c. o.m.....
  580. [0070] 00 00 00 00 0C 00 00 00 72 00 64 00 75 00 2E 00 ........ r.d.u...
  581. [0080] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  582. [0090] 04 00 00 00 01 04 00 00 00 00 00 05 15 00 00 00 ........ ........
  583. [00A0] 8C 8C 11 9A CE E9 58 CB 68 BE 9B BA 00 00 00 00 ......X. h.......
  584. [Fri Oct 31 08:53:38.235447 2014] [:error] [pid 4760] ipa: INFO: admin@RDU.LULU.COM: trust_add(u'WINDOWS.RDU.LULU.COM', trust_type=u'ad', realm_admin=u'Administrator', all=False, raw=False, version=u'2.65'): ValidationError
  585. lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty
  586. params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty"
  587. Processing section "[global]"
  588. INFO: Current debug levels:
  589. all: 100
  590. tdb: 100
  591. printdrivers: 100
  592. lanman: 100
  593. smb: 100
  594. rpc_parse: 100
  595. rpc_srv: 100
  596. rpc_cli: 100
  597. passdb: 100
  598. sam: 100
  599. auth: 100
  600. winbind: 100
  601. vfs: 100
  602. idmap: 100
  603. quota: 100
  604. acls: 100
  605. locking: 100
  606. msdfs: 100
  607. dmapi: 100
  608. registry: 100
  609. scavenger: 100
  610. dns: 100
  611. ldb: 100
  612. pm_process() returned Yes
  613. Using binding ncacn_np:ipa1.rdu.lulu.com[,]
  614. s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7fb6ec153570
  615. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec1797a0
  616. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec164680
  617. s4_tevent: Running timer event 0x7fb6ec1797a0 "composite_trigger"
  618. s4_tevent: Destroying timer event 0x7fb6ec164680 "composite_trigger"
  619. Mapped to DCERPC endpoint \pipe\lsarpc
  620. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  621. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  622. s4_tevent: Ending timer event 0x7fb6ec1797a0 "composite_trigger"
  623. s4_tevent: Added timed event "connect_multi_timer": 0x7fb6ec259e80
  624. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec397730
  625. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec397730
  626. s4_tevent: Destroying timer event 0x7fb6ec259e80 "connect_multi_timer"
  627. Socket options:
  628. SO_KEEPALIVE = 0
  629. SO_REUSEADDR = 0
  630. SO_BROADCAST = 0
  631. TCP_NODELAY = 1
  632. TCP_KEEPCNT = 9
  633. TCP_KEEPIDLE = 7200
  634. TCP_KEEPINTVL = 75
  635. IPTOS_LOWDELAY = 0
  636. IPTOS_THROUGHPUT = 0
  637. SO_REUSEPORT = 0
  638. SO_SNDBUF = 663430
  639. SO_RCVBUF = 261942
  640. SO_SNDLOWAT = 1
  641. SO_RCVLOWAT = 1
  642. SO_SNDTIMEO = 0
  643. SO_RCVTIMEO = 0
  644. TCP_QUICKACK = 1
  645. TCP_DEFER_ACCEPT = 0
  646. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec277310
  647. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  648. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  649. s4_tevent: Destroying timer event 0x7fb6ec277310 "tevent_req_timedout"
  650. Starting GENSEC mechanism spnego
  651. Starting GENSEC submechanism gssapi_krb5
  652. Ticket in credentials cache for @IPA will expire in 85022 secs
  653. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec278570
  654. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  655. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  656. s4_tevent: Destroying timer event 0x7fb6ec278570 "tevent_req_timedout"
  657. gensec_gssapi: NO credentials were delegated
  658. GSSAPI Connection will be cryptographically sealed
  659. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec2d3e80
  660. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  661. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  662. s4_tevent: Destroying timer event 0x7fb6ec2d3e80 "tevent_req_timedout"
  663. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec270e00
  664. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  665. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  666. s4_tevent: Destroying timer event 0x7fb6ec270e00 "tevent_req_timedout"
  667. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  668. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec268d60
  669. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  670. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec2e48f0
  671. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  672. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec15b380
  673. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec15b380
  674. s4_tevent: Destroying timer event 0x7fb6ec268d60 "tevent_req_timedout"
  675. s4_tevent: Destroying timer event 0x7fb6ec2e48f0 "dcerpc_timeout_handler"
  676. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec0a2370
  677. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec0a2370
  678. s4_tevent: Destroying timer event 0x7fb6ec153570 "dcerpc_connect_timeout_handler"
  679. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  680. in: struct lsa_OpenPolicy2
  681. system_name : *
  682. system_name : ''
  683. attr : *
  684. attr: struct lsa_ObjectAttribute
  685. len : 0x00000000 (0)
  686. root_dir : NULL
  687. object_name : NULL
  688. attributes : 0x00000000 (0)
  689. sec_desc : NULL
  690. sec_qos : *
  691. sec_qos: struct lsa_QosInfo
  692. len : 0x00000000 (0)
  693. impersonation_level : 0x0000 (0)
  694. context_mode : 0x00 (0)
  695. effective_only : 0x00 (0)
  696. access_mask : 0x02000000 (33554432)
  697. 0: LSA_POLICY_VIEW_LOCAL_INFORMATION
  698. 0: LSA_POLICY_VIEW_AUDIT_INFORMATION
  699. 0: LSA_POLICY_GET_PRIVATE_INFORMATION
  700. 0: LSA_POLICY_TRUST_ADMIN
  701. 0: LSA_POLICY_CREATE_ACCOUNT
  702. 0: LSA_POLICY_CREATE_SECRET
  703. 0: LSA_POLICY_CREATE_PRIVILEGE
  704. 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
  705. 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS
  706. 0: LSA_POLICY_AUDIT_LOG_ADMIN
  707. 0: LSA_POLICY_SERVER_ADMIN
  708. 0: LSA_POLICY_LOOKUP_NAMES
  709. 0: LSA_POLICY_NOTIFICATION
  710. rpc request data:
  711. [0000] 00 00 02 00 01 00 00 00 00 00 00 00 01 00 00 00 ........ ........
  712. [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  713. [0020] 00 00 00 00 00 00 00 00 04 00 02 00 00 00 00 00 ........ ........
  714. [0030] 00 00 00 00 00 00 00 02 ........
  715. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  716. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3bfa40
  717. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  718. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  719. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=80, this_data=80, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  720. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec1be1c0
  721. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  722. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  723. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  724. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec2425d0
  725. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec2425d0
  726. s4_tevent: Destroying timer event 0x7fb6ec1be1c0 "tevent_req_timedout"
  727. s4_tevent: Destroying timer event 0x7fb6ec3bfa40 "dcerpc_timeout_handler"
  728. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3bb0c0
  729. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3bb0c0
  730. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  731. out: struct lsa_OpenPolicy2
  732. handle : *
  733. handle: struct policy_handle
  734. handle_type : 0x00000000 (0)
  735. uuid : 0000000d-0000-0000-5354-5f86a72a0000
  736. result : NT_STATUS_OK
  737. rpc reply data:
  738. [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 53 54 5F 86 ........ ....ST_.
  739. [0010] A7 2A 00 00 00 00 00 00 .*......
  740. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  741. in: struct lsa_QueryInfoPolicy2
  742. handle : *
  743. handle: struct policy_handle
  744. handle_type : 0x00000000 (0)
  745. uuid : 0000000d-0000-0000-5354-5f86a72a0000
  746. level : LSA_POLICY_INFO_DNS (12)
  747. rpc request data:
  748. [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 53 54 5F 86 ........ ....ST_.
  749. [0010] A7 2A 00 00 0C 00 .*....
  750. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  751. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3ae3a0
  752. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  753. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  754. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=46, this_data=46, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  755. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3c0990
  756. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  757. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  758. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  759. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec232490
  760. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec232490
  761. s4_tevent: Destroying timer event 0x7fb6ec3c0990 "tevent_req_timedout"
  762. s4_tevent: Destroying timer event 0x7fb6ec3ae3a0 "dcerpc_timeout_handler"
  763. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec2336f0
  764. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec2336f0
  765. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  766. out: struct lsa_QueryInfoPolicy2
  767. info : *
  768. info : *
  769. info : union lsa_PolicyInformation(case 12)
  770. dns: struct lsa_DnsDomainInfo
  771. name: struct lsa_StringLarge
  772. length : 0x0006 (6)
  773. size : 0x0008 (8)
  774. string : *
  775. string : 'IPA'
  776. dns_domain: struct lsa_StringLarge
  777. length : 0x0018 (24)
  778. size : 0x001a (26)
  779. string : *
  780. string : 'rdu.lulu.com'
  781. dns_forest: struct lsa_StringLarge
  782. length : 0x0018 (24)
  783. size : 0x001a (26)
  784. string : *
  785. string : 'rdu.lulu.com'
  786. domain_guid : 00000015-8c8c-9a11-cee9-58cb68be9bba
  787. sid : *
  788. sid : S-1-5-21-2584841356-3411601870-3130769000
  789. result : NT_STATUS_OK
  790. rpc reply data:
  791. [0000] 00 00 02 00 0C 00 00 00 06 00 08 00 04 00 02 00 ........ ........
  792. [0010] 18 00 1A 00 08 00 02 00 18 00 1A 00 0C 00 02 00 ........ ........
  793. [0020] 15 00 00 00 8C 8C 11 9A CE E9 58 CB 68 BE 9B BA ........ ..X.h...
  794. [0030] 10 00 02 00 04 00 00 00 00 00 00 00 03 00 00 00 ........ ........
  795. [0040] 49 00 50 00 41 00 00 00 0D 00 00 00 00 00 00 00 I.P.A... ........
  796. [0050] 0C 00 00 00 72 00 64 00 75 00 2E 00 6C 00 75 00 ....r.d. u...l.u.
  797. [0060] 6C 00 75 00 2E 00 63 00 6F 00 6D 00 0D 00 00 00 l.u...c. o.m.....
  798. [0070] 00 00 00 00 0C 00 00 00 72 00 64 00 75 00 2E 00 ........ r.d.u...
  799. [0080] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  800. [0090] 04 00 00 00 01 04 00 00 00 00 00 05 15 00 00 00 ........ ........
  801. [00A0] 8C 8C 11 9A CE E9 58 CB 68 BE 9B BA 00 00 00 00 ......X. h.......
  802. lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty
  803. params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty"
  804. Processing section "[global]"
  805. INFO: Current debug levels:
  806. all: 100
  807. tdb: 100
  808. printdrivers: 100
  809. lanman: 100
  810. smb: 100
  811. rpc_parse: 100
  812. rpc_srv: 100
  813. rpc_cli: 100
  814. passdb: 100
  815. sam: 100
  816. auth: 100
  817. winbind: 100
  818. vfs: 100
  819. idmap: 100
  820. quota: 100
  821. acls: 100
  822. locking: 100
  823. msdfs: 100
  824. dmapi: 100
  825. registry: 100
  826. scavenger: 100
  827. dns: 100
  828. ldb: 100
  829. pm_process() returned Yes
  830. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  831. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  832. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  833. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  834. finddcs: searching for a DC by DNS domain WINDOWS.RDU.LULU.COM
  835. finddcs: looking for SRV records for _ldap._tcp.WINDOWS.RDU.LULU.COM
  836. ads_dns_lookup_srv: 1 records returned in the answer section.
  837. ads_dns_parse_rr_srv: Parsed addc1.windows.rdu.lulu.com [0, 100, 389]
  838. Addrs = 10.4.15.43@389/addc1
  839. finddcs: DNS SRV response 0 at '10.4.15.43'
  840. finddcs: performing CLDAP query on 10.4.15.43
  841. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3e2180
  842. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec244160
  843. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec244160
  844. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec2e3fc0
  845. s4_tevent: Destroying timer event 0x7fb6ec2e3fc0 "tevent_req_timedout"
  846. s4_tevent: Destroying timer event 0x7fb6ec3e2180 "tevent_req_timedout"
  847. &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX
  848. command : LOGON_SAM_LOGON_RESPONSE_EX (23)
  849. sbz : 0x0000 (0)
  850. server_type : 0x000073fd (29693)
  851. 1: NBT_SERVER_PDC
  852. 1: NBT_SERVER_GC
  853. 1: NBT_SERVER_LDAP
  854. 1: NBT_SERVER_DS
  855. 1: NBT_SERVER_KDC
  856. 1: NBT_SERVER_TIMESERV
  857. 1: NBT_SERVER_CLOSEST
  858. 1: NBT_SERVER_WRITABLE
  859. 1: NBT_SERVER_GOOD_TIMESERV
  860. 0: NBT_SERVER_NDNC
  861. 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6
  862. 1: NBT_SERVER_FULL_SECRET_DOMAIN_6
  863. 1: NBT_SERVER_ADS_WEB_SERVICE
  864. 0: NBT_SERVER_HAS_DNS_NAME
  865. 0: NBT_SERVER_IS_DEFAULT_NC
  866. 0: NBT_SERVER_FOREST_ROOT
  867. domain_uuid : de890a7f-c4a2-4556-8e53-a44ba907278c
  868. forest : 'windows.rdu.lulu.com'
  869. dns_domain : 'windows.rdu.lulu.com'
  870. pdc_dns_name : 'addc1.windows.rdu.lulu.com'
  871. domain_name : 'WINDOWS-RDU'
  872. pdc_name : 'ADDC1'
  873. user_name : ''
  874. server_site : 'Default-First-Site-Name'
  875. client_site : 'Default-First-Site-Name'
  876. sockaddr_size : 0x00 (0)
  877. sockaddr: struct nbt_sockaddr
  878. sockaddr_family : 0x00000000 (0)
  879. pdc_ip : (null)
  880. remaining : DATA_BLOB length=0
  881. next_closest_site : NULL
  882. nt_version : 0x00000005 (5)
  883. 1: NETLOGON_NT_VERSION_1
  884. 0: NETLOGON_NT_VERSION_5
  885. 1: NETLOGON_NT_VERSION_5EX
  886. 0: NETLOGON_NT_VERSION_5EX_WITH_IP
  887. 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE
  888. 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL
  889. 0: NETLOGON_NT_VERSION_PDC
  890. 0: NETLOGON_NT_VERSION_IP
  891. 0: NETLOGON_NT_VERSION_LOCAL
  892. 0: NETLOGON_NT_VERSION_GC
  893. lmnt_token : 0xffff (65535)
  894. lm20_token : 0xffff (65535)
  895. finddcs: Found matching DC 10.4.15.43 with server_type=0x000073fd
  896. lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty
  897. params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty"
  898. Processing section "[global]"
  899. INFO: Current debug levels:
  900. all: 100
  901. tdb: 100
  902. printdrivers: 100
  903. lanman: 100
  904. smb: 100
  905. rpc_parse: 100
  906. rpc_srv: 100
  907. rpc_cli: 100
  908. passdb: 100
  909. sam: 100
  910. auth: 100
  911. winbind: 100
  912. vfs: 100
  913. idmap: 100
  914. quota: 100
  915. acls: 100
  916. locking: 100
  917. msdfs: 100
  918. dmapi: 100
  919. registry: 100
  920. scavenger: 100
  921. dns: 100
  922. ldb: 100
  923. pm_process() returned Yes
  924. Using binding ncacn_np:addc1.windows.rdu.lulu.com[,]
  925. s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7fb6ec396e00
  926. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec3cfcf0
  927. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec3992c0
  928. s4_tevent: Running timer event 0x7fb6ec3cfcf0 "composite_trigger"
  929. s4_tevent: Destroying timer event 0x7fb6ec3992c0 "composite_trigger"
  930. Mapped to DCERPC endpoint \pipe\lsarpc
  931. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  932. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  933. s4_tevent: Ending timer event 0x7fb6ec3cfcf0 "composite_trigger"
  934. s4_tevent: Added timed event "connect_multi_timer": 0x7fb6ec16fc50
  935. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec23e580
  936. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec23e580
  937. s4_tevent: Destroying timer event 0x7fb6ec16fc50 "connect_multi_timer"
  938. Socket options:
  939. SO_KEEPALIVE = 0
  940. SO_REUSEADDR = 0
  941. SO_BROADCAST = 0
  942. TCP_NODELAY = 1
  943. TCP_KEEPCNT = 9
  944. TCP_KEEPIDLE = 7200
  945. TCP_KEEPINTVL = 75
  946. IPTOS_LOWDELAY = 0
  947. IPTOS_THROUGHPUT = 0
  948. SO_REUSEPORT = 0
  949. SO_SNDBUF = 23080
  950. SO_RCVBUF = 87380
  951. SO_SNDLOWAT = 1
  952. SO_RCVLOWAT = 1
  953. SO_SNDTIMEO = 0
  954. SO_RCVTIMEO = 0
  955. TCP_QUICKACK = 1
  956. TCP_DEFER_ACCEPT = 0
  957. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3c8090
  958. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  959. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  960. s4_tevent: Destroying timer event 0x7fb6ec3c8090 "tevent_req_timedout"
  961. Starting GENSEC mechanism spnego
  962. Starting GENSEC submechanism ntlmssp
  963. negotiate: struct NEGOTIATE_MESSAGE
  964. Signature : 'NTLMSSP'
  965. MessageType : NtLmNegotiate (1)
  966. NegotiateFlags : 0x60088215 (1611170325)
  967. 1: NTLMSSP_NEGOTIATE_UNICODE
  968. 0: NTLMSSP_NEGOTIATE_OEM
  969. 1: NTLMSSP_REQUEST_TARGET
  970. 1: NTLMSSP_NEGOTIATE_SIGN
  971. 0: NTLMSSP_NEGOTIATE_SEAL
  972. 0: NTLMSSP_NEGOTIATE_DATAGRAM
  973. 0: NTLMSSP_NEGOTIATE_LM_KEY
  974. 0: NTLMSSP_NEGOTIATE_NETWARE
  975. 1: NTLMSSP_NEGOTIATE_NTLM
  976. 0: NTLMSSP_NEGOTIATE_NT_ONLY
  977. 0: NTLMSSP_ANONYMOUS
  978. 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
  979. 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
  980. 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
  981. 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  982. 0: NTLMSSP_TARGET_TYPE_DOMAIN
  983. 0: NTLMSSP_TARGET_TYPE_SERVER
  984. 0: NTLMSSP_TARGET_TYPE_SHARE
  985. 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
  986. 0: NTLMSSP_NEGOTIATE_IDENTIFY
  987. 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
  988. 0: NTLMSSP_NEGOTIATE_TARGET_INFO
  989. 0: NTLMSSP_NEGOTIATE_VERSION
  990. 1: NTLMSSP_NEGOTIATE_128
  991. 1: NTLMSSP_NEGOTIATE_KEY_EXCH
  992. 0: NTLMSSP_NEGOTIATE_56
  993. DomainNameLen : 0x0003 (3)
  994. DomainNameMaxLen : 0x0003 (3)
  995. DomainName : *
  996. DomainName : 'IPA'
  997. WorkstationLen : 0x0003 (3)
  998. WorkstationMaxLen : 0x0003 (3)
  999. Workstation : *
  1000. Workstation : 'IPA'
  1001. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3b6f40
  1002. smb_signing_sign_pdu: sent SMB signature of
  1003. [0000] 42 53 52 53 50 59 4C 20 BSRSPYL
  1004. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1005. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1006. s4_tevent: Destroying timer event 0x7fb6ec3b6f40 "tevent_req_timedout"
  1007. Got challenge flags:
  1008. Got NTLMSSP neg_flags=0x62898215
  1009. NTLMSSP_NEGOTIATE_UNICODE
  1010. NTLMSSP_REQUEST_TARGET
  1011. NTLMSSP_NEGOTIATE_SIGN
  1012. NTLMSSP_NEGOTIATE_NTLM
  1013. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  1014. NTLMSSP_NEGOTIATE_NTLM2
  1015. NTLMSSP_NEGOTIATE_TARGET_INFO
  1016. NTLMSSP_NEGOTIATE_VERSION
  1017. NTLMSSP_NEGOTIATE_128
  1018. NTLMSSP_NEGOTIATE_KEY_EXCH
  1019. NTLMSSP: Set final flags:
  1020. Got NTLMSSP neg_flags=0x60088215
  1021. NTLMSSP_NEGOTIATE_UNICODE
  1022. NTLMSSP_REQUEST_TARGET
  1023. NTLMSSP_NEGOTIATE_SIGN
  1024. NTLMSSP_NEGOTIATE_NTLM
  1025. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  1026. NTLMSSP_NEGOTIATE_NTLM2
  1027. NTLMSSP_NEGOTIATE_128
  1028. NTLMSSP_NEGOTIATE_KEY_EXCH
  1029. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec140a70
  1030. smb_signing_sign_pdu: sent SMB signature of
  1031. [0000] 42 53 52 53 50 59 4C 20 BSRSPYL
  1032. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1033. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1034. s4_tevent: Destroying timer event 0x7fb6ec140a70 "tevent_req_timedout"
  1035. smb_signing_activate: user_session_key
  1036. [0000] 49 C6 2C C8 3E E8 74 47 9E FC 61 F8 C1 39 1B E7 I.,.>.tG ..a..9..
  1037. smb_signing_activate: NULL response_data
  1038. smb_signing_md5: sequence number 1
  1039. smb_signing_check_pdu: seq 1: got good SMB signature of
  1040. [0000] 87 20 76 0C 5C 39 AD 33 . v.\9.3
  1041. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3a87c0
  1042. smb_signing_md5: sequence number 2
  1043. smb_signing_sign_pdu: sent SMB signature of
  1044. [0000] 79 31 DB 6A 16 79 6F 0F y1.j.yo.
  1045. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1046. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1047. smb_signing_md5: sequence number 3
  1048. smb_signing_check_pdu: seq 3: got good SMB signature of
  1049. [0000] 6B EB E7 11 3D B0 A4 08 k...=...
  1050. s4_tevent: Destroying timer event 0x7fb6ec3a87c0 "tevent_req_timedout"
  1051. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec1408c0
  1052. smb_signing_md5: sequence number 4
  1053. smb_signing_sign_pdu: sent SMB signature of
  1054. [0000] 0F B6 AC 83 6E EE C7 36 ....n..6
  1055. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1056. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1057. smb_signing_md5: sequence number 5
  1058. smb_signing_check_pdu: seq 5: got good SMB signature of
  1059. [0000] A0 D9 51 74 E3 67 F5 8D ..Qt.g..
  1060. s4_tevent: Destroying timer event 0x7fb6ec1408c0 "tevent_req_timedout"
  1061. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  1062. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ed3dedb0
  1063. smb_signing_md5: sequence number 6
  1064. smb_signing_sign_pdu: sent SMB signature of
  1065. [0000] FE D8 13 EB 17 38 F2 6B .....8.k
  1066. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1067. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3a90f0
  1068. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1069. smb_signing_md5: sequence number 7
  1070. smb_signing_check_pdu: seq 7: got good SMB signature of
  1071. [0000] 59 D6 67 59 B9 AD 82 62 Y.gY...b
  1072. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec26bb50
  1073. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec26bb50
  1074. s4_tevent: Destroying timer event 0x7fb6ed3dedb0 "tevent_req_timedout"
  1075. s4_tevent: Destroying timer event 0x7fb6ec3a90f0 "dcerpc_timeout_handler"
  1076. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec39eea0
  1077. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec39eea0
  1078. s4_tevent: Destroying timer event 0x7fb6ec396e00 "dcerpc_connect_timeout_handler"
  1079. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  1080. in: struct lsa_OpenPolicy2
  1081. system_name : *
  1082. system_name : ''
  1083. attr : *
  1084. attr: struct lsa_ObjectAttribute
  1085. len : 0x00000000 (0)
  1086. root_dir : NULL
  1087. object_name : NULL
  1088. attributes : 0x00000000 (0)
  1089. sec_desc : NULL
  1090. sec_qos : *
  1091. sec_qos: struct lsa_QosInfo
  1092. len : 0x00000000 (0)
  1093. impersonation_level : 0x0000 (0)
  1094. context_mode : 0x00 (0)
  1095. effective_only : 0x00 (0)
  1096. access_mask : 0x02000000 (33554432)
  1097. 0: LSA_POLICY_VIEW_LOCAL_INFORMATION
  1098. 0: LSA_POLICY_VIEW_AUDIT_INFORMATION
  1099. 0: LSA_POLICY_GET_PRIVATE_INFORMATION
  1100. 0: LSA_POLICY_TRUST_ADMIN
  1101. 0: LSA_POLICY_CREATE_ACCOUNT
  1102. 0: LSA_POLICY_CREATE_SECRET
  1103. 0: LSA_POLICY_CREATE_PRIVILEGE
  1104. 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
  1105. 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS
  1106. 0: LSA_POLICY_AUDIT_LOG_ADMIN
  1107. 0: LSA_POLICY_SERVER_ADMIN
  1108. 0: LSA_POLICY_LOOKUP_NAMES
  1109. 0: LSA_POLICY_NOTIFICATION
  1110. rpc request data:
  1111. [0000] 00 00 02 00 01 00 00 00 00 00 00 00 01 00 00 00 ........ ........
  1112. [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  1113. [0020] 00 00 00 00 00 00 00 00 04 00 02 00 00 00 00 00 ........ ........
  1114. [0030] 00 00 00 00 00 00 00 02 ........
  1115. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1116. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec2cf500
  1117. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1118. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1119. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=80, this_data=80, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  1120. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec0ab670
  1121. smb_signing_md5: sequence number 8
  1122. smb_signing_sign_pdu: sent SMB signature of
  1123. [0000] B5 7E 79 13 E1 28 00 5C .~y..(.\
  1124. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1125. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1126. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1127. smb_signing_md5: sequence number 9
  1128. smb_signing_check_pdu: seq 9: got good SMB signature of
  1129. [0000] 65 DC 6E DA 4F F2 41 F9 e.n.O.A.
  1130. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3bd580
  1131. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3bd580
  1132. s4_tevent: Destroying timer event 0x7fb6ec0ab670 "tevent_req_timedout"
  1133. s4_tevent: Destroying timer event 0x7fb6ec2cf500 "dcerpc_timeout_handler"
  1134. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec26e940
  1135. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec26e940
  1136. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  1137. out: struct lsa_OpenPolicy2
  1138. handle : *
  1139. handle: struct policy_handle
  1140. handle_type : 0x00000000 (0)
  1141. uuid : a90f0025-738b-4eae-9d5a-5433f66807b0
  1142. result : NT_STATUS_OK
  1143. rpc reply data:
  1144. [0000] 00 00 00 00 25 00 0F A9 8B 73 AE 4E 9D 5A 54 33 ....%... .s.N.ZT3
  1145. [0010] F6 68 07 B0 00 00 00 00 .h......
  1146. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  1147. in: struct lsa_QueryInfoPolicy2
  1148. handle : *
  1149. handle: struct policy_handle
  1150. handle_type : 0x00000000 (0)
  1151. uuid : a90f0025-738b-4eae-9d5a-5433f66807b0
  1152. level : LSA_POLICY_INFO_DNS (12)
  1153. rpc request data:
  1154. [0000] 00 00 00 00 25 00 0F A9 8B 73 AE 4E 9D 5A 54 33 ....%... .s.N.ZT3
  1155. [0010] F6 68 07 B0 0C 00 .h....
  1156. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1157. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec2e3fc0
  1158. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1159. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1160. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=46, this_data=46, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  1161. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec173290
  1162. smb_signing_md5: sequence number 10
  1163. smb_signing_sign_pdu: sent SMB signature of
  1164. [0000] B5 58 12 99 59 CA 41 E5 .X..Y.A.
  1165. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1166. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1167. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1168. smb_signing_md5: sequence number 11
  1169. smb_signing_check_pdu: seq 11: got good SMB signature of
  1170. [0000] 3F FF 67 DE 9D 31 1D 39 ?.g..1.9
  1171. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec2cf500
  1172. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec2cf500
  1173. s4_tevent: Destroying timer event 0x7fb6ec173290 "tevent_req_timedout"
  1174. s4_tevent: Destroying timer event 0x7fb6ec2e3fc0 "dcerpc_timeout_handler"
  1175. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3dc740
  1176. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3dc740
  1177. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  1178. out: struct lsa_QueryInfoPolicy2
  1179. info : *
  1180. info : *
  1181. info : union lsa_PolicyInformation(case 12)
  1182. dns: struct lsa_DnsDomainInfo
  1183. name: struct lsa_StringLarge
  1184. length : 0x0016 (22)
  1185. size : 0x0018 (24)
  1186. string : *
  1187. string : 'WINDOWS-RDU'
  1188. dns_domain: struct lsa_StringLarge
  1189. length : 0x0028 (40)
  1190. size : 0x002a (42)
  1191. string : *
  1192. string : 'windows.rdu.lulu.com'
  1193. dns_forest: struct lsa_StringLarge
  1194. length : 0x0028 (40)
  1195. size : 0x002a (42)
  1196. string : *
  1197. string : 'windows.rdu.lulu.com'
  1198. domain_guid : de890a7f-c4a2-4556-8e53-a44ba907278c
  1199. sid : *
  1200. sid : S-1-5-21-3940030408-2275254484-3250932449
  1201. result : NT_STATUS_OK
  1202. rpc reply data:
  1203. [0000] 00 00 02 00 0C 00 00 00 16 00 18 00 04 00 02 00 ........ ........
  1204. [0010] 28 00 2A 00 08 00 02 00 28 00 2A 00 0C 00 02 00 (.*..... (.*.....
  1205. [0020] 7F 0A 89 DE A2 C4 56 45 8E 53 A4 4B A9 07 27 8C ......VE .S.K..'.
  1206. [0030] 10 00 02 00 0C 00 00 00 00 00 00 00 0B 00 00 00 ........ ........
  1207. [0040] 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 2D 00 W.I.N.D. O.W.S.-.
  1208. [0050] 52 00 44 00 55 00 00 00 15 00 00 00 00 00 00 00 R.D.U... ........
  1209. [0060] 14 00 00 00 77 00 69 00 6E 00 64 00 6F 00 77 00 ....w.i. n.d.o.w.
  1210. [0070] 73 00 2E 00 72 00 64 00 75 00 2E 00 6C 00 75 00 s...r.d. u...l.u.
  1211. [0080] 6C 00 75 00 2E 00 63 00 6F 00 6D 00 15 00 00 00 l.u...c. o.m.....
  1212. [0090] 00 00 00 00 14 00 00 00 77 00 69 00 6E 00 64 00 ........ w.i.n.d.
  1213. [00A0] 6F 00 77 00 73 00 2E 00 72 00 64 00 75 00 2E 00 o.w.s... r.d.u...
  1214. [00B0] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  1215. [00C0] 04 00 00 00 01 04 00 00 00 00 00 05 15 00 00 00 ........ ........
  1216. [00D0] C8 17 D8 EA D4 A0 9D 87 E1 4A C5 C1 00 00 00 00 ........ .J......
  1217. lsa_QueryTrustedDomainInfoByName: struct lsa_QueryTrustedDomainInfoByName
  1218. in: struct lsa_QueryTrustedDomainInfoByName
  1219. handle : *
  1220. handle: struct policy_handle
  1221. handle_type : 0x00000000 (0)
  1222. uuid : a90f0025-738b-4eae-9d5a-5433f66807b0
  1223. trusted_domain : *
  1224. trusted_domain: struct lsa_String
  1225. length : 0x0018 (24)
  1226. size : 0x0018 (24)
  1227. string : *
  1228. string : 'rdu.lulu.com'
  1229. level : LSA_TRUSTED_DOMAIN_INFO_FULL_INFO (8)
  1230. rpc request data:
  1231. [0000] 00 00 00 00 25 00 0F A9 8B 73 AE 4E 9D 5A 54 33 ....%... .s.N.ZT3
  1232. [0010] F6 68 07 B0 18 00 18 00 00 00 02 00 0C 00 00 00 .h...... ........
  1233. [0020] 00 00 00 00 0C 00 00 00 72 00 64 00 75 00 2E 00 ........ r.d.u...
  1234. [0030] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  1235. [0040] 08 00 ..
  1236. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1237. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3b2510
  1238. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1239. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1240. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=90, this_data=90, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  1241. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3de980
  1242. smb_signing_md5: sequence number 12
  1243. smb_signing_sign_pdu: sent SMB signature of
  1244. [0000] C6 60 A2 22 A8 9E 0C 78 .`."...x
  1245. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1246. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1247. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1248. smb_signing_md5: sequence number 13
  1249. smb_signing_check_pdu: seq 13: got good SMB signature of
  1250. [0000] 06 E8 5C CD 0F 5B FF BD ..\..[..
  1251. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3bb6e0
  1252. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3bb6e0
  1253. s4_tevent: Destroying timer event 0x7fb6ec3de980 "tevent_req_timedout"
  1254. s4_tevent: Destroying timer event 0x7fb6ec3b2510 "dcerpc_timeout_handler"
  1255. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3054a0
  1256. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3054a0
  1257. lsa_QueryTrustedDomainInfoByName: struct lsa_QueryTrustedDomainInfoByName
  1258. out: struct lsa_QueryTrustedDomainInfoByName
  1259. info : *
  1260. info : *
  1261. info : union lsa_TrustedDomainInfo(case 8)
  1262. full_info: struct lsa_TrustDomainInfoFullInfo
  1263. info_ex: struct lsa_TrustDomainInfoInfoEx
  1264. domain_name: struct lsa_StringLarge
  1265. length : 0x0018 (24)
  1266. size : 0x001a (26)
  1267. string : *
  1268. string : 'rdu.lulu.com'
  1269. netbios_name: struct lsa_StringLarge
  1270. length : 0x0006 (6)
  1271. size : 0x0008 (8)
  1272. string : *
  1273. string : 'IPA'
  1274. sid : *
  1275. sid : S-1-5-21-2584841356-3411601870-3130769000
  1276. trust_direction : 0x00000003 (3)
  1277. 1: LSA_TRUST_DIRECTION_INBOUND
  1278. 1: LSA_TRUST_DIRECTION_OUTBOUND
  1279. trust_type : LSA_TRUST_TYPE_UPLEVEL (2)
  1280. trust_attributes : 0x00000008 (8)
  1281. 0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
  1282. 0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
  1283. 0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
  1284. 1: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
  1285. 0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
  1286. 0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
  1287. 0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
  1288. 0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
  1289. posix_offset: struct lsa_TrustDomainInfoPosixOffset
  1290. posix_offset : 0x80000000 (2147483648)
  1291. auth_info: struct lsa_TrustDomainInfoAuthInfo
  1292. incoming_count : 0x00000000 (0)
  1293. incoming_current_auth_info: NULL
  1294. incoming_previous_auth_info: NULL
  1295. outgoing_count : 0x00000000 (0)
  1296. outgoing_current_auth_info: NULL
  1297. outgoing_previous_auth_info: NULL
  1298. result : NT_STATUS_OK
  1299. rpc reply data:
  1300. [0000] 00 00 02 00 08 00 00 00 18 00 1A 00 04 00 02 00 ........ ........
  1301. [0010] 06 00 08 00 08 00 02 00 0C 00 02 00 03 00 00 00 ........ ........
  1302. [0020] 02 00 00 00 08 00 00 00 00 00 00 80 00 00 00 00 ........ ........
  1303. [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  1304. [0040] 00 00 00 00 0D 00 00 00 00 00 00 00 0C 00 00 00 ........ ........
  1305. [0050] 72 00 64 00 75 00 2E 00 6C 00 75 00 6C 00 75 00 r.d.u... l.u.l.u.
  1306. [0060] 2E 00 63 00 6F 00 6D 00 04 00 00 00 00 00 00 00 ..c.o.m. ........
  1307. [0070] 03 00 00 00 49 00 50 00 41 00 00 00 04 00 00 00 ....I.P. A.......
  1308. [0080] 01 04 00 00 00 00 00 05 15 00 00 00 8C 8C 11 9A ........ ........
  1309. [0090] CE E9 58 CB 68 BE 9B BA 00 00 00 00 ..X.h... ....
  1310. lsa_DeleteTrustedDomain: struct lsa_DeleteTrustedDomain
  1311. in: struct lsa_DeleteTrustedDomain
  1312. handle : *
  1313. handle: struct policy_handle
  1314. handle_type : 0x00000000 (0)
  1315. uuid : a90f0025-738b-4eae-9d5a-5433f66807b0
  1316. dom_sid : *
  1317. dom_sid : S-1-5-21-2584841356-3411601870-3130769000
  1318. rpc request data:
  1319. [0000] 00 00 00 00 25 00 0F A9 8B 73 AE 4E 9D 5A 54 33 ....%... .s.N.ZT3
  1320. [0010] F6 68 07 B0 04 00 00 00 01 04 00 00 00 00 00 05 .h...... ........
  1321. [0020] 15 00 00 00 8C 8C 11 9A CE E9 58 CB 68 BE 9B BA ........ ..X.h...
  1322. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1323. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec26bb50
  1324. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1325. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1326. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  1327. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3de980
  1328. smb_signing_md5: sequence number 14
  1329. smb_signing_sign_pdu: sent SMB signature of
  1330. [0000] DF 39 E7 92 26 31 5C 6A .9..&1\j
  1331. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1332. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  1333. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  1334. smb_signing_md5: sequence number 15
  1335. smb_signing_check_pdu: seq 15: got good SMB signature of
  1336. [0000] E6 94 24 90 F2 74 2E D8 ..$..t..
  1337. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec397730
  1338. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec397730
  1339. s4_tevent: Destroying timer event 0x7fb6ec3de980 "tevent_req_timedout"
  1340. s4_tevent: Destroying timer event 0x7fb6ec26bb50 "dcerpc_timeout_handler"
  1341. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3399d0
  1342. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3399d0
  1343. lsa_DeleteTrustedDomain: struct lsa_DeleteTrustedDomain
  1344. out: struct lsa_DeleteTrustedDomain
  1345. result : NT_STATUS_OK
  1346. rpc reply data:
  1347. [0000] 00 00 00 00 ....
  1348. lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2
  1349. in: struct lsa_CreateTrustedDomainEx2
  1350. policy_handle : *
  1351. policy_handle: struct policy_handle
  1352. handle_type : 0x00000000 (0)
  1353. uuid : a90f0025-738b-4eae-9d5a-5433f66807b0
  1354. info : *
  1355. info: struct lsa_TrustDomainInfoInfoEx
  1356. domain_name: struct lsa_StringLarge
  1357. length : 0x0018 (24)
  1358. size : 0x001a (26)
  1359. string : *
  1360. string : 'rdu.lulu.com'
  1361. netbios_name: struct lsa_StringLarge
  1362. length : 0x0006 (6)
  1363. size : 0x0008 (8)
  1364. string : *
  1365. string : 'IPA'
  1366. sid : *
  1367. sid : S-1-5-21-2584841356-3411601870-3130769000
  1368. trust_direction : 0x00000003 (3)
  1369. 1: LSA_TRUST_DIRECTION_INBOUND
  1370. 1: LSA_TRUST_DIRECTION_OUTBOUND
  1371. trust_type : LSA_TRUST_TYPE_UPLEVEL (2)
  1372. trust_attributes : 0x00000008 (8)
  1373. 0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
  1374. 0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
  1375. 0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
  1376. 1: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
  1377. 0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
  1378. 0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
  1379. 0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
  1380. 0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
  1381. auth_info_internal : *
  1382. auth_info_internal: struct lsa_TrustDomainInfoAuthInfoInternal
  1383. auth_blob: struct lsa_DATA_BUF2
  1384. size : 0x00000440 (1088)
  1385. data : *
  1386. data: ARRAY(1088)
  1387. [0] : 0xf6 (246)
  1388. [1] : 0x85 (133)
  1389. [2] : 0x17 (23)
  1390. [3] : 0x2d (45)
  1391. [4] : 0xa1 (161)
  1392. [5] : 0xab (171)
  1393. [6] : 0x98 (152)
  1394. [7] : 0x75 (117)
  1395. [8] : 0x40 (64)
  1396. [9] : 0x9c (156)
  1397. [10] : 0x63 (99)
  1398. [11] : 0x63 (99)
  1399. [12] : 0x8e (142)
  1400. [13] : 0x2d (45)
  1401. [14] : 0x99 (153)
  1402. [15] : 0x1b (27)
  1403. [16] : 0xdb (219)
  1404. [17] : 0xc2 (194)
  1405. [18] : 0x82 (130)
  1406. [19] : 0x13 (19)
  1407. [20] : 0xe3 (227)
  1408. [21] : 0xc9 (201)
  1409. [22] : 0x2c (44)
  1410. [23] : 0x06 (6)
  1411. [24] : 0x61 (97)
  1412. [25] : 0x7c (124)
  1413. [26] : 0x30 (48)
  1414. [27] : 0x32 (50)
  1415. [28] : 0x7e (126)
  1416. [29] : 0x93 (147)
  1417. [30] : 0x9d (157)
  1418. [31] : 0x15 (21)
  1419. [32] : 0x26 (38)
  1420. [33] : 0x28 (40)
  1421. [34] : 0x7e (126)
  1422. [35] : 0xb5 (181)
  1423. [36] : 0x7c (124)
  1424. [37] : 0xdd (221)
  1425. [38] : 0xf4 (244)
  1426. [39] : 0x5b (91)
  1427. [40] : 0x7f (127)
  1428. [41] : 0x69 (105)
  1429. [42] : 0x21 (33)
  1430. [43] : 0x62 (98)
  1431. [44] : 0xb4 (180)
  1432. [45] : 0xbf (191)
  1433. [46] : 0x06 (6)
  1434. [47] : 0xec (236)
  1435. [48] : 0xf4 (244)
  1436. [49] : 0xf0 (240)
  1437. [50] : 0xf8 (248)
  1438. [51] : 0x4d (77)
  1439. [52] : 0x56 (86)
  1440. [53] : 0x47 (71)
  1441. [54] : 0xf2 (242)
  1442. [55] : 0xb0 (176)
  1443. [56] : 0x9d (157)
  1444. [57] : 0xf7 (247)
  1445. [58] : 0x67 (103)
  1446. [59] : 0xd2 (210)
  1447. [60] : 0x54 (84)
  1448. [61] : 0x31 (49)
  1449. [62] : 0x12 (18)
  1450. [63] : 0xfa (250)
  1451. [64] : 0xb0 (176)
  1452. [65] : 0xd0 (208)
  1453. [66] : 0xfd (253)
  1454. [67] : 0x55 (85)
  1455. [68] : 0xd2 (210)
  1456. [69] : 0x3d (61)
  1457. [70] : 0xb6 (182)
  1458. [71] : 0x2e (46)
  1459. [72] : 0x88 (136)
  1460. [73] : 0x63 (99)
  1461. [74] : 0x6c (108)
  1462. [75] : 0xa2 (162)
  1463. [76] : 0x19 (25)
  1464. [77] : 0x07 (7)
  1465. [78] : 0x4f (79)
  1466. [79] : 0x0e (14)
  1467. [80] : 0xc9 (201)
  1468. [81] : 0x4f (79)
  1469. [82] : 0xf9 (249)
  1470. [83] : 0xe2 (226)
  1471. [84] : 0xa2 (162)
  1472. [85] : 0x3e (62)
  1473. [86] : 0x3f (63)
  1474. [87] : 0xe9 (233)
  1475. [88] : 0x3b (59)
  1476. [89] : 0x40 (64)
  1477. [90] : 0x39 (57)
  1478. [91] : 0x39 (57)
  1479. [92] : 0x76 (118)
  1480. [93] : 0x77 (119)
  1481. [94] : 0x48 (72)
  1482. [95] : 0x1a (26)
  1483. [96] : 0x54 (84)
  1484. [97] : 0xbb (187)
  1485. [98] : 0x81 (129)
  1486. [99] : 0x5f (95)
  1487. [100] : 0xbb (187)
  1488. [101] : 0xca (202)
  1489. [102] : 0x62 (98)
  1490. [103] : 0x90 (144)
  1491. [104] : 0x58 (88)
  1492. [105] : 0x6e (110)
  1493. [106] : 0xf3 (243)
  1494. [107] : 0x55 (85)
  1495. [108] : 0xe6 (230)
  1496. [109] : 0xc6 (198)
  1497. [110] : 0x88 (136)
  1498. [111] : 0x88 (136)
  1499. [112] : 0x2c (44)
  1500. [113] : 0xd0 (208)
  1501. [114] : 0x86 (134)
  1502. [115] : 0x02 (2)
  1503. [116] : 0x0f (15)
  1504. [117] : 0xbc (188)
  1505. [118] : 0x3c (60)
  1506. [119] : 0xf2 (242)
  1507. [120] : 0x99 (153)
  1508. [121] : 0x5b (91)
  1509. [122] : 0xbb (187)
  1510. [123] : 0x12 (18)
  1511. [124] : 0x6d (109)
  1512. [125] : 0x9d (157)
  1513. [126] : 0xca (202)
  1514. [127] : 0x72 (114)
  1515. [128] : 0xb5 (181)
  1516. [129] : 0x04 (4)
  1517. [130] : 0x0f (15)
  1518. [131] : 0x7b (123)
  1519. [132] : 0x27 (39)
  1520. [133] : 0x67 (103)
  1521. [134] : 0x13 (19)
  1522. [135] : 0x40 (64)
  1523. [136] : 0xde (222)
  1524. [137] : 0x1f (31)
  1525. [138] : 0x80 (128)
  1526. [139] : 0x4a (74)
  1527. [140] : 0x50 (80)
  1528. [141] : 0x45 (69)
  1529. [142] : 0x19 (25)
  1530. [143] : 0x0b (11)
  1531. [144] : 0x5f (95)
  1532. [145] : 0xcf (207)
  1533. [146] : 0x46 (70)
  1534. [147] : 0x7c (124)
  1535. [148] : 0xc7 (199)
  1536. [149] : 0x6e (110)
  1537. [150] : 0x75 (117)
  1538. [151] : 0x0e (14)
  1539. [152] : 0x6a (106)
  1540. [153] : 0xd5 (213)
  1541. [154] : 0x04 (4)
  1542. [155] : 0x01 (1)
  1543. [156] : 0x2e (46)
  1544. [157] : 0xc2 (194)
  1545. [158] : 0x2b (43)
  1546. [159] : 0xd6 (214)
  1547. [160] : 0x16 (22)
  1548. [161] : 0x7f (127)
  1549. [162] : 0x6b (107)
  1550. [163] : 0x63 (99)
  1551. [164] : 0x62 (98)
  1552. [165] : 0xfd (253)
  1553. [166] : 0xc7 (199)
  1554. [167] : 0x33 (51)
  1555. [168] : 0x96 (150)
  1556. [169] : 0x53 (83)
  1557. [170] : 0xfb (251)
  1558. [171] : 0xa0 (160)
  1559. [172] : 0x24 (36)
  1560. [173] : 0xa6 (166)
  1561. [174] : 0xa4 (164)
  1562. [175] : 0xff (255)
  1563. [176] : 0xb3 (179)
  1564. [177] : 0x74 (116)
  1565. [178] : 0xde (222)
  1566. [179] : 0xdf (223)
  1567. [180] : 0x28 (40)
  1568. [181] : 0xa0 (160)
  1569. [182] : 0x04 (4)
  1570. [183] : 0xe8 (232)
  1571. [184] : 0x2c (44)
  1572. [185] : 0xb1 (177)
  1573. [186] : 0x08 (8)
  1574. [187] : 0x15 (21)
  1575. [188] : 0xa2 (162)
  1576. [189] : 0x80 (128)
  1577. [190] : 0xeb (235)
  1578. [191] : 0x5c (92)
  1579. [192] : 0xc6 (198)
  1580. [193] : 0x18 (24)
  1581. [194] : 0xab (171)
  1582. [195] : 0x5b (91)
  1583. [196] : 0x03 (3)
  1584. [197] : 0xeb (235)
  1585. [198] : 0x36 (54)
  1586. [199] : 0xe7 (231)
  1587. [200] : 0xc5 (197)
  1588. [201] : 0x3f (63)
  1589. [202] : 0xd1 (209)
  1590. [203] : 0xbf (191)
  1591. [204] : 0x2a (42)
  1592. [205] : 0x33 (51)
  1593. [206] : 0xf3 (243)
  1594. [207] : 0x83 (131)
  1595. [208] : 0x1d (29)
  1596. [209] : 0x51 (81)
  1597. [210] : 0x0d (13)
  1598. [211] : 0xf6 (246)
  1599. [212] : 0x0b (11)
  1600. [213] : 0x99 (153)
  1601. [214] : 0x52 (82)
  1602. [215] : 0x00 (0)
  1603. [216] : 0x24 (36)
  1604. [217] : 0x1a (26)
  1605. [218] : 0xf5 (245)
  1606. [219] : 0x95 (149)
  1607. [220] : 0x28 (40)
  1608. [221] : 0x35 (53)
  1609. [222] : 0x48 (72)
  1610. [223] : 0x40 (64)
  1611. [224] : 0x41 (65)
  1612. [225] : 0x20 (32)
  1613. [226] : 0x41 (65)
  1614. [227] : 0xcb (203)
  1615. [228] : 0xf8 (248)
  1616. [229] : 0xdd (221)
  1617. [230] : 0x79 (121)
  1618. [231] : 0x9c (156)
  1619. [232] : 0x57 (87)
  1620. [233] : 0x55 (85)
  1621. [234] : 0x3b (59)
  1622. [235] : 0xed (237)
  1623. [236] : 0xa2 (162)
  1624. [237] : 0x3c (60)
  1625. [238] : 0x98 (152)
  1626. [239] : 0x46 (70)
  1627. [240] : 0x5b (91)
  1628. [241] : 0x70 (112)
  1629. [242] : 0xfc (252)
  1630. [243] : 0x5c (92)
  1631. [244] : 0x8b (139)
  1632. [245] : 0x5e (94)
  1633. [246] : 0x85 (133)
  1634. [247] : 0xdf (223)
  1635. [248] : 0x43 (67)
  1636. [249] : 0xb0 (176)
  1637. [250] : 0xbc (188)
  1638. [251] : 0xad (173)
  1639. [252] : 0x4f (79)
  1640. [253] : 0x57 (87)
  1641. [254] : 0x40 (64)
  1642. [255] : 0x61 (97)
  1643. [256] : 0xe5 (229)
  1644. [257] : 0x53 (83)
  1645. [258] : 0xfe (254)
  1646. [259] : 0x1f (31)
  1647. [260] : 0x48 (72)
  1648. [261] : 0x0a (10)
  1649. [262] : 0x3e (62)
  1650. [263] : 0x92 (146)
  1651. [264] : 0x13 (19)
  1652. [265] : 0x71 (113)
  1653. [266] : 0x00 (0)
  1654. [267] : 0x43 (67)
  1655. [268] : 0xa6 (166)
  1656. [269] : 0xd2 (210)
  1657. [270] : 0xc6 (198)
  1658. [271] : 0x67 (103)
  1659. [272] : 0x2d (45)
  1660. [273] : 0x09 (9)
  1661. [274] : 0xa3 (163)
  1662. [275] : 0x6e (110)
  1663. [276] : 0x2a (42)
  1664. [277] : 0x35 (53)
  1665. [278] : 0x8e (142)
  1666. [279] : 0x1c (28)
  1667. [280] : 0xc4 (196)
  1668. [281] : 0x09 (9)
  1669. [282] : 0xd1 (209)
  1670. [283] : 0x50 (80)
  1671. [284] : 0x10 (16)
  1672. [285] : 0xcf (207)
  1673. [286] : 0xdb (219)
  1674. [287] : 0x40 (64)
  1675. [288] : 0xfd (253)
  1676. [289] : 0x7a (122)
  1677. [290] : 0xc5 (197)
  1678. [291] : 0x53 (83)
  1679. [292] : 0x5d (93)
  1680. [293] : 0x12 (18)
  1681. [294] : 0xe2 (226)
  1682. [295] : 0x8c (140)
  1683. [296] : 0xba (186)
  1684. [297] : 0x8b (139)
  1685. [298] : 0xaf (175)
  1686. [299] : 0xc6 (198)
  1687. [300] : 0xad (173)
  1688. [301] : 0x62 (98)
  1689. [302] : 0x93 (147)
  1690. [303] : 0x77 (119)
  1691. [304] : 0xfd (253)
  1692. [305] : 0xa4 (164)
  1693. [306] : 0xc9 (201)
  1694. [307] : 0x62 (98)
  1695. [308] : 0xe4 (228)
  1696. [309] : 0xce (206)
  1697. [310] : 0x7a (122)
  1698. [311] : 0xb5 (181)
  1699. [312] : 0xe4 (228)
  1700. [313] : 0x5b (91)
  1701. [314] : 0x97 (151)
  1702. [315] : 0x0b (11)
  1703. [316] : 0x45 (69)
  1704. [317] : 0xd9 (217)
  1705. [318] : 0x56 (86)
  1706. [319] : 0x6a (106)
  1707. [320] : 0xe3 (227)
  1708. [321] : 0xb1 (177)
  1709. [322] : 0x6d (109)
  1710. [323] : 0x37 (55)
  1711. [324] : 0xe6 (230)
  1712. [325] : 0x92 (146)
  1713. [326] : 0xa6 (166)
  1714. [327] : 0xc8 (200)
  1715. [328] : 0x3b (59)
  1716. [329] : 0x0a (10)
  1717. [330] : 0x91 (145)
  1718. [331] : 0x92 (146)
  1719. [332] : 0x41 (65)
  1720. [333] : 0x0d (13)
  1721. [334] : 0x3e (62)
  1722. [335] : 0x2a (42)
  1723. [336] : 0xfe (254)
  1724. [337] : 0x79 (121)
  1725. [338] : 0xc9 (201)
  1726. [339] : 0xca (202)
  1727. [340] : 0x93 (147)
  1728. [341] : 0x29 (41)
  1729. [342] : 0xec (236)
  1730. [343] : 0x69 (105)
  1731. [344] : 0x9d (157)
  1732. [345] : 0xae (174)
  1733. [346] : 0xeb (235)
  1734. [347] : 0x64 (100)
  1735. [348] : 0x13 (19)
  1736. [349] : 0x29 (41)
  1737. [350] : 0x25 (37)
  1738. [351] : 0x16 (22)
  1739. [352] : 0x99 (153)
  1740. [353] : 0x47 (71)
  1741. [354] : 0xcc (204)
  1742. [355] : 0x64 (100)
  1743. [356] : 0x90 (144)
  1744. [357] : 0x7b (123)
  1745. [358] : 0x7b (123)
  1746. [359] : 0xae (174)
  1747. [360] : 0x72 (114)
  1748. [361] : 0xe9 (233)
  1749. [362] : 0x53 (83)
  1750. [363] : 0x8a (138)
  1751. [364] : 0xeb (235)
  1752. [365] : 0x8a (138)
  1753. [366] : 0xb1 (177)
  1754. [367] : 0xe1 (225)
  1755. [368] : 0x2c (44)
  1756. [369] : 0x75 (117)
  1757. [370] : 0xda (218)
  1758. [371] : 0xa3 (163)
  1759. [372] : 0xbd (189)
  1760. [373] : 0x9d (157)
  1761. [374] : 0x2e (46)
  1762. [375] : 0x73 (115)
  1763. [376] : 0x8c (140)
  1764. [377] : 0x38 (56)
  1765. [378] : 0x0b (11)
  1766. [379] : 0x88 (136)
  1767. [380] : 0x36 (54)
  1768. [381] : 0x1e (30)
  1769. [382] : 0xab (171)
  1770. [383] : 0x29 (41)
  1771. [384] : 0x65 (101)
  1772. [385] : 0xd5 (213)
  1773. [386] : 0xb7 (183)
  1774. [387] : 0xf0 (240)
  1775. [388] : 0x74 (116)
  1776. [389] : 0x08 (8)
  1777. [390] : 0x2d (45)
  1778. [391] : 0x8e (142)
  1779. [392] : 0xbd (189)
  1780. [393] : 0x0f (15)
  1781. [394] : 0x3b (59)
  1782. [395] : 0x10 (16)
  1783. [396] : 0x10 (16)
  1784. [397] : 0xa3 (163)
  1785. [398] : 0x91 (145)
  1786. [399] : 0x2d (45)
  1787. [400] : 0xd2 (210)
  1788. [401] : 0x48 (72)
  1789. [402] : 0xe0 (224)
  1790. [403] : 0x57 (87)
  1791. [404] : 0xf8 (248)
  1792. [405] : 0x06 (6)
  1793. [406] : 0x09 (9)
  1794. [407] : 0xcd (205)
  1795. [408] : 0x49 (73)
  1796. [409] : 0xa1 (161)
  1797. [410] : 0x7e (126)
  1798. [411] : 0x98 (152)
  1799. [412] : 0x63 (99)
  1800. [413] : 0x8d (141)
  1801. [414] : 0x2f (47)
  1802. [415] : 0x83 (131)
  1803. [416] : 0x28 (40)
  1804. [417] : 0xe3 (227)
  1805. [418] : 0x01 (1)
  1806. [419] : 0x78 (120)
  1807. [420] : 0xfd (253)
  1808. [421] : 0x83 (131)
  1809. [422] : 0x76 (118)
  1810. [423] : 0x9e (158)
  1811. [424] : 0x6e (110)
  1812. [425] : 0xe4 (228)
  1813. [426] : 0x59 (89)
  1814. [427] : 0x93 (147)
  1815. [428] : 0x10 (16)
  1816. [429] : 0x5a (90)
  1817. [430] : 0x97 (151)
  1818. [431] : 0xe9 (233)
  1819. [432] : 0x60 (96)
  1820. [433] : 0x39 (57)
  1821. [434] : 0x4f (79)
  1822. [435] : 0x40 (64)
  1823. [436] : 0x75 (117)
  1824. [437] : 0x04 (4)
  1825. [438] : 0x70 (112)
  1826. [439] : 0x2a (42)
  1827. [440] : 0x60 (96)
  1828. [441] : 0x2d (45)
  1829. [442] : 0x1b (27)
  1830. [443] : 0xb9 (185)
  1831. [444] : 0xa0 (160)
  1832. [445] : 0x57 (87)
  1833. [446] : 0xd5 (213)
  1834. [447] : 0xd7 (215)
  1835. [448] : 0xb3 (179)
  1836. [449] : 0xc7 (199)
  1837. [450] : 0xab (171)
  1838. [451] : 0xf1 (241)
  1839. [452] : 0x86 (134)
  1840. [453] : 0x59 (89)
  1841. [454] : 0x00 (0)
  1842. [455] : 0xf5 (245)
  1843. [456] : 0xa1 (161)
  1844. [457] : 0x7d (125)
  1845. [458] : 0x41 (65)
  1846. [459] : 0x01 (1)
  1847. [460] : 0x6e (110)
  1848. [461] : 0x6f (111)
  1849. [462] : 0x87 (135)
  1850. [463] : 0x51 (81)
  1851. [464] : 0x66 (102)
  1852. [465] : 0xf7 (247)
  1853. [466] : 0xb3 (179)
  1854. [467] : 0xee (238)
  1855. [468] : 0x81 (129)
  1856. [469] : 0x3f (63)
  1857. [470] : 0x6a (106)
  1858. [471] : 0xd3 (211)
  1859. [472] : 0x89 (137)
  1860. [473] : 0x55 (85)
  1861. [474] : 0x5f (95)
  1862. [475] : 0xd1 (209)
  1863. [476] : 0x40 (64)
  1864. [477] : 0x61 (97)
  1865. [478] : 0xdd (221)
  1866. [479] : 0x86 (134)
  1867. [480] : 0xfd (253)
  1868. [481] : 0x0e (14)
  1869. [482] : 0x80 (128)
  1870. [483] : 0xd0 (208)
  1871. [484] : 0x9d (157)
  1872. [485] : 0xb0 (176)
  1873. [486] : 0x45 (69)
  1874. [487] : 0xe3 (227)
  1875. [488] : 0x18 (24)
  1876. [489] : 0x1c (28)
  1877. [490] : 0xd2 (210)
  1878. [491] : 0xdf (223)
  1879. [492] : 0x99 (153)
  1880. [493] : 0x1f (31)
  1881. [494] : 0x65 (101)
  1882. [495] : 0xc6 (198)
  1883. [496] : 0xd0 (208)
  1884. [497] : 0x9b (155)
  1885. [498] : 0x0e (14)
  1886. [499] : 0xfc (252)
  1887. [500] : 0xd9 (217)
  1888. [501] : 0x66 (102)
  1889. [502] : 0x22 (34)
  1890. [503] : 0xce (206)
  1891. [504] : 0xc5 (197)
  1892. [505] : 0xe2 (226)
  1893. [506] : 0x60 (96)
  1894. [507] : 0x29 (41)
  1895. [508] : 0xe2 (226)
  1896. [509] : 0xf1 (241)
  1897. [510] : 0xca (202)
  1898. [511] : 0x7a (122)
  1899. [512] : 0xfa (250)
  1900. [513] : 0x13 (19)
  1901. [514] : 0x9c (156)
  1902. [515] : 0x4c (76)
  1903. [516] : 0x8c (140)
  1904. [517] : 0xf2 (242)
  1905. [518] : 0xa1 (161)
  1906. [519] : 0xf0 (240)
  1907. [520] : 0x14 (20)
  1908. [521] : 0x86 (134)
  1909. [522] : 0x03 (3)
  1910. [523] : 0x64 (100)
  1911. [524] : 0x77 (119)
  1912. [525] : 0xb8 (184)
  1913. [526] : 0x3c (60)
  1914. [527] : 0x0d (13)
  1915. [528] : 0xd2 (210)
  1916. [529] : 0xc0 (192)
  1917. [530] : 0xfb (251)
  1918. [531] : 0x50 (80)
  1919. [532] : 0x73 (115)
  1920. [533] : 0xba (186)
  1921. [534] : 0xc5 (197)
  1922. [535] : 0xa8 (168)
  1923. [536] : 0xb4 (180)
  1924. [537] : 0xdc (220)
  1925. [538] : 0xe5 (229)
  1926. [539] : 0xa7 (167)
  1927. [540] : 0xa6 (166)
  1928. [541] : 0xc3 (195)
  1929. [542] : 0xbd (189)
  1930. [543] : 0xa0 (160)
  1931. [544] : 0xae (174)
  1932. [545] : 0x97 (151)
  1933. [546] : 0x31 (49)
  1934. [547] : 0xa7 (167)
  1935. [548] : 0x78 (120)
  1936. [549] : 0xb9 (185)
  1937. [550] : 0x20 (32)
  1938. [551] : 0x57 (87)
  1939. [552] : 0xb3 (179)
  1940. [553] : 0x30 (48)
  1941. [554] : 0x77 (119)
  1942. [555] : 0x06 (6)
  1943. [556] : 0x60 (96)
  1944. [557] : 0xf9 (249)
  1945. [558] : 0x45 (69)
  1946. [559] : 0x08 (8)
  1947. [560] : 0x26 (38)
  1948. [561] : 0xb3 (179)
  1949. [562] : 0x4b (75)
  1950. [563] : 0x15 (21)
  1951. [564] : 0xa4 (164)
  1952. [565] : 0x04 (4)
  1953. [566] : 0xff (255)
  1954. [567] : 0x37 (55)
  1955. [568] : 0x78 (120)
  1956. [569] : 0xee (238)
  1957. [570] : 0xe2 (226)
  1958. [571] : 0x66 (102)
  1959. [572] : 0x5d (93)
  1960. [573] : 0xc6 (198)
  1961. [574] : 0xc2 (194)
  1962. [575] : 0xa8 (168)
  1963. [576] : 0xb2 (178)
  1964. [577] : 0xc4 (196)
  1965. [578] : 0x74 (116)
  1966. [579] : 0xbf (191)
  1967. [580] : 0xb1 (177)
  1968. [581] : 0xd7 (215)
  1969. [582] : 0x26 (38)
  1970. [583] : 0x28 (40)
  1971. [584] : 0x61 (97)
  1972. [585] : 0x53 (83)
  1973. [586] : 0x8d (141)
  1974. [587] : 0x8f (143)
  1975. [588] : 0x6e (110)
  1976. [589] : 0x82 (130)
  1977. [590] : 0x6b (107)
  1978. [591] : 0xc7 (199)
  1979. [592] : 0x3a (58)
  1980. [593] : 0x91 (145)
  1981. [594] : 0xf8 (248)
  1982. [595] : 0xd8 (216)
  1983. [596] : 0x60 (96)
  1984. [597] : 0x5b (91)
  1985. [598] : 0xc7 (199)
  1986. [599] : 0x11 (17)
  1987. [600] : 0xd2 (210)
  1988. [601] : 0xe9 (233)
  1989. [602] : 0xfa (250)
  1990. [603] : 0x00 (0)
  1991. [604] : 0x26 (38)
  1992. [605] : 0x23 (35)
  1993. [606] : 0x05 (5)
  1994. [607] : 0x32 (50)
  1995. [608] : 0xfd (253)
  1996. [609] : 0x62 (98)
  1997. [610] : 0xf9 (249)
  1998. [611] : 0x07 (7)
  1999. [612] : 0x5e (94)
  2000. [613] : 0x27 (39)
  2001. [614] : 0xfe (254)
  2002. [615] : 0x00 (0)
  2003. [616] : 0x81 (129)
  2004. [617] : 0x24 (36)
  2005. [618] : 0x05 (5)
  2006. [619] : 0x6e (110)
  2007. [620] : 0x58 (88)
  2008. [621] : 0x77 (119)
  2009. [622] : 0xc3 (195)
  2010. [623] : 0x7c (124)
  2011. [624] : 0xa4 (164)
  2012. [625] : 0xa9 (169)
  2013. [626] : 0x2b (43)
  2014. [627] : 0x30 (48)
  2015. [628] : 0xad (173)
  2016. [629] : 0x4c (76)
  2017. [630] : 0xb4 (180)
  2018. [631] : 0x00 (0)
  2019. [632] : 0xe6 (230)
  2020. [633] : 0x04 (4)
  2021. [634] : 0x81 (129)
  2022. [635] : 0x2c (44)
  2023. [636] : 0xfe (254)
  2024. [637] : 0xc2 (194)
  2025. [638] : 0xa1 (161)
  2026. [639] : 0x86 (134)
  2027. [640] : 0x68 (104)
  2028. [641] : 0xef (239)
  2029. [642] : 0x43 (67)
  2030. [643] : 0xe9 (233)
  2031. [644] : 0x59 (89)
  2032. [645] : 0x7f (127)
  2033. [646] : 0xc4 (196)
  2034. [647] : 0xdc (220)
  2035. [648] : 0x7c (124)
  2036. [649] : 0xac (172)
  2037. [650] : 0xb9 (185)
  2038. [651] : 0x31 (49)
  2039. [652] : 0xe6 (230)
  2040. [653] : 0xa7 (167)
  2041. [654] : 0x56 (86)
  2042. [655] : 0x9a (154)
  2043. [656] : 0x61 (97)
  2044. [657] : 0x9a (154)
  2045. [658] : 0x54 (84)
  2046. [659] : 0x5f (95)
  2047. [660] : 0xab (171)
  2048. [661] : 0xd7 (215)
  2049. [662] : 0x1c (28)
  2050. [663] : 0x6f (111)
  2051. [664] : 0x41 (65)
  2052. [665] : 0x8e (142)
  2053. [666] : 0x07 (7)
  2054. [667] : 0x45 (69)
  2055. [668] : 0x45 (69)
  2056. [669] : 0xbf (191)
  2057. [670] : 0xde (222)
  2058. [671] : 0xf7 (247)
  2059. [672] : 0x9e (158)
  2060. [673] : 0x70 (112)
  2061. [674] : 0xf6 (246)
  2062. [675] : 0xce (206)
  2063. [676] : 0x08 (8)
  2064. [677] : 0xfb (251)
  2065. [678] : 0x6b (107)
  2066. [679] : 0xd2 (210)
  2067. [680] : 0xfa (250)
  2068. [681] : 0x6f (111)
  2069. [682] : 0x80 (128)
  2070. [683] : 0x0c (12)
  2071. [684] : 0xb5 (181)
  2072. [685] : 0x2c (44)
  2073. [686] : 0x9e (158)
  2074. [687] : 0x94 (148)
  2075. [688] : 0x0b (11)
  2076. [689] : 0x4d (77)
  2077. [690] : 0x4a (74)
  2078. [691] : 0x18 (24)
  2079. [692] : 0x5e (94)
  2080. [693] : 0x4b (75)
  2081. [694] : 0xed (237)
  2082. [695] : 0x60 (96)
  2083. [696] : 0xe5 (229)
  2084. [697] : 0xc5 (197)
  2085. [698] : 0xf6 (246)
  2086. [699] : 0x41 (65)
  2087. [700] : 0x04 (4)
  2088. [701] : 0x43 (67)
  2089. [702] : 0xc3 (195)
  2090. [703] : 0xc4 (196)
  2091. [704] : 0x9d (157)
  2092. [705] : 0x5f (95)
  2093. [706] : 0x2e (46)
  2094. [707] : 0x7d (125)
  2095. [708] : 0xc1 (193)
  2096. [709] : 0x10 (16)
  2097. [710] : 0xd4 (212)
  2098. [711] : 0x6d (109)
  2099. [712] : 0xeb (235)
  2100. [713] : 0x98 (152)
  2101. [714] : 0xde (222)
  2102. [715] : 0xa2 (162)
  2103. [716] : 0xea (234)
  2104. [717] : 0x61 (97)
  2105. [718] : 0x09 (9)
  2106. [719] : 0x50 (80)
  2107. [720] : 0xab (171)
  2108. [721] : 0xab (171)
  2109. [722] : 0x3a (58)
  2110. [723] : 0x8c (140)
  2111. [724] : 0x12 (18)
  2112. [725] : 0xd2 (210)
  2113. [726] : 0xa8 (168)
  2114. [727] : 0x2c (44)
  2115. [728] : 0x43 (67)
  2116. [729] : 0x23 (35)
  2117. [730] : 0x00 (0)
  2118. [731] : 0xa0 (160)
  2119. [732] : 0xcb (203)
  2120. [733] : 0xc5 (197)
  2121. [734] : 0x2a (42)
  2122. [735] : 0xb2 (178)
  2123. [736] : 0x14 (20)
  2124. [737] : 0x12 (18)
  2125. [738] : 0xdb (219)
  2126. [739] : 0xc5 (197)
  2127. [740] : 0x46 (70)
  2128. [741] : 0xca (202)
  2129. [742] : 0xa2 (162)
  2130. [743] : 0x13 (19)
  2131. [744] : 0x8a (138)
  2132. [745] : 0x41 (65)
  2133. [746] : 0xcf (207)
  2134. [747] : 0x20 (32)
  2135. [748] : 0xc5 (197)
  2136. [749] : 0xa9 (169)
  2137. [750] : 0x20 (32)
  2138. [751] : 0x61 (97)
  2139. [752] : 0xcd (205)
  2140. [753] : 0xab (171)
  2141. [754] : 0x77 (119)
  2142. [755] : 0x91 (145)
  2143. [756] : 0x86 (134)
  2144. [757] : 0xfb (251)
  2145. [758] : 0xe7 (231)
  2146. [759] : 0x01 (1)
  2147. [760] : 0x0b (11)
  2148. [761] : 0x85 (133)
  2149. [762] : 0xe3 (227)
  2150. [763] : 0x59 (89)
  2151. [764] : 0x6a (106)
  2152. [765] : 0xf8 (248)
  2153. [766] : 0xcb (203)
  2154. [767] : 0x0c (12)
  2155. [768] : 0x2f (47)
  2156. [769] : 0x9d (157)
  2157. [770] : 0x02 (2)
  2158. [771] : 0x8f (143)
  2159. [772] : 0x4d (77)
  2160. [773] : 0xa1 (161)
  2161. [774] : 0xdc (220)
  2162. [775] : 0x59 (89)
  2163. [776] : 0xd0 (208)
  2164. [777] : 0xce (206)
  2165. [778] : 0x4e (78)
  2166. [779] : 0xe6 (230)
  2167. [780] : 0x28 (40)
  2168. [781] : 0x53 (83)
  2169. [782] : 0xa3 (163)
  2170. [783] : 0x6f (111)
  2171. [784] : 0x5b (91)
  2172. [785] : 0x94 (148)
  2173. [786] : 0xd5 (213)
  2174. [787] : 0xb7 (183)
  2175. [788] : 0xda (218)
  2176. [789] : 0x6e (110)
  2177. [790] : 0xeb (235)
  2178. [791] : 0x03 (3)
  2179. [792] : 0x75 (117)
  2180. [793] : 0xc9 (201)
  2181. [794] : 0x22 (34)
  2182. [795] : 0xba (186)
  2183. [796] : 0x9a (154)
  2184. [797] : 0xb4 (180)
  2185. [798] : 0xf2 (242)
  2186. [799] : 0x1c (28)
  2187. [800] : 0x28 (40)
  2188. [801] : 0x9b (155)
  2189. [802] : 0x44 (68)
  2190. [803] : 0xff (255)
  2191. [804] : 0x2a (42)
  2192. [805] : 0x10 (16)
  2193. [806] : 0xc6 (198)
  2194. [807] : 0x48 (72)
  2195. [808] : 0x0f (15)
  2196. [809] : 0x5c (92)
  2197. [810] : 0xfe (254)
  2198. [811] : 0x50 (80)
  2199. [812] : 0xf4 (244)
  2200. [813] : 0xed (237)
  2201. [814] : 0x8b (139)
  2202. [815] : 0xca (202)
  2203. [816] : 0xfc (252)
  2204. [817] : 0xe1 (225)
  2205. [818] : 0x16 (22)
  2206. [819] : 0x97 (151)
  2207. [820] : 0xc0 (192)
  2208. [821] : 0x2c (44)
  2209. [822] : 0x78 (120)
  2210. [823] : 0x58 (88)
  2211. [824] : 0x0c (12)
  2212. [825] : 0x19 (25)
  2213. [826] : 0xe6 (230)
  2214. [827] : 0x2c (44)
  2215. [828] : 0xa5 (165)
  2216. [829] : 0x3e (62)
  2217. [830] : 0x24 (36)
  2218. [831] : 0x88 (136)
  2219. [832] : 0x10 (16)
  2220. [833] : 0xc4 (196)
  2221. [834] : 0xb0 (176)
  2222. [835] : 0xae (174)
  2223. [836] : 0x4e (78)
  2224. [837] : 0x00 (0)
  2225. [838] : 0x60 (96)
  2226. [839] : 0x51 (81)
  2227. [840] : 0x73 (115)
  2228. [841] : 0xe8 (232)
  2229. [842] : 0xf3 (243)
  2230. [843] : 0x87 (135)
  2231. [844] : 0xc8 (200)
  2232. [845] : 0x82 (130)
  2233. [846] : 0x5c (92)
  2234. [847] : 0x75 (117)
  2235. [848] : 0x0f (15)
  2236. [849] : 0xe8 (232)
  2237. [850] : 0xb2 (178)
  2238. [851] : 0x20 (32)
  2239. [852] : 0x6a (106)
  2240. [853] : 0xd8 (216)
  2241. [854] : 0x72 (114)
  2242. [855] : 0xdd (221)
  2243. [856] : 0x1f (31)
  2244. [857] : 0xb5 (181)
  2245. [858] : 0x99 (153)
  2246. [859] : 0x8d (141)
  2247. [860] : 0xfb (251)
  2248. [861] : 0xaf (175)
  2249. [862] : 0x06 (6)
  2250. [863] : 0x78 (120)
  2251. [864] : 0x9a (154)
  2252. [865] : 0x24 (36)
  2253. [866] : 0x92 (146)
  2254. [867] : 0x63 (99)
  2255. [868] : 0x8f (143)
  2256. [869] : 0x56 (86)
  2257. [870] : 0x65 (101)
  2258. [871] : 0xe9 (233)
  2259. [872] : 0x73 (115)
  2260. [873] : 0x42 (66)
  2261. [874] : 0xd0 (208)
  2262. [875] : 0xf7 (247)
  2263. [876] : 0x58 (88)
  2264. [877] : 0x58 (88)
  2265. [878] : 0x46 (70)
  2266. [879] : 0xb1 (177)
  2267. [880] : 0xbb (187)
  2268. [881] : 0x55 (85)
  2269. [882] : 0x37 (55)
  2270. [883] : 0x93 (147)
  2271. [884] : 0xed (237)
  2272. [885] : 0xcf (207)
  2273. [886] : 0x80 (128)
  2274. [887] : 0x51 (81)
  2275. [888] : 0xe4 (228)
  2276. [889] : 0x19 (25)
  2277. [890] : 0x17 (23)
  2278. [891] : 0xc1 (193)
  2279. [892] : 0x42 (66)
  2280. [893] : 0x88 (136)
  2281. [894] : 0x38 (56)
  2282. [895] : 0x93 (147)
  2283. [896] : 0x30 (48)
  2284. [897] : 0x58 (88)
  2285. [898] : 0x62 (98)
  2286. [899] : 0x35 (53)
  2287. [900] : 0x91 (145)
  2288. [901] : 0x24 (36)
  2289. [902] : 0x66 (102)
  2290. [903] : 0xc8 (200)
  2291. [904] : 0x48 (72)
  2292. [905] : 0x19 (25)
  2293. [906] : 0x80 (128)
  2294. [907] : 0x53 (83)
  2295. [908] : 0x25 (37)
  2296. [909] : 0xad (173)
  2297. [910] : 0x86 (134)
  2298. [911] : 0xa5 (165)
  2299. [912] : 0xc3 (195)
  2300. [913] : 0xd9 (217)
  2301. [914] : 0xc2 (194)
  2302. [915] : 0xf8 (248)
  2303. [916] : 0xb8 (184)
  2304. [917] : 0xbc (188)
  2305. [918] : 0xc6 (198)
  2306. [919] : 0x1a (26)
  2307. [920] : 0x45 (69)
  2308. [921] : 0x33 (51)
  2309. [922] : 0x14 (20)
  2310. [923] : 0x1f (31)
  2311. [924] : 0x14 (20)
  2312. [925] : 0xa3 (163)
  2313. [926] : 0xd1 (209)
  2314. [927] : 0xc5 (197)
  2315. [928] : 0x91 (145)
  2316. [929] : 0x0c (12)
  2317. [930] : 0x07 (7)
  2318. [931] : 0xfb (251)
  2319. [932] : 0x57 (87)
  2320. [933] : 0x9f (159)
  2321. [934] : 0xba (186)
  2322. [935] : 0x28 (40)
  2323. [936] : 0x94 (148)
  2324. [937] : 0x03 (3)
  2325. [938] : 0xd1 (209)
  2326. [939] : 0x56 (86)
  2327. [940] : 0x9e (158)
  2328. [941] : 0xc7 (199)
  2329. [942] : 0x99 (153)
  2330. [943] : 0x63 (99)
  2331. [944] : 0xb2 (178)
  2332. [945] : 0x30 (48)
  2333. [946] : 0xdc (220)
  2334. [947] : 0xf0 (240)
  2335. [948] : 0xcb (203)
  2336. [949] : 0x79 (121)
  2337. [950] : 0x2b (43)
  2338. [951] : 0x44 (68)
  2339. [952] : 0x62 (98)
  2340. [953] : 0x38 (56)
  2341. [954] : 0x9a (154)
  2342. [955] : 0x5b (91)
  2343. [956] : 0x9f (159)
  2344. [957] : 0x40 (64)
  2345. [958] : 0x23 (35)
  2346. [959] : 0x4b (75)
  2347. [960] : 0x16 (22)
  2348. [961] : 0xc0 (192)
  2349. [962] : 0xdf (223)
  2350. [963] : 0xad (173)
  2351. [964] : 0x82 (130)
  2352. [965] : 0x7d (125)
  2353. [966] : 0x36 (54)
  2354. [967] : 0xa4 (164)
  2355. [968] : 0x82 (130)
  2356. [969] : 0x06 (6)
  2357. [970] : 0x98 (152)
  2358. [971] : 0xd9 (217)
  2359. [972] : 0x35 (53)
  2360. [973] : 0x61 (97)
  2361. [974] : 0xcf (207)
  2362. [975] : 0x26 (38)
  2363. [976] : 0xa9 (169)
  2364. [977] : 0xf3 (243)
  2365. [978] : 0xf0 (240)
  2366. [979] : 0xd9 (217)
  2367. [980] : 0x1a (26)
  2368. [981] : 0x13 (19)
  2369. [982] : 0x56 (86)
  2370. [983] : 0xaf (175)
  2371. [984] : 0xca (202)
  2372. [985] : 0x59 (89)
  2373. [986] : 0xb8 (184)
  2374. [987] : 0x46 (70)
  2375. [988] : 0x4f (79)
  2376. [989] : 0x2f (47)
  2377. [990] : 0xd4 (212)
  2378. [991] : 0x4b (75)
  2379. [992] : 0x56 (86)
  2380. [993] : 0xa0 (160)
  2381. [994] : 0xad (173)
  2382. [995] : 0x10 (16)
  2383. [996] : 0x2d (45)
  2384. [997] : 0xff (255)
  2385. [998] : 0x7d (125)
  2386. [999] : 0x34 (52)
  2387. [1000] : 0xfc (252)
  2388. [1001] : 0xd5 (213)
  2389. [1002] : 0x43 (67)
  2390. [1003] : 0x7f (127)
  2391. [1004] : 0xce (206)
  2392. [1005] : 0x1c (28)
  2393. [1006] : 0x85 (133)
  2394. [1007] : 0x03 (3)
  2395. [1008] : 0xa5 (165)
  2396. [1009] : 0x10 (16)
  2397. [1010] : 0x0a (10)
  2398. [1011] : 0xec (236)
  2399. [1012] : 0x4c (76)
  2400. [1013] : 0xb7 (183)
  2401. [1014] : 0x3a (58)
  2402. [1015] : 0xce (206)
  2403. [1016] : 0x35 (53)
  2404. [1017] : 0x7c (124)
  2405. [1018] : 0x28 (40)
  2406. [1019] : 0x91 (145)
  2407. [1020] : 0x58 (88)
  2408. [1021] : 0x63 (99)
  2409. [1022] : 0xd1 (209)
  2410. [1023] : 0x3b (59)
  2411. [1024] : 0x40 (64)
  2412. [1025] : 0x78 (120)
  2413. [1026] : 0x64 (100)
  2414. [1027] : 0x07 (7)
  2415. [1028] : 0x15 (21)
  2416. [1029] : 0x50 (80)
  2417. [1030] : 0x19 (25)
  2418. [1031] : 0xf7 (247)
  2419. [1032] : 0xc5 (197)
  2420. [1033] : 0x0b (11)
  2421. [1034] : 0x4f (79)
  2422. [1035] : 0x0e (14)
  2423. [1036] : 0x12 (18)
  2424. [1037] : 0xfb (251)
  2425. [1038] : 0x7c (124)
  2426. [1039] : 0xc0 (192)
  2427. [1040] : 0xe4 (228)
  2428. [1041] : 0xcf (207)
  2429. [1042] : 0x23 (35)
  2430. [1043] : 0x06 (6)
  2431. [1044] : 0xc2 (194)
  2432. [1045] : 0xf6 (246)
  2433. [1046] : 0x66 (102)
  2434. [1047] : 0x66 (102)
  2435. [1048] : 0x3e (62)
  2436. [1049] : 0x55 (85)
  2437. [1050] : 0x02 (2)
  2438. [1051] : 0xc0 (192)
  2439. [1052] : 0x97 (151)
  2440. [1053] : 0x55 (85)
  2441. [1054] : 0xc2 (194)
  2442. [1055] : 0x88 (136)
  2443. [1056] : 0xdb (219)
  2444. [1057] : 0xbd (189)
  2445. [1058] : 0xfe (254)
  2446. [1059] : 0x5e (94)
  2447. [1060] : 0x28 (40)
  2448. [1061] : 0x49 (73)
  2449. [1062] : 0x2f (47)
  2450. [1063] : 0x6b (107)
  2451. [1064] : 0xfb (251)
  2452. [1065] : 0x20 (32)
  2453. [1066] : 0x9b (155)
  2454. [1067] : 0x31 (49)
  2455. [1068] : 0xd7 (215)
  2456. [1069] : 0x6b (107)
  2457. [1070] : 0x98 (152)
  2458. [1071] : 0x51 (81)
  2459. [1072] : 0x92 (146)
  2460. [1073] : 0x97 (151)
  2461. [1074] : 0xed (237)
  2462. [1075] : 0x8b (139)
  2463. [1076] : 0x3d (61)
  2464. [1077] : 0xf7 (247)
  2465. [1078] : 0x00 (0)
  2466. [1079] : 0x58 (88)
  2467. [1080] : 0x6b (107)
  2468. [1081] : 0x0b (11)
  2469. [1082] : 0x80 (128)
  2470. [1083] : 0x30 (48)
  2471. [1084] : 0xe1 (225)
  2472. [1085] : 0x29 (41)
  2473. [1086] : 0xae (174)
  2474. [1087] : 0x84 (132)
  2475. access_mask : 0x00010000 (65536)
  2476. 0: LSA_TRUSTED_QUERY_DOMAIN_NAME
  2477. 0: LSA_TRUSTED_QUERY_CONTROLLERS
  2478. 0: LSA_TRUSTED_SET_CONTROLLERS
  2479. 0: LSA_TRUSTED_QUERY_POSIX
  2480. 0: LSA_TRUSTED_SET_POSIX
  2481. 0: LSA_TRUSTED_SET_AUTH
  2482. 0: LSA_TRUSTED_QUERY_AUTH
  2483. rpc request data:
  2484. [0000] 00 00 00 00 25 00 0F A9 8B 73 AE 4E 9D 5A 54 33 ....%... .s.N.ZT3
  2485. [0010] F6 68 07 B0 18 00 1A 00 00 00 02 00 06 00 08 00 .h...... ........
  2486. [0020] 04 00 02 00 08 00 02 00 03 00 00 00 02 00 00 00 ........ ........
  2487. [0030] 08 00 00 00 0D 00 00 00 00 00 00 00 0C 00 00 00 ........ ........
  2488. [0040] 72 00 64 00 75 00 2E 00 6C 00 75 00 6C 00 75 00 r.d.u... l.u.l.u.
  2489. [0050] 2E 00 63 00 6F 00 6D 00 04 00 00 00 00 00 00 00 ..c.o.m. ........
  2490. [0060] 03 00 00 00 49 00 50 00 41 00 00 00 04 00 00 00 ....I.P. A.......
  2491. [0070] 01 04 00 00 00 00 00 05 15 00 00 00 8C 8C 11 9A ........ ........
  2492. [0080] CE E9 58 CB 68 BE 9B BA 40 04 00 00 0C 00 02 00 ..X.h... @.......
  2493. [0090] 40 04 00 00 F6 85 17 2D A1 AB 98 75 40 9C 63 63 @......- ...u@.cc
  2494. [00A0] 8E 2D 99 1B DB C2 82 13 E3 C9 2C 06 61 7C 30 32 .-...... ..,.a|02
  2495. [00B0] 7E 93 9D 15 26 28 7E B5 7C DD F4 5B 7F 69 21 62 ~...&(~. |..[.i!b
  2496. [00C0] B4 BF 06 EC F4 F0 F8 4D 56 47 F2 B0 9D F7 67 D2 .......M VG....g.
  2497. [00D0] 54 31 12 FA B0 D0 FD 55 D2 3D B6 2E 88 63 6C A2 T1.....U .=...cl.
  2498. [00E0] 19 07 4F 0E C9 4F F9 E2 A2 3E 3F E9 3B 40 39 39 ..O..O.. .>?.;@99
  2499. [00F0] 76 77 48 1A 54 BB 81 5F BB CA 62 90 58 6E F3 55 vwH.T.._ ..b.Xn.U
  2500. [0100] E6 C6 88 88 2C D0 86 02 0F BC 3C F2 99 5B BB 12 ....,... ..<..[..
  2501. [0110] 6D 9D CA 72 B5 04 0F 7B 27 67 13 40 DE 1F 80 4A m..r...{ 'g.@...J
  2502. [0120] 50 45 19 0B 5F CF 46 7C C7 6E 75 0E 6A D5 04 01 PE.._.F| .nu.j...
  2503. [0130] 2E C2 2B D6 16 7F 6B 63 62 FD C7 33 96 53 FB A0 ..+...kc b..3.S..
  2504. [0140] 24 A6 A4 FF B3 74 DE DF 28 A0 04 E8 2C B1 08 15 $....t.. (...,...
  2505. [0150] A2 80 EB 5C C6 18 AB 5B 03 EB 36 E7 C5 3F D1 BF ...\...[ ..6..?..
  2506. [0160] 2A 33 F3 83 1D 51 0D F6 0B 99 52 00 24 1A F5 95 *3...Q.. ..R.$...
  2507. [0170] 28 35 48 40 41 20 41 CB F8 DD 79 9C 57 55 3B ED (5H@A A. ..y.WU;.
  2508. [0180] A2 3C 98 46 5B 70 FC 5C 8B 5E 85 DF 43 B0 BC AD .<.F[p.\ .^..C...
  2509. [0190] 4F 57 40 61 E5 53 FE 1F 48 0A 3E 92 13 71 00 43 OW@a.S.. H.>..q.C
  2510. [01A0] A6 D2 C6 67 2D 09 A3 6E 2A 35 8E 1C C4 09 D1 50 ...g-..n *5.....P
  2511. [01B0] 10 CF DB 40 FD 7A C5 53 5D 12 E2 8C BA 8B AF C6 ...@.z.S ].......
  2512. [01C0] AD 62 93 77 FD A4 C9 62 E4 CE 7A B5 E4 5B 97 0B .b.w...b ..z..[..
  2513. [01D0] 45 D9 56 6A E3 B1 6D 37 E6 92 A6 C8 3B 0A 91 92 E.Vj..m7 ....;...
  2514. [01E0] 41 0D 3E 2A FE 79 C9 CA 93 29 EC 69 9D AE EB 64 A.>*.y.. .).i...d
  2515. [01F0] 13 29 25 16 99 47 CC 64 90 7B 7B AE 72 E9 53 8A .)%..G.d .{{.r.S.
  2516. [0200] EB 8A B1 E1 2C 75 DA A3 BD 9D 2E 73 8C 38 0B 88 ....,u.. ...s.8..
  2517. [0210] 36 1E AB 29 65 D5 B7 F0 74 08 2D 8E BD 0F 3B 10 6..)e... t.-...;.
  2518. [0220] 10 A3 91 2D D2 48 E0 57 F8 06 09 CD 49 A1 7E 98 ...-.H.W ....I.~.
  2519. [0230] 63 8D 2F 83 28 E3 01 78 FD 83 76 9E 6E E4 59 93 c./.(..x ..v.n.Y.
  2520. [0240] 10 5A 97 E9 60 39 4F 40 75 04 70 2A 60 2D 1B B9 .Z..`9O@ u.p*`-..
  2521. [0250] A0 57 D5 D7 B3 C7 AB F1 86 59 00 F5 A1 7D 41 01 .W...... .Y...}A.
  2522. [0260] 6E 6F 87 51 66 F7 B3 EE 81 3F 6A D3 89 55 5F D1 no.Qf... .?j..U_.
  2523. [0270] 40 61 DD 86 FD 0E 80 D0 9D B0 45 E3 18 1C D2 DF @a...... ..E.....
  2524. [0280] 99 1F 65 C6 D0 9B 0E FC D9 66 22 CE C5 E2 60 29 ..e..... .f"...`)
  2525. [0290] E2 F1 CA 7A FA 13 9C 4C 8C F2 A1 F0 14 86 03 64 ...z...L .......d
  2526. [02A0] 77 B8 3C 0D D2 C0 FB 50 73 BA C5 A8 B4 DC E5 A7 w.<....P s.......
  2527. [02B0] A6 C3 BD A0 AE 97 31 A7 78 B9 20 57 B3 30 77 06 ......1. x. W.0w.
  2528. [02C0] 60 F9 45 08 26 B3 4B 15 A4 04 FF 37 78 EE E2 66 `.E.&.K. ...7x..f
  2529. [02D0] 5D C6 C2 A8 B2 C4 74 BF B1 D7 26 28 61 53 8D 8F ].....t. ..&(aS..
  2530. [02E0] 6E 82 6B C7 3A 91 F8 D8 60 5B C7 11 D2 E9 FA 00 n.k.:... `[......
  2531. [02F0] 26 23 05 32 FD 62 F9 07 5E 27 FE 00 81 24 05 6E &#.2.b.. ^'...$.n
  2532. [0300] 58 77 C3 7C A4 A9 2B 30 AD 4C B4 00 E6 04 81 2C Xw.|..+0 .L.....,
  2533. [0310] FE C2 A1 86 68 EF 43 E9 59 7F C4 DC 7C AC B9 31 ....h.C. Y...|..1
  2534. [0320] E6 A7 56 9A 61 9A 54 5F AB D7 1C 6F 41 8E 07 45 ..V.a.T_ ...oA..E
  2535. [0330] 45 BF DE F7 9E 70 F6 CE 08 FB 6B D2 FA 6F 80 0C E....p.. ..k..o..
  2536. [0340] B5 2C 9E 94 0B 4D 4A 18 5E 4B ED 60 E5 C5 F6 41 .,...MJ. ^K.`...A
  2537. [0350] 04 43 C3 C4 9D 5F 2E 7D C1 10 D4 6D EB 98 DE A2 .C..._.} ...m....
  2538. [0360] EA 61 09 50 AB AB 3A 8C 12 D2 A8 2C 43 23 00 A0 .a.P..:. ...,C#..
  2539. [0370] CB C5 2A B2 14 12 DB C5 46 CA A2 13 8A 41 CF 20 ..*..... F....A.
  2540. [0380] C5 A9 20 61 CD AB 77 91 86 FB E7 01 0B 85 E3 59 .. a..w. .......Y
  2541. [0390] 6A F8 CB 0C 2F 9D 02 8F 4D A1 DC 59 D0 CE 4E E6 j.../... M..Y..N.
  2542. [03A0] 28 53 A3 6F 5B 94 D5 B7 DA 6E EB 03 75 C9 22 BA (S.o[... .n..u.".
  2543. [03B0] 9A B4 F2 1C 28 9B 44 FF 2A 10 C6 48 0F 5C FE 50 ....(.D. *..H.\.P
  2544. [03C0] F4 ED 8B CA FC E1 16 97 C0 2C 78 58 0C 19 E6 2C ........ .,xX...,
  2545. [03D0] A5 3E 24 88 10 C4 B0 AE 4E 00 60 51 73 E8 F3 87 .>$..... N.`Qs...
  2546. [03E0] C8 82 5C 75 0F E8 B2 20 6A D8 72 DD 1F B5 99 8D ..\u... j.r.....
  2547. [03F0] FB AF 06 78 9A 24 92 63 8F 56 65 E9 73 42 D0 F7 ...x.$.c .Ve.sB..
  2548. [0400] 58 58 46 B1 BB 55 37 93 ED CF 80 51 E4 19 17 C1 XXF..U7. ...Q....
  2549. [0410] 42 88 38 93 30 58 62 35 91 24 66 C8 48 19 80 53 B.8.0Xb5 .$f.H..S
  2550. [0420] 25 AD 86 A5 C3 D9 C2 F8 B8 BC C6 1A 45 33 14 1F %....... ....E3..
  2551. [0430] 14 A3 D1 C5 91 0C 07 FB 57 9F BA 28 94 03 D1 56 ........ W..(...V
  2552. [0440] 9E C7 99 63 B2 30 DC F0 CB 79 2B 44 62 38 9A 5B ...c.0.. .y+Db8.[
  2553. [0450] 9F 40 23 4B 16 C0 DF AD 82 7D 36 A4 82 06 98 D9 .@#K.... .}6.....
  2554. [0460] 35 61 CF 26 A9 F3 F0 D9 1A 13 56 AF CA 59 B8 46 5a.&.... ..V..Y.F
  2555. [0470] 4F 2F D4 4B 56 A0 AD 10 2D FF 7D 34 FC D5 43 7F O/.KV... -.}4..C.
  2556. [0480] CE 1C 85 03 A5 10 0A EC 4C B7 3A CE 35 7C 28 91 ........ L.:.5|(.
  2557. [0490] 58 63 D1 3B 40 78 64 07 15 50 19 F7 C5 0B 4F 0E Xc.;@xd. .P....O.
  2558. [04A0] 12 FB 7C C0 E4 CF 23 06 C2 F6 66 66 3E 55 02 C0 ..|...#. ..ff>U..
  2559. [04B0] 97 55 C2 88 DB BD FE 5E 28 49 2F 6B FB 20 9B 31 .U.....^ (I/k. .1
  2560. [04C0] D7 6B 98 51 92 97 ED 8B 3D F7 00 58 6B 0B 80 30 .k.Q.... =..Xk..0
  2561. [04D0] E1 29 AE 84 00 00 01 00 .)......
  2562. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2563. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3dc740
  2564. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2565. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2566. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=1264, this_data=1264, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  2567. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3d3810
  2568. smb_signing_md5: sequence number 16
  2569. smb_signing_sign_pdu: sent SMB signature of
  2570. [0000] E6 3D CF D8 B7 A1 7E EA .=....~.
  2571. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  2572. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2573. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  2574. smb_signing_md5: sequence number 17
  2575. smb_signing_check_pdu: seq 17: got good SMB signature of
  2576. [0000] A6 77 60 A2 9C D4 36 91 .w`...6.
  2577. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3e1010
  2578. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3e1010
  2579. s4_tevent: Destroying timer event 0x7fb6ec3d3810 "tevent_req_timedout"
  2580. s4_tevent: Destroying timer event 0x7fb6ec3dc740 "dcerpc_timeout_handler"
  2581. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3b2510
  2582. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3b2510
  2583. lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2
  2584. out: struct lsa_CreateTrustedDomainEx2
  2585. trustdom_handle : *
  2586. trustdom_handle: struct policy_handle
  2587. handle_type : 0x00000000 (0)
  2588. uuid : 778f68ba-e1ee-484c-a793-443e3d30f018
  2589. result : NT_STATUS_OK
  2590. rpc reply data:
  2591. [0000] 00 00 00 00 BA 68 8F 77 EE E1 4C 48 A7 93 44 3E .....h.w ..LH..D>
  2592. [0010] 3D 30 F0 18 00 00 00 00 =0......
  2593. lsa_lsaRSetForestTrustInformation: struct lsa_lsaRSetForestTrustInformation
  2594. in: struct lsa_lsaRSetForestTrustInformation
  2595. handle : *
  2596. handle: struct policy_handle
  2597. handle_type : 0x00000000 (0)
  2598. uuid : a90f0025-738b-4eae-9d5a-5433f66807b0
  2599. trusted_domain_name : *
  2600. trusted_domain_name: struct lsa_StringLarge
  2601. length : 0x0018 (24)
  2602. size : 0x001a (26)
  2603. string : *
  2604. string : 'rdu.lulu.com'
  2605. highest_record_type : 0x0002 (2)
  2606. forest_trust_info : *
  2607. forest_trust_info: struct lsa_ForestTrustInformation
  2608. count : 0x00000001 (1)
  2609. entries : *
  2610. entries: ARRAY(1)
  2611. entries : *
  2612. entries: struct lsa_ForestTrustRecord
  2613. flags : 0x00000000 (0)
  2614. type : LSA_FOREST_TRUST_TOP_LEVEL_NAME (0)
  2615. time : 0x01cff30d95c6ec80 (130590153890000000)
  2616. forest_trust_data : union lsa_ForestTrustData(case 0)
  2617. top_level_name: struct lsa_StringLarge
  2618. length : 0x0018 (24)
  2619. size : 0x001a (26)
  2620. string : *
  2621. string : 'rdu.lulu.com'
  2622. check_only : 0x00 (0)
  2623. rpc request data:
  2624. [0000] 00 00 00 00 25 00 0F A9 8B 73 AE 4E 9D 5A 54 33 ....%... .s.N.ZT3
  2625. [0010] F6 68 07 B0 18 00 1A 00 00 00 02 00 0D 00 00 00 .h...... ........
  2626. [0020] 00 00 00 00 0C 00 00 00 72 00 64 00 75 00 2E 00 ........ r.d.u...
  2627. [0030] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  2628. [0040] 02 00 00 00 01 00 00 00 04 00 02 00 01 00 00 00 ........ ........
  2629. [0050] 08 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  2630. [0060] 80 EC C6 95 0D F3 CF 01 00 00 00 00 18 00 1A 00 ........ ........
  2631. [0070] 0C 00 02 00 0D 00 00 00 00 00 00 00 0C 00 00 00 ........ ........
  2632. [0080] 72 00 64 00 75 00 2E 00 6C 00 75 00 6C 00 75 00 r.d.u... l.u.l.u.
  2633. [0090] 2E 00 63 00 6F 00 6D 00 00 ..c.o.m. .
  2634. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2635. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec0a9ae0
  2636. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2637. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2638. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=177, this_data=177, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  2639. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3d2fa0
  2640. smb_signing_md5: sequence number 18
  2641. smb_signing_sign_pdu: sent SMB signature of
  2642. [0000] A7 B2 4B E1 FF 87 64 3B ..K...d;
  2643. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  2644. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2645. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  2646. smb_signing_md5: sequence number 19
  2647. smb_signing_check_pdu: seq 19: got good SMB signature of
  2648. [0000] F4 1A FF 0E 26 18 2D 89 ....&.-.
  2649. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3a90f0
  2650. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3a90f0
  2651. s4_tevent: Destroying timer event 0x7fb6ec3d2fa0 "tevent_req_timedout"
  2652. s4_tevent: Destroying timer event 0x7fb6ec0a9ae0 "dcerpc_timeout_handler"
  2653. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec26bb50
  2654. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec26bb50
  2655. lsa_lsaRSetForestTrustInformation: struct lsa_lsaRSetForestTrustInformation
  2656. out: struct lsa_lsaRSetForestTrustInformation
  2657. collision_info : *
  2658. collision_info : NULL
  2659. result : NT_STATUS_OK
  2660. rpc reply data:
  2661. [0000] 00 00 00 00 00 00 00 00 ........
  2662. lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName
  2663. in: struct lsa_OpenTrustedDomainByName
  2664. handle : *
  2665. handle: struct policy_handle
  2666. handle_type : 0x00000000 (0)
  2667. uuid : a90f0025-738b-4eae-9d5a-5433f66807b0
  2668. name: struct lsa_String
  2669. length : 0x0018 (24)
  2670. size : 0x0018 (24)
  2671. string : *
  2672. string : 'rdu.lulu.com'
  2673. access_mask : 0x02000000 (33554432)
  2674. 0: LSA_TRUSTED_QUERY_DOMAIN_NAME
  2675. 0: LSA_TRUSTED_QUERY_CONTROLLERS
  2676. 0: LSA_TRUSTED_SET_CONTROLLERS
  2677. 0: LSA_TRUSTED_QUERY_POSIX
  2678. 0: LSA_TRUSTED_SET_POSIX
  2679. 0: LSA_TRUSTED_SET_AUTH
  2680. 0: LSA_TRUSTED_QUERY_AUTH
  2681. rpc request data:
  2682. [0000] 00 00 00 00 25 00 0F A9 8B 73 AE 4E 9D 5A 54 33 ....%... .s.N.ZT3
  2683. [0010] F6 68 07 B0 18 00 18 00 00 00 02 00 0C 00 00 00 .h...... ........
  2684. [0020] 00 00 00 00 0C 00 00 00 72 00 64 00 75 00 2E 00 ........ r.d.u...
  2685. [0030] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  2686. [0040] 00 00 00 02 ....
  2687. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2688. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3bb6e0
  2689. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2690. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2691. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=92, this_data=92, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  2692. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec27ea80
  2693. smb_signing_md5: sequence number 20
  2694. smb_signing_sign_pdu: sent SMB signature of
  2695. [0000] 3A 10 41 50 58 75 35 A4 :.APXu5.
  2696. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  2697. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2698. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  2699. smb_signing_md5: sequence number 21
  2700. smb_signing_check_pdu: seq 21: got good SMB signature of
  2701. [0000] DA A7 21 16 7B E6 88 77 ..!.{..w
  2702. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec0a1a40
  2703. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec0a1a40
  2704. s4_tevent: Destroying timer event 0x7fb6ec27ea80 "tevent_req_timedout"
  2705. s4_tevent: Destroying timer event 0x7fb6ec3bb6e0 "dcerpc_timeout_handler"
  2706. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec0b6e30
  2707. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec0b6e30
  2708. lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName
  2709. out: struct lsa_OpenTrustedDomainByName
  2710. trustdom_handle : *
  2711. trustdom_handle: struct policy_handle
  2712. handle_type : 0x00000000 (0)
  2713. uuid : c554652d-c70f-4e8d-980c-751d01634d9b
  2714. result : NT_STATUS_OK
  2715. rpc reply data:
  2716. [0000] 00 00 00 00 2D 65 54 C5 0F C7 8D 4E 98 0C 75 1D ....-eT. ...N..u.
  2717. [0010] 01 63 4D 9B 00 00 00 00 .cM.....
  2718. lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain
  2719. in: struct lsa_SetInformationTrustedDomain
  2720. trustdom_handle : *
  2721. trustdom_handle: struct policy_handle
  2722. handle_type : 0x00000000 (0)
  2723. uuid : c554652d-c70f-4e8d-980c-751d01634d9b
  2724. level : LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES (13)
  2725. info : *
  2726. info : union lsa_TrustedDomainInfo(case 13)
  2727. enc_types: struct lsa_TrustDomainInfoSupportedEncTypes
  2728. enc_types : 0x0000001c (28)
  2729. 0: KERB_ENCTYPE_DES_CBC_CRC
  2730. 0: KERB_ENCTYPE_DES_CBC_MD5
  2731. 1: KERB_ENCTYPE_RC4_HMAC_MD5
  2732. 1: KERB_ENCTYPE_AES128_CTS_HMAC_SHA1_96
  2733. 1: KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96
  2734. rpc request data:
  2735. [0000] 00 00 00 00 2D 65 54 C5 0F C7 8D 4E 98 0C 75 1D ....-eT. ...N..u.
  2736. [0010] 01 63 4D 9B 0D 00 0D 00 1C 00 00 00 .cM..... ....
  2737. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2738. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3054a0
  2739. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2740. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2741. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=52, this_data=52, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  2742. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec27ea80
  2743. smb_signing_md5: sequence number 22
  2744. smb_signing_sign_pdu: sent SMB signature of
  2745. [0000] 4B DD 70 38 01 F3 03 99 K.p8....
  2746. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  2747. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec15eaa0
  2748. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dc5e0
  2749. smb_signing_md5: sequence number 23
  2750. smb_signing_check_pdu: seq 23: got good SMB signature of
  2751. [0000] BB FD 63 5C 8A C7 56 65 ..c\..Ve
  2752. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec2cf500
  2753. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec2cf500
  2754. s4_tevent: Destroying timer event 0x7fb6ec27ea80 "tevent_req_timedout"
  2755. s4_tevent: Destroying timer event 0x7fb6ec3054a0 "dcerpc_timeout_handler"
  2756. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec241ca0
  2757. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec241ca0
  2758. lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain
  2759. out: struct lsa_SetInformationTrustedDomain
  2760. result : NT_STATUS_OK
  2761. rpc reply data:
  2762. [0000] 00 00 00 00 ....
  2763. lsa_QueryTrustedDomainInfoByName: struct lsa_QueryTrustedDomainInfoByName
  2764. in: struct lsa_QueryTrustedDomainInfoByName
  2765. handle : *
  2766. handle: struct policy_handle
  2767. handle_type : 0x00000000 (0)
  2768. uuid : 0000000d-0000-0000-5354-5f86a72a0000
  2769. trusted_domain : *
  2770. trusted_domain: struct lsa_String
  2771. length : 0x0028 (40)
  2772. size : 0x0028 (40)
  2773. string : *
  2774. string : 'windows.rdu.lulu.com'
  2775. level : LSA_TRUSTED_DOMAIN_INFO_FULL_INFO (8)
  2776. rpc request data:
  2777. [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 53 54 5F 86 ........ ....ST_.
  2778. [0010] A7 2A 00 00 28 00 28 00 00 00 02 00 14 00 00 00 .*..(.(. ........
  2779. [0020] 00 00 00 00 14 00 00 00 77 00 69 00 6E 00 64 00 ........ w.i.n.d.
  2780. [0030] 6F 00 77 00 73 00 2E 00 72 00 64 00 75 00 2E 00 o.w.s... r.d.u...
  2781. [0040] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  2782. [0050] 08 00 ..
  2783. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  2784. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec347290
  2785. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  2786. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  2787. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=106, this_data=106, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  2788. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3a90f0
  2789. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  2790. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  2791. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  2792. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec0b6e30
  2793. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec0b6e30
  2794. s4_tevent: Destroying timer event 0x7fb6ec3a90f0 "tevent_req_timedout"
  2795. s4_tevent: Destroying timer event 0x7fb6ec347290 "dcerpc_timeout_handler"
  2796. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3a87c0
  2797. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3a87c0
  2798. lsa_QueryTrustedDomainInfoByName: struct lsa_QueryTrustedDomainInfoByName
  2799. out: struct lsa_QueryTrustedDomainInfoByName
  2800. info : *
  2801. info : *
  2802. info : union lsa_TrustedDomainInfo(case 8)
  2803. full_info: struct lsa_TrustDomainInfoFullInfo
  2804. info_ex: struct lsa_TrustDomainInfoInfoEx
  2805. domain_name: struct lsa_StringLarge
  2806. length : 0x0028 (40)
  2807. size : 0x002a (42)
  2808. string : *
  2809. string : 'windows.rdu.lulu.com'
  2810. netbios_name: struct lsa_StringLarge
  2811. length : 0x0016 (22)
  2812. size : 0x0018 (24)
  2813. string : *
  2814. string : 'WINDOWS-RDU'
  2815. sid : *
  2816. sid : S-1-5-21-3940030408-2275254484-3250932449
  2817. trust_direction : 0x00000003 (3)
  2818. 1: LSA_TRUST_DIRECTION_INBOUND
  2819. 1: LSA_TRUST_DIRECTION_OUTBOUND
  2820. trust_type : LSA_TRUST_TYPE_UPLEVEL (2)
  2821. trust_attributes : 0x00000008 (8)
  2822. 0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
  2823. 0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
  2824. 0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
  2825. 1: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
  2826. 0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
  2827. 0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
  2828. 0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
  2829. 0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
  2830. posix_offset: struct lsa_TrustDomainInfoPosixOffset
  2831. posix_offset : 0x00000000 (0)
  2832. auth_info: struct lsa_TrustDomainInfoAuthInfo
  2833. incoming_count : 0x00000001 (1)
  2834. incoming_current_auth_info: *
  2835. incoming_current_auth_info: struct lsa_TrustDomainInfoBuffer
  2836. last_update_time : Thu Oct 30 16:25:54 2014 EDT
  2837. AuthType : TRUST_AUTH_TYPE_CLEAR (2)
  2838. data: struct lsa_DATA_BUF2
  2839. size : 0x00000080 (128)
  2840. data : *
  2841. data : 5a67536b3e675d4939444f5f6241253921527a3b32242e43292b414e2b2e4a6b2455474746546945794253683c3a435b426a5664433142512e43214c5f3839295278726d5f764a353730575332597e4b44367150345763405a477e63633c68237a6d434c42464f7e2825412859685f67436354453168447429332e325f594b45
  2842. incoming_previous_auth_info: NULL
  2843. outgoing_count : 0x00000001 (1)
  2844. outgoing_current_auth_info: *
  2845. outgoing_current_auth_info: struct lsa_TrustDomainInfoBuffer
  2846. last_update_time : Thu Oct 30 16:25:54 2014 EDT
  2847. AuthType : TRUST_AUTH_TYPE_CLEAR (2)
  2848. data: struct lsa_DATA_BUF2
  2849. size : 0x00000080 (128)
  2850. data : *
  2851. data : 5a67536b3e675d4939444f5f6241253921527a3b32242e43292b414e2b2e4a6b2455474746546945794253683c3a435b426a5664433142512e43214c5f3839295278726d5f764a353730575332597e4b44367150345763405a477e63633c68237a6d434c42464f7e2825412859685f67436354453168447429332e325f594b45
  2852. outgoing_previous_auth_info: NULL
  2853. result : NT_STATUS_OK
  2854. rpc reply data:
  2855. [0000] 04 00 02 00 08 00 00 00 28 00 2A 00 08 00 02 00 ........ (.*.....
  2856. [0010] 16 00 18 00 0C 00 02 00 10 00 02 00 03 00 00 00 ........ ........
  2857. [0020] 02 00 00 00 08 00 00 00 00 00 00 00 01 00 00 00 ........ ........
  2858. [0030] 14 00 02 00 00 00 00 00 01 00 00 00 18 00 02 00 ........ ........
  2859. [0040] 00 00 00 00 15 00 00 00 00 00 00 00 14 00 00 00 ........ ........
  2860. [0050] 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 2E 00 w.i.n.d. o.w.s...
  2861. [0060] 72 00 64 00 75 00 2E 00 6C 00 75 00 6C 00 75 00 r.d.u... l.u.l.u.
  2862. [0070] 2E 00 63 00 6F 00 6D 00 0C 00 00 00 00 00 00 00 ..c.o.m. ........
  2863. [0080] 0B 00 00 00 57 00 49 00 4E 00 44 00 4F 00 57 00 ....W.I. N.D.O.W.
  2864. [0090] 53 00 2D 00 52 00 44 00 55 00 00 00 04 00 00 00 S.-.R.D. U.......
  2865. [00A0] 01 04 00 00 00 00 00 05 15 00 00 00 C8 17 D8 EA ........ ........
  2866. [00B0] D4 A0 9D 87 E1 4A C5 C1 00 F5 4C B4 7F F4 CF 01 .....J.. ..L.....
  2867. [00C0] 02 00 00 00 80 00 00 00 1C 00 02 00 80 00 00 00 ........ ........
  2868. [00D0] 5A 67 53 6B 3E 67 5D 49 39 44 4F 5F 62 41 25 39 ZgSk>g]I 9DO_bA%9
  2869. [00E0] 21 52 7A 3B 32 24 2E 43 29 2B 41 4E 2B 2E 4A 6B !Rz;2$.C )+AN+.Jk
  2870. [00F0] 24 55 47 47 46 54 69 45 79 42 53 68 3C 3A 43 5B $UGGFTiE yBSh<:C[
  2871. [0100] 42 6A 56 64 43 31 42 51 2E 43 21 4C 5F 38 39 29 BjVdC1BQ .C!L_89)
  2872. [0110] 52 78 72 6D 5F 76 4A 35 37 30 57 53 32 59 7E 4B Rxrm_vJ5 70WS2Y~K
  2873. [0120] 44 36 71 50 34 57 63 40 5A 47 7E 63 63 3C 68 23 D6qP4Wc@ ZG~cc<h#
  2874. [0130] 7A 6D 43 4C 42 46 4F 7E 28 25 41 28 59 68 5F 67 zmCLBFO~ (%A(Yh_g
  2875. [0140] 43 63 54 45 31 68 44 74 29 33 2E 32 5F 59 4B 45 CcTE1hDt )3.2_YKE
  2876. [0150] 00 F5 4C B4 7F F4 CF 01 02 00 00 00 80 00 00 00 ..L..... ........
  2877. [0160] 20 00 02 00 80 00 00 00 5A 67 53 6B 3E 67 5D 49 ....... ZgSk>g]I
  2878. [0170] 39 44 4F 5F 62 41 25 39 21 52 7A 3B 32 24 2E 43 9DO_bA%9 !Rz;2$.C
  2879. [0180] 29 2B 41 4E 2B 2E 4A 6B 24 55 47 47 46 54 69 45 )+AN+.Jk $UGGFTiE
  2880. [0190] 79 42 53 68 3C 3A 43 5B 42 6A 56 64 43 31 42 51 yBSh<:C[ BjVdC1BQ
  2881. [01A0] 2E 43 21 4C 5F 38 39 29 52 78 72 6D 5F 76 4A 35 .C!L_89) Rxrm_vJ5
  2882. [01B0] 37 30 57 53 32 59 7E 4B 44 36 71 50 34 57 63 40 70WS2Y~K D6qP4Wc@
  2883. [01C0] 5A 47 7E 63 63 3C 68 23 7A 6D 43 4C 42 46 4F 7E ZG~cc<h# zmCLBFO~
  2884. [01D0] 28 25 41 28 59 68 5F 67 43 63 54 45 31 68 44 74 (%A(Yh_g CcTE1hDt
  2885. [01E0] 29 33 2E 32 5F 59 4B 45 00 00 00 00 )3.2_YKE ....
  2886. lsa_DeleteTrustedDomain: struct lsa_DeleteTrustedDomain
  2887. in: struct lsa_DeleteTrustedDomain
  2888. handle : *
  2889. handle: struct policy_handle
  2890. handle_type : 0x00000000 (0)
  2891. uuid : 0000000d-0000-0000-5354-5f86a72a0000
  2892. dom_sid : *
  2893. dom_sid : S-1-5-21-3940030408-2275254484-3250932449
  2894. rpc request data:
  2895. [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 53 54 5F 86 ........ ....ST_.
  2896. [0010] A7 2A 00 00 04 00 00 00 01 04 00 00 00 00 00 05 .*...... ........
  2897. [0020] 15 00 00 00 C8 17 D8 EA D4 A0 9D 87 E1 4A C5 C1 ........ .....J..
  2898. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  2899. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec27fce0
  2900. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  2901. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  2902. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  2903. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec0a1a40
  2904. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  2905. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  2906. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  2907. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec27ea80
  2908. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec27ea80
  2909. s4_tevent: Destroying timer event 0x7fb6ec0a1a40 "tevent_req_timedout"
  2910. s4_tevent: Destroying timer event 0x7fb6ec27fce0 "dcerpc_timeout_handler"
  2911. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec09ac00
  2912. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec09ac00
  2913. lsa_DeleteTrustedDomain: struct lsa_DeleteTrustedDomain
  2914. out: struct lsa_DeleteTrustedDomain
  2915. result : NT_STATUS_OK
  2916. rpc reply data:
  2917. [0000] 00 00 00 00 ....
  2918. lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2
  2919. in: struct lsa_CreateTrustedDomainEx2
  2920. policy_handle : *
  2921. policy_handle: struct policy_handle
  2922. handle_type : 0x00000000 (0)
  2923. uuid : 0000000d-0000-0000-5354-5f86a72a0000
  2924. info : *
  2925. info: struct lsa_TrustDomainInfoInfoEx
  2926. domain_name: struct lsa_StringLarge
  2927. length : 0x0028 (40)
  2928. size : 0x002a (42)
  2929. string : *
  2930. string : 'windows.rdu.lulu.com'
  2931. netbios_name: struct lsa_StringLarge
  2932. length : 0x0016 (22)
  2933. size : 0x0018 (24)
  2934. string : *
  2935. string : 'WINDOWS-RDU'
  2936. sid : *
  2937. sid : S-1-5-21-3940030408-2275254484-3250932449
  2938. trust_direction : 0x00000003 (3)
  2939. 1: LSA_TRUST_DIRECTION_INBOUND
  2940. 1: LSA_TRUST_DIRECTION_OUTBOUND
  2941. trust_type : LSA_TRUST_TYPE_UPLEVEL (2)
  2942. trust_attributes : 0x00000008 (8)
  2943. 0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
  2944. 0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
  2945. 0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
  2946. 1: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
  2947. 0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
  2948. 0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
  2949. 0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
  2950. 0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
  2951. auth_info_internal : *
  2952. auth_info_internal: struct lsa_TrustDomainInfoAuthInfoInternal
  2953. auth_blob: struct lsa_DATA_BUF2
  2954. size : 0x00000440 (1088)
  2955. data : *
  2956. data: ARRAY(1088)
  2957. [0] : 0x56 (86)
  2958. [1] : 0x22 (34)
  2959. [2] : 0x37 (55)
  2960. [3] : 0xfb (251)
  2961. [4] : 0xf0 (240)
  2962. [5] : 0xb7 (183)
  2963. [6] : 0x88 (136)
  2964. [7] : 0x2b (43)
  2965. [8] : 0xc7 (199)
  2966. [9] : 0x46 (70)
  2967. [10] : 0x35 (53)
  2968. [11] : 0xe7 (231)
  2969. [12] : 0x2e (46)
  2970. [13] : 0xd9 (217)
  2971. [14] : 0xd9 (217)
  2972. [15] : 0x4b (75)
  2973. [16] : 0xde (222)
  2974. [17] : 0x10 (16)
  2975. [18] : 0x77 (119)
  2976. [19] : 0xd5 (213)
  2977. [20] : 0x38 (56)
  2978. [21] : 0x87 (135)
  2979. [22] : 0x7d (125)
  2980. [23] : 0xe1 (225)
  2981. [24] : 0xe7 (231)
  2982. [25] : 0x20 (32)
  2983. [26] : 0x1e (30)
  2984. [27] : 0xbb (187)
  2985. [28] : 0xc4 (196)
  2986. [29] : 0xc0 (192)
  2987. [30] : 0x75 (117)
  2988. [31] : 0xdf (223)
  2989. [32] : 0x26 (38)
  2990. [33] : 0x13 (19)
  2991. [34] : 0xe6 (230)
  2992. [35] : 0x4d (77)
  2993. [36] : 0x15 (21)
  2994. [37] : 0x3f (63)
  2995. [38] : 0xcf (207)
  2996. [39] : 0x1a (26)
  2997. [40] : 0x76 (118)
  2998. [41] : 0xd2 (210)
  2999. [42] : 0x6f (111)
  3000. [43] : 0x5d (93)
  3001. [44] : 0x3e (62)
  3002. [45] : 0x18 (24)
  3003. [46] : 0x7b (123)
  3004. [47] : 0x93 (147)
  3005. [48] : 0x1d (29)
  3006. [49] : 0xcc (204)
  3007. [50] : 0xd3 (211)
  3008. [51] : 0xec (236)
  3009. [52] : 0xec (236)
  3010. [53] : 0xe0 (224)
  3011. [54] : 0x36 (54)
  3012. [55] : 0xac (172)
  3013. [56] : 0x5a (90)
  3014. [57] : 0x2a (42)
  3015. [58] : 0x69 (105)
  3016. [59] : 0x73 (115)
  3017. [60] : 0x3a (58)
  3018. [61] : 0x75 (117)
  3019. [62] : 0x7e (126)
  3020. [63] : 0x3f (63)
  3021. [64] : 0xa9 (169)
  3022. [65] : 0x25 (37)
  3023. [66] : 0xf5 (245)
  3024. [67] : 0x6a (106)
  3025. [68] : 0x08 (8)
  3026. [69] : 0x78 (120)
  3027. [70] : 0xb4 (180)
  3028. [71] : 0x3c (60)
  3029. [72] : 0x68 (104)
  3030. [73] : 0x93 (147)
  3031. [74] : 0x2b (43)
  3032. [75] : 0x56 (86)
  3033. [76] : 0xd7 (215)
  3034. [77] : 0x0f (15)
  3035. [78] : 0x28 (40)
  3036. [79] : 0xef (239)
  3037. [80] : 0xb3 (179)
  3038. [81] : 0xb8 (184)
  3039. [82] : 0x53 (83)
  3040. [83] : 0xfb (251)
  3041. [84] : 0x81 (129)
  3042. [85] : 0x8e (142)
  3043. [86] : 0xf9 (249)
  3044. [87] : 0xff (255)
  3045. [88] : 0x25 (37)
  3046. [89] : 0xba (186)
  3047. [90] : 0x30 (48)
  3048. [91] : 0xc2 (194)
  3049. [92] : 0x12 (18)
  3050. [93] : 0xb2 (178)
  3051. [94] : 0x77 (119)
  3052. [95] : 0xed (237)
  3053. [96] : 0x76 (118)
  3054. [97] : 0xd7 (215)
  3055. [98] : 0x8e (142)
  3056. [99] : 0xd6 (214)
  3057. [100] : 0x66 (102)
  3058. [101] : 0x95 (149)
  3059. [102] : 0x56 (86)
  3060. [103] : 0x74 (116)
  3061. [104] : 0x07 (7)
  3062. [105] : 0x2f (47)
  3063. [106] : 0x0a (10)
  3064. [107] : 0x0d (13)
  3065. [108] : 0x81 (129)
  3066. [109] : 0x91 (145)
  3067. [110] : 0x02 (2)
  3068. [111] : 0x34 (52)
  3069. [112] : 0x2e (46)
  3070. [113] : 0x5c (92)
  3071. [114] : 0x27 (39)
  3072. [115] : 0x77 (119)
  3073. [116] : 0x5c (92)
  3074. [117] : 0xf7 (247)
  3075. [118] : 0x08 (8)
  3076. [119] : 0x0c (12)
  3077. [120] : 0xd8 (216)
  3078. [121] : 0x8b (139)
  3079. [122] : 0xaa (170)
  3080. [123] : 0x3c (60)
  3081. [124] : 0x47 (71)
  3082. [125] : 0xfd (253)
  3083. [126] : 0xc5 (197)
  3084. [127] : 0xa4 (164)
  3085. [128] : 0xef (239)
  3086. [129] : 0xdb (219)
  3087. [130] : 0xe1 (225)
  3088. [131] : 0x82 (130)
  3089. [132] : 0x1c (28)
  3090. [133] : 0x4c (76)
  3091. [134] : 0xe0 (224)
  3092. [135] : 0x63 (99)
  3093. [136] : 0xe8 (232)
  3094. [137] : 0xcc (204)
  3095. [138] : 0xf8 (248)
  3096. [139] : 0x91 (145)
  3097. [140] : 0x1b (27)
  3098. [141] : 0x25 (37)
  3099. [142] : 0x75 (117)
  3100. [143] : 0x23 (35)
  3101. [144] : 0x75 (117)
  3102. [145] : 0x78 (120)
  3103. [146] : 0x92 (146)
  3104. [147] : 0xba (186)
  3105. [148] : 0x80 (128)
  3106. [149] : 0x61 (97)
  3107. [150] : 0x4e (78)
  3108. [151] : 0x4e (78)
  3109. [152] : 0x63 (99)
  3110. [153] : 0xfc (252)
  3111. [154] : 0x07 (7)
  3112. [155] : 0x1d (29)
  3113. [156] : 0xf1 (241)
  3114. [157] : 0xa0 (160)
  3115. [158] : 0x9f (159)
  3116. [159] : 0x8f (143)
  3117. [160] : 0xb8 (184)
  3118. [161] : 0x5f (95)
  3119. [162] : 0x51 (81)
  3120. [163] : 0x59 (89)
  3121. [164] : 0x53 (83)
  3122. [165] : 0x27 (39)
  3123. [166] : 0x5d (93)
  3124. [167] : 0x3f (63)
  3125. [168] : 0x96 (150)
  3126. [169] : 0x15 (21)
  3127. [170] : 0x31 (49)
  3128. [171] : 0x43 (67)
  3129. [172] : 0x26 (38)
  3130. [173] : 0xd7 (215)
  3131. [174] : 0x71 (113)
  3132. [175] : 0x6a (106)
  3133. [176] : 0x16 (22)
  3134. [177] : 0x8f (143)
  3135. [178] : 0x7b (123)
  3136. [179] : 0x5b (91)
  3137. [180] : 0x80 (128)
  3138. [181] : 0x43 (67)
  3139. [182] : 0x65 (101)
  3140. [183] : 0xad (173)
  3141. [184] : 0x9c (156)
  3142. [185] : 0x1d (29)
  3143. [186] : 0x0c (12)
  3144. [187] : 0x1a (26)
  3145. [188] : 0x82 (130)
  3146. [189] : 0xaf (175)
  3147. [190] : 0xe1 (225)
  3148. [191] : 0xc4 (196)
  3149. [192] : 0x99 (153)
  3150. [193] : 0x07 (7)
  3151. [194] : 0xc4 (196)
  3152. [195] : 0xbf (191)
  3153. [196] : 0x79 (121)
  3154. [197] : 0x81 (129)
  3155. [198] : 0x45 (69)
  3156. [199] : 0xd6 (214)
  3157. [200] : 0xb6 (182)
  3158. [201] : 0x42 (66)
  3159. [202] : 0x4e (78)
  3160. [203] : 0x08 (8)
  3161. [204] : 0x25 (37)
  3162. [205] : 0x8a (138)
  3163. [206] : 0x18 (24)
  3164. [207] : 0x64 (100)
  3165. [208] : 0x00 (0)
  3166. [209] : 0x6c (108)
  3167. [210] : 0xdf (223)
  3168. [211] : 0xbd (189)
  3169. [212] : 0x47 (71)
  3170. [213] : 0x59 (89)
  3171. [214] : 0xf5 (245)
  3172. [215] : 0x6f (111)
  3173. [216] : 0x89 (137)
  3174. [217] : 0x54 (84)
  3175. [218] : 0x99 (153)
  3176. [219] : 0x1f (31)
  3177. [220] : 0x0f (15)
  3178. [221] : 0x17 (23)
  3179. [222] : 0x47 (71)
  3180. [223] : 0xab (171)
  3181. [224] : 0xd8 (216)
  3182. [225] : 0x43 (67)
  3183. [226] : 0xe1 (225)
  3184. [227] : 0x7a (122)
  3185. [228] : 0x5f (95)
  3186. [229] : 0x0a (10)
  3187. [230] : 0x86 (134)
  3188. [231] : 0xad (173)
  3189. [232] : 0xaa (170)
  3190. [233] : 0x1e (30)
  3191. [234] : 0x1b (27)
  3192. [235] : 0x20 (32)
  3193. [236] : 0x50 (80)
  3194. [237] : 0x4c (76)
  3195. [238] : 0x6e (110)
  3196. [239] : 0x35 (53)
  3197. [240] : 0xc5 (197)
  3198. [241] : 0x85 (133)
  3199. [242] : 0xf3 (243)
  3200. [243] : 0xeb (235)
  3201. [244] : 0xd8 (216)
  3202. [245] : 0xca (202)
  3203. [246] : 0x21 (33)
  3204. [247] : 0xb9 (185)
  3205. [248] : 0xca (202)
  3206. [249] : 0xe8 (232)
  3207. [250] : 0x34 (52)
  3208. [251] : 0xe5 (229)
  3209. [252] : 0x34 (52)
  3210. [253] : 0xfe (254)
  3211. [254] : 0x50 (80)
  3212. [255] : 0x10 (16)
  3213. [256] : 0x9c (156)
  3214. [257] : 0x9a (154)
  3215. [258] : 0x67 (103)
  3216. [259] : 0x26 (38)
  3217. [260] : 0x28 (40)
  3218. [261] : 0x26 (38)
  3219. [262] : 0x97 (151)
  3220. [263] : 0x6f (111)
  3221. [264] : 0x65 (101)
  3222. [265] : 0x1d (29)
  3223. [266] : 0xfa (250)
  3224. [267] : 0xa6 (166)
  3225. [268] : 0x92 (146)
  3226. [269] : 0x71 (113)
  3227. [270] : 0xc5 (197)
  3228. [271] : 0x4e (78)
  3229. [272] : 0xc7 (199)
  3230. [273] : 0x24 (36)
  3231. [274] : 0x4d (77)
  3232. [275] : 0xe5 (229)
  3233. [276] : 0x9c (156)
  3234. [277] : 0x30 (48)
  3235. [278] : 0x76 (118)
  3236. [279] : 0xfe (254)
  3237. [280] : 0x98 (152)
  3238. [281] : 0x55 (85)
  3239. [282] : 0xb2 (178)
  3240. [283] : 0xc9 (201)
  3241. [284] : 0x6d (109)
  3242. [285] : 0xae (174)
  3243. [286] : 0x54 (84)
  3244. [287] : 0x34 (52)
  3245. [288] : 0x52 (82)
  3246. [289] : 0x40 (64)
  3247. [290] : 0xf7 (247)
  3248. [291] : 0xf7 (247)
  3249. [292] : 0x86 (134)
  3250. [293] : 0x23 (35)
  3251. [294] : 0x4e (78)
  3252. [295] : 0x63 (99)
  3253. [296] : 0xd2 (210)
  3254. [297] : 0x6a (106)
  3255. [298] : 0x74 (116)
  3256. [299] : 0xa6 (166)
  3257. [300] : 0xdf (223)
  3258. [301] : 0x03 (3)
  3259. [302] : 0xe5 (229)
  3260. [303] : 0xd3 (211)
  3261. [304] : 0x82 (130)
  3262. [305] : 0x48 (72)
  3263. [306] : 0xb3 (179)
  3264. [307] : 0x5e (94)
  3265. [308] : 0x04 (4)
  3266. [309] : 0xce (206)
  3267. [310] : 0x9e (158)
  3268. [311] : 0x0c (12)
  3269. [312] : 0xb1 (177)
  3270. [313] : 0x3e (62)
  3271. [314] : 0xd0 (208)
  3272. [315] : 0x47 (71)
  3273. [316] : 0x3a (58)
  3274. [317] : 0x95 (149)
  3275. [318] : 0x9e (158)
  3276. [319] : 0xb9 (185)
  3277. [320] : 0xe8 (232)
  3278. [321] : 0x8f (143)
  3279. [322] : 0x97 (151)
  3280. [323] : 0xfa (250)
  3281. [324] : 0xdd (221)
  3282. [325] : 0x54 (84)
  3283. [326] : 0x06 (6)
  3284. [327] : 0xae (174)
  3285. [328] : 0x10 (16)
  3286. [329] : 0x9c (156)
  3287. [330] : 0x3b (59)
  3288. [331] : 0x15 (21)
  3289. [332] : 0x0f (15)
  3290. [333] : 0xd3 (211)
  3291. [334] : 0x76 (118)
  3292. [335] : 0x5b (91)
  3293. [336] : 0x0e (14)
  3294. [337] : 0xe2 (226)
  3295. [338] : 0x8b (139)
  3296. [339] : 0x3b (59)
  3297. [340] : 0x91 (145)
  3298. [341] : 0x04 (4)
  3299. [342] : 0x75 (117)
  3300. [343] : 0xe4 (228)
  3301. [344] : 0x74 (116)
  3302. [345] : 0xa2 (162)
  3303. [346] : 0xe6 (230)
  3304. [347] : 0x87 (135)
  3305. [348] : 0x34 (52)
  3306. [349] : 0xf2 (242)
  3307. [350] : 0x45 (69)
  3308. [351] : 0xa2 (162)
  3309. [352] : 0xf1 (241)
  3310. [353] : 0x92 (146)
  3311. [354] : 0xca (202)
  3312. [355] : 0x97 (151)
  3313. [356] : 0x44 (68)
  3314. [357] : 0x31 (49)
  3315. [358] : 0xcf (207)
  3316. [359] : 0x04 (4)
  3317. [360] : 0xc1 (193)
  3318. [361] : 0x51 (81)
  3319. [362] : 0xb2 (178)
  3320. [363] : 0xd9 (217)
  3321. [364] : 0xa5 (165)
  3322. [365] : 0xd0 (208)
  3323. [366] : 0x9c (156)
  3324. [367] : 0x3c (60)
  3325. [368] : 0xae (174)
  3326. [369] : 0xd7 (215)
  3327. [370] : 0x98 (152)
  3328. [371] : 0xd8 (216)
  3329. [372] : 0xe0 (224)
  3330. [373] : 0x8c (140)
  3331. [374] : 0x56 (86)
  3332. [375] : 0x08 (8)
  3333. [376] : 0x92 (146)
  3334. [377] : 0x88 (136)
  3335. [378] : 0x29 (41)
  3336. [379] : 0x60 (96)
  3337. [380] : 0xe4 (228)
  3338. [381] : 0xaf (175)
  3339. [382] : 0x65 (101)
  3340. [383] : 0xc3 (195)
  3341. [384] : 0xe0 (224)
  3342. [385] : 0x27 (39)
  3343. [386] : 0xaf (175)
  3344. [387] : 0xdd (221)
  3345. [388] : 0x34 (52)
  3346. [389] : 0x44 (68)
  3347. [390] : 0x76 (118)
  3348. [391] : 0x84 (132)
  3349. [392] : 0x45 (69)
  3350. [393] : 0x68 (104)
  3351. [394] : 0xd7 (215)
  3352. [395] : 0x29 (41)
  3353. [396] : 0x71 (113)
  3354. [397] : 0x39 (57)
  3355. [398] : 0x6a (106)
  3356. [399] : 0x76 (118)
  3357. [400] : 0x67 (103)
  3358. [401] : 0x3b (59)
  3359. [402] : 0x6c (108)
  3360. [403] : 0x52 (82)
  3361. [404] : 0x0e (14)
  3362. [405] : 0xb0 (176)
  3363. [406] : 0x9f (159)
  3364. [407] : 0x87 (135)
  3365. [408] : 0xdc (220)
  3366. [409] : 0xdd (221)
  3367. [410] : 0xcb (203)
  3368. [411] : 0xd2 (210)
  3369. [412] : 0x84 (132)
  3370. [413] : 0xae (174)
  3371. [414] : 0xa8 (168)
  3372. [415] : 0x19 (25)
  3373. [416] : 0x20 (32)
  3374. [417] : 0xb6 (182)
  3375. [418] : 0x58 (88)
  3376. [419] : 0x7a (122)
  3377. [420] : 0x33 (51)
  3378. [421] : 0x46 (70)
  3379. [422] : 0x7d (125)
  3380. [423] : 0x81 (129)
  3381. [424] : 0xff (255)
  3382. [425] : 0xcf (207)
  3383. [426] : 0x3a (58)
  3384. [427] : 0x59 (89)
  3385. [428] : 0x70 (112)
  3386. [429] : 0xbd (189)
  3387. [430] : 0x8a (138)
  3388. [431] : 0x2c (44)
  3389. [432] : 0xce (206)
  3390. [433] : 0x92 (146)
  3391. [434] : 0x06 (6)
  3392. [435] : 0x86 (134)
  3393. [436] : 0x48 (72)
  3394. [437] : 0x70 (112)
  3395. [438] : 0x0c (12)
  3396. [439] : 0x3c (60)
  3397. [440] : 0x51 (81)
  3398. [441] : 0xa2 (162)
  3399. [442] : 0xc3 (195)
  3400. [443] : 0xd3 (211)
  3401. [444] : 0xfa (250)
  3402. [445] : 0x74 (116)
  3403. [446] : 0x4d (77)
  3404. [447] : 0x82 (130)
  3405. [448] : 0xd2 (210)
  3406. [449] : 0x36 (54)
  3407. [450] : 0x46 (70)
  3408. [451] : 0x25 (37)
  3409. [452] : 0xf9 (249)
  3410. [453] : 0x13 (19)
  3411. [454] : 0x45 (69)
  3412. [455] : 0x6c (108)
  3413. [456] : 0xc5 (197)
  3414. [457] : 0x7f (127)
  3415. [458] : 0x2d (45)
  3416. [459] : 0x55 (85)
  3417. [460] : 0xaf (175)
  3418. [461] : 0x6d (109)
  3419. [462] : 0x8a (138)
  3420. [463] : 0x8e (142)
  3421. [464] : 0x1c (28)
  3422. [465] : 0x1a (26)
  3423. [466] : 0xe0 (224)
  3424. [467] : 0x30 (48)
  3425. [468] : 0x7d (125)
  3426. [469] : 0x48 (72)
  3427. [470] : 0x0c (12)
  3428. [471] : 0x6f (111)
  3429. [472] : 0x77 (119)
  3430. [473] : 0x65 (101)
  3431. [474] : 0xef (239)
  3432. [475] : 0x5d (93)
  3433. [476] : 0xc8 (200)
  3434. [477] : 0x7f (127)
  3435. [478] : 0x2e (46)
  3436. [479] : 0xc4 (196)
  3437. [480] : 0x17 (23)
  3438. [481] : 0x96 (150)
  3439. [482] : 0x9d (157)
  3440. [483] : 0x89 (137)
  3441. [484] : 0x42 (66)
  3442. [485] : 0xd1 (209)
  3443. [486] : 0xf7 (247)
  3444. [487] : 0x54 (84)
  3445. [488] : 0x52 (82)
  3446. [489] : 0x84 (132)
  3447. [490] : 0x58 (88)
  3448. [491] : 0xcd (205)
  3449. [492] : 0x48 (72)
  3450. [493] : 0x04 (4)
  3451. [494] : 0x6a (106)
  3452. [495] : 0x7e (126)
  3453. [496] : 0x4f (79)
  3454. [497] : 0xea (234)
  3455. [498] : 0x75 (117)
  3456. [499] : 0x9e (158)
  3457. [500] : 0x16 (22)
  3458. [501] : 0x79 (121)
  3459. [502] : 0x0b (11)
  3460. [503] : 0xd6 (214)
  3461. [504] : 0x3f (63)
  3462. [505] : 0x04 (4)
  3463. [506] : 0x5d (93)
  3464. [507] : 0xea (234)
  3465. [508] : 0xa0 (160)
  3466. [509] : 0xc1 (193)
  3467. [510] : 0x41 (65)
  3468. [511] : 0xe5 (229)
  3469. [512] : 0x37 (55)
  3470. [513] : 0xb1 (177)
  3471. [514] : 0xe7 (231)
  3472. [515] : 0x33 (51)
  3473. [516] : 0x0b (11)
  3474. [517] : 0x29 (41)
  3475. [518] : 0x99 (153)
  3476. [519] : 0x5f (95)
  3477. [520] : 0x4a (74)
  3478. [521] : 0x16 (22)
  3479. [522] : 0xad (173)
  3480. [523] : 0x5f (95)
  3481. [524] : 0x13 (19)
  3482. [525] : 0x67 (103)
  3483. [526] : 0x3f (63)
  3484. [527] : 0xfb (251)
  3485. [528] : 0x9f (159)
  3486. [529] : 0x00 (0)
  3487. [530] : 0xde (222)
  3488. [531] : 0x68 (104)
  3489. [532] : 0x5d (93)
  3490. [533] : 0xf6 (246)
  3491. [534] : 0x84 (132)
  3492. [535] : 0xdd (221)
  3493. [536] : 0xb9 (185)
  3494. [537] : 0x58 (88)
  3495. [538] : 0x67 (103)
  3496. [539] : 0x71 (113)
  3497. [540] : 0xe5 (229)
  3498. [541] : 0xb9 (185)
  3499. [542] : 0xdf (223)
  3500. [543] : 0x3c (60)
  3501. [544] : 0x2f (47)
  3502. [545] : 0x48 (72)
  3503. [546] : 0xe0 (224)
  3504. [547] : 0x83 (131)
  3505. [548] : 0xcb (203)
  3506. [549] : 0xa2 (162)
  3507. [550] : 0xc7 (199)
  3508. [551] : 0x83 (131)
  3509. [552] : 0xbb (187)
  3510. [553] : 0xbc (188)
  3511. [554] : 0x8d (141)
  3512. [555] : 0x6d (109)
  3513. [556] : 0xca (202)
  3514. [557] : 0x14 (20)
  3515. [558] : 0x3b (59)
  3516. [559] : 0x0e (14)
  3517. [560] : 0xe3 (227)
  3518. [561] : 0xad (173)
  3519. [562] : 0x67 (103)
  3520. [563] : 0x72 (114)
  3521. [564] : 0x8e (142)
  3522. [565] : 0x64 (100)
  3523. [566] : 0x30 (48)
  3524. [567] : 0x2a (42)
  3525. [568] : 0xfb (251)
  3526. [569] : 0x0a (10)
  3527. [570] : 0x08 (8)
  3528. [571] : 0xd8 (216)
  3529. [572] : 0x4d (77)
  3530. [573] : 0x16 (22)
  3531. [574] : 0xa7 (167)
  3532. [575] : 0x3d (61)
  3533. [576] : 0xfc (252)
  3534. [577] : 0x6e (110)
  3535. [578] : 0x6e (110)
  3536. [579] : 0x20 (32)
  3537. [580] : 0xb6 (182)
  3538. [581] : 0xe0 (224)
  3539. [582] : 0xce (206)
  3540. [583] : 0xef (239)
  3541. [584] : 0xd4 (212)
  3542. [585] : 0xed (237)
  3543. [586] : 0xc2 (194)
  3544. [587] : 0x3b (59)
  3545. [588] : 0xa6 (166)
  3546. [589] : 0x49 (73)
  3547. [590] : 0xb4 (180)
  3548. [591] : 0x64 (100)
  3549. [592] : 0xb4 (180)
  3550. [593] : 0xb2 (178)
  3551. [594] : 0xc8 (200)
  3552. [595] : 0x0f (15)
  3553. [596] : 0x4f (79)
  3554. [597] : 0x43 (67)
  3555. [598] : 0xd9 (217)
  3556. [599] : 0x0b (11)
  3557. [600] : 0x0d (13)
  3558. [601] : 0x4e (78)
  3559. [602] : 0x14 (20)
  3560. [603] : 0xb6 (182)
  3561. [604] : 0xfb (251)
  3562. [605] : 0xb8 (184)
  3563. [606] : 0x08 (8)
  3564. [607] : 0xdb (219)
  3565. [608] : 0x62 (98)
  3566. [609] : 0xc9 (201)
  3567. [610] : 0x49 (73)
  3568. [611] : 0x21 (33)
  3569. [612] : 0x47 (71)
  3570. [613] : 0xc6 (198)
  3571. [614] : 0xe1 (225)
  3572. [615] : 0xc7 (199)
  3573. [616] : 0x5d (93)
  3574. [617] : 0xeb (235)
  3575. [618] : 0xe1 (225)
  3576. [619] : 0x27 (39)
  3577. [620] : 0xd0 (208)
  3578. [621] : 0xbb (187)
  3579. [622] : 0x1c (28)
  3580. [623] : 0xdb (219)
  3581. [624] : 0x5b (91)
  3582. [625] : 0x0c (12)
  3583. [626] : 0xcf (207)
  3584. [627] : 0x13 (19)
  3585. [628] : 0xfd (253)
  3586. [629] : 0xea (234)
  3587. [630] : 0x66 (102)
  3588. [631] : 0x7c (124)
  3589. [632] : 0x59 (89)
  3590. [633] : 0x16 (22)
  3591. [634] : 0x5b (91)
  3592. [635] : 0x3e (62)
  3593. [636] : 0xff (255)
  3594. [637] : 0xb9 (185)
  3595. [638] : 0xaa (170)
  3596. [639] : 0xf4 (244)
  3597. [640] : 0xff (255)
  3598. [641] : 0x78 (120)
  3599. [642] : 0x17 (23)
  3600. [643] : 0x55 (85)
  3601. [644] : 0x3a (58)
  3602. [645] : 0x38 (56)
  3603. [646] : 0xce (206)
  3604. [647] : 0xf3 (243)
  3605. [648] : 0xc9 (201)
  3606. [649] : 0x89 (137)
  3607. [650] : 0x95 (149)
  3608. [651] : 0xeb (235)
  3609. [652] : 0xf2 (242)
  3610. [653] : 0xd3 (211)
  3611. [654] : 0x67 (103)
  3612. [655] : 0x0c (12)
  3613. [656] : 0x49 (73)
  3614. [657] : 0x61 (97)
  3615. [658] : 0x00 (0)
  3616. [659] : 0x1d (29)
  3617. [660] : 0xcc (204)
  3618. [661] : 0xc4 (196)
  3619. [662] : 0xb7 (183)
  3620. [663] : 0xd7 (215)
  3621. [664] : 0xf0 (240)
  3622. [665] : 0x91 (145)
  3623. [666] : 0xd1 (209)
  3624. [667] : 0x8a (138)
  3625. [668] : 0xad (173)
  3626. [669] : 0x60 (96)
  3627. [670] : 0xb7 (183)
  3628. [671] : 0x4d (77)
  3629. [672] : 0xea (234)
  3630. [673] : 0xcd (205)
  3631. [674] : 0xc3 (195)
  3632. [675] : 0x5d (93)
  3633. [676] : 0x17 (23)
  3634. [677] : 0x50 (80)
  3635. [678] : 0xa1 (161)
  3636. [679] : 0x8e (142)
  3637. [680] : 0xfb (251)
  3638. [681] : 0x0f (15)
  3639. [682] : 0x7a (122)
  3640. [683] : 0x70 (112)
  3641. [684] : 0xf9 (249)
  3642. [685] : 0x08 (8)
  3643. [686] : 0xe8 (232)
  3644. [687] : 0x26 (38)
  3645. [688] : 0x0b (11)
  3646. [689] : 0x2c (44)
  3647. [690] : 0x6b (107)
  3648. [691] : 0x50 (80)
  3649. [692] : 0x2d (45)
  3650. [693] : 0xe3 (227)
  3651. [694] : 0xc7 (199)
  3652. [695] : 0x1c (28)
  3653. [696] : 0x5c (92)
  3654. [697] : 0x9a (154)
  3655. [698] : 0x56 (86)
  3656. [699] : 0xf9 (249)
  3657. [700] : 0x75 (117)
  3658. [701] : 0xa1 (161)
  3659. [702] : 0x5a (90)
  3660. [703] : 0xb7 (183)
  3661. [704] : 0xa3 (163)
  3662. [705] : 0x4f (79)
  3663. [706] : 0x82 (130)
  3664. [707] : 0x0c (12)
  3665. [708] : 0xda (218)
  3666. [709] : 0xfa (250)
  3667. [710] : 0xd8 (216)
  3668. [711] : 0xe7 (231)
  3669. [712] : 0xbc (188)
  3670. [713] : 0x9d (157)
  3671. [714] : 0xa6 (166)
  3672. [715] : 0x74 (116)
  3673. [716] : 0xaf (175)
  3674. [717] : 0xc1 (193)
  3675. [718] : 0x01 (1)
  3676. [719] : 0x8b (139)
  3677. [720] : 0xa9 (169)
  3678. [721] : 0x7f (127)
  3679. [722] : 0x63 (99)
  3680. [723] : 0x9c (156)
  3681. [724] : 0x74 (116)
  3682. [725] : 0x8a (138)
  3683. [726] : 0xa9 (169)
  3684. [727] : 0x9b (155)
  3685. [728] : 0x84 (132)
  3686. [729] : 0x55 (85)
  3687. [730] : 0x8e (142)
  3688. [731] : 0x05 (5)
  3689. [732] : 0xe2 (226)
  3690. [733] : 0x61 (97)
  3691. [734] : 0x4f (79)
  3692. [735] : 0xc4 (196)
  3693. [736] : 0x83 (131)
  3694. [737] : 0x10 (16)
  3695. [738] : 0xcf (207)
  3696. [739] : 0xdb (219)
  3697. [740] : 0x95 (149)
  3698. [741] : 0xb4 (180)
  3699. [742] : 0x04 (4)
  3700. [743] : 0x94 (148)
  3701. [744] : 0x2a (42)
  3702. [745] : 0xd3 (211)
  3703. [746] : 0xe1 (225)
  3704. [747] : 0x7f (127)
  3705. [748] : 0x42 (66)
  3706. [749] : 0xe4 (228)
  3707. [750] : 0x54 (84)
  3708. [751] : 0xe5 (229)
  3709. [752] : 0x4e (78)
  3710. [753] : 0xd8 (216)
  3711. [754] : 0x37 (55)
  3712. [755] : 0xb4 (180)
  3713. [756] : 0xa6 (166)
  3714. [757] : 0x27 (39)
  3715. [758] : 0x5d (93)
  3716. [759] : 0xcd (205)
  3717. [760] : 0xa0 (160)
  3718. [761] : 0x47 (71)
  3719. [762] : 0xd5 (213)
  3720. [763] : 0xed (237)
  3721. [764] : 0xbd (189)
  3722. [765] : 0xf9 (249)
  3723. [766] : 0x7b (123)
  3724. [767] : 0x0f (15)
  3725. [768] : 0xe5 (229)
  3726. [769] : 0xeb (235)
  3727. [770] : 0x73 (115)
  3728. [771] : 0x8e (142)
  3729. [772] : 0x22 (34)
  3730. [773] : 0x2a (42)
  3731. [774] : 0xce (206)
  3732. [775] : 0x19 (25)
  3733. [776] : 0x1b (27)
  3734. [777] : 0x5c (92)
  3735. [778] : 0x00 (0)
  3736. [779] : 0xed (237)
  3737. [780] : 0x03 (3)
  3738. [781] : 0x87 (135)
  3739. [782] : 0x86 (134)
  3740. [783] : 0x44 (68)
  3741. [784] : 0x40 (64)
  3742. [785] : 0x22 (34)
  3743. [786] : 0x82 (130)
  3744. [787] : 0x7c (124)
  3745. [788] : 0xd3 (211)
  3746. [789] : 0xe2 (226)
  3747. [790] : 0xa1 (161)
  3748. [791] : 0xb0 (176)
  3749. [792] : 0xf0 (240)
  3750. [793] : 0x66 (102)
  3751. [794] : 0x20 (32)
  3752. [795] : 0xe0 (224)
  3753. [796] : 0xcb (203)
  3754. [797] : 0x91 (145)
  3755. [798] : 0x18 (24)
  3756. [799] : 0xd0 (208)
  3757. [800] : 0x4e (78)
  3758. [801] : 0x0d (13)
  3759. [802] : 0x99 (153)
  3760. [803] : 0xb4 (180)
  3761. [804] : 0x5d (93)
  3762. [805] : 0x88 (136)
  3763. [806] : 0x36 (54)
  3764. [807] : 0x57 (87)
  3765. [808] : 0x80 (128)
  3766. [809] : 0x20 (32)
  3767. [810] : 0x96 (150)
  3768. [811] : 0x4c (76)
  3769. [812] : 0xf4 (244)
  3770. [813] : 0xa6 (166)
  3771. [814] : 0x6e (110)
  3772. [815] : 0xe5 (229)
  3773. [816] : 0x5f (95)
  3774. [817] : 0x96 (150)
  3775. [818] : 0x9a (154)
  3776. [819] : 0x25 (37)
  3777. [820] : 0xbd (189)
  3778. [821] : 0xba (186)
  3779. [822] : 0x6c (108)
  3780. [823] : 0x80 (128)
  3781. [824] : 0x18 (24)
  3782. [825] : 0xcc (204)
  3783. [826] : 0x01 (1)
  3784. [827] : 0x9e (158)
  3785. [828] : 0x8f (143)
  3786. [829] : 0xa8 (168)
  3787. [830] : 0x52 (82)
  3788. [831] : 0x95 (149)
  3789. [832] : 0x59 (89)
  3790. [833] : 0x4b (75)
  3791. [834] : 0xf7 (247)
  3792. [835] : 0xe6 (230)
  3793. [836] : 0x19 (25)
  3794. [837] : 0x12 (18)
  3795. [838] : 0x35 (53)
  3796. [839] : 0x1d (29)
  3797. [840] : 0x85 (133)
  3798. [841] : 0x10 (16)
  3799. [842] : 0x37 (55)
  3800. [843] : 0x23 (35)
  3801. [844] : 0xa0 (160)
  3802. [845] : 0xcb (203)
  3803. [846] : 0xc4 (196)
  3804. [847] : 0x95 (149)
  3805. [848] : 0x5e (94)
  3806. [849] : 0x0c (12)
  3807. [850] : 0xd5 (213)
  3808. [851] : 0xfc (252)
  3809. [852] : 0xb3 (179)
  3810. [853] : 0xd8 (216)
  3811. [854] : 0x0a (10)
  3812. [855] : 0x03 (3)
  3813. [856] : 0x7e (126)
  3814. [857] : 0x10 (16)
  3815. [858] : 0x9a (154)
  3816. [859] : 0x8b (139)
  3817. [860] : 0xc4 (196)
  3818. [861] : 0xc2 (194)
  3819. [862] : 0x8d (141)
  3820. [863] : 0xd1 (209)
  3821. [864] : 0x26 (38)
  3822. [865] : 0x8c (140)
  3823. [866] : 0x21 (33)
  3824. [867] : 0x0b (11)
  3825. [868] : 0xb9 (185)
  3826. [869] : 0xc5 (197)
  3827. [870] : 0xb2 (178)
  3828. [871] : 0x0e (14)
  3829. [872] : 0x34 (52)
  3830. [873] : 0xef (239)
  3831. [874] : 0x04 (4)
  3832. [875] : 0xee (238)
  3833. [876] : 0x81 (129)
  3834. [877] : 0xc8 (200)
  3835. [878] : 0x6b (107)
  3836. [879] : 0xd6 (214)
  3837. [880] : 0x6c (108)
  3838. [881] : 0xfa (250)
  3839. [882] : 0xc8 (200)
  3840. [883] : 0x00 (0)
  3841. [884] : 0x71 (113)
  3842. [885] : 0x43 (67)
  3843. [886] : 0x8e (142)
  3844. [887] : 0x54 (84)
  3845. [888] : 0x36 (54)
  3846. [889] : 0xe9 (233)
  3847. [890] : 0x51 (81)
  3848. [891] : 0xbe (190)
  3849. [892] : 0xb0 (176)
  3850. [893] : 0xa6 (166)
  3851. [894] : 0xfc (252)
  3852. [895] : 0xdf (223)
  3853. [896] : 0x43 (67)
  3854. [897] : 0x7a (122)
  3855. [898] : 0x92 (146)
  3856. [899] : 0x4f (79)
  3857. [900] : 0x17 (23)
  3858. [901] : 0x48 (72)
  3859. [902] : 0x73 (115)
  3860. [903] : 0x9f (159)
  3861. [904] : 0x74 (116)
  3862. [905] : 0xb4 (180)
  3863. [906] : 0x56 (86)
  3864. [907] : 0xe0 (224)
  3865. [908] : 0x0b (11)
  3866. [909] : 0xc3 (195)
  3867. [910] : 0x7f (127)
  3868. [911] : 0xcc (204)
  3869. [912] : 0xee (238)
  3870. [913] : 0x0f (15)
  3871. [914] : 0xa2 (162)
  3872. [915] : 0x4b (75)
  3873. [916] : 0xb9 (185)
  3874. [917] : 0x4f (79)
  3875. [918] : 0xbd (189)
  3876. [919] : 0xf6 (246)
  3877. [920] : 0x52 (82)
  3878. [921] : 0x22 (34)
  3879. [922] : 0xb3 (179)
  3880. [923] : 0xee (238)
  3881. [924] : 0x7c (124)
  3882. [925] : 0xd5 (213)
  3883. [926] : 0xf3 (243)
  3884. [927] : 0x16 (22)
  3885. [928] : 0x67 (103)
  3886. [929] : 0xce (206)
  3887. [930] : 0xa3 (163)
  3888. [931] : 0xdd (221)
  3889. [932] : 0xfd (253)
  3890. [933] : 0x06 (6)
  3891. [934] : 0xbb (187)
  3892. [935] : 0x01 (1)
  3893. [936] : 0xd2 (210)
  3894. [937] : 0x6d (109)
  3895. [938] : 0x5d (93)
  3896. [939] : 0xcd (205)
  3897. [940] : 0xd1 (209)
  3898. [941] : 0x92 (146)
  3899. [942] : 0x58 (88)
  3900. [943] : 0x1c (28)
  3901. [944] : 0xf7 (247)
  3902. [945] : 0xe7 (231)
  3903. [946] : 0x04 (4)
  3904. [947] : 0x95 (149)
  3905. [948] : 0x97 (151)
  3906. [949] : 0x2e (46)
  3907. [950] : 0xda (218)
  3908. [951] : 0x8c (140)
  3909. [952] : 0x23 (35)
  3910. [953] : 0x33 (51)
  3911. [954] : 0x76 (118)
  3912. [955] : 0xdd (221)
  3913. [956] : 0x48 (72)
  3914. [957] : 0x95 (149)
  3915. [958] : 0xe4 (228)
  3916. [959] : 0xbe (190)
  3917. [960] : 0xfe (254)
  3918. [961] : 0x09 (9)
  3919. [962] : 0xcd (205)
  3920. [963] : 0x6b (107)
  3921. [964] : 0x07 (7)
  3922. [965] : 0xc1 (193)
  3923. [966] : 0x35 (53)
  3924. [967] : 0x95 (149)
  3925. [968] : 0xf2 (242)
  3926. [969] : 0x82 (130)
  3927. [970] : 0xcb (203)
  3928. [971] : 0x89 (137)
  3929. [972] : 0xe5 (229)
  3930. [973] : 0x97 (151)
  3931. [974] : 0x1c (28)
  3932. [975] : 0xdb (219)
  3933. [976] : 0x54 (84)
  3934. [977] : 0x85 (133)
  3935. [978] : 0xe2 (226)
  3936. [979] : 0x10 (16)
  3937. [980] : 0xd9 (217)
  3938. [981] : 0x1e (30)
  3939. [982] : 0x09 (9)
  3940. [983] : 0xcb (203)
  3941. [984] : 0x33 (51)
  3942. [985] : 0x03 (3)
  3943. [986] : 0x4a (74)
  3944. [987] : 0x9e (158)
  3945. [988] : 0xcd (205)
  3946. [989] : 0xb7 (183)
  3947. [990] : 0x26 (38)
  3948. [991] : 0x6e (110)
  3949. [992] : 0xc4 (196)
  3950. [993] : 0xb7 (183)
  3951. [994] : 0x8e (142)
  3952. [995] : 0x0c (12)
  3953. [996] : 0x4e (78)
  3954. [997] : 0x4c (76)
  3955. [998] : 0x4d (77)
  3956. [999] : 0xd3 (211)
  3957. [1000] : 0x3a (58)
  3958. [1001] : 0x9b (155)
  3959. [1002] : 0x3e (62)
  3960. [1003] : 0xdf (223)
  3961. [1004] : 0xfe (254)
  3962. [1005] : 0x1b (27)
  3963. [1006] : 0x32 (50)
  3964. [1007] : 0x7c (124)
  3965. [1008] : 0x64 (100)
  3966. [1009] : 0x8f (143)
  3967. [1010] : 0x58 (88)
  3968. [1011] : 0x8d (141)
  3969. [1012] : 0x52 (82)
  3970. [1013] : 0x95 (149)
  3971. [1014] : 0x57 (87)
  3972. [1015] : 0x7f (127)
  3973. [1016] : 0xd0 (208)
  3974. [1017] : 0xcf (207)
  3975. [1018] : 0x9f (159)
  3976. [1019] : 0xa4 (164)
  3977. [1020] : 0x42 (66)
  3978. [1021] : 0x32 (50)
  3979. [1022] : 0x7d (125)
  3980. [1023] : 0x51 (81)
  3981. [1024] : 0x06 (6)
  3982. [1025] : 0xf7 (247)
  3983. [1026] : 0xe7 (231)
  3984. [1027] : 0x2c (44)
  3985. [1028] : 0x9d (157)
  3986. [1029] : 0x7a (122)
  3987. [1030] : 0xd8 (216)
  3988. [1031] : 0x8e (142)
  3989. [1032] : 0x7e (126)
  3990. [1033] : 0xed (237)
  3991. [1034] : 0x6e (110)
  3992. [1035] : 0xc3 (195)
  3993. [1036] : 0x12 (18)
  3994. [1037] : 0x37 (55)
  3995. [1038] : 0x7c (124)
  3996. [1039] : 0x64 (100)
  3997. [1040] : 0x58 (88)
  3998. [1041] : 0x6c (108)
  3999. [1042] : 0xb4 (180)
  4000. [1043] : 0xc2 (194)
  4001. [1044] : 0xb1 (177)
  4002. [1045] : 0x9d (157)
  4003. [1046] : 0x1d (29)
  4004. [1047] : 0xa6 (166)
  4005. [1048] : 0xce (206)
  4006. [1049] : 0x1d (29)
  4007. [1050] : 0x27 (39)
  4008. [1051] : 0x80 (128)
  4009. [1052] : 0x43 (67)
  4010. [1053] : 0x8c (140)
  4011. [1054] : 0x00 (0)
  4012. [1055] : 0xec (236)
  4013. [1056] : 0x28 (40)
  4014. [1057] : 0x14 (20)
  4015. [1058] : 0xc3 (195)
  4016. [1059] : 0x35 (53)
  4017. [1060] : 0xbf (191)
  4018. [1061] : 0x1d (29)
  4019. [1062] : 0x72 (114)
  4020. [1063] : 0x2c (44)
  4021. [1064] : 0x63 (99)
  4022. [1065] : 0x13 (19)
  4023. [1066] : 0x1f (31)
  4024. [1067] : 0x9d (157)
  4025. [1068] : 0x90 (144)
  4026. [1069] : 0x68 (104)
  4027. [1070] : 0xf4 (244)
  4028. [1071] : 0x25 (37)
  4029. [1072] : 0xb8 (184)
  4030. [1073] : 0xa6 (166)
  4031. [1074] : 0x8a (138)
  4032. [1075] : 0xa2 (162)
  4033. [1076] : 0xfc (252)
  4034. [1077] : 0xdb (219)
  4035. [1078] : 0xbe (190)
  4036. [1079] : 0xc7 (199)
  4037. [1080] : 0x7a (122)
  4038. [1081] : 0x05 (5)
  4039. [1082] : 0x5b (91)
  4040. [1083] : 0xf8 (248)
  4041. [1084] : 0xe5 (229)
  4042. [1085] : 0xc1 (193)
  4043. [1086] : 0x7e (126)
  4044. [1087] : 0x98 (152)
  4045. access_mask : 0x00010000 (65536)
  4046. 0: LSA_TRUSTED_QUERY_DOMAIN_NAME
  4047. 0: LSA_TRUSTED_QUERY_CONTROLLERS
  4048. 0: LSA_TRUSTED_SET_CONTROLLERS
  4049. 0: LSA_TRUSTED_QUERY_POSIX
  4050. 0: LSA_TRUSTED_SET_POSIX
  4051. 0: LSA_TRUSTED_SET_AUTH
  4052. 0: LSA_TRUSTED_QUERY_AUTH
  4053. rpc request data:
  4054. [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 53 54 5F 86 ........ ....ST_.
  4055. [0010] A7 2A 00 00 28 00 2A 00 00 00 02 00 16 00 18 00 .*..(.*. ........
  4056. [0020] 04 00 02 00 08 00 02 00 03 00 00 00 02 00 00 00 ........ ........
  4057. [0030] 08 00 00 00 15 00 00 00 00 00 00 00 14 00 00 00 ........ ........
  4058. [0040] 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 2E 00 w.i.n.d. o.w.s...
  4059. [0050] 72 00 64 00 75 00 2E 00 6C 00 75 00 6C 00 75 00 r.d.u... l.u.l.u.
  4060. [0060] 2E 00 63 00 6F 00 6D 00 0C 00 00 00 00 00 00 00 ..c.o.m. ........
  4061. [0070] 0B 00 00 00 57 00 49 00 4E 00 44 00 4F 00 57 00 ....W.I. N.D.O.W.
  4062. [0080] 53 00 2D 00 52 00 44 00 55 00 00 00 04 00 00 00 S.-.R.D. U.......
  4063. [0090] 01 04 00 00 00 00 00 05 15 00 00 00 C8 17 D8 EA ........ ........
  4064. [00A0] D4 A0 9D 87 E1 4A C5 C1 40 04 00 00 0C 00 02 00 .....J.. @.......
  4065. [00B0] 40 04 00 00 56 22 37 FB F0 B7 88 2B C7 46 35 E7 @...V"7. ...+.F5.
  4066. [00C0] 2E D9 D9 4B DE 10 77 D5 38 87 7D E1 E7 20 1E BB ...K..w. 8.}.. ..
  4067. [00D0] C4 C0 75 DF 26 13 E6 4D 15 3F CF 1A 76 D2 6F 5D ..u.&..M .?..v.o]
  4068. [00E0] 3E 18 7B 93 1D CC D3 EC EC E0 36 AC 5A 2A 69 73 >.{..... ..6.Z*is
  4069. [00F0] 3A 75 7E 3F A9 25 F5 6A 08 78 B4 3C 68 93 2B 56 :u~?.%.j .x.<h.+V
  4070. [0100] D7 0F 28 EF B3 B8 53 FB 81 8E F9 FF 25 BA 30 C2 ..(...S. ....%.0.
  4071. [0110] 12 B2 77 ED 76 D7 8E D6 66 95 56 74 07 2F 0A 0D ..w.v... f.Vt./..
  4072. [0120] 81 91 02 34 2E 5C 27 77 5C F7 08 0C D8 8B AA 3C ...4.\'w \......<
  4073. [0130] 47 FD C5 A4 EF DB E1 82 1C 4C E0 63 E8 CC F8 91 G....... .L.c....
  4074. [0140] 1B 25 75 23 75 78 92 BA 80 61 4E 4E 63 FC 07 1D .%u#ux.. .aNNc...
  4075. [0150] F1 A0 9F 8F B8 5F 51 59 53 27 5D 3F 96 15 31 43 ....._QY S']?..1C
  4076. [0160] 26 D7 71 6A 16 8F 7B 5B 80 43 65 AD 9C 1D 0C 1A &.qj..{[ .Ce.....
  4077. [0170] 82 AF E1 C4 99 07 C4 BF 79 81 45 D6 B6 42 4E 08 ........ y.E..BN.
  4078. [0180] 25 8A 18 64 00 6C DF BD 47 59 F5 6F 89 54 99 1F %..d.l.. GY.o.T..
  4079. [0190] 0F 17 47 AB D8 43 E1 7A 5F 0A 86 AD AA 1E 1B 20 ..G..C.z _......
  4080. [01A0] 50 4C 6E 35 C5 85 F3 EB D8 CA 21 B9 CA E8 34 E5 PLn5.... ..!...4.
  4081. [01B0] 34 FE 50 10 9C 9A 67 26 28 26 97 6F 65 1D FA A6 4.P...g& (&.oe...
  4082. [01C0] 92 71 C5 4E C7 24 4D E5 9C 30 76 FE 98 55 B2 C9 .q.N.$M. .0v..U..
  4083. [01D0] 6D AE 54 34 52 40 F7 F7 86 23 4E 63 D2 6A 74 A6 m.T4R@.. .#Nc.jt.
  4084. [01E0] DF 03 E5 D3 82 48 B3 5E 04 CE 9E 0C B1 3E D0 47 .....H.^ .....>.G
  4085. [01F0] 3A 95 9E B9 E8 8F 97 FA DD 54 06 AE 10 9C 3B 15 :....... .T....;.
  4086. [0200] 0F D3 76 5B 0E E2 8B 3B 91 04 75 E4 74 A2 E6 87 ..v[...; ..u.t...
  4087. [0210] 34 F2 45 A2 F1 92 CA 97 44 31 CF 04 C1 51 B2 D9 4.E..... D1...Q..
  4088. [0220] A5 D0 9C 3C AE D7 98 D8 E0 8C 56 08 92 88 29 60 ...<.... ..V...)`
  4089. [0230] E4 AF 65 C3 E0 27 AF DD 34 44 76 84 45 68 D7 29 ..e..'.. 4Dv.Eh.)
  4090. [0240] 71 39 6A 76 67 3B 6C 52 0E B0 9F 87 DC DD CB D2 q9jvg;lR ........
  4091. [0250] 84 AE A8 19 20 B6 58 7A 33 46 7D 81 FF CF 3A 59 .... .Xz 3F}...:Y
  4092. [0260] 70 BD 8A 2C CE 92 06 86 48 70 0C 3C 51 A2 C3 D3 p..,.... Hp.<Q...
  4093. [0270] FA 74 4D 82 D2 36 46 25 F9 13 45 6C C5 7F 2D 55 .tM..6F% ..El..-U
  4094. [0280] AF 6D 8A 8E 1C 1A E0 30 7D 48 0C 6F 77 65 EF 5D .m.....0 }H.owe.]
  4095. [0290] C8 7F 2E C4 17 96 9D 89 42 D1 F7 54 52 84 58 CD ........ B..TR.X.
  4096. [02A0] 48 04 6A 7E 4F EA 75 9E 16 79 0B D6 3F 04 5D EA H.j~O.u. .y..?.].
  4097. [02B0] A0 C1 41 E5 37 B1 E7 33 0B 29 99 5F 4A 16 AD 5F ..A.7..3 .)._J.._
  4098. [02C0] 13 67 3F FB 9F 00 DE 68 5D F6 84 DD B9 58 67 71 .g?....h ]....Xgq
  4099. [02D0] E5 B9 DF 3C 2F 48 E0 83 CB A2 C7 83 BB BC 8D 6D ...</H.. .......m
  4100. [02E0] CA 14 3B 0E E3 AD 67 72 8E 64 30 2A FB 0A 08 D8 ..;...gr .d0*....
  4101. [02F0] 4D 16 A7 3D FC 6E 6E 20 B6 E0 CE EF D4 ED C2 3B M..=.nn .......;
  4102. [0300] A6 49 B4 64 B4 B2 C8 0F 4F 43 D9 0B 0D 4E 14 B6 .I.d.... OC...N..
  4103. [0310] FB B8 08 DB 62 C9 49 21 47 C6 E1 C7 5D EB E1 27 ....b.I! G...]..'
  4104. [0320] D0 BB 1C DB 5B 0C CF 13 FD EA 66 7C 59 16 5B 3E ....[... ..f|Y.[>
  4105. [0330] FF B9 AA F4 FF 78 17 55 3A 38 CE F3 C9 89 95 EB .....x.U :8......
  4106. [0340] F2 D3 67 0C 49 61 00 1D CC C4 B7 D7 F0 91 D1 8A ..g.Ia.. ........
  4107. [0350] AD 60 B7 4D EA CD C3 5D 17 50 A1 8E FB 0F 7A 70 .`.M...] .P....zp
  4108. [0360] F9 08 E8 26 0B 2C 6B 50 2D E3 C7 1C 5C 9A 56 F9 ...&.,kP -...\.V.
  4109. [0370] 75 A1 5A B7 A3 4F 82 0C DA FA D8 E7 BC 9D A6 74 u.Z..O.. .......t
  4110. [0380] AF C1 01 8B A9 7F 63 9C 74 8A A9 9B 84 55 8E 05 ......c. t....U..
  4111. [0390] E2 61 4F C4 83 10 CF DB 95 B4 04 94 2A D3 E1 7F .aO..... ....*...
  4112. [03A0] 42 E4 54 E5 4E D8 37 B4 A6 27 5D CD A0 47 D5 ED B.T.N.7. .']..G..
  4113. [03B0] BD F9 7B 0F E5 EB 73 8E 22 2A CE 19 1B 5C 00 ED ..{...s. "*...\..
  4114. [03C0] 03 87 86 44 40 22 82 7C D3 E2 A1 B0 F0 66 20 E0 ...D@".| .....f .
  4115. [03D0] CB 91 18 D0 4E 0D 99 B4 5D 88 36 57 80 20 96 4C ....N... ].6W. .L
  4116. [03E0] F4 A6 6E E5 5F 96 9A 25 BD BA 6C 80 18 CC 01 9E ..n._..% ..l.....
  4117. [03F0] 8F A8 52 95 59 4B F7 E6 19 12 35 1D 85 10 37 23 ..R.YK.. ..5...7#
  4118. [0400] A0 CB C4 95 5E 0C D5 FC B3 D8 0A 03 7E 10 9A 8B ....^... ....~...
  4119. [0410] C4 C2 8D D1 26 8C 21 0B B9 C5 B2 0E 34 EF 04 EE ....&.!. ....4...
  4120. [0420] 81 C8 6B D6 6C FA C8 00 71 43 8E 54 36 E9 51 BE ..k.l... qC.T6.Q.
  4121. [0430] B0 A6 FC DF 43 7A 92 4F 17 48 73 9F 74 B4 56 E0 ....Cz.O .Hs.t.V.
  4122. [0440] 0B C3 7F CC EE 0F A2 4B B9 4F BD F6 52 22 B3 EE .......K .O..R"..
  4123. [0450] 7C D5 F3 16 67 CE A3 DD FD 06 BB 01 D2 6D 5D CD |...g... .....m].
  4124. [0460] D1 92 58 1C F7 E7 04 95 97 2E DA 8C 23 33 76 DD ..X..... ....#3v.
  4125. [0470] 48 95 E4 BE FE 09 CD 6B 07 C1 35 95 F2 82 CB 89 H......k ..5.....
  4126. [0480] E5 97 1C DB 54 85 E2 10 D9 1E 09 CB 33 03 4A 9E ....T... ....3.J.
  4127. [0490] CD B7 26 6E C4 B7 8E 0C 4E 4C 4D D3 3A 9B 3E DF ..&n.... NLM.:.>.
  4128. [04A0] FE 1B 32 7C 64 8F 58 8D 52 95 57 7F D0 CF 9F A4 ..2|d.X. R.W.....
  4129. [04B0] 42 32 7D 51 06 F7 E7 2C 9D 7A D8 8E 7E ED 6E C3 B2}Q..., .z..~.n.
  4130. [04C0] 12 37 7C 64 58 6C B4 C2 B1 9D 1D A6 CE 1D 27 80 .7|dXl.. ......'.
  4131. [04D0] 43 8C 00 EC 28 14 C3 35 BF 1D 72 2C 63 13 1F 9D C...(..5 ..r,c...
  4132. [04E0] 90 68 F4 25 B8 A6 8A A2 FC DB BE C7 7A 05 5B F8 .h.%.... ....z.[.
  4133. [04F0] E5 C1 7E 98 00 00 01 00 ..~.....
  4134. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4135. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec23f7e0
  4136. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4137. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4138. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=1296, this_data=1296, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  4139. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3d3af0
  4140. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  4141. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4142. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  4143. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec39eea0
  4144. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec39eea0
  4145. s4_tevent: Destroying timer event 0x7fb6ec3d3af0 "tevent_req_timedout"
  4146. s4_tevent: Destroying timer event 0x7fb6ec23f7e0 "dcerpc_timeout_handler"
  4147. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec27ea80
  4148. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec27ea80
  4149. lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2
  4150. out: struct lsa_CreateTrustedDomainEx2
  4151. trustdom_handle : *
  4152. trustdom_handle: struct policy_handle
  4153. handle_type : 0x00000000 (0)
  4154. uuid : 0000000f-0000-0000-5354-6086a72a0000
  4155. result : NT_STATUS_OK
  4156. rpc reply data:
  4157. [0000] 00 00 00 00 0F 00 00 00 00 00 00 00 53 54 60 86 ........ ....ST`.
  4158. [0010] A7 2A 00 00 00 00 00 00 .*......
  4159. lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName
  4160. in: struct lsa_OpenTrustedDomainByName
  4161. handle : *
  4162. handle: struct policy_handle
  4163. handle_type : 0x00000000 (0)
  4164. uuid : 0000000d-0000-0000-5354-5f86a72a0000
  4165. name: struct lsa_String
  4166. length : 0x0028 (40)
  4167. size : 0x0028 (40)
  4168. string : *
  4169. string : 'windows.rdu.lulu.com'
  4170. access_mask : 0x02000000 (33554432)
  4171. 0: LSA_TRUSTED_QUERY_DOMAIN_NAME
  4172. 0: LSA_TRUSTED_QUERY_CONTROLLERS
  4173. 0: LSA_TRUSTED_SET_CONTROLLERS
  4174. 0: LSA_TRUSTED_QUERY_POSIX
  4175. 0: LSA_TRUSTED_SET_POSIX
  4176. 0: LSA_TRUSTED_SET_AUTH
  4177. 0: LSA_TRUSTED_QUERY_AUTH
  4178. rpc request data:
  4179. [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 53 54 5F 86 ........ ....ST_.
  4180. [0010] A7 2A 00 00 28 00 28 00 00 00 02 00 14 00 00 00 .*..(.(. ........
  4181. [0020] 00 00 00 00 14 00 00 00 77 00 69 00 6E 00 64 00 ........ w.i.n.d.
  4182. [0030] 6F 00 77 00 73 00 2E 00 72 00 64 00 75 00 2E 00 o.w.s... r.d.u...
  4183. [0040] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  4184. [0050] 00 00 00 02 ....
  4185. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4186. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3054a0
  4187. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4188. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4189. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=108, this_data=108, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  4190. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ed3d2880
  4191. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  4192. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4193. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  4194. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec09ac00
  4195. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec09ac00
  4196. s4_tevent: Destroying timer event 0x7fb6ed3d2880 "tevent_req_timedout"
  4197. s4_tevent: Destroying timer event 0x7fb6ec3054a0 "dcerpc_timeout_handler"
  4198. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec1255a0
  4199. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec1255a0
  4200. lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName
  4201. out: struct lsa_OpenTrustedDomainByName
  4202. trustdom_handle : *
  4203. trustdom_handle: struct policy_handle
  4204. handle_type : 0x00000000 (0)
  4205. uuid : 00000010-0000-0000-5354-6086a72a0000
  4206. result : NT_STATUS_OK
  4207. rpc reply data:
  4208. [0000] 00 00 00 00 10 00 00 00 00 00 00 00 53 54 60 86 ........ ....ST`.
  4209. [0010] A7 2A 00 00 00 00 00 00 .*......
  4210. lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain
  4211. in: struct lsa_SetInformationTrustedDomain
  4212. trustdom_handle : *
  4213. trustdom_handle: struct policy_handle
  4214. handle_type : 0x00000000 (0)
  4215. uuid : 00000010-0000-0000-5354-6086a72a0000
  4216. level : LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES (13)
  4217. info : *
  4218. info : union lsa_TrustedDomainInfo(case 13)
  4219. enc_types: struct lsa_TrustDomainInfoSupportedEncTypes
  4220. enc_types : 0x0000001c (28)
  4221. 0: KERB_ENCTYPE_DES_CBC_CRC
  4222. 0: KERB_ENCTYPE_DES_CBC_MD5
  4223. 1: KERB_ENCTYPE_RC4_HMAC_MD5
  4224. 1: KERB_ENCTYPE_AES128_CTS_HMAC_SHA1_96
  4225. 1: KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96
  4226. rpc request data:
  4227. [0000] 00 00 00 00 10 00 00 00 00 00 00 00 53 54 60 86 ........ ....ST`.
  4228. [0010] A7 2A 00 00 0D 00 0D 00 1C 00 00 00 .*...... ....
  4229. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4230. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3c0990
  4231. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4232. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4233. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=52, this_data=52, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  4234. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec1255a0
  4235. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  4236. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ed3de700
  4237. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec178e70
  4238. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec2d9a60
  4239. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec2d9a60
  4240. s4_tevent: Destroying timer event 0x7fb6ec1255a0 "tevent_req_timedout"
  4241. s4_tevent: Destroying timer event 0x7fb6ec3c0990 "dcerpc_timeout_handler"
  4242. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3bd580
  4243. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3bd580
  4244. lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain
  4245. out: struct lsa_SetInformationTrustedDomain
  4246. result : NT_STATUS_OK
  4247. rpc reply data:
  4248. [0000] 00 00 00 00 ....
  4249. Using binding ncacn_np:addc1.windows.rdu.lulu.com[,]
  4250. s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7fb6ec3cf860
  4251. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec0a9ae0
  4252. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec1255a0
  4253. s4_tevent: Running timer event 0x7fb6ec0a9ae0 "composite_trigger"
  4254. s4_tevent: Destroying timer event 0x7fb6ec1255a0 "composite_trigger"
  4255. Mapped to DCERPC endpoint \pipe\netlogon
  4256. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4257. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4258. s4_tevent: Ending timer event 0x7fb6ec0a9ae0 "composite_trigger"
  4259. s4_tevent: Added timed event "connect_multi_timer": 0x7fb6ec397730
  4260. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3bb6e0
  4261. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3bb6e0
  4262. s4_tevent: Destroying timer event 0x7fb6ec397730 "connect_multi_timer"
  4263. Socket options:
  4264. SO_KEEPALIVE = 0
  4265. SO_REUSEADDR = 0
  4266. SO_BROADCAST = 0
  4267. TCP_NODELAY = 1
  4268. TCP_KEEPCNT = 9
  4269. TCP_KEEPIDLE = 7200
  4270. TCP_KEEPINTVL = 75
  4271. IPTOS_LOWDELAY = 0
  4272. IPTOS_THROUGHPUT = 0
  4273. SO_REUSEPORT = 0
  4274. SO_SNDBUF = 23080
  4275. SO_RCVBUF = 87380
  4276. SO_SNDLOWAT = 1
  4277. SO_RCVLOWAT = 1
  4278. SO_SNDTIMEO = 0
  4279. SO_RCVTIMEO = 0
  4280. TCP_QUICKACK = 1
  4281. TCP_DEFER_ACCEPT = 0
  4282. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3c0990
  4283. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4284. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4285. s4_tevent: Destroying timer event 0x7fb6ec3c0990 "tevent_req_timedout"
  4286. Starting GENSEC mechanism spnego
  4287. Starting GENSEC submechanism ntlmssp
  4288. negotiate: struct NEGOTIATE_MESSAGE
  4289. Signature : 'NTLMSSP'
  4290. MessageType : NtLmNegotiate (1)
  4291. NegotiateFlags : 0x60088215 (1611170325)
  4292. 1: NTLMSSP_NEGOTIATE_UNICODE
  4293. 0: NTLMSSP_NEGOTIATE_OEM
  4294. 1: NTLMSSP_REQUEST_TARGET
  4295. 1: NTLMSSP_NEGOTIATE_SIGN
  4296. 0: NTLMSSP_NEGOTIATE_SEAL
  4297. 0: NTLMSSP_NEGOTIATE_DATAGRAM
  4298. 0: NTLMSSP_NEGOTIATE_LM_KEY
  4299. 0: NTLMSSP_NEGOTIATE_NETWARE
  4300. 1: NTLMSSP_NEGOTIATE_NTLM
  4301. 0: NTLMSSP_NEGOTIATE_NT_ONLY
  4302. 0: NTLMSSP_ANONYMOUS
  4303. 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
  4304. 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
  4305. 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
  4306. 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4307. 0: NTLMSSP_TARGET_TYPE_DOMAIN
  4308. 0: NTLMSSP_TARGET_TYPE_SERVER
  4309. 0: NTLMSSP_TARGET_TYPE_SHARE
  4310. 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
  4311. 0: NTLMSSP_NEGOTIATE_IDENTIFY
  4312. 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
  4313. 0: NTLMSSP_NEGOTIATE_TARGET_INFO
  4314. 0: NTLMSSP_NEGOTIATE_VERSION
  4315. 1: NTLMSSP_NEGOTIATE_128
  4316. 1: NTLMSSP_NEGOTIATE_KEY_EXCH
  4317. 0: NTLMSSP_NEGOTIATE_56
  4318. DomainNameLen : 0x0003 (3)
  4319. DomainNameMaxLen : 0x0003 (3)
  4320. DomainName : *
  4321. DomainName : 'IPA'
  4322. WorkstationLen : 0x0003 (3)
  4323. WorkstationMaxLen : 0x0003 (3)
  4324. Workstation : *
  4325. Workstation : 'IPA'
  4326. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3d33b0
  4327. smb_signing_sign_pdu: sent SMB signature of
  4328. [0000] 42 53 52 53 50 59 4C 20 BSRSPYL
  4329. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4330. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4331. s4_tevent: Destroying timer event 0x7fb6ec3d33b0 "tevent_req_timedout"
  4332. Got challenge flags:
  4333. Got NTLMSSP neg_flags=0x62898215
  4334. NTLMSSP_NEGOTIATE_UNICODE
  4335. NTLMSSP_REQUEST_TARGET
  4336. NTLMSSP_NEGOTIATE_SIGN
  4337. NTLMSSP_NEGOTIATE_NTLM
  4338. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4339. NTLMSSP_NEGOTIATE_NTLM2
  4340. NTLMSSP_NEGOTIATE_TARGET_INFO
  4341. NTLMSSP_NEGOTIATE_VERSION
  4342. NTLMSSP_NEGOTIATE_128
  4343. NTLMSSP_NEGOTIATE_KEY_EXCH
  4344. NTLMSSP: Set final flags:
  4345. Got NTLMSSP neg_flags=0x60088215
  4346. NTLMSSP_NEGOTIATE_UNICODE
  4347. NTLMSSP_REQUEST_TARGET
  4348. NTLMSSP_NEGOTIATE_SIGN
  4349. NTLMSSP_NEGOTIATE_NTLM
  4350. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4351. NTLMSSP_NEGOTIATE_NTLM2
  4352. NTLMSSP_NEGOTIATE_128
  4353. NTLMSSP_NEGOTIATE_KEY_EXCH
  4354. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f9aa0
  4355. smb_signing_sign_pdu: sent SMB signature of
  4356. [0000] 42 53 52 53 50 59 4C 20 BSRSPYL
  4357. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4358. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4359. s4_tevent: Destroying timer event 0x7fb6ec3f9aa0 "tevent_req_timedout"
  4360. smb_signing_activate: user_session_key
  4361. [0000] AF 7E EF C8 2C 0C DB 7D 50 FE 2F 73 83 16 A0 DF .~..,..} P./s....
  4362. smb_signing_activate: NULL response_data
  4363. smb_signing_md5: sequence number 1
  4364. smb_signing_check_pdu: seq 1: got good SMB signature of
  4365. [0000] 77 5E 7E 61 15 F7 D3 0E w^~a....
  4366. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3d3ad0
  4367. smb_signing_md5: sequence number 2
  4368. smb_signing_sign_pdu: sent SMB signature of
  4369. [0000] BA 42 B1 AB 7F 65 40 8D .B...e@.
  4370. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4371. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4372. smb_signing_md5: sequence number 3
  4373. smb_signing_check_pdu: seq 3: got good SMB signature of
  4374. [0000] 13 7A 15 FE C4 BD FD 49 .z.....I
  4375. s4_tevent: Destroying timer event 0x7fb6ec3d3ad0 "tevent_req_timedout"
  4376. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3d3ab0
  4377. smb_signing_md5: sequence number 4
  4378. smb_signing_sign_pdu: sent SMB signature of
  4379. [0000] 2F F9 B6 D0 6F 1F B0 79 /...o..y
  4380. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4381. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4382. smb_signing_md5: sequence number 5
  4383. smb_signing_check_pdu: seq 5: got good SMB signature of
  4384. [0000] 78 07 AE 5A D6 43 05 A8 x..Z.C..
  4385. s4_tevent: Destroying timer event 0x7fb6ec3d3ab0 "tevent_req_timedout"
  4386. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  4387. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f9820
  4388. smb_signing_md5: sequence number 6
  4389. smb_signing_sign_pdu: sent SMB signature of
  4390. [0000] 27 DE 42 17 C8 CA 7F 78 '.B....x
  4391. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4392. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3d3b10
  4393. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4394. smb_signing_md5: sequence number 7
  4395. smb_signing_check_pdu: seq 7: got good SMB signature of
  4396. [0000] 1E E9 B9 4F 89 21 38 04 ...O.!8.
  4397. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec0a07e0
  4398. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec0a07e0
  4399. s4_tevent: Destroying timer event 0x7fb6ec3f9820 "tevent_req_timedout"
  4400. s4_tevent: Destroying timer event 0x7fb6ec3d3b10 "dcerpc_timeout_handler"
  4401. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3054a0
  4402. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3054a0
  4403. s4_tevent: Destroying timer event 0x7fb6ec3cf860 "dcerpc_connect_timeout_handler"
  4404. netr_LogonControl2Ex: struct netr_LogonControl2Ex
  4405. in: struct netr_LogonControl2Ex
  4406. logon_server : NULL
  4407. function_code : NETLOGON_CONTROL_TC_VERIFY (10)
  4408. level : 0x00000002 (2)
  4409. data : *
  4410. data : union netr_CONTROL_DATA_INFORMATION(case 10)
  4411. domain : *
  4412. domain : 'rdu.lulu.com'
  4413. rpc request data:
  4414. [0000] 00 00 00 00 0A 00 00 00 02 00 00 00 0A 00 00 00 ........ ........
  4415. [0010] 00 00 02 00 0D 00 00 00 00 00 00 00 0D 00 00 00 ........ ........
  4416. [0020] 72 00 64 00 75 00 2E 00 6C 00 75 00 6C 00 75 00 r.d.u... l.u.l.u.
  4417. [0030] 2E 00 63 00 6F 00 6D 00 00 00 ..c.o.m. ..
  4418. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec16fc50
  4419. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3dc740
  4420. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec16fc50
  4421. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec16fc50
  4422. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=82, this_data=82, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  4423. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f9c90
  4424. smb_signing_md5: sequence number 8
  4425. smb_signing_sign_pdu: sent SMB signature of
  4426. [0000] 93 9D 34 6D 03 A5 68 B6 ..4m..h.
  4427. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4428. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec16fc50
  4429. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4430. smb_signing_md5: sequence number 9
  4431. smb_signing_check_pdu: seq 9: got good SMB signature of
  4432. [0000] 1A 9A 7D 81 88 77 56 21 ..}..wV!
  4433. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec39c9e0
  4434. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec39c9e0
  4435. s4_tevent: Destroying timer event 0x7fb6ec3f9c90 "tevent_req_timedout"
  4436. s4_tevent: Destroying timer event 0x7fb6ec3dc740 "dcerpc_timeout_handler"
  4437. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec23f7e0
  4438. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec23f7e0
  4439. netr_LogonControl2Ex: struct netr_LogonControl2Ex
  4440. out: struct netr_LogonControl2Ex
  4441. query : *
  4442. query : union netr_CONTROL_QUERY_INFORMATION(case 2)
  4443. info2 : *
  4444. info2: struct netr_NETLOGON_INFO_2
  4445. flags : 0x00000080 (128)
  4446. 0: NETLOGON_REPLICATION_NEEDED
  4447. 0: NETLOGON_REPLICATION_IN_PROGRESS
  4448. 0: NETLOGON_FULL_SYNC_REPLICATION
  4449. 0: NETLOGON_REDO_NEEDED
  4450. 0: NETLOGON_HAS_IP
  4451. 0: NETLOGON_HAS_TIMESERV
  4452. 0: NETLOGON_DNS_UPDATE_FAILURE
  4453. 1: NETLOGON_VERIFY_STATUS_RETURNED
  4454. pdc_connection_status : WERR_NO_LOGON_SERVERS
  4455. trusted_dc_name : *
  4456. trusted_dc_name : ''
  4457. tc_connection_status : WERR_NO_LOGON_SERVERS
  4458. result : WERR_OK
  4459. rpc reply data:
  4460. [0000] 02 00 00 00 00 00 02 00 80 00 00 00 1F 05 00 00 ........ ........
  4461. [0010] 04 00 02 00 1F 05 00 00 01 00 00 00 00 00 00 00 ........ ........
  4462. [0020] 01 00 00 00 00 00 00 00 00 00 00 00 ........ ....
  4463. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3d36c0
  4464. smb_signing_md5: sequence number 10
  4465. smb_signing_sign_pdu: sent SMB signature of
  4466. [0000] FD 24 73 49 C6 C4 38 2C .$sI..8,
  4467. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3dea30
  4468. s4_tevent: Destroying timer event 0x7fb6ec3d36c0 "tevent_req_timedout"
  4469. s4_tevent: Cancel immediate event 0x7fb6ec3dea30 "tevent_queue_immediate_trigger"
  4470. lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty
  4471. params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty"
  4472. Processing section "[global]"
  4473. INFO: Current debug levels:
  4474. all: 100
  4475. tdb: 100
  4476. printdrivers: 100
  4477. lanman: 100
  4478. smb: 100
  4479. rpc_parse: 100
  4480. rpc_srv: 100
  4481. rpc_cli: 100
  4482. passdb: 100
  4483. sam: 100
  4484. auth: 100
  4485. winbind: 100
  4486. vfs: 100
  4487. idmap: 100
  4488. quota: 100
  4489. acls: 100
  4490. locking: 100
  4491. msdfs: 100
  4492. dmapi: 100
  4493. registry: 100
  4494. scavenger: 100
  4495. dns: 100
  4496. ldb: 100
  4497. pm_process() returned Yes
  4498. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4499. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4500. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4501. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4502. finddcs: searching for a DC by DNS domain windows.rdu.lulu.com
  4503. finddcs: looking for SRV records for _ldap._tcp.windows.rdu.lulu.com
  4504. ads_dns_lookup_srv: 1 records returned in the answer section.
  4505. ads_dns_parse_rr_srv: Parsed addc1.windows.rdu.lulu.com [0, 100, 389]
  4506. Addrs = 10.4.15.43@389/addc1
  4507. finddcs: DNS SRV response 0 at '10.4.15.43'
  4508. finddcs: performing CLDAP query on 10.4.15.43
  4509. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec2d9a60
  4510. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec2364e0
  4511. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec2364e0
  4512. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3b6f40
  4513. s4_tevent: Destroying timer event 0x7fb6ec3b6f40 "tevent_req_timedout"
  4514. s4_tevent: Destroying timer event 0x7fb6ec2d9a60 "tevent_req_timedout"
  4515. &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX
  4516. command : LOGON_SAM_LOGON_RESPONSE_EX (23)
  4517. sbz : 0x0000 (0)
  4518. server_type : 0x000073fd (29693)
  4519. 1: NBT_SERVER_PDC
  4520. 1: NBT_SERVER_GC
  4521. 1: NBT_SERVER_LDAP
  4522. 1: NBT_SERVER_DS
  4523. 1: NBT_SERVER_KDC
  4524. 1: NBT_SERVER_TIMESERV
  4525. 1: NBT_SERVER_CLOSEST
  4526. 1: NBT_SERVER_WRITABLE
  4527. 1: NBT_SERVER_GOOD_TIMESERV
  4528. 0: NBT_SERVER_NDNC
  4529. 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6
  4530. 1: NBT_SERVER_FULL_SECRET_DOMAIN_6
  4531. 1: NBT_SERVER_ADS_WEB_SERVICE
  4532. 0: NBT_SERVER_HAS_DNS_NAME
  4533. 0: NBT_SERVER_IS_DEFAULT_NC
  4534. 0: NBT_SERVER_FOREST_ROOT
  4535. domain_uuid : de890a7f-c4a2-4556-8e53-a44ba907278c
  4536. forest : 'windows.rdu.lulu.com'
  4537. dns_domain : 'windows.rdu.lulu.com'
  4538. pdc_dns_name : 'addc1.windows.rdu.lulu.com'
  4539. domain_name : 'WINDOWS-RDU'
  4540. pdc_name : 'ADDC1'
  4541. user_name : ''
  4542. server_site : 'Default-First-Site-Name'
  4543. client_site : 'Default-First-Site-Name'
  4544. sockaddr_size : 0x00 (0)
  4545. sockaddr: struct nbt_sockaddr
  4546. sockaddr_family : 0x00000000 (0)
  4547. pdc_ip : (null)
  4548. remaining : DATA_BLOB length=0
  4549. next_closest_site : NULL
  4550. nt_version : 0x00000005 (5)
  4551. 1: NETLOGON_NT_VERSION_1
  4552. 0: NETLOGON_NT_VERSION_5
  4553. 1: NETLOGON_NT_VERSION_5EX
  4554. 0: NETLOGON_NT_VERSION_5EX_WITH_IP
  4555. 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE
  4556. 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL
  4557. 0: NETLOGON_NT_VERSION_PDC
  4558. 0: NETLOGON_NT_VERSION_IP
  4559. 0: NETLOGON_NT_VERSION_LOCAL
  4560. 0: NETLOGON_NT_VERSION_GC
  4561. lmnt_token : 0xffff (65535)
  4562. lm20_token : 0xffff (65535)
  4563. finddcs: Found matching DC 10.4.15.43 with server_type=0x000073fd
  4564. Using binding ncacn_np:addc1.windows.rdu.lulu.com[,]
  4565. s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7fb6ec39eea0
  4566. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec3e6010
  4567. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec26bb50
  4568. s4_tevent: Running timer event 0x7fb6ec3e6010 "composite_trigger"
  4569. s4_tevent: Destroying timer event 0x7fb6ec26bb50 "composite_trigger"
  4570. Mapped to DCERPC endpoint \pipe\lsarpc
  4571. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4572. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4573. s4_tevent: Ending timer event 0x7fb6ec3e6010 "composite_trigger"
  4574. s4_tevent: Added timed event "connect_multi_timer": 0x7fb6ec060920
  4575. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec0d9a00
  4576. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec0d9a00
  4577. s4_tevent: Destroying timer event 0x7fb6ec060920 "connect_multi_timer"
  4578. Socket options:
  4579. SO_KEEPALIVE = 0
  4580. SO_REUSEADDR = 0
  4581. SO_BROADCAST = 0
  4582. TCP_NODELAY = 1
  4583. TCP_KEEPCNT = 9
  4584. TCP_KEEPIDLE = 7200
  4585. TCP_KEEPINTVL = 75
  4586. IPTOS_LOWDELAY = 0
  4587. IPTOS_THROUGHPUT = 0
  4588. SO_REUSEPORT = 0
  4589. SO_SNDBUF = 23080
  4590. SO_RCVBUF = 87380
  4591. SO_SNDLOWAT = 1
  4592. SO_RCVLOWAT = 1
  4593. SO_SNDTIMEO = 0
  4594. SO_RCVTIMEO = 0
  4595. TCP_QUICKACK = 1
  4596. TCP_DEFER_ACCEPT = 0
  4597. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3e7550
  4598. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4599. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4600. s4_tevent: Destroying timer event 0x7fb6ec3e7550 "tevent_req_timedout"
  4601. Starting GENSEC mechanism spnego
  4602. Starting GENSEC submechanism ntlmssp
  4603. negotiate: struct NEGOTIATE_MESSAGE
  4604. Signature : 'NTLMSSP'
  4605. MessageType : NtLmNegotiate (1)
  4606. NegotiateFlags : 0x60088215 (1611170325)
  4607. 1: NTLMSSP_NEGOTIATE_UNICODE
  4608. 0: NTLMSSP_NEGOTIATE_OEM
  4609. 1: NTLMSSP_REQUEST_TARGET
  4610. 1: NTLMSSP_NEGOTIATE_SIGN
  4611. 0: NTLMSSP_NEGOTIATE_SEAL
  4612. 0: NTLMSSP_NEGOTIATE_DATAGRAM
  4613. 0: NTLMSSP_NEGOTIATE_LM_KEY
  4614. 0: NTLMSSP_NEGOTIATE_NETWARE
  4615. 1: NTLMSSP_NEGOTIATE_NTLM
  4616. 0: NTLMSSP_NEGOTIATE_NT_ONLY
  4617. 0: NTLMSSP_ANONYMOUS
  4618. 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
  4619. 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
  4620. 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
  4621. 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4622. 0: NTLMSSP_TARGET_TYPE_DOMAIN
  4623. 0: NTLMSSP_TARGET_TYPE_SERVER
  4624. 0: NTLMSSP_TARGET_TYPE_SHARE
  4625. 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
  4626. 0: NTLMSSP_NEGOTIATE_IDENTIFY
  4627. 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
  4628. 0: NTLMSSP_NEGOTIATE_TARGET_INFO
  4629. 0: NTLMSSP_NEGOTIATE_VERSION
  4630. 1: NTLMSSP_NEGOTIATE_128
  4631. 1: NTLMSSP_NEGOTIATE_KEY_EXCH
  4632. 0: NTLMSSP_NEGOTIATE_56
  4633. DomainNameLen : 0x0003 (3)
  4634. DomainNameMaxLen : 0x0003 (3)
  4635. DomainName : *
  4636. DomainName : 'IPA'
  4637. WorkstationLen : 0x0003 (3)
  4638. WorkstationMaxLen : 0x0003 (3)
  4639. Workstation : *
  4640. Workstation : 'IPA'
  4641. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f0f80
  4642. smb_signing_sign_pdu: sent SMB signature of
  4643. [0000] 42 53 52 53 50 59 4C 20 BSRSPYL
  4644. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4645. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4646. s4_tevent: Destroying timer event 0x7fb6ec3f0f80 "tevent_req_timedout"
  4647. Got challenge flags:
  4648. Got NTLMSSP neg_flags=0x62898215
  4649. NTLMSSP_NEGOTIATE_UNICODE
  4650. NTLMSSP_REQUEST_TARGET
  4651. NTLMSSP_NEGOTIATE_SIGN
  4652. NTLMSSP_NEGOTIATE_NTLM
  4653. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4654. NTLMSSP_NEGOTIATE_NTLM2
  4655. NTLMSSP_NEGOTIATE_TARGET_INFO
  4656. NTLMSSP_NEGOTIATE_VERSION
  4657. NTLMSSP_NEGOTIATE_128
  4658. NTLMSSP_NEGOTIATE_KEY_EXCH
  4659. NTLMSSP: Set final flags:
  4660. Got NTLMSSP neg_flags=0x60088215
  4661. NTLMSSP_NEGOTIATE_UNICODE
  4662. NTLMSSP_REQUEST_TARGET
  4663. NTLMSSP_NEGOTIATE_SIGN
  4664. NTLMSSP_NEGOTIATE_NTLM
  4665. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4666. NTLMSSP_NEGOTIATE_NTLM2
  4667. NTLMSSP_NEGOTIATE_128
  4668. NTLMSSP_NEGOTIATE_KEY_EXCH
  4669. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f1e60
  4670. smb_signing_sign_pdu: sent SMB signature of
  4671. [0000] 42 53 52 53 50 59 4C 20 BSRSPYL
  4672. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4673. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4674. s4_tevent: Destroying timer event 0x7fb6ec3f1e60 "tevent_req_timedout"
  4675. smb_signing_activate: user_session_key
  4676. [0000] 3C E5 55 19 9A 6E CD 7E DE 52 28 8B B0 54 3A AA <.U..n.~ .R(..T:.
  4677. smb_signing_activate: NULL response_data
  4678. smb_signing_md5: sequence number 1
  4679. smb_signing_check_pdu: seq 1: got good SMB signature of
  4680. [0000] 32 BA AE 9C C9 7F B7 7B 2......{
  4681. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3e7450
  4682. smb_signing_md5: sequence number 2
  4683. smb_signing_sign_pdu: sent SMB signature of
  4684. [0000] 77 94 B1 E3 20 2B 20 0E w... + .
  4685. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4686. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4687. smb_signing_md5: sequence number 3
  4688. smb_signing_check_pdu: seq 3: got good SMB signature of
  4689. [0000] 83 36 F5 D2 6E 98 21 A9 .6..n.!.
  4690. s4_tevent: Destroying timer event 0x7fb6ec3e7450 "tevent_req_timedout"
  4691. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f0e60
  4692. smb_signing_md5: sequence number 4
  4693. smb_signing_sign_pdu: sent SMB signature of
  4694. [0000] C2 23 1E 4D D7 97 A2 65 .#.M...e
  4695. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4696. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4697. smb_signing_md5: sequence number 5
  4698. smb_signing_check_pdu: seq 5: got good SMB signature of
  4699. [0000] 2F 63 1C 78 45 93 0A 59 /c.xE..Y
  4700. s4_tevent: Destroying timer event 0x7fb6ec3f0e60 "tevent_req_timedout"
  4701. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  4702. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f1c90
  4703. smb_signing_md5: sequence number 6
  4704. smb_signing_sign_pdu: sent SMB signature of
  4705. [0000] FC 34 26 FE BA 5E 30 92 .4&..^0.
  4706. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4707. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3f2240
  4708. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4709. smb_signing_md5: sequence number 7
  4710. smb_signing_check_pdu: seq 7: got good SMB signature of
  4711. [0000] CA 99 B1 E4 00 2E 41 30 ......A0
  4712. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3f0d20
  4713. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3f0d20
  4714. s4_tevent: Destroying timer event 0x7fb6ec3f1c90 "tevent_req_timedout"
  4715. s4_tevent: Destroying timer event 0x7fb6ec3f2240 "dcerpc_timeout_handler"
  4716. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3f1010
  4717. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3f1010
  4718. s4_tevent: Destroying timer event 0x7fb6ec39eea0 "dcerpc_connect_timeout_handler"
  4719. Using binding ncacn_np:addc1.windows.rdu.lulu.com[,]
  4720. s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7fb6ec3e7e70
  4721. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec3e6010
  4722. s4_tevent: Added timed event "composite_trigger": 0x7fb6ec3f0570
  4723. s4_tevent: Running timer event 0x7fb6ec3e6010 "composite_trigger"
  4724. s4_tevent: Destroying timer event 0x7fb6ec3f0570 "composite_trigger"
  4725. Mapped to DCERPC endpoint \pipe\netlogon
  4726. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4727. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  4728. s4_tevent: Ending timer event 0x7fb6ec3e6010 "composite_trigger"
  4729. s4_tevent: Added timed event "connect_multi_timer": 0x7fb6ec3f2340
  4730. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3f2110
  4731. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3f2110
  4732. s4_tevent: Destroying timer event 0x7fb6ec3f2340 "connect_multi_timer"
  4733. Socket options:
  4734. SO_KEEPALIVE = 0
  4735. SO_REUSEADDR = 0
  4736. SO_BROADCAST = 0
  4737. TCP_NODELAY = 1
  4738. TCP_KEEPCNT = 9
  4739. TCP_KEEPIDLE = 7200
  4740. TCP_KEEPINTVL = 75
  4741. IPTOS_LOWDELAY = 0
  4742. IPTOS_THROUGHPUT = 0
  4743. SO_REUSEPORT = 0
  4744. SO_SNDBUF = 23080
  4745. SO_RCVBUF = 87380
  4746. SO_SNDLOWAT = 1
  4747. SO_RCVLOWAT = 1
  4748. SO_SNDTIMEO = 0
  4749. SO_RCVTIMEO = 0
  4750. TCP_QUICKACK = 1
  4751. TCP_DEFER_ACCEPT = 0
  4752. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f33c0
  4753. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4754. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4755. s4_tevent: Destroying timer event 0x7fb6ec3f33c0 "tevent_req_timedout"
  4756. Starting GENSEC mechanism spnego
  4757. Starting GENSEC submechanism ntlmssp
  4758. negotiate: struct NEGOTIATE_MESSAGE
  4759. Signature : 'NTLMSSP'
  4760. MessageType : NtLmNegotiate (1)
  4761. NegotiateFlags : 0x60088215 (1611170325)
  4762. 1: NTLMSSP_NEGOTIATE_UNICODE
  4763. 0: NTLMSSP_NEGOTIATE_OEM
  4764. 1: NTLMSSP_REQUEST_TARGET
  4765. 1: NTLMSSP_NEGOTIATE_SIGN
  4766. 0: NTLMSSP_NEGOTIATE_SEAL
  4767. 0: NTLMSSP_NEGOTIATE_DATAGRAM
  4768. 0: NTLMSSP_NEGOTIATE_LM_KEY
  4769. 0: NTLMSSP_NEGOTIATE_NETWARE
  4770. 1: NTLMSSP_NEGOTIATE_NTLM
  4771. 0: NTLMSSP_NEGOTIATE_NT_ONLY
  4772. 0: NTLMSSP_ANONYMOUS
  4773. 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
  4774. 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
  4775. 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
  4776. 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4777. 0: NTLMSSP_TARGET_TYPE_DOMAIN
  4778. 0: NTLMSSP_TARGET_TYPE_SERVER
  4779. 0: NTLMSSP_TARGET_TYPE_SHARE
  4780. 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
  4781. 0: NTLMSSP_NEGOTIATE_IDENTIFY
  4782. 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
  4783. 0: NTLMSSP_NEGOTIATE_TARGET_INFO
  4784. 0: NTLMSSP_NEGOTIATE_VERSION
  4785. 1: NTLMSSP_NEGOTIATE_128
  4786. 1: NTLMSSP_NEGOTIATE_KEY_EXCH
  4787. 0: NTLMSSP_NEGOTIATE_56
  4788. DomainNameLen : 0x0003 (3)
  4789. DomainNameMaxLen : 0x0003 (3)
  4790. DomainName : *
  4791. DomainName : 'IPA'
  4792. WorkstationLen : 0x0003 (3)
  4793. WorkstationMaxLen : 0x0003 (3)
  4794. Workstation : *
  4795. Workstation : 'IPA'
  4796. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec408680
  4797. smb_signing_sign_pdu: sent SMB signature of
  4798. [0000] 42 53 52 53 50 59 4C 20 BSRSPYL
  4799. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4800. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4801. s4_tevent: Destroying timer event 0x7fb6ec408680 "tevent_req_timedout"
  4802. Got challenge flags:
  4803. Got NTLMSSP neg_flags=0x62898215
  4804. NTLMSSP_NEGOTIATE_UNICODE
  4805. NTLMSSP_REQUEST_TARGET
  4806. NTLMSSP_NEGOTIATE_SIGN
  4807. NTLMSSP_NEGOTIATE_NTLM
  4808. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4809. NTLMSSP_NEGOTIATE_NTLM2
  4810. NTLMSSP_NEGOTIATE_TARGET_INFO
  4811. NTLMSSP_NEGOTIATE_VERSION
  4812. NTLMSSP_NEGOTIATE_128
  4813. NTLMSSP_NEGOTIATE_KEY_EXCH
  4814. NTLMSSP: Set final flags:
  4815. Got NTLMSSP neg_flags=0x60088215
  4816. NTLMSSP_NEGOTIATE_UNICODE
  4817. NTLMSSP_REQUEST_TARGET
  4818. NTLMSSP_NEGOTIATE_SIGN
  4819. NTLMSSP_NEGOTIATE_NTLM
  4820. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4821. NTLMSSP_NEGOTIATE_NTLM2
  4822. NTLMSSP_NEGOTIATE_128
  4823. NTLMSSP_NEGOTIATE_KEY_EXCH
  4824. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f2580
  4825. smb_signing_sign_pdu: sent SMB signature of
  4826. [0000] 42 53 52 53 50 59 4C 20 BSRSPYL
  4827. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4828. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4829. s4_tevent: Destroying timer event 0x7fb6ec3f2580 "tevent_req_timedout"
  4830. smb_signing_activate: user_session_key
  4831. [0000] 2A EC 37 EF B4 96 D6 71 94 2E B7 D6 C3 86 9F DB *.7....q ........
  4832. smb_signing_activate: NULL response_data
  4833. smb_signing_md5: sequence number 1
  4834. smb_signing_check_pdu: seq 1: got good SMB signature of
  4835. [0000] F9 D5 CC 42 44 3A 3B 14 ...BD:;.
  4836. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f2400
  4837. smb_signing_md5: sequence number 2
  4838. smb_signing_sign_pdu: sent SMB signature of
  4839. [0000] 15 32 AF 8E 37 6B A0 AE .2..7k..
  4840. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4841. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4842. smb_signing_md5: sequence number 3
  4843. smb_signing_check_pdu: seq 3: got good SMB signature of
  4844. [0000] 9B FF 95 CE 27 EE EB 28 ....'..(
  4845. s4_tevent: Destroying timer event 0x7fb6ec3f2400 "tevent_req_timedout"
  4846. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f2010
  4847. smb_signing_md5: sequence number 4
  4848. smb_signing_sign_pdu: sent SMB signature of
  4849. [0000] 42 C8 68 91 E3 72 A7 45 B.h..r.E
  4850. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4851. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4852. smb_signing_md5: sequence number 5
  4853. smb_signing_check_pdu: seq 5: got good SMB signature of
  4854. [0000] DD 4B DA 7C 0C 12 66 13 .K.|..f.
  4855. s4_tevent: Destroying timer event 0x7fb6ec3f2010 "tevent_req_timedout"
  4856. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  4857. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec409160
  4858. smb_signing_md5: sequence number 6
  4859. smb_signing_sign_pdu: sent SMB signature of
  4860. [0000] 68 3B 1F A6 8D B8 A3 80 h;......
  4861. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4862. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec409520
  4863. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4864. smb_signing_md5: sequence number 7
  4865. smb_signing_check_pdu: seq 7: got good SMB signature of
  4866. [0000] 1E E2 66 47 2F F0 D1 71 ..fG/..q
  4867. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec408d70
  4868. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec408d70
  4869. s4_tevent: Destroying timer event 0x7fb6ec409160 "tevent_req_timedout"
  4870. s4_tevent: Destroying timer event 0x7fb6ec409520 "dcerpc_timeout_handler"
  4871. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec3f16e0
  4872. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec3f16e0
  4873. s4_tevent: Destroying timer event 0x7fb6ec3e7e70 "dcerpc_connect_timeout_handler"
  4874. netr_DsrEnumerateDomainTrusts: struct netr_DsrEnumerateDomainTrusts
  4875. in: struct netr_DsrEnumerateDomainTrusts
  4876. server_name : *
  4877. server_name : 'ncacn_np:addc1.windows.rdu.lulu.com[,]'
  4878. trust_flags : 0x00000001 (1)
  4879. 1: NETR_TRUST_FLAG_IN_FOREST
  4880. 0: NETR_TRUST_FLAG_OUTBOUND
  4881. 0: NETR_TRUST_FLAG_TREEROOT
  4882. 0: NETR_TRUST_FLAG_PRIMARY
  4883. 0: NETR_TRUST_FLAG_NATIVE
  4884. 0: NETR_TRUST_FLAG_INBOUND
  4885. 0: NETR_TRUST_FLAG_MIT_KRB5
  4886. 0: NETR_TRUST_FLAG_AES
  4887. rpc request data:
  4888. [0000] 00 00 02 00 27 00 00 00 00 00 00 00 27 00 00 00 ....'... ....'...
  4889. [0010] 6E 00 63 00 61 00 63 00 6E 00 5F 00 6E 00 70 00 n.c.a.c. n._.n.p.
  4890. [0020] 3A 00 61 00 64 00 64 00 63 00 31 00 2E 00 77 00 :.a.d.d. c.1...w.
  4891. [0030] 69 00 6E 00 64 00 6F 00 77 00 73 00 2E 00 72 00 i.n.d.o. w.s...r.
  4892. [0040] 64 00 75 00 2E 00 6C 00 75 00 6C 00 75 00 2E 00 d.u...l. u.l.u...
  4893. [0050] 63 00 6F 00 6D 00 5B 00 2C 00 5D 00 00 00 00 00 c.o.m.[. ,.].....
  4894. [0060] 01 00 00 00 ....
  4895. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec3e7d40
  4896. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6ec3f1600
  4897. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec3e7d40
  4898. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6ec3e7d40
  4899. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=124, this_data=124, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  4900. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec409300
  4901. smb_signing_md5: sequence number 8
  4902. smb_signing_sign_pdu: sent SMB signature of
  4903. [0000] ED CE 99 9A 3A 67 7B 84 ....:g{.
  4904. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4905. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6ec3e7d40
  4906. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4907. smb_signing_md5: sequence number 9
  4908. smb_signing_check_pdu: seq 9: got good SMB signature of
  4909. [0000] 36 93 07 F6 B8 A3 0C CB 6.......
  4910. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec408e90
  4911. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec408e90
  4912. s4_tevent: Destroying timer event 0x7fb6ec409300 "tevent_req_timedout"
  4913. s4_tevent: Destroying timer event 0x7fb6ec3f1600 "dcerpc_timeout_handler"
  4914. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6ec028090
  4915. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6ec028090
  4916. netr_DsrEnumerateDomainTrusts: struct netr_DsrEnumerateDomainTrusts
  4917. out: struct netr_DsrEnumerateDomainTrusts
  4918. trusts : *
  4919. trusts: struct netr_DomainTrustList
  4920. count : 0x00000001 (1)
  4921. array : *
  4922. array: ARRAY(1)
  4923. array: struct netr_DomainTrust
  4924. netbios_name : *
  4925. netbios_name : 'WINDOWS-RDU'
  4926. dns_name : *
  4927. dns_name : 'windows.rdu.lulu.com'
  4928. trust_flags : 0x0000001d (29)
  4929. 1: NETR_TRUST_FLAG_IN_FOREST
  4930. 0: NETR_TRUST_FLAG_OUTBOUND
  4931. 1: NETR_TRUST_FLAG_TREEROOT
  4932. 1: NETR_TRUST_FLAG_PRIMARY
  4933. 1: NETR_TRUST_FLAG_NATIVE
  4934. 0: NETR_TRUST_FLAG_INBOUND
  4935. 0: NETR_TRUST_FLAG_MIT_KRB5
  4936. 0: NETR_TRUST_FLAG_AES
  4937. parent_index : 0x00000000 (0)
  4938. trust_type : NETR_TRUST_TYPE_UPLEVEL (2)
  4939. trust_attributes : 0x00000000 (0)
  4940. 0: NETR_TRUST_ATTRIBUTE_NON_TRANSITIVE
  4941. 0: NETR_TRUST_ATTRIBUTE_UPLEVEL_ONLY
  4942. 0: NETR_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
  4943. 0: NETR_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
  4944. 0: NETR_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
  4945. 0: NETR_TRUST_ATTRIBUTE_WITHIN_FOREST
  4946. 0: NETR_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
  4947. sid : *
  4948. sid : S-1-5-21-3940030408-2275254484-3250932449
  4949. guid : de890a7f-c4a2-4556-8e53-a44ba907278c
  4950. result : WERR_OK
  4951. rpc reply data:
  4952. [0000] 01 00 00 00 00 00 02 00 01 00 00 00 04 00 02 00 ........ ........
  4953. [0010] 08 00 02 00 1D 00 00 00 00 00 00 00 02 00 00 00 ........ ........
  4954. [0020] 00 00 00 00 0C 00 02 00 7F 0A 89 DE A2 C4 56 45 ........ ......VE
  4955. [0030] 8E 53 A4 4B A9 07 27 8C 0C 00 00 00 00 00 00 00 .S.K..'. ........
  4956. [0040] 0C 00 00 00 57 00 49 00 4E 00 44 00 4F 00 57 00 ....W.I. N.D.O.W.
  4957. [0050] 53 00 2D 00 52 00 44 00 55 00 00 00 15 00 00 00 S.-.R.D. U.......
  4958. [0060] 00 00 00 00 15 00 00 00 77 00 69 00 6E 00 64 00 ........ w.i.n.d.
  4959. [0070] 6F 00 77 00 73 00 2E 00 72 00 64 00 75 00 2E 00 o.w.s... r.d.u...
  4960. [0080] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  4961. [0090] 00 00 00 00 04 00 00 00 01 04 00 00 00 00 00 05 ........ ........
  4962. [00A0] 15 00 00 00 C8 17 D8 EA D4 A0 9D 87 E1 4A C5 C1 ........ .....J..
  4963. [00B0] 00 00 00 00 ....
  4964. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f3730
  4965. smb_signing_md5: sequence number 10
  4966. smb_signing_sign_pdu: sent SMB signature of
  4967. [0000] 78 37 CF A3 5D BF AA 1A x7..]...
  4968. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec3f2d20
  4969. s4_tevent: Destroying timer event 0x7fb6ec3f3730 "tevent_req_timedout"
  4970. s4_tevent: Cancel immediate event 0x7fb6ec3f2d20 "tevent_queue_immediate_trigger"
  4971. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6ec3f1430
  4972. smb_signing_md5: sequence number 8
  4973. smb_signing_sign_pdu: sent SMB signature of
  4974. [0000] 6C 1D 63 15 33 CF 46 7A l.c.3.Fz
  4975. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6ec0d49f0
  4976. s4_tevent: Destroying timer event 0x7fb6ec3f1430 "tevent_req_timedout"
  4977. s4_tevent: Cancel immediate event 0x7fb6ec0d49f0 "tevent_queue_immediate_trigger"
  4978. [Fri Oct 31 08:53:52.749730 2014] [:error] [pid 4759] ipa: INFO: admin@RDU.LULU.COM: trust_add(u'WINDOWS.RDU.LULU.COM', trust_type=u'ad', realm_admin=u'Administrator', realm_passwd=u'********', all=False, raw=False, version=u'2.65'): SUCCESS
  4979. lpcfg_load: refreshing parameters from /usr/share/ipa/smb.conf.empty
  4980. params.c:pm_process() - Processing configuration file "/usr/share/ipa/smb.conf.empty"
  4981. Processing section "[global]"
  4982. INFO: Current debug levels:
  4983. all: 100
  4984. tdb: 100
  4985. printdrivers: 100
  4986. lanman: 100
  4987. smb: 100
  4988. rpc_parse: 100
  4989. rpc_srv: 100
  4990. rpc_cli: 100
  4991. passdb: 100
  4992. sam: 100
  4993. auth: 100
  4994. winbind: 100
  4995. vfs: 100
  4996. idmap: 100
  4997. quota: 100
  4998. acls: 100
  4999. locking: 100
  5000. msdfs: 100
  5001. dmapi: 100
  5002. registry: 100
  5003. scavenger: 100
  5004. dns: 100
  5005. ldb: 100
  5006. pm_process() returned Yes
  5007. Using binding ncacn_np:ipa1.rdu.lulu.com[,]
  5008. s4_tevent: Added timed event "dcerpc_connect_timeout_handler": 0x7fb6f426e3e0
  5009. s4_tevent: Added timed event "composite_trigger": 0x7fb6f4046b80
  5010. s4_tevent: Added timed event "composite_trigger": 0x7fb6f43454e0
  5011. s4_tevent: Running timer event 0x7fb6f4046b80 "composite_trigger"
  5012. s4_tevent: Destroying timer event 0x7fb6f43454e0 "composite_trigger"
  5013. Mapped to DCERPC endpoint \pipe\lsarpc
  5014. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  5015. added interface ens192 ip=10.4.15.44 bcast=10.4.15.255 netmask=255.255.255.0
  5016. s4_tevent: Ending timer event 0x7fb6f4046b80 "composite_trigger"
  5017. s4_tevent: Added timed event "connect_multi_timer": 0x7fb6f4325af0
  5018. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f41648b0
  5019. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f41648b0
  5020. s4_tevent: Destroying timer event 0x7fb6f4325af0 "connect_multi_timer"
  5021. Socket options:
  5022. SO_KEEPALIVE = 0
  5023. SO_REUSEADDR = 0
  5024. SO_BROADCAST = 0
  5025. TCP_NODELAY = 1
  5026. TCP_KEEPCNT = 9
  5027. TCP_KEEPIDLE = 7200
  5028. TCP_KEEPINTVL = 75
  5029. IPTOS_LOWDELAY = 0
  5030. IPTOS_THROUGHPUT = 0
  5031. SO_REUSEPORT = 0
  5032. SO_SNDBUF = 663430
  5033. SO_RCVBUF = 261942
  5034. SO_SNDLOWAT = 1
  5035. SO_RCVLOWAT = 1
  5036. SO_SNDTIMEO = 0
  5037. SO_RCVTIMEO = 0
  5038. TCP_QUICKACK = 1
  5039. TCP_DEFER_ACCEPT = 0
  5040. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f406b6e0
  5041. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5042. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5043. s4_tevent: Destroying timer event 0x7fb6f406b6e0 "tevent_req_timedout"
  5044. Starting GENSEC mechanism spnego
  5045. Starting GENSEC submechanism gssapi_krb5
  5046. Ticket in credentials cache for @IPA will expire in 84937 secs
  5047. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f4231f30
  5048. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5049. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5050. s4_tevent: Destroying timer event 0x7fb6f4231f30 "tevent_req_timedout"
  5051. gensec_gssapi: NO credentials were delegated
  5052. GSSAPI Connection will be cryptographically sealed
  5053. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f41c9c70
  5054. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5055. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5056. s4_tevent: Destroying timer event 0x7fb6f41c9c70 "tevent_req_timedout"
  5057. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f41c9340
  5058. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5059. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5060. s4_tevent: Destroying timer event 0x7fb6f41c9340 "tevent_req_timedout"
  5061. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=65535, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  5062. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f40559a0
  5063. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5064. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6f404ac70
  5065. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5066. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f40555b0
  5067. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f40555b0
  5068. s4_tevent: Destroying timer event 0x7fb6f40559a0 "tevent_req_timedout"
  5069. s4_tevent: Destroying timer event 0x7fb6f404ac70 "dcerpc_timeout_handler"
  5070. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f40a8bc0
  5071. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f40a8bc0
  5072. s4_tevent: Destroying timer event 0x7fb6f426e3e0 "dcerpc_connect_timeout_handler"
  5073. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  5074. in: struct lsa_OpenPolicy2
  5075. system_name : *
  5076. system_name : ''
  5077. attr : *
  5078. attr: struct lsa_ObjectAttribute
  5079. len : 0x00000000 (0)
  5080. root_dir : NULL
  5081. object_name : NULL
  5082. attributes : 0x00000000 (0)
  5083. sec_desc : NULL
  5084. sec_qos : *
  5085. sec_qos: struct lsa_QosInfo
  5086. len : 0x00000000 (0)
  5087. impersonation_level : 0x0000 (0)
  5088. context_mode : 0x00 (0)
  5089. effective_only : 0x00 (0)
  5090. access_mask : 0x02000000 (33554432)
  5091. 0: LSA_POLICY_VIEW_LOCAL_INFORMATION
  5092. 0: LSA_POLICY_VIEW_AUDIT_INFORMATION
  5093. 0: LSA_POLICY_GET_PRIVATE_INFORMATION
  5094. 0: LSA_POLICY_TRUST_ADMIN
  5095. 0: LSA_POLICY_CREATE_ACCOUNT
  5096. 0: LSA_POLICY_CREATE_SECRET
  5097. 0: LSA_POLICY_CREATE_PRIVILEGE
  5098. 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
  5099. 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS
  5100. 0: LSA_POLICY_AUDIT_LOG_ADMIN
  5101. 0: LSA_POLICY_SERVER_ADMIN
  5102. 0: LSA_POLICY_LOOKUP_NAMES
  5103. 0: LSA_POLICY_NOTIFICATION
  5104. rpc request data:
  5105. [0000] 00 00 02 00 01 00 00 00 00 00 00 00 01 00 00 00 ........ ........
  5106. [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  5107. [0020] 00 00 00 00 00 00 00 00 04 00 02 00 00 00 00 00 ........ ........
  5108. [0030] 00 00 00 00 00 00 00 02 ........
  5109. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6f424e160
  5110. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6f4339350
  5111. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6f424e160
  5112. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6f424e160
  5113. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=80, this_data=80, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  5114. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f404abc0
  5115. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5116. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6f424e160
  5117. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5118. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f423bb60
  5119. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f423bb60
  5120. s4_tevent: Destroying timer event 0x7fb6f404abc0 "tevent_req_timedout"
  5121. s4_tevent: Destroying timer event 0x7fb6f4339350 "dcerpc_timeout_handler"
  5122. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f43aa910
  5123. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f43aa910
  5124. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  5125. out: struct lsa_OpenPolicy2
  5126. handle : *
  5127. handle: struct policy_handle
  5128. handle_type : 0x00000000 (0)
  5129. uuid : 0000000d-0000-0000-5354-b486a62a0000
  5130. result : NT_STATUS_OK
  5131. rpc reply data:
  5132. [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 53 54 B4 86 ........ ....ST..
  5133. [0010] A6 2A 00 00 00 00 00 00 .*......
  5134. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  5135. in: struct lsa_QueryInfoPolicy2
  5136. handle : *
  5137. handle: struct policy_handle
  5138. handle_type : 0x00000000 (0)
  5139. uuid : 0000000d-0000-0000-5354-b486a62a0000
  5140. level : LSA_POLICY_INFO_DNS (12)
  5141. rpc request data:
  5142. [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 53 54 B4 86 ........ ....ST..
  5143. [0010] A6 2A 00 00 0C 00 .*....
  5144. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6f424e160
  5145. s4_tevent: Added timed event "dcerpc_timeout_handler": 0x7fb6f43bf0b0
  5146. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6f424e160
  5147. s4_tevent: Schedule immediate event "dcerpc_io_trigger": 0x7fb6f424e160
  5148. num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=46, this_data=46, max_data=4280, param_offset=84, param_pad=2, param_disp=0, data_offset=84, data_pad=0, data_disp=0
  5149. s4_tevent: Added timed event "tevent_req_timedout": 0x7fb6f404abc0
  5150. s4_tevent: Schedule immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5151. s4_tevent: Run immediate event "dcerpc_io_trigger": 0x7fb6f424e160
  5152. s4_tevent: Run immediate event "tevent_queue_immediate_trigger": 0x7fb6f405a2c0
  5153. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f424d830
  5154. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f424d830
  5155. s4_tevent: Destroying timer event 0x7fb6f404abc0 "tevent_req_timedout"
  5156. s4_tevent: Destroying timer event 0x7fb6f43bf0b0 "dcerpc_timeout_handler"
  5157. s4_tevent: Schedule immediate event "tevent_req_trigger": 0x7fb6f414ebe0
  5158. s4_tevent: Run immediate event "tevent_req_trigger": 0x7fb6f414ebe0
  5159. lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
  5160. out: struct lsa_QueryInfoPolicy2
  5161. info : *
  5162. info : *
  5163. info : union lsa_PolicyInformation(case 12)
  5164. dns: struct lsa_DnsDomainInfo
  5165. name: struct lsa_StringLarge
  5166. length : 0x0006 (6)
  5167. size : 0x0008 (8)
  5168. string : *
  5169. string : 'IPA'
  5170. dns_domain: struct lsa_StringLarge
  5171. length : 0x0018 (24)
  5172. size : 0x001a (26)
  5173. string : *
  5174. string : 'rdu.lulu.com'
  5175. dns_forest: struct lsa_StringLarge
  5176. length : 0x0018 (24)
  5177. size : 0x001a (26)
  5178. string : *
  5179. string : 'rdu.lulu.com'
  5180. domain_guid : 00000015-8c8c-9a11-cee9-58cb68be9bba
  5181. sid : *
  5182. sid : S-1-5-21-2584841356-3411601870-3130769000
  5183. result : NT_STATUS_OK
  5184. rpc reply data:
  5185. [0000] 00 00 02 00 0C 00 00 00 06 00 08 00 04 00 02 00 ........ ........
  5186. [0010] 18 00 1A 00 08 00 02 00 18 00 1A 00 0C 00 02 00 ........ ........
  5187. [0020] 15 00 00 00 8C 8C 11 9A CE E9 58 CB 68 BE 9B BA ........ ..X.h...
  5188. [0030] 10 00 02 00 04 00 00 00 00 00 00 00 03 00 00 00 ........ ........
  5189. [0040] 49 00 50 00 41 00 00 00 0D 00 00 00 00 00 00 00 I.P.A... ........
  5190. [0050] 0C 00 00 00 72 00 64 00 75 00 2E 00 6C 00 75 00 ....r.d. u...l.u.
  5191. [0060] 6C 00 75 00 2E 00 63 00 6F 00 6D 00 0D 00 00 00 l.u...c. o.m.....
  5192. [0070] 00 00 00 00 0C 00 00 00 72 00 64 00 75 00 2E 00 ........ r.d.u...
  5193. [0080] 6C 00 75 00 6C 00 75 00 2E 00 63 00 6F 00 6D 00 l.u.l.u. ..c.o.m.
  5194. [0090] 04 00 00 00 01 04 00 00 00 00 00 05 15 00 00 00 ........ ........
  5195. [00A0] 8C 8C 11 9A CE E9 58 CB 68 BE 9B BA 00 00 00 00 ......X. h.......
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!