Guest User

testsige3.log

a guest
Dec 1st, 2011
198
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. [2011/11/22 12:36:24, 6] param/loadparm.c:7018(lp_file_list_changed)
  2. lp_file_list_changed()
  3. file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Nov 22 12:25:53 2011
  4.  
  5. [2011/11/22 12:36:24, 5] smbd/reply.c:503(reply_special)
  6. init msg_type=0x81 msg_flags=0x0
  7. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  8. got smb length of 133
  9. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  10. got message type 0x0 of len 0x85
  11. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  12. Transaction 0 of length 137 (0 toread)
  13. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  14. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  15. size=133
  16. smb_com=0x72
  17. smb_rcls=0
  18. smb_reh=0
  19. smb_err=0
  20. smb_flg=24
  21. smb_flg2=51283
  22. smb_tid=0
  23. smb_pid=65279
  24. smb_uid=0
  25. smb_mid=0
  26. smt_wct=0
  27. smb_bcc=98
  28. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  29. [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG
  30. [0010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1
  31. [0020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for
  32. [0030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a.
  33. [0040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM
  34. [0050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1
  35. [0060] 32 00 2.
  36. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  37. switch message SMBnegprot (pid 2903) conn 0x0
  38. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  39. created /tmp/SMBnegprot.8.req len 137
  40. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  41. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  42. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  43. NT user token: (NULL)
  44. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  45. UNIX token of user 0
  46. Primary group is 0 and contains 0 supplementary groups
  47. [2011/11/22 12:36:24, 5] smbd/uid.c:368(change_to_root_user)
  48. change_to_root_user: now uid=(0,0) gid=(0,0)
  49. [2011/11/22 12:36:24, 3] smbd/negprot.c:567(reply_negprot)
  50. Requested protocol [PC NETWORK PROGRAM 1.0]
  51. [2011/11/22 12:36:24, 3] smbd/negprot.c:567(reply_negprot)
  52. Requested protocol [LANMAN1.0]
  53. [2011/11/22 12:36:24, 3] smbd/negprot.c:567(reply_negprot)
  54. Requested protocol [Windows for Workgroups 3.1a]
  55. [2011/11/22 12:36:24, 3] smbd/negprot.c:567(reply_negprot)
  56. Requested protocol [LM1.2X002]
  57. [2011/11/22 12:36:24, 3] smbd/negprot.c:567(reply_negprot)
  58. Requested protocol [LANMAN2.1]
  59. [2011/11/22 12:36:24, 3] smbd/negprot.c:567(reply_negprot)
  60. Requested protocol [NT LM 0.12]
  61. [2011/11/22 12:36:24, 10] lib/util.c:1979(set_remote_arch)
  62. set_remote_arch: Client arch is 'Win2K'
  63. [2011/11/22 12:36:24, 6] param/loadparm.c:7018(lp_file_list_changed)
  64. lp_file_list_changed()
  65. file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Nov 22 12:25:53 2011
  66.  
  67. [2011/11/22 12:36:24, 5] smbd/connection.c:142(claim_connection)
  68. claiming []
  69. [2011/11/22 12:36:24, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
  70. Locking key 570B0000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  71. [2011/11/22 12:36:24, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
  72. Allocated locked data 0x0xb77e0458
  73. [2011/11/22 12:36:24, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
  74. Unlocking key 570B0000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  75. [2011/11/22 12:36:24, 6] param/loadparm.c:7018(lp_file_list_changed)
  76. lp_file_list_changed()
  77. file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Nov 22 12:25:53 2011
  78.  
  79. [2011/11/22 12:36:24, 3] smbd/negprot.c:387(reply_nt1)
  80. using SPNEGO
  81. [2011/11/22 12:36:24, 3] smbd/negprot.c:672(reply_negprot)
  82. Selected protocol NT LM 0.12
  83. [2011/11/22 12:36:24, 5] smbd/negprot.c:679(reply_negprot)
  84. negprot index=5
  85. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  86. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  87. size=127
  88. smb_com=0x72
  89. smb_rcls=0
  90. smb_reh=0
  91. smb_err=0
  92. smb_flg=136
  93. smb_flg2=51283
  94. smb_tid=0
  95. smb_pid=65279
  96. smb_uid=0
  97. smb_mid=0
  98. smt_wct=17
  99. smb_vwv[ 0]= 5 (0x5)
  100. smb_vwv[ 1]=12803 (0x3203)
  101. smb_vwv[ 2]= 256 (0x100)
  102. smb_vwv[ 3]= 1024 (0x400)
  103. smb_vwv[ 4]= 65 (0x41)
  104. smb_vwv[ 5]= 0 (0x0)
  105. smb_vwv[ 6]= 256 (0x100)
  106. smb_vwv[ 7]=22272 (0x5700)
  107. smb_vwv[ 8]= 11 (0xB)
  108. smb_vwv[ 9]=64768 (0xFD00)
  109. smb_vwv[10]= 243 (0xF3)
  110. smb_vwv[11]= 128 (0x80)
  111. smb_vwv[12]=43500 (0xA9EC)
  112. smb_vwv[13]= 2806 (0xAF6)
  113. smb_vwv[14]=52393 (0xCCA9)
  114. smb_vwv[15]=50177 (0xC401)
  115. smb_vwv[16]= 255 (0xFF)
  116. smb_bcc=58
  117. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  118. [0000] 61 64 6D 69 6E 2D 70 64 63 00 00 00 00 00 00 00 admin-pd c.......
  119. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0...
  120. [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7.....
  121. [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE
  122. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  123. got smb length of 236
  124. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  125. got message type 0x0 of len 0xec
  126. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  127. Transaction 1 of length 240 (0 toread)
  128. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  129. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  130. size=236
  131. smb_com=0x73
  132. smb_rcls=0
  133. smb_reh=0
  134. smb_err=0
  135. smb_flg=24
  136. smb_flg2=51207
  137. smb_tid=0
  138. smb_pid=65279
  139. smb_uid=0
  140. smb_mid=64
  141. smt_wct=12
  142. smb_vwv[ 0]= 255 (0xFF)
  143. smb_vwv[ 1]= 236 (0xEC)
  144. smb_vwv[ 2]=16644 (0x4104)
  145. smb_vwv[ 3]= 50 (0x32)
  146. smb_vwv[ 4]= 0 (0x0)
  147. smb_vwv[ 5]= 0 (0x0)
  148. smb_vwv[ 6]= 0 (0x0)
  149. smb_vwv[ 7]= 74 (0x4A)
  150. smb_vwv[ 8]= 0 (0x0)
  151. smb_vwv[ 9]= 0 (0x0)
  152. smb_vwv[10]= 212 (0xD4)
  153. smb_vwv[11]=40960 (0xA000)
  154. smb_bcc=177
  155. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  156. [0000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<..
  157. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....*
  158. [0020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P.......
  159. [0030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  160. [0040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n
  161. [0050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0
  162. [0060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c
  163. [0070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2
  164. [0080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i
  165. [0090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0
  166. [00A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1....
  167. [00B0] 00 .
  168. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  169. switch message SMBsesssetupX (pid 2903) conn 0x0
  170. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  171. created /tmp/SMBsesssetupX.31.req len 240
  172. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  173. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  174. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  175. NT user token: (NULL)
  176. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  177. UNIX token of user 0
  178. Primary group is 0 and contains 0 supplementary groups
  179. [2011/11/22 12:36:24, 5] smbd/uid.c:368(change_to_root_user)
  180. change_to_root_user: now uid=(0,0) gid=(0,0)
  181. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
  182. wct=12 flg2=0xc807
  183. [2011/11/22 12:36:24, 2] smbd/sesssetup.c:1360(setup_new_vc_session)
  184. setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
  185. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
  186. Doing spnego session setup
  187. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
  188. NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
  189. [2011/11/22 12:36:24, 10] lib/util.c:1979(set_remote_arch)
  190. set_remote_arch: Client arch is 'WinXP'
  191. [2011/11/22 12:36:24, 10] smbd/password.c:172(register_initial_vuid)
  192. register_initial_vuid: allocated vuid = 100
  193. [2011/11/22 12:36:24, 10] smbd/sesssetup.c:1106(check_spnego_blob_complete)
  194. check_spnego_blob_complete: needed_len = 74, pblob->length = 74
  195. [2011/11/22 12:36:24, 5] smbd/sesssetup.c:735(parse_spnego_mechanisms)
  196. parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10
  197. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:786(reply_spnego_negotiate)
  198. reply_spnego_negotiate: Got secblob of size 40
  199. [2011/11/22 12:36:24, 5] auth/auth.c:487(make_auth_context_subsystem)
  200. Making default auth method list for DC, security=user, encrypt passwords = yes
  201. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  202. Attempting to register auth backend sam
  203. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  204. Successfully added auth method 'sam'
  205. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  206. Attempting to register auth backend sam_ignoredomain
  207. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  208. Successfully added auth method 'sam_ignoredomain'
  209. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  210. Attempting to register auth backend unix
  211. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  212. Successfully added auth method 'unix'
  213. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  214. Attempting to register auth backend winbind
  215. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  216. Successfully added auth method 'winbind'
  217. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  218. Attempting to register auth backend wbc
  219. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  220. Successfully added auth method 'wbc'
  221. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  222. Attempting to register auth backend smbserver
  223. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  224. Successfully added auth method 'smbserver'
  225. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  226. Attempting to register auth backend trustdomain
  227. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  228. Successfully added auth method 'trustdomain'
  229. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  230. Attempting to register auth backend ntdomain
  231. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  232. Successfully added auth method 'ntdomain'
  233. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  234. Attempting to register auth backend guest
  235. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  236. Successfully added auth method 'guest'
  237. [2011/11/22 12:36:24, 5] auth/auth.c:46(smb_register_auth)
  238. Attempting to register auth backend netlogond
  239. [2011/11/22 12:36:24, 5] auth/auth.c:58(smb_register_auth)
  240. Successfully added auth method 'netlogond'
  241. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  242. load_auth_module: Attempting to find an auth method to match guest
  243. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  244. load_auth_module: auth method guest has a valid init
  245. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  246. load_auth_module: Attempting to find an auth method to match sam
  247. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  248. load_auth_module: auth method sam has a valid init
  249. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  250. load_auth_module: Attempting to find an auth method to match winbind:trustdomain
  251. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  252. load_auth_module: Attempting to find an auth method to match trustdomain
  253. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  254. load_auth_module: auth method trustdomain has a valid init
  255. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  256. load_auth_module: auth method winbind has a valid init
  257. [2011/11/22 12:36:24, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
  258. Got NTLMSSP neg_flags=0xe2088297
  259. NTLMSSP_NEGOTIATE_UNICODE
  260. NTLMSSP_NEGOTIATE_OEM
  261. NTLMSSP_REQUEST_TARGET
  262. NTLMSSP_NEGOTIATE_SIGN
  263. NTLMSSP_NEGOTIATE_LM_KEY
  264. NTLMSSP_NEGOTIATE_NTLM
  265. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  266. NTLMSSP_NEGOTIATE_NTLM2
  267. NTLMSSP_NEGOTIATE_VERSION
  268. NTLMSSP_NEGOTIATE_128
  269. NTLMSSP_NEGOTIATE_KEY_EXCH
  270. NTLMSSP_NEGOTIATE_56
  271. [2011/11/22 12:36:24, 5] auth/auth.c:98(get_ntlm_challenge)
  272. auth_get_challenge: module guest did not want to specify a challenge
  273. [2011/11/22 12:36:24, 5] auth/auth.c:98(get_ntlm_challenge)
  274. auth_get_challenge: module sam did not want to specify a challenge
  275. [2011/11/22 12:36:24, 5] auth/auth.c:98(get_ntlm_challenge)
  276. auth_get_challenge: module winbind did not want to specify a challenge
  277. [2011/11/22 12:36:24, 5] auth/auth.c:138(get_ntlm_challenge)
  278. auth_context challenge created by random
  279. [2011/11/22 12:36:24, 5] auth/auth.c:139(get_ntlm_challenge)
  280. challenge is:
  281. [2011/11/22 12:36:24, 5] ../lib/util/util.c:304(_dump_data)
  282. [0000] 0D D0 F1 87 68 C3 29 3A ....h.):
  283. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  284. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  285. size=332
  286. smb_com=0x73
  287. smb_rcls=22
  288. smb_reh=0
  289. smb_err=49152
  290. smb_flg=136
  291. smb_flg2=51201
  292. smb_tid=0
  293. smb_pid=65279
  294. smb_uid=100
  295. smb_mid=64
  296. smt_wct=4
  297. smb_vwv[ 0]= 255 (0xFF)
  298. smb_vwv[ 1]= 0 (0x0)
  299. smb_vwv[ 2]= 0 (0x0)
  300. smb_vwv[ 3]= 245 (0xF5)
  301. smb_bcc=289
  302. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  303. [0000] A1 81 F2 30 81 EF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+
  304. [0010] 06 01 04 01 82 37 02 02 0A A2 81 D9 04 81 D6 4E .....7.. .......N
  305. [0020] 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 TLMSSP.. .......0
  306. [0030] 00 00 00 95 82 89 E2 0D D0 F1 87 68 C3 29 3A 00 ........ ...h.):.
  307. [0040] 00 00 00 00 00 00 00 9E 00 9E 00 38 00 00 00 49 ........ ...8...I
  308. [0050] 00 41 00 39 00 32 00 02 00 08 00 49 00 41 00 39 .A.9.2.. ...I.A.9
  309. [0060] 00 32 00 01 00 12 00 41 00 44 00 4D 00 49 00 4E .2.....A .D.M.I.N
  310. [0070] 00 2D 00 50 00 44 00 43 00 04 00 2E 00 69 00 39 .-.P.D.C .....i.9
  311. [0080] 00 32 00 2E 00 69 00 6E 00 2E 00 61 00 63 00 2D .2...i.n ...a.c.-
  312. [0090] 00 76 00 65 00 72 00 73 00 61 00 69 00 6C 00 6C .v.e.r.s .a.i.l.l
  313. [00A0] 00 65 00 73 00 2E 00 66 00 72 00 03 00 42 00 61 .e.s...f .r...B.a
  314. [00B0] 00 64 00 6D 00 69 00 6E 00 2D 00 70 00 64 00 63 .d.m.i.n .-.p.d.c
  315. [00C0] 00 2E 00 69 00 39 00 32 00 2E 00 69 00 6E 00 2E ...i.9.2 ...i.n..
  316. [00D0] 00 61 00 63 00 2D 00 76 00 65 00 72 00 73 00 61 .a.c.-.v .e.r.s.a
  317. [00E0] 00 69 00 6C 00 6C 00 65 00 73 00 2E 00 66 00 72 .i.l.l.e .s...f.r
  318. [00F0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S
  319. [0100] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 34 .a.m.b.a . .3...4
  320. [0110] 00 2E 00 35 00 00 00 49 00 41 00 39 00 32 00 00 ...5...I .A.9.2..
  321. [0120] 00 .
  322. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  323. got smb length of 276
  324. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  325. got message type 0x0 of len 0x114
  326. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  327. Transaction 2 of length 280 (0 toread)
  328. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  329. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  330. size=276
  331. smb_com=0x73
  332. smb_rcls=0
  333. smb_reh=0
  334. smb_err=0
  335. smb_flg=24
  336. smb_flg2=51207
  337. smb_tid=0
  338. smb_pid=65279
  339. smb_uid=100
  340. smb_mid=128
  341. smt_wct=12
  342. smb_vwv[ 0]= 255 (0xFF)
  343. smb_vwv[ 1]= 276 (0x114)
  344. smb_vwv[ 2]=16644 (0x4104)
  345. smb_vwv[ 3]= 50 (0x32)
  346. smb_vwv[ 4]= 0 (0x0)
  347. smb_vwv[ 5]= 0 (0x0)
  348. smb_vwv[ 6]= 0 (0x0)
  349. smb_vwv[ 7]= 115 (0x73)
  350. smb_vwv[ 8]= 0 (0x0)
  351. smb_vwv[ 9]= 0 (0x0)
  352. smb_vwv[10]= 212 (0xD4)
  353. smb_vwv[11]=40960 (0xA000)
  354. smb_bcc=217
  355. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  356. [0000] A1 71 30 6F A2 6D 04 6B 4E 54 4C 4D 53 53 50 00 .q0o.m.k NTLMSSP.
  357. [0010] 03 00 00 00 01 00 01 00 5A 00 00 00 00 00 00 00 ........ Z.......
  358. [0020] 5B 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 [....... H.......
  359. [0030] 48 00 00 00 12 00 12 00 48 00 00 00 10 00 10 00 H....... H.......
  360. [0040] 5B 00 00 00 15 8A 88 E2 05 01 28 0A 00 00 00 0F [....... ..(.....
  361. [0050] 54 00 45 00 53 00 54 00 53 00 49 00 47 00 45 00 T.E.S.T. S.I.G.E.
  362. [0060] 33 00 00 15 BB 53 E7 60 F7 69 BC ED 2E DA C0 67 3....S.` .i.....g
  363. [0070] 79 0E EE 57 00 69 00 6E 00 64 00 6F 00 77 00 73 y..W.i.n .d.o.w.s
  364. [0080] 00 20 00 32 00 30 00 30 00 32 00 20 00 53 00 65 . .2.0.0 .2. .S.e
  365. [0090] 00 72 00 76 00 69 00 63 00 65 00 20 00 50 00 61 .r.v.i.c .e. .P.a
  366. [00A0] 00 63 00 6B 00 20 00 32 00 20 00 32 00 36 00 30 .c.k. .2 . .2.6.0
  367. [00B0] 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .0...W.i .n.d.o.w
  368. [00C0] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 35 .s. .2.0 .0.2. .5
  369. [00D0] 00 2E 00 31 00 00 00 00 00 ...1.... .
  370. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  371. switch message SMBsesssetupX (pid 2903) conn 0x0
  372. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  373. created /tmp/SMBsesssetupX.32.req len 280
  374. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  375. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  376. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  377. NT user token: (NULL)
  378. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  379. UNIX token of user 0
  380. Primary group is 0 and contains 0 supplementary groups
  381. [2011/11/22 12:36:24, 5] smbd/uid.c:368(change_to_root_user)
  382. change_to_root_user: now uid=(0,0) gid=(0,0)
  383. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
  384. wct=12 flg2=0xc807
  385. [2011/11/22 12:36:24, 2] smbd/sesssetup.c:1360(setup_new_vc_session)
  386. setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
  387. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
  388. Doing spnego session setup
  389. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
  390. NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
  391. [2011/11/22 12:36:24, 10] smbd/sesssetup.c:1106(check_spnego_blob_complete)
  392. check_spnego_blob_complete: needed_len = 115, pblob->length = 115
  393. [2011/11/22 12:36:24, 3] libsmb/ntlmssp.c:745(ntlmssp_server_auth)
  394. Got user=[] domain=[] workstation=[TESTSIGE3] len1=1 len2=0
  395. [2011/11/22 12:36:24, 6] param/loadparm.c:7018(lp_file_list_changed)
  396. lp_file_list_changed()
  397. file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Nov 22 12:25:53 2011
  398.  
  399. [2011/11/22 12:36:24, 5] auth/auth_util.c:208(make_user_info_map)
  400. Mapping user []\[] from workstation [TESTSIGE3]
  401. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  402. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  403. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  404. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  405. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  406. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  407. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  408. NT user token: (NULL)
  409. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  410. UNIX token of user 0
  411. Primary group is 0 and contains 0 supplementary groups
  412. [2011/11/22 12:36:24, 5] auth/auth_util.c:2184(is_trusted_domain)
  413. is_trusted_domain: Checking for domain trust with []
  414. [2011/11/22 12:36:24, 10] passdb/pdb_ldap.c:5913(ldapsam_get_trusteddom_pw)
  415. ldapsam_get_trusteddom_pw called for domain
  416. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  417. smbldap_search_ext: base => [sambaDomainName=,sambaDomainName=ia92,o=gouv,c=fr], filter => [(&(objectClass=sambaTrustedDomainPassword)(sambaDomainName=))], scope => [2]
  418. [2011/11/22 12:36:24, 5] lib/smbldap.c:1163(smbldap_close)
  419. The connection to the LDAP server was closed
  420. [2011/11/22 12:36:24, 10] lib/smbldap.c:676(smb_ldap_setup_conn)
  421. smb_ldap_setup_connection: ldap://127.0.0.1:389
  422. [2011/11/22 12:36:24, 2] lib/smbldap.c:856(smbldap_open_connection)
  423. smbldap_open_connection: connection opened
  424. [2011/11/22 12:36:24, 10] lib/smbldap.c:1021(smbldap_connect_system)
  425. ldap_connect_system: Binding to ldap server ldap://127.0.0.1:389 as "cn=admin,o=gouv,c=fr"
  426. [2011/11/22 12:36:24, 3] lib/smbldap.c:1067(smbldap_connect_system)
  427. ldap_connect_system: successful connection to the LDAP server
  428. ldap_connect_system: LDAP server does support paged results
  429. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  430. s3_event: Added timed event "smbldap_idle_fn": 0xb782b5e0
  431. [2011/11/22 12:36:24, 4] lib/smbldap.c:1143(smbldap_open)
  432. The LDAP server is successfully connected
  433. [2011/11/22 12:36:24, 10] lib/smbldap.c:1325(smbldap_search_ext)
  434. Failed search for base: sambaDomainName=,sambaDomainName=ia92,o=gouv,c=fr, error: 34 (Invalid DN syntax) (invalid DN)
  435. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  436. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  437. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  438. Cache entry with key = TDOM/ couldn't be found
  439. [2011/11/22 12:36:24, 5] libsmb/trustdom_cache.c:183(trustdom_cache_fetch)
  440. no entry for trusted domain found.
  441. [2011/11/22 12:36:24, 5] auth/auth_util.c:229(make_user_info_map)
  442. Mapped domain from [] to [IA92] for user [] from workstation [TESTSIGE3]
  443. [2011/11/22 12:36:24, 5] auth/auth_util.c:120(make_user_info)
  444. attempting to make a user_info for ()
  445. [2011/11/22 12:36:24, 5] auth/auth_util.c:130(make_user_info)
  446. making strings for 's user_info struct
  447. [2011/11/22 12:36:24, 5] auth/auth_util.c:162(make_user_info)
  448. making blobs for 's user_info struct
  449. [2011/11/22 12:36:24, 10] auth/auth_util.c:180(make_user_info)
  450. made an encrypted user_info for ()
  451. [2011/11/22 12:36:24, 3] auth/auth.c:222(check_ntlm_password)
  452. check_ntlm_password: Checking password for unmapped user []\[]@[TESTSIGE3] with the new password interface
  453. [2011/11/22 12:36:24, 3] auth/auth.c:225(check_ntlm_password)
  454. check_ntlm_password: mapped user is: [IA92]\[]@[TESTSIGE3]
  455. [2011/11/22 12:36:24, 10] auth/auth.c:234(check_ntlm_password)
  456. check_ntlm_password: auth_context challenge created by random
  457. [2011/11/22 12:36:24, 10] auth/auth.c:236(check_ntlm_password)
  458. challenge is:
  459. [2011/11/22 12:36:24, 5] ../lib/util/util.c:304(_dump_data)
  460. [0000] 0D D0 F1 87 68 C3 29 3A ....h.):
  461. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  462. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65534))], scope => [2]
  463. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  464. smbldap_open: already connected to the LDAP server
  465. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  466. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65534))
  467. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  468. element 3: DEFAULT
  469. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  470. element 1: DEFAULT
  471. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  472. element 4: DEFAULT
  473. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  474. element 2: DEFAULT
  475. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  476. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  477. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  478. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  479. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  480. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  481. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  482. NT user token: (NULL)
  483. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  484. UNIX token of user 0
  485. Primary group is 0 and contains 0 supplementary groups
  486. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  487. Returning expired cache entry: key = ACCT_POL/password history, value = 0
  488. , timeout = Tue Nov 22 12:34:09 2011
  489. [2011/11/22 12:36:24, 10] passdb/pdb_ldap.c:3854(ldapsam_get_account_policy_from_ldap)
  490. ldapsam_get_account_policy_from_ldap
  491. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  492. smbldap_search_ext: base => [sambaDomainName=ia92,o=gouv,c=fr], filter => [(objectclass=*)], scope => [0]
  493. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  494. smbldap_open: already connected to the LDAP server
  495. [2011/11/22 12:36:24, 10] lib/account_pol.c:396(cache_account_policy_set)
  496. cache_account_policy_set: updating account pol cache
  497. [2011/11/22 12:36:24, 10] lib/gencache.c:131(gencache_set)
  498. Adding cache entry with key = ACCT_POL/password history; value = 0
  499. and timeout = Tue Nov 22 12:37:24 2011
  500. (60 seconds ahead)
  501. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  502. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  503. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  504. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  505. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  506. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  507. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  508. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  509. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  510. element 5 -> now SET
  511. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  512. element 6 -> now SET
  513. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  514. element 7 -> now SET
  515. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  516. element 8 -> now SET
  517. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  518. element 9 -> now SET
  519. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  520. element 10 -> now SET
  521. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  522. element 21 -> now SET
  523. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  524. pdb_set_username: setting username nobody, was
  525. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  526. element 12 -> now SET
  527. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  528. pdb_set_domain: setting domain IA92, was
  529. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  530. element 14 -> now SET
  531. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  532. pdb_set_nt_username: setting nt username , was
  533. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  534. element 15 -> now SET
  535. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  536. pdb_set_full_name: setting full name nobody, was
  537. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  538. element 13 -> now SET
  539. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  540. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  541. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  542. element 1 -> now DEFAULT
  543. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  544. pdb_set_dir_drive: setting dir drive , was NULL
  545. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  546. element 3 -> now DEFAULT
  547. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  548. pdb_set_logon_script: setting logon script nobody.bat, was
  549. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  550. element 4 -> now DEFAULT
  551. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  552. pdb_set_profile_path: setting profile path , was
  553. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  554. element 2 -> now DEFAULT
  555. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  556. element 22 -> now SET
  557. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  558. pdb_set_workstations: setting workstations , was
  559. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  560. element 23 -> now SET
  561. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  562. element 25 -> now SET
  563. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  564. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  565. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  566. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  567. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  568. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  569. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  570. NT user token: (NULL)
  571. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  572. UNIX token of user 0
  573. Primary group is 0 and contains 0 supplementary groups
  574. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  575. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  576. , timeout = Tue Nov 22 12:37:24 2011
  577. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  578. ldapsam_get_account_policy: got valid value from cache
  579. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  580. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  581. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  582. element 33 -> now SET
  583. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  584. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  585. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  586. element 18 -> now SET
  587. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  588. pdb_set_user_sid_from_rid:
  589. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  590. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  591. element 16 -> now SET
  592. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  593. element 28 -> now SET
  594. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  595. element 29 -> now SET
  596. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  597. element 30 -> now SET
  598. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  599. element 20 -> now SET
  600. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  601. element 17 -> now SET
  602. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  603. element 26 -> now SET
  604. [2011/11/22 12:36:24, 3] auth/auth.c:271(check_ntlm_password)
  605. check_ntlm_password: guest authentication for user [] succeeded
  606. [2011/11/22 12:36:24, 5] auth/auth.c:310(check_ntlm_password)
  607. check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded
  608. [2011/11/22 12:36:24, 5] auth/auth_util.c:2114(free_user_info)
  609. attempting to free (and zero) a user_info structure
  610. [2011/11/22 12:36:24, 10] auth/auth_util.c:2118(free_user_info)
  611. structure was created for
  612. [2011/11/22 12:36:24, 10] auth/token_util.c:353(create_local_nt_token)
  613. Create local NT token for S-1-5-21-1187454690-116783985-3613760195-501
  614. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  615. Cache entry with key = IDMAP/SID2GID/S-1-5-32-544 couldn't be found
  616. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  617. winbind failed to find a gid for sid S-1-5-32-544
  618. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  619. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  620. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  621. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  622. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  623. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  624. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  625. NT user token: (NULL)
  626. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  627. UNIX token of user 0
  628. Primary group is 0 and contains 0 supplementary groups
  629. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  630. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
  631. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  632. smbldap_open: already connected to the LDAP server
  633. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  634. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
  635. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  636. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  637. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  638. LEGACY: mapping failed for sid S-1-5-32-544
  639. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  640. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  641. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  642. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  643. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  644. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  645. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  646. NT user token: (NULL)
  647. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  648. UNIX token of user 0
  649. Primary group is 0 and contains 0 supplementary groups
  650. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  651. Cache entry with key = IDMAP/SID2GID/S-1-5-32-544 couldn't be found
  652. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  653. winbind failed to find a gid for sid S-1-5-32-544
  654. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  655. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  656. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  657. push_conn_ctx(0) : conn_ctx_stack_ndx = 1
  658. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  659. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  660. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  661. NT user token: (NULL)
  662. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  663. UNIX token of user 0
  664. Primary group is 0 and contains 0 supplementary groups
  665. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  666. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
  667. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  668. smbldap_open: already connected to the LDAP server
  669. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  670. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
  671. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  672. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  673. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  674. LEGACY: mapping failed for sid S-1-5-32-544
  675. [2011/11/22 12:36:24, 5] auth/token_util.c:303(create_builtin_administrators)
  676. create_builtin_administrators: Failed to create Administrators
  677. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  678. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  679. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  680. Cache entry with key = IDMAP/SID2GID/S-1-5-32-545 couldn't be found
  681. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  682. winbind failed to find a gid for sid S-1-5-32-545
  683. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  684. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  685. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  686. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  687. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  688. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  689. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  690. NT user token: (NULL)
  691. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  692. UNIX token of user 0
  693. Primary group is 0 and contains 0 supplementary groups
  694. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  695. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
  696. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  697. smbldap_open: already connected to the LDAP server
  698. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  699. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
  700. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  701. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  702. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  703. LEGACY: mapping failed for sid S-1-5-32-545
  704. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  705. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  706. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  707. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  708. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  709. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  710. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  711. NT user token: (NULL)
  712. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  713. UNIX token of user 0
  714. Primary group is 0 and contains 0 supplementary groups
  715. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  716. Cache entry with key = IDMAP/SID2GID/S-1-5-32-545 couldn't be found
  717. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  718. winbind failed to find a gid for sid S-1-5-32-545
  719. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  720. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  721. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  722. push_conn_ctx(0) : conn_ctx_stack_ndx = 1
  723. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  724. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  725. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  726. NT user token: (NULL)
  727. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  728. UNIX token of user 0
  729. Primary group is 0 and contains 0 supplementary groups
  730. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  731. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
  732. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  733. smbldap_open: already connected to the LDAP server
  734. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  735. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
  736. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  737. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  738. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  739. LEGACY: mapping failed for sid S-1-5-32-545
  740. [2011/11/22 12:36:24, 5] auth/token_util.c:274(create_builtin_users)
  741. create_builtin_users: Failed to create Users
  742. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  743. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  744. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  745. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  746. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  747. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  748. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  749. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  750. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  751. NT user token: (NULL)
  752. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  753. UNIX token of user 0
  754. Primary group is 0 and contains 0 supplementary groups
  755. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  756. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-1187454690-116783985-3613760195-501)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)))], scope => [2]
  757. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  758. smbldap_open: already connected to the LDAP server
  759. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  760. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-1187454690-116783985-3613760195-501)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)))], scope => [2]
  761. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  762. smbldap_open: already connected to the LDAP server
  763. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  764. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  765. [2011/11/22 12:36:24, 3] lib/privileges.c:63(get_privileges)
  766. get_privileges: No privileges assigned to SID [S-1-5-21-1187454690-116783985-3613760195-501]
  767. [2011/11/22 12:36:24, 5] lib/privileges.c:128(get_privileges_for_sids)
  768. get_privileges_for_sids: sid = S-1-1-0
  769. Privilege set:
  770. SE_PRIV 0x0 0x0 0x0 0x0
  771. [2011/11/22 12:36:24, 3] lib/privileges.c:63(get_privileges)
  772. get_privileges: No privileges assigned to SID [S-1-5-2]
  773. [2011/11/22 12:36:24, 3] lib/privileges.c:63(get_privileges)
  774. get_privileges: No privileges assigned to SID [S-1-5-32-546]
  775. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  776. Cache entry with key = IDMAP/SID2GID/S-1-1-0 couldn't be found
  777. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  778. winbind failed to find a gid for sid S-1-1-0
  779. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  780. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  781. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  782. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  783. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  784. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  785. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  786. NT user token: (NULL)
  787. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  788. UNIX token of user 0
  789. Primary group is 0 and contains 0 supplementary groups
  790. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  791. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))], scope => [2]
  792. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  793. smbldap_open: already connected to the LDAP server
  794. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  795. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))
  796. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  797. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  798. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  799. LEGACY: mapping failed for sid S-1-1-0
  800. [2011/11/22 12:36:24, 10] auth/auth_util.c:750(create_local_token)
  801. Could not convert SID S-1-1-0 to gid, ignoring it
  802. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  803. Cache entry with key = IDMAP/SID2GID/S-1-5-2 couldn't be found
  804. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  805. winbind failed to find a gid for sid S-1-5-2
  806. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  807. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  808. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  809. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  810. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  811. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  812. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  813. NT user token: (NULL)
  814. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  815. UNIX token of user 0
  816. Primary group is 0 and contains 0 supplementary groups
  817. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  818. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))], scope => [2]
  819. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  820. smbldap_open: already connected to the LDAP server
  821. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  822. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
  823. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  824. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  825. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  826. LEGACY: mapping failed for sid S-1-5-2
  827. [2011/11/22 12:36:24, 10] auth/auth_util.c:750(create_local_token)
  828. Could not convert SID S-1-5-2 to gid, ignoring it
  829. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  830. Cache entry with key = IDMAP/SID2GID/S-1-5-32-546 couldn't be found
  831. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  832. winbind failed to find a gid for sid S-1-5-32-546
  833. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  834. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  835. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  836. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  837. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  838. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  839. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  840. NT user token: (NULL)
  841. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  842. UNIX token of user 0
  843. Primary group is 0 and contains 0 supplementary groups
  844. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  845. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))], scope => [2]
  846. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  847. smbldap_open: already connected to the LDAP server
  848. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  849. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))
  850. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  851. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  852. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  853. LEGACY: mapping failed for sid S-1-5-32-546
  854. [2011/11/22 12:36:24, 10] auth/auth_util.c:750(create_local_token)
  855. Could not convert SID S-1-5-32-546 to gid, ignoring it
  856. [2011/11/22 12:36:24, 10] auth/token_util.c:528(debug_nt_user_token)
  857. NT user token of user S-1-5-21-1187454690-116783985-3613760195-501
  858. contains 5 SIDs
  859. SID[ 0]: S-1-5-21-1187454690-116783985-3613760195-501
  860. SID[ 1]: S-1-1-0
  861. SID[ 2]: S-1-5-2
  862. SID[ 3]: S-1-5-32-546
  863. SID[ 4]: S-1-22-1-65534
  864. SE_PRIV 0x0 0x0 0x0 0x0
  865. [2011/11/22 12:36:24, 10] auth/token_util.c:548(debug_unix_user_token)
  866. UNIX token of user 65534
  867. Primary group is 65534 and contains 0 supplementary groups
  868. [2011/11/22 12:36:24, 10] auth/auth_ntlmssp.c:139(auth_ntlmssp_check_password)
  869. Got NT session key of length 16
  870. [2011/11/22 12:36:24, 10] auth/auth_ntlmssp.c:146(auth_ntlmssp_check_password)
  871. Got LM session key of length 16
  872. [2011/11/22 12:36:24, 10] libsmb/ntlmssp.c:851(ntlmssp_server_auth)
  873. ntlmssp_server_auth: Using unmodified nt session key.
  874. [2011/11/22 12:36:24, 3] libsmb/ntlmssp_sign.c:342(ntlmssp_sign_init)
  875. NTLMSSP Sign/Seal - Initialising with flags:
  876. [2011/11/22 12:36:24, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
  877. Got NTLMSSP neg_flags=0xe2088215
  878. NTLMSSP_NEGOTIATE_UNICODE
  879. NTLMSSP_REQUEST_TARGET
  880. NTLMSSP_NEGOTIATE_SIGN
  881. NTLMSSP_NEGOTIATE_NTLM
  882. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  883. NTLMSSP_NEGOTIATE_NTLM2
  884. NTLMSSP_NEGOTIATE_VERSION
  885. NTLMSSP_NEGOTIATE_128
  886. NTLMSSP_NEGOTIATE_KEY_EXCH
  887. NTLMSSP_NEGOTIATE_56
  888. [2011/11/22 12:36:24, 10] smbd/password.c:265(register_existing_vuid)
  889. register_existing_vuid: (65534,65534) nobody IA92 guest=1
  890. [2011/11/22 12:36:24, 3] smbd/password.c:269(register_existing_vuid)
  891. register_existing_vuid: User name: nobody Real name: nobody
  892. [2011/11/22 12:36:24, 3] smbd/password.c:279(register_existing_vuid)
  893. register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100
  894. [2011/11/22 12:36:24, 6] param/loadparm.c:7018(lp_file_list_changed)
  895. lp_file_list_changed()
  896. file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Nov 22 12:25:53 2011
  897.  
  898. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  899. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  900. size=96
  901. smb_com=0x73
  902. smb_rcls=0
  903. smb_reh=0
  904. smb_err=0
  905. smb_flg=136
  906. smb_flg2=51201
  907. smb_tid=0
  908. smb_pid=65279
  909. smb_uid=100
  910. smb_mid=128
  911. smt_wct=4
  912. smb_vwv[ 0]= 255 (0xFF)
  913. smb_vwv[ 1]= 0 (0x0)
  914. smb_vwv[ 2]= 1 (0x1)
  915. smb_vwv[ 3]= 9 (0x9)
  916. smb_bcc=53
  917. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  918. [0000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x
  919. [0010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3
  920. [0020] 00 2E 00 34 00 2E 00 35 00 00 00 49 00 41 00 39 ...4...5 ...I.A.9
  921. [0030] 00 32 00 00 00 .2...
  922. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  923. got smb length of 84
  924. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  925. got message type 0x0 of len 0x54
  926. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  927. Transaction 3 of length 88 (0 toread)
  928. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  929. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  930. size=84
  931. smb_com=0x75
  932. smb_rcls=0
  933. smb_reh=0
  934. smb_err=0
  935. smb_flg=24
  936. smb_flg2=51207
  937. smb_tid=0
  938. smb_pid=65279
  939. smb_uid=100
  940. smb_mid=192
  941. smt_wct=4
  942. smb_vwv[ 0]= 255 (0xFF)
  943. smb_vwv[ 1]= 84 (0x54)
  944. smb_vwv[ 2]= 8 (0x8)
  945. smb_vwv[ 3]= 1 (0x1)
  946. smb_bcc=41
  947. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  948. [0000] 00 5C 00 5C 00 41 00 44 00 4D 00 49 00 4E 00 2D .\.\.A.D .M.I.N.-
  949. [0010] 00 50 00 44 00 43 00 5C 00 49 00 50 00 43 00 24 .P.D.C.\ .I.P.C.$
  950. [0020] 00 00 00 3F 3F 3F 3F 3F 00 ...????? .
  951. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  952. switch message SMBtconX (pid 2903) conn 0x0
  953. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  954. created /tmp/SMBtconX.25.req len 88
  955. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  956. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  957. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  958. NT user token: (NULL)
  959. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  960. UNIX token of user 0
  961. Primary group is 0 and contains 0 supplementary groups
  962. [2011/11/22 12:36:24, 5] smbd/uid.c:368(change_to_root_user)
  963. change_to_root_user: now uid=(0,0) gid=(0,0)
  964. [2011/11/22 12:36:24, 4] smbd/reply.c:680(reply_tcon_and_X)
  965. Client requested device type [?????] for share [IPC$]
  966. [2011/11/22 12:36:24, 5] smbd/service.c:1202(make_connection)
  967. making a connection to 'normal' service ipc$
  968. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  969. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65534))], scope => [2]
  970. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  971. smbldap_open: already connected to the LDAP server
  972. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  973. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65534))
  974. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  975. element 3: DEFAULT
  976. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  977. element 1: DEFAULT
  978. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  979. element 4: DEFAULT
  980. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  981. element 2: DEFAULT
  982. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  983. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  984. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  985. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  986. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  987. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  988. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  989. NT user token: (NULL)
  990. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  991. UNIX token of user 0
  992. Primary group is 0 and contains 0 supplementary groups
  993. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  994. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  995. , timeout = Tue Nov 22 12:37:24 2011
  996. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  997. ldapsam_get_account_policy: got valid value from cache
  998. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  999. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  1000. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  1001. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  1002. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  1003. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  1004. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  1005. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  1006. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1007. element 5 -> now SET
  1008. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1009. element 6 -> now SET
  1010. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1011. element 7 -> now SET
  1012. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1013. element 8 -> now SET
  1014. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1015. element 9 -> now SET
  1016. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1017. element 10 -> now SET
  1018. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1019. element 21 -> now SET
  1020. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  1021. pdb_set_username: setting username nobody, was
  1022. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1023. element 12 -> now SET
  1024. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  1025. pdb_set_domain: setting domain IA92, was
  1026. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1027. element 14 -> now SET
  1028. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  1029. pdb_set_nt_username: setting nt username , was
  1030. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1031. element 15 -> now SET
  1032. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  1033. pdb_set_full_name: setting full name nobody, was
  1034. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1035. element 13 -> now SET
  1036. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  1037. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  1038. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1039. element 1 -> now DEFAULT
  1040. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  1041. pdb_set_dir_drive: setting dir drive , was NULL
  1042. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1043. element 3 -> now DEFAULT
  1044. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  1045. pdb_set_logon_script: setting logon script nobody.bat, was
  1046. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1047. element 4 -> now DEFAULT
  1048. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  1049. pdb_set_profile_path: setting profile path , was
  1050. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1051. element 2 -> now DEFAULT
  1052. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1053. element 22 -> now SET
  1054. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  1055. pdb_set_workstations: setting workstations , was
  1056. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1057. element 23 -> now SET
  1058. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1059. element 25 -> now SET
  1060. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  1061. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  1062. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  1063. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  1064. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  1065. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  1066. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  1067. NT user token: (NULL)
  1068. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  1069. UNIX token of user 0
  1070. Primary group is 0 and contains 0 supplementary groups
  1071. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  1072. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  1073. , timeout = Tue Nov 22 12:37:24 2011
  1074. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  1075. ldapsam_get_account_policy: got valid value from cache
  1076. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  1077. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  1078. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1079. element 33 -> now SET
  1080. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  1081. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  1082. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1083. element 18 -> now SET
  1084. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  1085. pdb_set_user_sid_from_rid:
  1086. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  1087. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1088. element 16 -> now SET
  1089. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1090. element 28 -> now SET
  1091. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1092. element 29 -> now SET
  1093. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1094. element 30 -> now SET
  1095. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1096. element 20 -> now SET
  1097. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1098. element 17 -> now SET
  1099. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1100. element 26 -> now SET
  1101. [2011/11/22 12:36:24, 5] lib/username.c:133(Get_Pwnam_alloc)
  1102. Finding user nobody
  1103. [2011/11/22 12:36:24, 5] lib/username.c:77(Get_Pwnam_internals)
  1104. Trying _Get_Pwnam(), username as lowercase is nobody
  1105. [2011/11/22 12:36:24, 5] lib/username.c:110(Get_Pwnam_internals)
  1106. Get_Pwnam_internals did find user [nobody]!
  1107. [2011/11/22 12:36:24, 10] smbd/service.c:162(set_conn_connectpath)
  1108. set_conn_connectpath: service IPC$, connectpath = /tmp
  1109. [2011/11/22 12:36:24, 3] smbd/service.c:807(make_connection_snum)
  1110. Connect path is '/tmp' for service [IPC$]
  1111. [2011/11/22 12:36:24, 10] lib/util_seaccess.c:58(se_map_generic)
  1112. se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
  1113. [2011/11/22 12:36:24, 3] smbd/vfs.c:95(vfs_init_default)
  1114. Initialising default vfs hooks
  1115. [2011/11/22 12:36:24, 10] smbd/vfs.c:47(vfs_find_backend_entry)
  1116. vfs_find_backend_entry called for /[Default VFS]/
  1117. [2011/11/22 12:36:24, 5] smbd/vfs.c:85(smb_register_vfs)
  1118. Successfully added vfs backend '/[Default VFS]/'
  1119. [2011/11/22 12:36:24, 10] smbd/vfs.c:47(vfs_find_backend_entry)
  1120. vfs_find_backend_entry called for posixacl
  1121. [2011/11/22 12:36:24, 5] smbd/vfs.c:85(smb_register_vfs)
  1122. Successfully added vfs backend 'posixacl'
  1123. [2011/11/22 12:36:24, 3] smbd/vfs.c:129(vfs_init_custom)
  1124. Initialising custom vfs hooks from [/[Default VFS]/]
  1125. [2011/11/22 12:36:24, 10] smbd/vfs.c:47(vfs_find_backend_entry)
  1126. vfs_find_backend_entry called for /[Default VFS]/
  1127. Successfully loaded vfs module [/[Default VFS]/] with the new modules system
  1128. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1129. Checking operation #0 (type 0, layer 0)
  1130. Making operation type 0 opaque [module /[Default VFS]/]
  1131. Accepting operation type 0 from module /[Default VFS]/
  1132. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1133. Checking operation #1 (type 1, layer 0)
  1134. Making operation type 1 opaque [module /[Default VFS]/]
  1135. Accepting operation type 1 from module /[Default VFS]/
  1136. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1137. Checking operation #2 (type 2, layer 0)
  1138. Making operation type 2 opaque [module /[Default VFS]/]
  1139. Accepting operation type 2 from module /[Default VFS]/
  1140. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1141. Checking operation #3 (type 3, layer 0)
  1142. Making operation type 3 opaque [module /[Default VFS]/]
  1143. Accepting operation type 3 from module /[Default VFS]/
  1144. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1145. Checking operation #4 (type 4, layer 0)
  1146. Making operation type 4 opaque [module /[Default VFS]/]
  1147. Accepting operation type 4 from module /[Default VFS]/
  1148. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1149. Checking operation #5 (type 5, layer 0)
  1150. Making operation type 5 opaque [module /[Default VFS]/]
  1151. Accepting operation type 5 from module /[Default VFS]/
  1152. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1153. Checking operation #6 (type 6, layer 0)
  1154. Making operation type 6 opaque [module /[Default VFS]/]
  1155. Accepting operation type 6 from module /[Default VFS]/
  1156. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1157. Checking operation #7 (type 7, layer 0)
  1158. Making operation type 7 opaque [module /[Default VFS]/]
  1159. Accepting operation type 7 from module /[Default VFS]/
  1160. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1161. Checking operation #8 (type 8, layer 0)
  1162. Making operation type 8 opaque [module /[Default VFS]/]
  1163. Accepting operation type 8 from module /[Default VFS]/
  1164. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1165. Checking operation #9 (type 9, layer 0)
  1166. Making operation type 9 opaque [module /[Default VFS]/]
  1167. Accepting operation type 9 from module /[Default VFS]/
  1168. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1169. Checking operation #10 (type 10, layer 0)
  1170. Making operation type 10 opaque [module /[Default VFS]/]
  1171. Accepting operation type 10 from module /[Default VFS]/
  1172. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1173. Checking operation #11 (type 11, layer 0)
  1174. Making operation type 11 opaque [module /[Default VFS]/]
  1175. Accepting operation type 11 from module /[Default VFS]/
  1176. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1177. Checking operation #12 (type 12, layer 0)
  1178. Making operation type 12 opaque [module /[Default VFS]/]
  1179. Accepting operation type 12 from module /[Default VFS]/
  1180. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1181. Checking operation #13 (type 13, layer 0)
  1182. Making operation type 13 opaque [module /[Default VFS]/]
  1183. Accepting operation type 13 from module /[Default VFS]/
  1184. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1185. Checking operation #14 (type 14, layer 0)
  1186. Making operation type 14 opaque [module /[Default VFS]/]
  1187. Accepting operation type 14 from module /[Default VFS]/
  1188. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1189. Checking operation #15 (type 15, layer 0)
  1190. Making operation type 15 opaque [module /[Default VFS]/]
  1191. Accepting operation type 15 from module /[Default VFS]/
  1192. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1193. Checking operation #16 (type 16, layer 0)
  1194. Making operation type 16 opaque [module /[Default VFS]/]
  1195. Accepting operation type 16 from module /[Default VFS]/
  1196. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1197. Checking operation #17 (type 17, layer 0)
  1198. Making operation type 17 opaque [module /[Default VFS]/]
  1199. Accepting operation type 17 from module /[Default VFS]/
  1200. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1201. Checking operation #18 (type 18, layer 0)
  1202. Making operation type 18 opaque [module /[Default VFS]/]
  1203. Accepting operation type 18 from module /[Default VFS]/
  1204. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1205. Checking operation #19 (type 19, layer 0)
  1206. Making operation type 19 opaque [module /[Default VFS]/]
  1207. Accepting operation type 19 from module /[Default VFS]/
  1208. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1209. Checking operation #20 (type 20, layer 0)
  1210. Making operation type 20 opaque [module /[Default VFS]/]
  1211. Accepting operation type 20 from module /[Default VFS]/
  1212. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1213. Checking operation #21 (type 21, layer 0)
  1214. Making operation type 21 opaque [module /[Default VFS]/]
  1215. Accepting operation type 21 from module /[Default VFS]/
  1216. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1217. Checking operation #22 (type 22, layer 0)
  1218. Making operation type 22 opaque [module /[Default VFS]/]
  1219. Accepting operation type 22 from module /[Default VFS]/
  1220. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1221. Checking operation #23 (type 23, layer 0)
  1222. Making operation type 23 opaque [module /[Default VFS]/]
  1223. Accepting operation type 23 from module /[Default VFS]/
  1224. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1225. Checking operation #24 (type 24, layer 0)
  1226. Making operation type 24 opaque [module /[Default VFS]/]
  1227. Accepting operation type 24 from module /[Default VFS]/
  1228. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1229. Checking operation #25 (type 25, layer 0)
  1230. Making operation type 25 opaque [module /[Default VFS]/]
  1231. Accepting operation type 25 from module /[Default VFS]/
  1232. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1233. Checking operation #26 (type 26, layer 0)
  1234. Making operation type 26 opaque [module /[Default VFS]/]
  1235. Accepting operation type 26 from module /[Default VFS]/
  1236. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1237. Checking operation #27 (type 27, layer 0)
  1238. Making operation type 27 opaque [module /[Default VFS]/]
  1239. Accepting operation type 27 from module /[Default VFS]/
  1240. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1241. Checking operation #28 (type 28, layer 0)
  1242. Making operation type 28 opaque [module /[Default VFS]/]
  1243. Accepting operation type 28 from module /[Default VFS]/
  1244. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1245. Checking operation #29 (type 29, layer 0)
  1246. Making operation type 29 opaque [module /[Default VFS]/]
  1247. Accepting operation type 29 from module /[Default VFS]/
  1248. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1249. Checking operation #30 (type 30, layer 0)
  1250. Making operation type 30 opaque [module /[Default VFS]/]
  1251. Accepting operation type 30 from module /[Default VFS]/
  1252. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1253. Checking operation #31 (type 31, layer 0)
  1254. Making operation type 31 opaque [module /[Default VFS]/]
  1255. Accepting operation type 31 from module /[Default VFS]/
  1256. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1257. Checking operation #32 (type 32, layer 0)
  1258. Making operation type 32 opaque [module /[Default VFS]/]
  1259. Accepting operation type 32 from module /[Default VFS]/
  1260. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1261. Checking operation #33 (type 33, layer 0)
  1262. Making operation type 33 opaque [module /[Default VFS]/]
  1263. Accepting operation type 33 from module /[Default VFS]/
  1264. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1265. Checking operation #34 (type 34, layer 0)
  1266. Making operation type 34 opaque [module /[Default VFS]/]
  1267. Accepting operation type 34 from module /[Default VFS]/
  1268. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1269. Checking operation #35 (type 35, layer 0)
  1270. Making operation type 35 opaque [module /[Default VFS]/]
  1271. Accepting operation type 35 from module /[Default VFS]/
  1272. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1273. Checking operation #36 (type 36, layer 0)
  1274. Making operation type 36 opaque [module /[Default VFS]/]
  1275. Accepting operation type 36 from module /[Default VFS]/
  1276. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1277. Checking operation #37 (type 37, layer 0)
  1278. Making operation type 37 opaque [module /[Default VFS]/]
  1279. Accepting operation type 37 from module /[Default VFS]/
  1280. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1281. Checking operation #38 (type 38, layer 0)
  1282. Making operation type 38 opaque [module /[Default VFS]/]
  1283. Accepting operation type 38 from module /[Default VFS]/
  1284. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1285. Checking operation #39 (type 39, layer 0)
  1286. Making operation type 39 opaque [module /[Default VFS]/]
  1287. Accepting operation type 39 from module /[Default VFS]/
  1288. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1289. Checking operation #40 (type 40, layer 0)
  1290. Making operation type 40 opaque [module /[Default VFS]/]
  1291. Accepting operation type 40 from module /[Default VFS]/
  1292. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1293. Checking operation #41 (type 41, layer 0)
  1294. Making operation type 41 opaque [module /[Default VFS]/]
  1295. Accepting operation type 41 from module /[Default VFS]/
  1296. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1297. Checking operation #42 (type 42, layer 0)
  1298. Making operation type 42 opaque [module /[Default VFS]/]
  1299. Accepting operation type 42 from module /[Default VFS]/
  1300. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1301. Checking operation #43 (type 43, layer 0)
  1302. Making operation type 43 opaque [module /[Default VFS]/]
  1303. Accepting operation type 43 from module /[Default VFS]/
  1304. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1305. Checking operation #44 (type 44, layer 0)
  1306. Making operation type 44 opaque [module /[Default VFS]/]
  1307. Accepting operation type 44 from module /[Default VFS]/
  1308. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1309. Checking operation #45 (type 45, layer 0)
  1310. Making operation type 45 opaque [module /[Default VFS]/]
  1311. Accepting operation type 45 from module /[Default VFS]/
  1312. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1313. Checking operation #46 (type 46, layer 0)
  1314. Making operation type 46 opaque [module /[Default VFS]/]
  1315. Accepting operation type 46 from module /[Default VFS]/
  1316. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1317. Checking operation #47 (type 47, layer 0)
  1318. Making operation type 47 opaque [module /[Default VFS]/]
  1319. Accepting operation type 47 from module /[Default VFS]/
  1320. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1321. Checking operation #48 (type 48, layer 0)
  1322. Making operation type 48 opaque [module /[Default VFS]/]
  1323. Accepting operation type 48 from module /[Default VFS]/
  1324. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1325. Checking operation #49 (type 49, layer 0)
  1326. Making operation type 49 opaque [module /[Default VFS]/]
  1327. Accepting operation type 49 from module /[Default VFS]/
  1328. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1329. Checking operation #50 (type 50, layer 0)
  1330. Making operation type 50 opaque [module /[Default VFS]/]
  1331. Accepting operation type 50 from module /[Default VFS]/
  1332. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1333. Checking operation #51 (type 51, layer 0)
  1334. Making operation type 51 opaque [module /[Default VFS]/]
  1335. Accepting operation type 51 from module /[Default VFS]/
  1336. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1337. Checking operation #52 (type 52, layer 0)
  1338. Making operation type 52 opaque [module /[Default VFS]/]
  1339. Accepting operation type 52 from module /[Default VFS]/
  1340. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1341. Checking operation #53 (type 53, layer 0)
  1342. Making operation type 53 opaque [module /[Default VFS]/]
  1343. Accepting operation type 53 from module /[Default VFS]/
  1344. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1345. Checking operation #54 (type 54, layer 0)
  1346. Making operation type 54 opaque [module /[Default VFS]/]
  1347. Accepting operation type 54 from module /[Default VFS]/
  1348. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1349. Checking operation #55 (type 55, layer 0)
  1350. Making operation type 55 opaque [module /[Default VFS]/]
  1351. Accepting operation type 55 from module /[Default VFS]/
  1352. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1353. Checking operation #56 (type 56, layer 0)
  1354. Making operation type 56 opaque [module /[Default VFS]/]
  1355. Accepting operation type 56 from module /[Default VFS]/
  1356. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1357. Checking operation #57 (type 57, layer 0)
  1358. Making operation type 57 opaque [module /[Default VFS]/]
  1359. Accepting operation type 57 from module /[Default VFS]/
  1360. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1361. Checking operation #58 (type 58, layer 0)
  1362. Making operation type 58 opaque [module /[Default VFS]/]
  1363. Accepting operation type 58 from module /[Default VFS]/
  1364. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1365. Checking operation #59 (type 59, layer 0)
  1366. Making operation type 59 opaque [module /[Default VFS]/]
  1367. Accepting operation type 59 from module /[Default VFS]/
  1368. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1369. Checking operation #60 (type 60, layer 0)
  1370. Making operation type 60 opaque [module /[Default VFS]/]
  1371. Accepting operation type 60 from module /[Default VFS]/
  1372. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1373. Checking operation #61 (type 61, layer 0)
  1374. Making operation type 61 opaque [module /[Default VFS]/]
  1375. Accepting operation type 61 from module /[Default VFS]/
  1376. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1377. Checking operation #62 (type 62, layer 0)
  1378. Making operation type 62 opaque [module /[Default VFS]/]
  1379. Accepting operation type 62 from module /[Default VFS]/
  1380. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1381. Checking operation #63 (type 63, layer 0)
  1382. Making operation type 63 opaque [module /[Default VFS]/]
  1383. Accepting operation type 63 from module /[Default VFS]/
  1384. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1385. Checking operation #64 (type 64, layer 0)
  1386. Making operation type 64 opaque [module /[Default VFS]/]
  1387. Accepting operation type 64 from module /[Default VFS]/
  1388. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1389. Checking operation #65 (type 65, layer 0)
  1390. Making operation type 65 opaque [module /[Default VFS]/]
  1391. Accepting operation type 65 from module /[Default VFS]/
  1392. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1393. Checking operation #66 (type 66, layer 0)
  1394. Making operation type 66 opaque [module /[Default VFS]/]
  1395. Accepting operation type 66 from module /[Default VFS]/
  1396. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1397. Checking operation #67 (type 67, layer 0)
  1398. Making operation type 67 opaque [module /[Default VFS]/]
  1399. Accepting operation type 67 from module /[Default VFS]/
  1400. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1401. Checking operation #68 (type 68, layer 0)
  1402. Making operation type 68 opaque [module /[Default VFS]/]
  1403. Accepting operation type 68 from module /[Default VFS]/
  1404. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1405. Checking operation #69 (type 69, layer 0)
  1406. Making operation type 69 opaque [module /[Default VFS]/]
  1407. Accepting operation type 69 from module /[Default VFS]/
  1408. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1409. Checking operation #70 (type 70, layer 0)
  1410. Making operation type 70 opaque [module /[Default VFS]/]
  1411. Accepting operation type 70 from module /[Default VFS]/
  1412. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1413. Checking operation #71 (type 71, layer 0)
  1414. Making operation type 71 opaque [module /[Default VFS]/]
  1415. Accepting operation type 71 from module /[Default VFS]/
  1416. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1417. Checking operation #72 (type 72, layer 0)
  1418. Making operation type 72 opaque [module /[Default VFS]/]
  1419. Accepting operation type 72 from module /[Default VFS]/
  1420. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1421. Checking operation #73 (type 73, layer 0)
  1422. Making operation type 73 opaque [module /[Default VFS]/]
  1423. Accepting operation type 73 from module /[Default VFS]/
  1424. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1425. Checking operation #74 (type 74, layer 0)
  1426. Making operation type 74 opaque [module /[Default VFS]/]
  1427. Accepting operation type 74 from module /[Default VFS]/
  1428. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1429. Checking operation #75 (type 75, layer 0)
  1430. Making operation type 75 opaque [module /[Default VFS]/]
  1431. Accepting operation type 75 from module /[Default VFS]/
  1432. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1433. Checking operation #76 (type 76, layer 0)
  1434. Making operation type 76 opaque [module /[Default VFS]/]
  1435. Accepting operation type 76 from module /[Default VFS]/
  1436. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1437. Checking operation #77 (type 77, layer 0)
  1438. Making operation type 77 opaque [module /[Default VFS]/]
  1439. Accepting operation type 77 from module /[Default VFS]/
  1440. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1441. Checking operation #78 (type 78, layer 0)
  1442. Making operation type 78 opaque [module /[Default VFS]/]
  1443. Accepting operation type 78 from module /[Default VFS]/
  1444. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1445. Checking operation #79 (type 79, layer 0)
  1446. Making operation type 79 opaque [module /[Default VFS]/]
  1447. Accepting operation type 79 from module /[Default VFS]/
  1448. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1449. Checking operation #80 (type 80, layer 0)
  1450. Making operation type 80 opaque [module /[Default VFS]/]
  1451. Accepting operation type 80 from module /[Default VFS]/
  1452. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1453. Checking operation #81 (type 81, layer 0)
  1454. Making operation type 81 opaque [module /[Default VFS]/]
  1455. Accepting operation type 81 from module /[Default VFS]/
  1456. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1457. Checking operation #82 (type 82, layer 0)
  1458. Making operation type 82 opaque [module /[Default VFS]/]
  1459. Accepting operation type 82 from module /[Default VFS]/
  1460. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1461. Checking operation #83 (type 83, layer 0)
  1462. Making operation type 83 opaque [module /[Default VFS]/]
  1463. Accepting operation type 83 from module /[Default VFS]/
  1464. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1465. Checking operation #84 (type 84, layer 0)
  1466. Making operation type 84 opaque [module /[Default VFS]/]
  1467. Accepting operation type 84 from module /[Default VFS]/
  1468. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1469. Checking operation #85 (type 85, layer 0)
  1470. Making operation type 85 opaque [module /[Default VFS]/]
  1471. Accepting operation type 85 from module /[Default VFS]/
  1472. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1473. Checking operation #86 (type 86, layer 0)
  1474. Making operation type 86 opaque [module /[Default VFS]/]
  1475. Accepting operation type 86 from module /[Default VFS]/
  1476. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1477. Checking operation #87 (type 87, layer 0)
  1478. Making operation type 87 opaque [module /[Default VFS]/]
  1479. Accepting operation type 87 from module /[Default VFS]/
  1480. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1481. Checking operation #88 (type 88, layer 0)
  1482. Making operation type 88 opaque [module /[Default VFS]/]
  1483. Accepting operation type 88 from module /[Default VFS]/
  1484. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1485. Checking operation #89 (type 89, layer 0)
  1486. Making operation type 89 opaque [module /[Default VFS]/]
  1487. Accepting operation type 89 from module /[Default VFS]/
  1488. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1489. Checking operation #90 (type 90, layer 0)
  1490. Making operation type 90 opaque [module /[Default VFS]/]
  1491. Accepting operation type 90 from module /[Default VFS]/
  1492. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1493. Checking operation #91 (type 91, layer 0)
  1494. Making operation type 91 opaque [module /[Default VFS]/]
  1495. Accepting operation type 91 from module /[Default VFS]/
  1496. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1497. Checking operation #92 (type 92, layer 0)
  1498. Making operation type 92 opaque [module /[Default VFS]/]
  1499. Accepting operation type 92 from module /[Default VFS]/
  1500. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1501. Checking operation #93 (type 93, layer 0)
  1502. Making operation type 93 opaque [module /[Default VFS]/]
  1503. Accepting operation type 93 from module /[Default VFS]/
  1504. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1505. Checking operation #94 (type 94, layer 0)
  1506. Making operation type 94 opaque [module /[Default VFS]/]
  1507. Accepting operation type 94 from module /[Default VFS]/
  1508. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1509. Checking operation #95 (type 95, layer 0)
  1510. Making operation type 95 opaque [module /[Default VFS]/]
  1511. Accepting operation type 95 from module /[Default VFS]/
  1512. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1513. Checking operation #96 (type 96, layer 0)
  1514. Making operation type 96 opaque [module /[Default VFS]/]
  1515. Accepting operation type 96 from module /[Default VFS]/
  1516. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1517. Checking operation #97 (type 97, layer 0)
  1518. Making operation type 97 opaque [module /[Default VFS]/]
  1519. Accepting operation type 97 from module /[Default VFS]/
  1520. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1521. Checking operation #98 (type 98, layer 0)
  1522. Making operation type 98 opaque [module /[Default VFS]/]
  1523. Accepting operation type 98 from module /[Default VFS]/
  1524. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1525. Checking operation #99 (type 99, layer 0)
  1526. Making operation type 99 opaque [module /[Default VFS]/]
  1527. Accepting operation type 99 from module /[Default VFS]/
  1528. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1529. Checking operation #100 (type 100, layer 0)
  1530. Making operation type 100 opaque [module /[Default VFS]/]
  1531. Accepting operation type 100 from module /[Default VFS]/
  1532. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1533. Checking operation #101 (type 101, layer 0)
  1534. Making operation type 101 opaque [module /[Default VFS]/]
  1535. Accepting operation type 101 from module /[Default VFS]/
  1536. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1537. Checking operation #102 (type 102, layer 0)
  1538. Making operation type 102 opaque [module /[Default VFS]/]
  1539. Accepting operation type 102 from module /[Default VFS]/
  1540. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1541. Checking operation #103 (type 103, layer 0)
  1542. Making operation type 103 opaque [module /[Default VFS]/]
  1543. Accepting operation type 103 from module /[Default VFS]/
  1544. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1545. Checking operation #104 (type 104, layer 0)
  1546. Making operation type 104 opaque [module /[Default VFS]/]
  1547. Accepting operation type 104 from module /[Default VFS]/
  1548. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1549. Checking operation #105 (type 105, layer 0)
  1550. Making operation type 105 opaque [module /[Default VFS]/]
  1551. Accepting operation type 105 from module /[Default VFS]/
  1552. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1553. Checking operation #106 (type 106, layer 0)
  1554. Making operation type 106 opaque [module /[Default VFS]/]
  1555. Accepting operation type 106 from module /[Default VFS]/
  1556. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1557. Checking operation #107 (type 107, layer 0)
  1558. Making operation type 107 opaque [module /[Default VFS]/]
  1559. Accepting operation type 107 from module /[Default VFS]/
  1560. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1561. Checking operation #108 (type 108, layer 0)
  1562. Making operation type 108 opaque [module /[Default VFS]/]
  1563. Accepting operation type 108 from module /[Default VFS]/
  1564. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1565. Checking operation #109 (type 109, layer 0)
  1566. Making operation type 109 opaque [module /[Default VFS]/]
  1567. Accepting operation type 109 from module /[Default VFS]/
  1568. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  1569. Checking operation #110 (type 110, layer 0)
  1570. Making operation type 110 opaque [module /[Default VFS]/]
  1571. Accepting operation type 110 from module /[Default VFS]/
  1572. [2011/11/22 12:36:24, 5] smbd/connection.c:142(claim_connection)
  1573. claiming [IPC$]
  1574. [2011/11/22 12:36:24, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
  1575. Locking key 570B00000100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  1576. [2011/11/22 12:36:24, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
  1577. Allocated locked data 0x0xb77e0c68
  1578. [2011/11/22 12:36:24, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
  1579. Unlocking key 570B00000100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  1580. [2011/11/22 12:36:24, 10] smbd/share_access.c:234(user_ok_token)
  1581. user_ok_token: share IPC$ is ok for unix user nobody
  1582. [2011/11/22 12:36:24, 10] smbd/share_access.c:279(is_share_read_only_for_token)
  1583. is_share_read_only_for_user: share IPC$ is read-only for unix user nobody
  1584. [2011/11/22 12:36:24, 10] lib/util_seaccess.c:58(se_map_generic)
  1585. se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
  1586. [2011/11/22 12:36:24, 3] lib/util_sid.c:228(string_to_sid)
  1587. string_to_sid: Sid @DomainAdmins does not start with 'S-'.
  1588. [2011/11/22 12:36:24, 5] smbd/password.c:407(user_in_netgroup)
  1589. looking for user nobody of domain i92.in.ac-versailles.fr in netgroup DomainAdmins
  1590. [2011/11/22 12:36:24, 5] smbd/password.c:423(user_in_netgroup)
  1591. looking for user nobody of domain i92.in.ac-versailles.fr in netgroup DomainAdmins
  1592. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:69(lookup_name)
  1593. lookup_name: IA92\DomainAdmins => IA92 (domain), DomainAdmins (name)
  1594. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:70(lookup_name)
  1595. lookup_name: flags = 0x077
  1596. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  1597. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  1598. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  1599. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  1600. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  1601. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  1602. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  1603. NT user token: (NULL)
  1604. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  1605. UNIX token of user 0
  1606. Primary group is 0 and contains 0 supplementary groups
  1607. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  1608. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(|(displayName=DomainAdmins)(cn=DomainAdmins)))], scope => [2]
  1609. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  1610. smbldap_open: already connected to the LDAP server
  1611. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  1612. init_group_from_ldap: Entry found for group: 512
  1613. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  1614. attribute displayName does not exist
  1615. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  1616. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  1617. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  1618. element 3: DEFAULT
  1619. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  1620. element 1: DEFAULT
  1621. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  1622. element 4: DEFAULT
  1623. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  1624. element 2: DEFAULT
  1625. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  1626. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  1627. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  1628. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  1629. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  1630. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  1631. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  1632. NT user token: (NULL)
  1633. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  1634. UNIX token of user 0
  1635. Primary group is 0 and contains 0 supplementary groups
  1636. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  1637. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  1638. , timeout = Tue Nov 22 12:37:24 2011
  1639. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  1640. ldapsam_get_account_policy: got valid value from cache
  1641. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  1642. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  1643. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  1644. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  1645. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  1646. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  1647. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  1648. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  1649. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1650. element 5 -> now SET
  1651. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1652. element 6 -> now SET
  1653. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1654. element 7 -> now SET
  1655. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1656. element 8 -> now SET
  1657. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1658. element 9 -> now SET
  1659. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1660. element 10 -> now SET
  1661. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1662. element 21 -> now SET
  1663. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  1664. pdb_set_username: setting username nobody, was
  1665. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1666. element 12 -> now SET
  1667. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  1668. pdb_set_domain: setting domain IA92, was
  1669. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1670. element 14 -> now SET
  1671. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  1672. pdb_set_nt_username: setting nt username , was
  1673. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1674. element 15 -> now SET
  1675. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  1676. pdb_set_full_name: setting full name nobody, was
  1677. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1678. element 13 -> now SET
  1679. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  1680. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  1681. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1682. element 1 -> now DEFAULT
  1683. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  1684. pdb_set_dir_drive: setting dir drive , was NULL
  1685. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1686. element 3 -> now DEFAULT
  1687. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  1688. pdb_set_logon_script: setting logon script nobody.bat, was
  1689. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1690. element 4 -> now DEFAULT
  1691. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  1692. pdb_set_profile_path: setting profile path , was
  1693. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1694. element 2 -> now DEFAULT
  1695. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1696. element 22 -> now SET
  1697. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  1698. pdb_set_workstations: setting workstations , was
  1699. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1700. element 23 -> now SET
  1701. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1702. element 25 -> now SET
  1703. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  1704. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  1705. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  1706. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  1707. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  1708. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  1709. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  1710. NT user token: (NULL)
  1711. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  1712. UNIX token of user 0
  1713. Primary group is 0 and contains 0 supplementary groups
  1714. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  1715. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  1716. , timeout = Tue Nov 22 12:37:24 2011
  1717. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  1718. ldapsam_get_account_policy: got valid value from cache
  1719. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  1720. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  1721. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1722. element 33 -> now SET
  1723. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  1724. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  1725. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1726. element 18 -> now SET
  1727. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  1728. pdb_set_user_sid_from_rid:
  1729. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  1730. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1731. element 16 -> now SET
  1732. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1733. element 28 -> now SET
  1734. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1735. element 29 -> now SET
  1736. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1737. element 30 -> now SET
  1738. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1739. element 20 -> now SET
  1740. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1741. element 17 -> now SET
  1742. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1743. element 26 -> now SET
  1744. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  1745. setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  1746. [2011/11/22 12:36:24, 5] auth/token_util.c:528(debug_nt_user_token)
  1747. NT user token of user S-1-5-21-1187454690-116783985-3613760195-501
  1748. contains 5 SIDs
  1749. SID[ 0]: S-1-5-21-1187454690-116783985-3613760195-501
  1750. SID[ 1]: S-1-1-0
  1751. SID[ 2]: S-1-5-2
  1752. SID[ 3]: S-1-5-32-546
  1753. SID[ 4]: S-1-22-1-65534
  1754. SE_PRIV 0x0 0x0 0x0 0x0
  1755. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  1756. UNIX token of user 65534
  1757. Primary group is 65534 and contains 0 supplementary groups
  1758. [2011/11/22 12:36:24, 5] smbd/uid.c:353(change_to_user)
  1759. change_to_user uid=(0,65534) gid=(0,65534)
  1760. [2011/11/22 12:36:24, 3] smbd/service.c:1047(make_connection_snum)
  1761. testsige3 (192.168.0.10) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 2903)
  1762. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  1763. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  1764. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  1765. NT user token: (NULL)
  1766. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  1767. UNIX token of user 0
  1768. Primary group is 0 and contains 0 supplementary groups
  1769. [2011/11/22 12:36:24, 5] smbd/uid.c:368(change_to_root_user)
  1770. change_to_root_user: now uid=(0,0) gid=(0,0)
  1771. [2011/11/22 12:36:24, 3] smbd/reply.c:759(reply_tcon_and_X)
  1772. tconX service=IPC$
  1773. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  1774. got smb length of 104
  1775. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  1776. got message type 0x0 of len 0x68
  1777. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  1778. Transaction 4 of length 108 (0 toread)
  1779. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  1780. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  1781. size=104
  1782. smb_com=0xa2
  1783. smb_rcls=0
  1784. smb_reh=0
  1785. smb_err=0
  1786. smb_flg=24
  1787. smb_flg2=51207
  1788. smb_tid=1
  1789. smb_pid=676
  1790. smb_uid=100
  1791. smb_mid=256
  1792. smt_wct=24
  1793. smb_vwv[ 0]= 255 (0xFF)
  1794. smb_vwv[ 1]=57054 (0xDEDE)
  1795. smb_vwv[ 2]= 4608 (0x1200)
  1796. smb_vwv[ 3]= 5632 (0x1600)
  1797. smb_vwv[ 4]= 0 (0x0)
  1798. smb_vwv[ 5]= 0 (0x0)
  1799. smb_vwv[ 6]= 0 (0x0)
  1800. smb_vwv[ 7]=40704 (0x9F00)
  1801. smb_vwv[ 8]= 513 (0x201)
  1802. smb_vwv[ 9]= 0 (0x0)
  1803. smb_vwv[10]= 0 (0x0)
  1804. smb_vwv[11]= 0 (0x0)
  1805. smb_vwv[12]= 0 (0x0)
  1806. smb_vwv[13]= 0 (0x0)
  1807. smb_vwv[14]= 0 (0x0)
  1808. smb_vwv[15]= 768 (0x300)
  1809. smb_vwv[16]= 0 (0x0)
  1810. smb_vwv[17]= 256 (0x100)
  1811. smb_vwv[18]= 0 (0x0)
  1812. smb_vwv[19]=16384 (0x4000)
  1813. smb_vwv[20]=16384 (0x4000)
  1814. smb_vwv[21]= 512 (0x200)
  1815. smb_vwv[22]= 0 (0x0)
  1816. smb_vwv[23]= 256 (0x100)
  1817. smb_bcc=21
  1818. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  1819. [0000] 00 5C 00 4E 00 45 00 54 00 4C 00 4F 00 47 00 4F .\.N.E.T .L.O.G.O
  1820. [0010] 00 4E 00 00 00 .N...
  1821. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  1822. switch message SMBntcreateX (pid 2903) conn 0xb77dcab8
  1823. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  1824. setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  1825. [2011/11/22 12:36:24, 5] auth/token_util.c:528(debug_nt_user_token)
  1826. NT user token of user S-1-5-21-1187454690-116783985-3613760195-501
  1827. contains 5 SIDs
  1828. SID[ 0]: S-1-5-21-1187454690-116783985-3613760195-501
  1829. SID[ 1]: S-1-1-0
  1830. SID[ 2]: S-1-5-2
  1831. SID[ 3]: S-1-5-32-546
  1832. SID[ 4]: S-1-22-1-65534
  1833. SE_PRIV 0x0 0x0 0x0 0x0
  1834. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  1835. UNIX token of user 65534
  1836. Primary group is 65534 and contains 0 supplementary groups
  1837. [2011/11/22 12:36:24, 5] smbd/uid.c:353(change_to_user)
  1838. change_to_user uid=(0,65534) gid=(0,65534)
  1839. [2011/11/22 12:36:24, 4] smbd/vfs.c:753(vfs_ChDir)
  1840. vfs_ChDir to /tmp
  1841. [2011/11/22 12:36:24, 10] smbd/nttrans.c:484(reply_ntcreate_and_X)
  1842. reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = NETLOGON
  1843. [2011/11/22 12:36:24, 4] smbd/nttrans.c:315(nt_open_pipe)
  1844. nt_open_pipe: Opening pipe \NETLOGON.
  1845. [2011/11/22 12:36:24, 5] smbd/files.c:103(file_new)
  1846. allocated file structure 623, fnum = 4719 (1 used)
  1847. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
  1848. Create pipe requested \NETLOGON
  1849. [2011/11/22 12:36:24, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
  1850. init_pipe_handles: created handle list for pipe \NETLOGON
  1851. [2011/11/22 12:36:24, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
  1852. init_pipe_handles: pipe_handles ref count = 1 for pipe \NETLOGON
  1853. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  1854. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65534))], scope => [2]
  1855. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  1856. smbldap_open: already connected to the LDAP server
  1857. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  1858. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65534))
  1859. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  1860. element 3: DEFAULT
  1861. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  1862. element 1: DEFAULT
  1863. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  1864. element 4: DEFAULT
  1865. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  1866. element 2: DEFAULT
  1867. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  1868. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  1869. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  1870. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  1871. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  1872. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  1873. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  1874. NT user token: (NULL)
  1875. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  1876. UNIX token of user 0
  1877. Primary group is 0 and contains 0 supplementary groups
  1878. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  1879. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  1880. , timeout = Tue Nov 22 12:37:24 2011
  1881. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  1882. ldapsam_get_account_policy: got valid value from cache
  1883. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  1884. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  1885. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  1886. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  1887. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  1888. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  1889. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  1890. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  1891. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1892. element 5 -> now SET
  1893. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1894. element 6 -> now SET
  1895. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1896. element 7 -> now SET
  1897. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1898. element 8 -> now SET
  1899. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1900. element 9 -> now SET
  1901. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1902. element 10 -> now SET
  1903. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1904. element 21 -> now SET
  1905. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  1906. pdb_set_username: setting username nobody, was
  1907. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1908. element 12 -> now SET
  1909. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  1910. pdb_set_domain: setting domain IA92, was
  1911. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1912. element 14 -> now SET
  1913. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  1914. pdb_set_nt_username: setting nt username , was
  1915. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1916. element 15 -> now SET
  1917. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  1918. pdb_set_full_name: setting full name nobody, was
  1919. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1920. element 13 -> now SET
  1921. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  1922. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  1923. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1924. element 1 -> now DEFAULT
  1925. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  1926. pdb_set_dir_drive: setting dir drive , was NULL
  1927. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1928. element 3 -> now DEFAULT
  1929. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  1930. pdb_set_logon_script: setting logon script nobody.bat, was
  1931. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1932. element 4 -> now DEFAULT
  1933. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  1934. pdb_set_profile_path: setting profile path , was
  1935. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  1936. element 2 -> now DEFAULT
  1937. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1938. element 22 -> now SET
  1939. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  1940. pdb_set_workstations: setting workstations , was
  1941. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1942. element 23 -> now SET
  1943. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1944. element 25 -> now SET
  1945. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  1946. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  1947. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  1948. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  1949. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  1950. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  1951. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  1952. NT user token: (NULL)
  1953. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  1954. UNIX token of user 0
  1955. Primary group is 0 and contains 0 supplementary groups
  1956. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  1957. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  1958. , timeout = Tue Nov 22 12:37:24 2011
  1959. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  1960. ldapsam_get_account_policy: got valid value from cache
  1961. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  1962. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  1963. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1964. element 33 -> now SET
  1965. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  1966. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  1967. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1968. element 18 -> now SET
  1969. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  1970. pdb_set_user_sid_from_rid:
  1971. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  1972. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1973. element 16 -> now SET
  1974. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1975. element 28 -> now SET
  1976. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1977. element 29 -> now SET
  1978. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1979. element 30 -> now SET
  1980. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1981. element 20 -> now SET
  1982. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1983. element 17 -> now SET
  1984. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  1985. element 26 -> now SET
  1986. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
  1987. Created internal pipe \NETLOGON (pipes_open=0)
  1988. [2011/11/22 12:36:24, 5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
  1989. do_ntcreate_pipe_open: open pipe = \NETLOGON
  1990. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  1991. got smb length of 178
  1992. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  1993. got message type 0x0 of len 0xb2
  1994. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  1995. Transaction 5 of length 182 (0 toread)
  1996. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  1997. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  1998. size=178
  1999. smb_com=0x2f
  2000. smb_rcls=0
  2001. smb_reh=0
  2002. smb_err=0
  2003. smb_flg=24
  2004. smb_flg2=51207
  2005. smb_tid=1
  2006. smb_pid=65279
  2007. smb_uid=100
  2008. smb_mid=320
  2009. smt_wct=14
  2010. smb_vwv[ 0]= 255 (0xFF)
  2011. smb_vwv[ 1]=57054 (0xDEDE)
  2012. smb_vwv[ 2]= 4719 (0x126F)
  2013. smb_vwv[ 3]= 0 (0x0)
  2014. smb_vwv[ 4]= 0 (0x0)
  2015. smb_vwv[ 5]=65535 (0xFFFF)
  2016. smb_vwv[ 6]=65535 (0xFFFF)
  2017. smb_vwv[ 7]= 8 (0x8)
  2018. smb_vwv[ 8]= 114 (0x72)
  2019. smb_vwv[ 9]= 0 (0x0)
  2020. smb_vwv[10]= 114 (0x72)
  2021. smb_vwv[11]= 64 (0x40)
  2022. smb_vwv[12]= 0 (0x0)
  2023. smb_vwv[13]= 0 (0x0)
  2024. smb_bcc=115
  2025. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  2026. [0000] EE 05 00 0B 07 10 00 00 00 72 00 22 00 01 00 00 ........ .r."....
  2027. [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........
  2028. [0020] 00 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF .xV4.4.. ....#Eg.
  2029. [0030] FB 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........
  2030. [0040] 00 2B 10 48 60 02 00 00 00 44 06 00 00 20 B6 0C .+.H`... .D... ..
  2031. [0050] 00 00 00 00 00 13 00 00 00 49 41 39 32 00 54 45 ........ .IA92.TE
  2032. [0060] 53 54 53 49 47 45 33 00 09 54 45 53 54 53 49 47 STSIGE3. .TESTSIG
  2033. [0070] 45 33 00 E3.
  2034. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  2035. switch message SMBwriteX (pid 2903) conn 0xb77dcab8
  2036. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  2037. created /tmp/SMBwriteX.29.req len 182
  2038. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  2039. change_to_user: Skipping user change - already user
  2040. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  2041. reply_pipe_write_and_X: 126f name: NETLOGON len: 114
  2042. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  2043. np_write_send: len: 114
  2044. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  2045. [0000] 05 00 0B 07 10 00 00 00 72 00 22 00 01 00 00 00 ........ r.".....
  2046. [0010] B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 ........ ........
  2047. [0020] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg..
  2048. [0030] 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 .....].. ........
  2049. [0040] 2B 10 48 60 02 00 00 00 44 06 00 00 20 B6 0C 00 +.H`.... D... ...
  2050. [0050] 00 00 00 00 13 00 00 00 49 41 39 32 00 54 45 53 ........ IA92.TES
  2051. [0060] 54 53 49 47 45 33 00 09 54 45 53 54 53 49 47 45 TSIGE3.. TESTSIGE
  2052. [0070] 33 00 3.
  2053. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  2054. write_to_pipe: data_left = 114
  2055. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  2056. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 114
  2057. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  2058. fill_rpc_header: data_to_copy = 114, len_needed_to_complete_hdr = 16, receive_len = 0
  2059. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  2060. write_to_pipe: data_used = 16
  2061. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  2062. write_to_pipe: data_left = 98
  2063. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  2064. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 98
  2065. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2066. 000000 smb_io_rpc_hdr
  2067. 0000 major : 05
  2068. 0001 minor : 00
  2069. 0002 pkt_type : 0b
  2070. 0003 flags : 07
  2071. 0004 pack_type0: 10
  2072. 0005 pack_type1: 00
  2073. 0006 pack_type2: 00
  2074. 0007 pack_type3: 00
  2075. 0008 frag_len : 0072
  2076. 000a auth_len : 0022
  2077. 000c call_id : 00000001
  2078. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  2079. unmarshall_rpc_header: using little-endian RPC
  2080. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  2081. unmarshall_rpc_header: type = 11, flags = 7
  2082. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  2083. write_to_pipe: data_used = 0
  2084. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  2085. write_to_pipe: data_left = 98
  2086. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  2087. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 98, incoming data = 98
  2088. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  2089. process_complete_pdu: processing packet type 11
  2090. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
  2091. api_pipe_bind_req: decode request. 1558
  2092. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2093. 000000 smb_io_rpc_hdr_rb
  2094. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2095. 000000 smb_io_rpc_hdr_bba
  2096. 0000 max_tsize: 10b8
  2097. 0002 max_rsize: 10b8
  2098. 0004 assoc_gid: 00000000
  2099. 0008 num_contexts: 01
  2100. 000c context_id : 0000
  2101. 000e num_transfer_syntaxes: 01
  2102. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2103. 00000f smb_io_rpc_iface
  2104. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  2105. 000010 smb_io_uuid uuid
  2106. 0010 data : 12345678
  2107. 0014 data : 1234
  2108. 0016 data : abcd
  2109. 0018 data : ef 00
  2110. 001a data : 01 23 45 67 cf fb
  2111. 0020 version: 00000001
  2112. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2113. 000024 smb_io_rpc_iface
  2114. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  2115. 000024 smb_io_uuid uuid
  2116. 0024 data : 8a885d04
  2117. 0028 data : 1ceb
  2118. 002a data : 11c9
  2119. 002c data : 9f e8
  2120. 002e data : 08 00 2b 10 48 60
  2121. 0034 version: 00000002
  2122. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
  2123. api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
  2124. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
  2125. api_pipe_bind_req: make response. 1628
  2126. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2127. 000038 smb_io_rpc_hdr_auth
  2128. 0038 auth_type : 44
  2129. 0039 auth_level : 06
  2130. 003a auth_pad_len : 00
  2131. 003b auth_reserved: 00
  2132. 003c auth_context_id: 000cb620
  2133. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2134. 000040 smb_io_rpc_auth_schannel_neg
  2135. 0040 type1: 00000000
  2136. 0044 type2: 00000013
  2137. [2011/11/22 12:36:24, 6] ../lib/util/util.c:304(_dump_data)
  2138. [0000] 49 41 39 32 IA92
  2139. [2011/11/22 12:36:24, 6] ../lib/util/util.c:304(_dump_data)
  2140. [0000] 54 45 53 54 53 49 47 45 33 TESTSIGE 3
  2141. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  2142. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  2143. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  2144. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  2145. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  2146. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  2147. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  2148. NT user token: (NULL)
  2149. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  2150. UNIX token of user 0
  2151. Primary group is 0 and contains 0 supplementary groups
  2152. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  2153. tdb_unpack(dBBBBBfff, 106) -> 106
  2154. [2011/11/22 12:36:24, 3] passdb/secrets.c:1335(secrets_restore_schannel_session_info)
  2155. secrets_restore_schannel_session_info: restored schannel info key SECRETS/SCHANNEL/TESTSIGE3
  2156. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  2157. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  2158. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2159. 000000 smb_io_rpc_hdr_auth
  2160. 0000 auth_type : 44
  2161. 0001 auth_level : 06
  2162. 0002 auth_pad_len : 08
  2163. 0003 auth_reserved: 00
  2164. 0004 auth_context_id: 00000001
  2165. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2166. 000008 smb_io_rpc_schannel_verifier
  2167. [2011/11/22 12:36:24, 6] ../lib/util/util.c:304(_dump_data)
  2168. [0000] 01 .
  2169. 000a msg_type : 00000000
  2170. 0010 flags : 00000005
  2171. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe.c:1416(pipe_schannel_auth_bind)
  2172. pipe_schannel_auth_bind: schannel auth: domain [IA92] myname [TESTSIGE3]
  2173. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:960(check_bind_req)
  2174. check_bind_req for \NETLOGON
  2175. checking lsarpc
  2176. checking winreg
  2177. checking initshutdown
  2178. checking dssetup
  2179. checking wkssvc
  2180. checking svcctl
  2181. checking ntsvcs
  2182. checking netlogon
  2183. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2184. 000000 smb_io_rpc_hdr_ba
  2185. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2186. 000000 smb_io_rpc_hdr_bba
  2187. 0000 max_tsize: 10b8
  2188. 0002 max_rsize: 10b8
  2189. 0004 assoc_gid: 000053f0
  2190. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2191. 000008 smb_io_rpc_addr_str
  2192. 0008 len: 000f
  2193. 000a str: \PIPE\netlogon.
  2194. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2195. 000019 smb_io_rpc_results
  2196. 001c num_results: 01
  2197. 0020 result : 0000
  2198. 0022 reason : 0000
  2199. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2200. 000024 smb_io_rpc_iface
  2201. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  2202. 000024 smb_io_uuid uuid
  2203. 0024 data : 8a885d04
  2204. 0028 data : 1ceb
  2205. 002a data : 11c9
  2206. 002c data : 9f e8
  2207. 002e data : 08 00 2b 10 48 60
  2208. 0034 version: 00000002
  2209. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2210. 000000 smb_io_rpc_hdr
  2211. 0000 major : 05
  2212. 0001 minor : 00
  2213. 0002 pkt_type : 0c
  2214. 0003 flags : 03
  2215. 0004 pack_type0: 10
  2216. 0005 pack_type1: 00
  2217. 0006 pack_type2: 00
  2218. 0007 pack_type3: 00
  2219. 0008 frag_len : 005c
  2220. 000a auth_len : 000c
  2221. 000c call_id : 00000001
  2222. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  2223. write_to_pipe: data_used = 98
  2224. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2225. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0018
  2226. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2227. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0018
  2228. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  2229. writeX-IPC nwritten=114
  2230. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  2231. got smb length of 59
  2232. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  2233. got message type 0x0 of len 0x3b
  2234. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  2235. Transaction 6 of length 63 (0 toread)
  2236. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  2237. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  2238. size=59
  2239. smb_com=0x2e
  2240. smb_rcls=0
  2241. smb_reh=0
  2242. smb_err=0
  2243. smb_flg=24
  2244. smb_flg2=51207
  2245. smb_tid=1
  2246. smb_pid=65279
  2247. smb_uid=100
  2248. smb_mid=384
  2249. smt_wct=12
  2250. smb_vwv[ 0]= 255 (0xFF)
  2251. smb_vwv[ 1]=57054 (0xDEDE)
  2252. smb_vwv[ 2]= 4719 (0x126F)
  2253. smb_vwv[ 3]= 0 (0x0)
  2254. smb_vwv[ 4]= 0 (0x0)
  2255. smb_vwv[ 5]= 1024 (0x400)
  2256. smb_vwv[ 6]= 1024 (0x400)
  2257. smb_vwv[ 7]=65535 (0xFFFF)
  2258. smb_vwv[ 8]=65535 (0xFFFF)
  2259. smb_vwv[ 9]= 1024 (0x400)
  2260. smb_vwv[10]= 0 (0x0)
  2261. smb_vwv[11]= 0 (0x0)
  2262. smb_bcc=0
  2263. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  2264. switch message SMBreadX (pid 2903) conn 0xb77dcab8
  2265. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  2266. change_to_user: Skipping user change - already user
  2267. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  2268. name: \NETLOGON len: 1024
  2269. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
  2270. read_from_pipe: \NETLOGON: current_pdu_len = 92, current_pdu_sent = 0 returning 92 bytes.
  2271. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2272. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  2273. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2274. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  2275. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  2276. readX-IPC min=1024 max=1024 nread=92
  2277. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  2278. got smb length of 448
  2279. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  2280. got message type 0x0 of len 0x1c0
  2281. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  2282. Transaction 7 of length 452 (0 toread)
  2283. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  2284. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  2285. size=448
  2286. smb_com=0x2f
  2287. smb_rcls=0
  2288. smb_reh=0
  2289. smb_err=0
  2290. smb_flg=24
  2291. smb_flg2=51207
  2292. smb_tid=1
  2293. smb_pid=65279
  2294. smb_uid=100
  2295. smb_mid=448
  2296. smt_wct=14
  2297. smb_vwv[ 0]= 255 (0xFF)
  2298. smb_vwv[ 1]=57054 (0xDEDE)
  2299. smb_vwv[ 2]= 4719 (0x126F)
  2300. smb_vwv[ 3]= 0 (0x0)
  2301. smb_vwv[ 4]= 0 (0x0)
  2302. smb_vwv[ 5]=65535 (0xFFFF)
  2303. smb_vwv[ 6]=65535 (0xFFFF)
  2304. smb_vwv[ 7]= 8 (0x8)
  2305. smb_vwv[ 8]= 384 (0x180)
  2306. smb_vwv[ 9]= 0 (0x0)
  2307. smb_vwv[10]= 384 (0x180)
  2308. smb_vwv[11]= 64 (0x40)
  2309. smb_vwv[12]= 0 (0x0)
  2310. smb_vwv[13]= 0 (0x0)
  2311. smb_bcc=385
  2312. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  2313. [0000] EE 05 00 00 03 10 00 00 00 80 01 20 00 01 00 00 ........ ... ....
  2314. [0010] 00 40 01 00 00 00 00 02 00 0E CA 12 B5 14 6D 56 .@...... ......mV
  2315. [0020] 26 D0 DD 3D 25 AF E5 D8 38 52 96 59 4E AC E0 D7 &..=%... 8R.YN...
  2316. [0030] BC ED 65 3B 4A B5 19 62 25 F9 C1 10 48 DD 0B 06 ..e;J..b %...H...
  2317. [0040] 26 DA A0 BD 28 1D 0E 80 73 32 BB DA 13 6F 0E 3E &...(... s2...o.>
  2318. [0050] 63 08 7C D6 9B 94 DE 7D CD 8A 34 00 51 13 A7 72 c.|....} ..4.Q..r
  2319. [0060] 9A 67 A3 1A 02 CF 49 4A FC 24 73 D4 33 F6 96 BB .g....IJ .$s.3...
  2320. [0070] DB 17 B2 15 D7 14 40 6E CC 31 17 D6 91 37 22 5D ......@n .1...7"]
  2321. [0080] 09 A8 98 AA D9 A1 D7 61 0C 24 11 8F BE C2 A3 4F .......a .$.....O
  2322. [0090] 3C 4E 85 5A 98 2C 7E 2B B8 5F 83 A4 F3 4D D7 45 <N.Z.,~+ ._...M.E
  2323. [00A0] 7F 7E CE 2E 83 4F 9C 12 C2 02 40 00 38 6E 02 18 .~...O.. ..@.8n..
  2324. [00B0] CA 86 7A 4D 1B 41 C6 43 9D 4E B5 CE A2 8E FA D9 ..zM.A.C .N......
  2325. [00C0] 5F C2 93 7C 2B 07 11 62 1B AF 9A 7A 42 A4 98 A3 _..|+..b ...zB...
  2326. [00D0] 1D 2F 2F CE D0 7F 85 5E 5D 74 74 F4 20 5A C3 FD .//....^ ]tt. Z..
  2327. [00E0] 8C D1 7E F0 34 16 63 75 F1 0C 88 31 D6 62 6A C5 ..~.4.cu ...1.bj.
  2328. [00F0] 56 3F 65 F9 F0 A6 B4 99 8B 0A E3 85 8F B1 A5 AE V?e..... ........
  2329. [0100] C2 9D 81 EA 4A 35 32 EB DD B7 A9 A3 6F 52 E4 81 ....J52. ....oR..
  2330. [0110] C7 78 0E 1E 91 C0 A8 70 55 FB EE E0 D8 01 7A 26 .x.....p U.....z&
  2331. [0120] FB 1E AF 68 54 D2 74 17 F4 C4 71 DE CA 42 D1 BD ...hT.t. ..q..B..
  2332. [0130] 22 52 49 7C 24 A4 50 D4 F3 AA B7 0C 53 C9 03 37 "RI|$.P. ....S..7
  2333. [0140] 16 AA 11 FA E9 88 38 DB 94 32 44 C9 C1 DE 3C 4F ......8. .2D...<O
  2334. [0150] BA FB 3E D2 59 1E D4 18 A6 44 06 00 00 20 B6 0C ..>.Y... .D... ..
  2335. [0160] 00 77 00 7A 00 FF FF 00 00 4A C6 37 F2 2D 8A 43 .w.z.... .J.7.-.C
  2336. [0170] 56 A5 29 00 12 D4 1D 84 D7 04 1C 5F C5 A6 E1 A8 V.)..... ..._....
  2337. [0180] C6 .
  2338. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  2339. switch message SMBwriteX (pid 2903) conn 0xb77dcab8
  2340. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  2341. created /tmp/SMBwriteX.30.req len 452
  2342. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  2343. change_to_user: Skipping user change - already user
  2344. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  2345. reply_pipe_write_and_X: 126f name: NETLOGON len: 384
  2346. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  2347. np_write_send: len: 384
  2348. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  2349. [0000] 05 00 00 03 10 00 00 00 80 01 20 00 01 00 00 00 ........ .. .....
  2350. [0010] 40 01 00 00 00 00 02 00 0E CA 12 B5 14 6D 56 26 @....... .....mV&
  2351. [0020] D0 DD 3D 25 AF E5 D8 38 52 96 59 4E AC E0 D7 BC ..=%...8 R.YN....
  2352. [0030] ED 65 3B 4A B5 19 62 25 F9 C1 10 48 DD 0B 06 26 .e;J..b% ...H...&
  2353. [0040] DA A0 BD 28 1D 0E 80 73 32 BB DA 13 6F 0E 3E 63 ...(...s 2...o.>c
  2354. [0050] 08 7C D6 9B 94 DE 7D CD 8A 34 00 51 13 A7 72 9A .|....}. .4.Q..r.
  2355. [0060] 67 A3 1A 02 CF 49 4A FC 24 73 D4 33 F6 96 BB DB g....IJ. $s.3....
  2356. [0070] 17 B2 15 D7 14 40 6E CC 31 17 D6 91 37 22 5D 09 .....@n. 1...7"].
  2357. [0080] A8 98 AA D9 A1 D7 61 0C 24 11 8F BE C2 A3 4F 3C ......a. $.....O<
  2358. [0090] 4E 85 5A 98 2C 7E 2B B8 5F 83 A4 F3 4D D7 45 7F N.Z.,~+. _...M.E.
  2359. [00A0] 7E CE 2E 83 4F 9C 12 C2 02 40 00 38 6E 02 18 CA ~...O... .@.8n...
  2360. [00B0] 86 7A 4D 1B 41 C6 43 9D 4E B5 CE A2 8E FA D9 5F .zM.A.C. N......_
  2361. [00C0] C2 93 7C 2B 07 11 62 1B AF 9A 7A 42 A4 98 A3 1D ..|+..b. ..zB....
  2362. [00D0] 2F 2F CE D0 7F 85 5E 5D 74 74 F4 20 5A C3 FD 8C //....^] tt. Z...
  2363. [00E0] D1 7E F0 34 16 63 75 F1 0C 88 31 D6 62 6A C5 56 .~.4.cu. ..1.bj.V
  2364. [00F0] 3F 65 F9 F0 A6 B4 99 8B 0A E3 85 8F B1 A5 AE C2 ?e...... ........
  2365. [0100] 9D 81 EA 4A 35 32 EB DD B7 A9 A3 6F 52 E4 81 C7 ...J52.. ...oR...
  2366. [0110] 78 0E 1E 91 C0 A8 70 55 FB EE E0 D8 01 7A 26 FB x.....pU .....z&.
  2367. [0120] 1E AF 68 54 D2 74 17 F4 C4 71 DE CA 42 D1 BD 22 ..hT.t.. .q..B.."
  2368. [0130] 52 49 7C 24 A4 50 D4 F3 AA B7 0C 53 C9 03 37 16 RI|$.P.. ...S..7.
  2369. [0140] AA 11 FA E9 88 38 DB 94 32 44 C9 C1 DE 3C 4F BA .....8.. 2D...<O.
  2370. [0150] FB 3E D2 59 1E D4 18 A6 44 06 00 00 20 B6 0C 00 .>.Y.... D... ...
  2371. [0160] 77 00 7A 00 FF FF 00 00 4A C6 37 F2 2D 8A 43 56 w.z..... J.7.-.CV
  2372. [0170] A5 29 00 12 D4 1D 84 D7 04 1C 5F C5 A6 E1 A8 C6 .)...... .._.....
  2373. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  2374. write_to_pipe: data_left = 384
  2375. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  2376. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 384
  2377. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  2378. fill_rpc_header: data_to_copy = 384, len_needed_to_complete_hdr = 16, receive_len = 0
  2379. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  2380. write_to_pipe: data_used = 16
  2381. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  2382. write_to_pipe: data_left = 368
  2383. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  2384. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 368
  2385. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2386. 000000 smb_io_rpc_hdr
  2387. 0000 major : 05
  2388. 0001 minor : 00
  2389. 0002 pkt_type : 00
  2390. 0003 flags : 03
  2391. 0004 pack_type0: 10
  2392. 0005 pack_type1: 00
  2393. 0006 pack_type2: 00
  2394. 0007 pack_type3: 00
  2395. 0008 frag_len : 0180
  2396. 000a auth_len : 0020
  2397. 000c call_id : 00000001
  2398. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  2399. unmarshall_rpc_header: using little-endian RPC
  2400. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  2401. unmarshall_rpc_header: type = 0, flags = 3
  2402. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  2403. write_to_pipe: data_used = 0
  2404. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  2405. write_to_pipe: data_left = 368
  2406. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  2407. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 368, incoming data = 368
  2408. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  2409. process_complete_pdu: processing packet type 0
  2410. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2411. 000000 smb_io_rpc_hdr_req req
  2412. 0000 alloc_hint: 00000140
  2413. 0004 context_id: 0000
  2414. 0006 opnum : 0002
  2415. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2141(api_pipe_schannel_process)
  2416. data 320 auth 32
  2417. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2418. 000148 smb_io_rpc_hdr_auth hdr_auth
  2419. 0148 auth_type : 44
  2420. 0149 auth_level : 06
  2421. 014a auth_pad_len : 00
  2422. 014b auth_reserved: 00
  2423. 014c auth_context_id: 000cb620
  2424. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2425. 000150 smb_io_rpc_auth_schannel_chk
  2426. 0150 sig : 77 00 7a 00 ff ff 00 00
  2427. 0158 seq_num: 4a c6 37 f2 2d 8a 43 56
  2428. 0160 packet_digest: a5 29 00 12 d4 1d 84 d7
  2429. 0168 confounder: 04 1c 5f c5 a6 e1 a8 c6
  2430. [2011/11/22 12:36:24, 10] rpc_parse/parse_prs.c:1593(schannel_decode)
  2431. SCHANNEL: schannel_decode seq_num=0 data_len=320
  2432. [2011/11/22 12:36:24, 10] rpc_parse/parse_prs.c:1613(schannel_decode)
  2433. SCHANNEL: schannel_decode seq_num=0 data_len=320
  2434. [2011/11/22 12:36:24, 2] rpc_parse/parse_prs.c:1629(schannel_decode)
  2435. schannel_decode: FAILED: packet sequence number:
  2436. [2011/11/22 12:36:24, 2] ../lib/util/util.c:304(_dump_data)
  2437. [0000] 53 03 0F E1 6E E7 D1 0E S...n...
  2438. [2011/11/22 12:36:24, 2] rpc_parse/parse_prs.c:1631(schannel_decode)
  2439. should be:
  2440. [2011/11/22 12:36:24, 2] ../lib/util/util.c:304(_dump_data)
  2441. [0000] 00 00 00 00 80 00 00 00 ........
  2442. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:2170(api_pipe_schannel_process)
  2443. failed to decode PDU
  2444. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:405(process_request_pdu)
  2445. process_request_pdu: failed to do schannel processing.
  2446. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:179(set_incoming_fault)
  2447. set_incoming_fault: Setting fault state on pipe \NETLOGON
  2448. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:646(process_complete_pdu)
  2449. process_complete_pdu: DCE/RPC fault sent on pipe \NETLOGON
  2450. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:179(set_incoming_fault)
  2451. set_incoming_fault: Setting fault state on pipe \NETLOGON
  2452. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2453. 000000 smb_io_rpc_hdr
  2454. 0000 major : 05
  2455. 0001 minor : 00
  2456. 0002 pkt_type : 03
  2457. 0003 flags : 23
  2458. 0004 pack_type0: 10
  2459. 0005 pack_type1: 00
  2460. 0006 pack_type2: 00
  2461. 0007 pack_type3: 00
  2462. 0008 frag_len : 0020
  2463. 000a auth_len : 0000
  2464. 000c call_id : 00000001
  2465. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2466. 000010 smb_io_rpc_hdr_resp resp
  2467. 0010 alloc_hint: 00000000
  2468. 0014 context_id: 0000
  2469. 0016 cancel_ct : 00
  2470. 0017 reserved : 00
  2471. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2472. 000018 smb_io_rpc_hdr_fault fault
  2473. 0018 status : DCERPC_FAULT_OP_RNG_ERROR
  2474. 001c reserved: 00000000
  2475. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  2476. write_to_pipe: data_used = 368
  2477. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2478. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0128
  2479. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2480. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0128
  2481. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  2482. writeX-IPC nwritten=384
  2483. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  2484. got smb length of 59
  2485. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  2486. got message type 0x0 of len 0x3b
  2487. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  2488. Transaction 8 of length 63 (0 toread)
  2489. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  2490. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  2491. size=59
  2492. smb_com=0x2e
  2493. smb_rcls=0
  2494. smb_reh=0
  2495. smb_err=0
  2496. smb_flg=24
  2497. smb_flg2=51207
  2498. smb_tid=1
  2499. smb_pid=65279
  2500. smb_uid=100
  2501. smb_mid=513
  2502. smt_wct=12
  2503. smb_vwv[ 0]= 255 (0xFF)
  2504. smb_vwv[ 1]=57054 (0xDEDE)
  2505. smb_vwv[ 2]= 4719 (0x126F)
  2506. smb_vwv[ 3]= 0 (0x0)
  2507. smb_vwv[ 4]= 0 (0x0)
  2508. smb_vwv[ 5]= 1024 (0x400)
  2509. smb_vwv[ 6]= 1024 (0x400)
  2510. smb_vwv[ 7]=65535 (0xFFFF)
  2511. smb_vwv[ 8]=65535 (0xFFFF)
  2512. smb_vwv[ 9]= 1024 (0x400)
  2513. smb_vwv[10]= 0 (0x0)
  2514. smb_vwv[11]= 0 (0x0)
  2515. smb_bcc=0
  2516. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  2517. switch message SMBreadX (pid 2903) conn 0xb77dcab8
  2518. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  2519. change_to_user: Skipping user change - already user
  2520. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  2521. name: \NETLOGON len: 1024
  2522. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
  2523. read_from_pipe: \NETLOGON: current_pdu_len = 32, current_pdu_sent = 0 returning 32 bytes.
  2524. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2525. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  2526. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2527. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  2528. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  2529. readX-IPC min=1024 max=1024 nread=32
  2530. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  2531. got smb length of 41
  2532. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  2533. got message type 0x0 of len 0x29
  2534. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  2535. Transaction 9 of length 45 (0 toread)
  2536. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  2537. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  2538. size=41
  2539. smb_com=0x4
  2540. smb_rcls=0
  2541. smb_reh=0
  2542. smb_err=0
  2543. smb_flg=24
  2544. smb_flg2=51207
  2545. smb_tid=1
  2546. smb_pid=65279
  2547. smb_uid=100
  2548. smb_mid=577
  2549. smt_wct=3
  2550. smb_vwv[ 0]= 4719 (0x126F)
  2551. smb_vwv[ 1]=65535 (0xFFFF)
  2552. smb_vwv[ 2]=65535 (0xFFFF)
  2553. smb_bcc=0
  2554. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  2555. switch message SMBclose (pid 2903) conn 0xb77dcab8
  2556. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  2557. created /tmp/SMBclose.95.req len 45
  2558. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  2559. change_to_user: Skipping user change - already user
  2560. [2011/11/22 12:36:24, 3] smbd/reply.c:4488(reply_close)
  2561. close fd=-1 fnum=4719 (numopen=1)
  2562. [2011/11/22 12:36:24, 6] smbd/close.c:454(set_close_write_time)
  2563. close_write_time: Thu Jan 1 00:59:59 1970
  2564. [2011/11/22 12:36:24, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
  2565. close_policy_by_pipe: deleted handle list for pipe \NETLOGON
  2566. [2011/11/22 12:36:24, 5] smbd/files.c:474(file_free)
  2567. freed files structure 4719 (0 used)
  2568. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  2569. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  2570. size=35
  2571. smb_com=0x4
  2572. smb_rcls=0
  2573. smb_reh=0
  2574. smb_err=0
  2575. smb_flg=136
  2576. smb_flg2=51201
  2577. smb_tid=1
  2578. smb_pid=65279
  2579. smb_uid=100
  2580. smb_mid=577
  2581. smt_wct=0
  2582. smb_bcc=0
  2583. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  2584. got smb length of 104
  2585. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  2586. got message type 0x0 of len 0x68
  2587. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  2588. Transaction 10 of length 108 (0 toread)
  2589. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  2590. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  2591. size=104
  2592. smb_com=0xa2
  2593. smb_rcls=0
  2594. smb_reh=0
  2595. smb_err=0
  2596. smb_flg=24
  2597. smb_flg2=51207
  2598. smb_tid=1
  2599. smb_pid=676
  2600. smb_uid=100
  2601. smb_mid=641
  2602. smt_wct=24
  2603. smb_vwv[ 0]= 255 (0xFF)
  2604. smb_vwv[ 1]=57054 (0xDEDE)
  2605. smb_vwv[ 2]= 4608 (0x1200)
  2606. smb_vwv[ 3]= 5632 (0x1600)
  2607. smb_vwv[ 4]= 0 (0x0)
  2608. smb_vwv[ 5]= 0 (0x0)
  2609. smb_vwv[ 6]= 0 (0x0)
  2610. smb_vwv[ 7]=40704 (0x9F00)
  2611. smb_vwv[ 8]= 513 (0x201)
  2612. smb_vwv[ 9]= 0 (0x0)
  2613. smb_vwv[10]= 0 (0x0)
  2614. smb_vwv[11]= 0 (0x0)
  2615. smb_vwv[12]= 0 (0x0)
  2616. smb_vwv[13]= 0 (0x0)
  2617. smb_vwv[14]= 0 (0x0)
  2618. smb_vwv[15]= 768 (0x300)
  2619. smb_vwv[16]= 0 (0x0)
  2620. smb_vwv[17]= 256 (0x100)
  2621. smb_vwv[18]= 0 (0x0)
  2622. smb_vwv[19]=16384 (0x4000)
  2623. smb_vwv[20]=16384 (0x4000)
  2624. smb_vwv[21]= 512 (0x200)
  2625. smb_vwv[22]= 0 (0x0)
  2626. smb_vwv[23]= 256 (0x100)
  2627. smb_bcc=21
  2628. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  2629. [0000] 00 5C 00 4E 00 45 00 54 00 4C 00 4F 00 47 00 4F .\.N.E.T .L.O.G.O
  2630. [0010] 00 4E 00 00 00 .N...
  2631. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  2632. switch message SMBntcreateX (pid 2903) conn 0xb77dcab8
  2633. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  2634. change_to_user: Skipping user change - already user
  2635. [2011/11/22 12:36:24, 10] smbd/nttrans.c:484(reply_ntcreate_and_X)
  2636. reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = NETLOGON
  2637. [2011/11/22 12:36:24, 4] smbd/nttrans.c:315(nt_open_pipe)
  2638. nt_open_pipe: Opening pipe \NETLOGON.
  2639. [2011/11/22 12:36:24, 5] smbd/files.c:103(file_new)
  2640. allocated file structure 624, fnum = 4720 (1 used)
  2641. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
  2642. Create pipe requested \NETLOGON
  2643. [2011/11/22 12:36:24, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
  2644. init_pipe_handles: created handle list for pipe \NETLOGON
  2645. [2011/11/22 12:36:24, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
  2646. init_pipe_handles: pipe_handles ref count = 1 for pipe \NETLOGON
  2647. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  2648. element 3: DEFAULT
  2649. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  2650. element 1: DEFAULT
  2651. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  2652. element 4: DEFAULT
  2653. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  2654. element 2: DEFAULT
  2655. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  2656. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  2657. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  2658. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  2659. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  2660. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  2661. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  2662. NT user token: (NULL)
  2663. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  2664. UNIX token of user 0
  2665. Primary group is 0 and contains 0 supplementary groups
  2666. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  2667. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  2668. , timeout = Tue Nov 22 12:37:24 2011
  2669. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  2670. ldapsam_get_account_policy: got valid value from cache
  2671. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  2672. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  2673. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  2674. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  2675. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  2676. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  2677. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  2678. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  2679. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2680. element 5 -> now SET
  2681. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2682. element 6 -> now SET
  2683. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2684. element 7 -> now SET
  2685. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2686. element 8 -> now SET
  2687. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2688. element 9 -> now SET
  2689. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2690. element 10 -> now SET
  2691. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2692. element 21 -> now SET
  2693. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  2694. pdb_set_username: setting username nobody, was
  2695. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2696. element 12 -> now SET
  2697. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  2698. pdb_set_domain: setting domain IA92, was
  2699. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2700. element 14 -> now SET
  2701. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  2702. pdb_set_nt_username: setting nt username , was
  2703. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2704. element 15 -> now SET
  2705. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  2706. pdb_set_full_name: setting full name nobody, was
  2707. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2708. element 13 -> now SET
  2709. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  2710. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  2711. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  2712. element 1 -> now DEFAULT
  2713. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  2714. pdb_set_dir_drive: setting dir drive , was NULL
  2715. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  2716. element 3 -> now DEFAULT
  2717. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  2718. pdb_set_logon_script: setting logon script nobody.bat, was
  2719. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  2720. element 4 -> now DEFAULT
  2721. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  2722. pdb_set_profile_path: setting profile path , was
  2723. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  2724. element 2 -> now DEFAULT
  2725. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2726. element 22 -> now SET
  2727. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  2728. pdb_set_workstations: setting workstations , was
  2729. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2730. element 23 -> now SET
  2731. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2732. element 25 -> now SET
  2733. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  2734. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  2735. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  2736. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  2737. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  2738. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  2739. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  2740. NT user token: (NULL)
  2741. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  2742. UNIX token of user 0
  2743. Primary group is 0 and contains 0 supplementary groups
  2744. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  2745. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  2746. , timeout = Tue Nov 22 12:37:24 2011
  2747. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  2748. ldapsam_get_account_policy: got valid value from cache
  2749. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  2750. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  2751. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2752. element 33 -> now SET
  2753. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  2754. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  2755. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2756. element 18 -> now SET
  2757. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  2758. pdb_set_user_sid_from_rid:
  2759. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  2760. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2761. element 16 -> now SET
  2762. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2763. element 28 -> now SET
  2764. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2765. element 29 -> now SET
  2766. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2767. element 30 -> now SET
  2768. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2769. element 20 -> now SET
  2770. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2771. element 17 -> now SET
  2772. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  2773. element 26 -> now SET
  2774. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
  2775. Created internal pipe \NETLOGON (pipes_open=0)
  2776. [2011/11/22 12:36:24, 5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
  2777. do_ntcreate_pipe_open: open pipe = \NETLOGON
  2778. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  2779. got smb length of 136
  2780. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  2781. got message type 0x0 of len 0x88
  2782. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  2783. Transaction 11 of length 140 (0 toread)
  2784. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  2785. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  2786. size=136
  2787. smb_com=0x2f
  2788. smb_rcls=0
  2789. smb_reh=0
  2790. smb_err=0
  2791. smb_flg=24
  2792. smb_flg2=51207
  2793. smb_tid=1
  2794. smb_pid=65279
  2795. smb_uid=100
  2796. smb_mid=705
  2797. smt_wct=14
  2798. smb_vwv[ 0]= 255 (0xFF)
  2799. smb_vwv[ 1]=57054 (0xDEDE)
  2800. smb_vwv[ 2]= 4720 (0x1270)
  2801. smb_vwv[ 3]= 0 (0x0)
  2802. smb_vwv[ 4]= 0 (0x0)
  2803. smb_vwv[ 5]=65535 (0xFFFF)
  2804. smb_vwv[ 6]=65535 (0xFFFF)
  2805. smb_vwv[ 7]= 8 (0x8)
  2806. smb_vwv[ 8]= 72 (0x48)
  2807. smb_vwv[ 9]= 0 (0x0)
  2808. smb_vwv[10]= 72 (0x48)
  2809. smb_vwv[11]= 64 (0x40)
  2810. smb_vwv[12]= 0 (0x0)
  2811. smb_vwv[13]= 0 (0x0)
  2812. smb_bcc=73
  2813. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  2814. [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H......
  2815. [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........
  2816. [0020] 00 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF .xV4.4.. ....#Eg.
  2817. [0030] FB 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........
  2818. [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... .
  2819. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  2820. switch message SMBwriteX (pid 2903) conn 0xb77dcab8
  2821. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  2822. created /tmp/SMBwriteX.31.req len 140
  2823. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  2824. change_to_user: Skipping user change - already user
  2825. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  2826. reply_pipe_write_and_X: 1270 name: NETLOGON len: 72
  2827. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  2828. np_write_send: len: 72
  2829. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  2830. [0000] 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 ........ H.......
  2831. [0010] B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 ........ ........
  2832. [0020] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg..
  2833. [0030] 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 .....].. ........
  2834. [0040] 2B 10 48 60 02 00 00 00 +.H`....
  2835. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  2836. write_to_pipe: data_left = 72
  2837. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  2838. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
  2839. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  2840. fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
  2841. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  2842. write_to_pipe: data_used = 16
  2843. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  2844. write_to_pipe: data_left = 56
  2845. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  2846. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
  2847. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2848. 000000 smb_io_rpc_hdr
  2849. 0000 major : 05
  2850. 0001 minor : 00
  2851. 0002 pkt_type : 0b
  2852. 0003 flags : 03
  2853. 0004 pack_type0: 10
  2854. 0005 pack_type1: 00
  2855. 0006 pack_type2: 00
  2856. 0007 pack_type3: 00
  2857. 0008 frag_len : 0048
  2858. 000a auth_len : 0000
  2859. 000c call_id : 00000001
  2860. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  2861. unmarshall_rpc_header: using little-endian RPC
  2862. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  2863. unmarshall_rpc_header: type = 11, flags = 3
  2864. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  2865. write_to_pipe: data_used = 0
  2866. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  2867. write_to_pipe: data_left = 56
  2868. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  2869. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
  2870. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  2871. process_complete_pdu: processing packet type 11
  2872. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
  2873. api_pipe_bind_req: decode request. 1558
  2874. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2875. 000000 smb_io_rpc_hdr_rb
  2876. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2877. 000000 smb_io_rpc_hdr_bba
  2878. 0000 max_tsize: 10b8
  2879. 0002 max_rsize: 10b8
  2880. 0004 assoc_gid: 00000000
  2881. 0008 num_contexts: 01
  2882. 000c context_id : 0000
  2883. 000e num_transfer_syntaxes: 01
  2884. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2885. 00000f smb_io_rpc_iface
  2886. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  2887. 000010 smb_io_uuid uuid
  2888. 0010 data : 12345678
  2889. 0014 data : 1234
  2890. 0016 data : abcd
  2891. 0018 data : ef 00
  2892. 001a data : 01 23 45 67 cf fb
  2893. 0020 version: 00000001
  2894. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2895. 000024 smb_io_rpc_iface
  2896. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  2897. 000024 smb_io_uuid uuid
  2898. 0024 data : 8a885d04
  2899. 0028 data : 1ceb
  2900. 002a data : 11c9
  2901. 002c data : 9f e8
  2902. 002e data : 08 00 2b 10 48 60
  2903. 0034 version: 00000002
  2904. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
  2905. api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
  2906. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
  2907. api_pipe_bind_req: make response. 1628
  2908. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:960(check_bind_req)
  2909. check_bind_req for \NETLOGON
  2910. checking lsarpc
  2911. checking winreg
  2912. checking initshutdown
  2913. checking dssetup
  2914. checking wkssvc
  2915. checking svcctl
  2916. checking ntsvcs
  2917. checking netlogon
  2918. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2919. 000000 smb_io_rpc_hdr_ba
  2920. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2921. 000000 smb_io_rpc_hdr_bba
  2922. 0000 max_tsize: 10b8
  2923. 0002 max_rsize: 10b8
  2924. 0004 assoc_gid: 000053f0
  2925. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2926. 000008 smb_io_rpc_addr_str
  2927. 0008 len: 000f
  2928. 000a str: \PIPE\netlogon.
  2929. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2930. 000019 smb_io_rpc_results
  2931. 001c num_results: 01
  2932. 0020 result : 0000
  2933. 0022 reason : 0000
  2934. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  2935. 000024 smb_io_rpc_iface
  2936. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  2937. 000024 smb_io_uuid uuid
  2938. 0024 data : 8a885d04
  2939. 0028 data : 1ceb
  2940. 002a data : 11c9
  2941. 002c data : 9f e8
  2942. 002e data : 08 00 2b 10 48 60
  2943. 0034 version: 00000002
  2944. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  2945. 000000 smb_io_rpc_hdr
  2946. 0000 major : 05
  2947. 0001 minor : 00
  2948. 0002 pkt_type : 0c
  2949. 0003 flags : 03
  2950. 0004 pack_type0: 10
  2951. 0005 pack_type1: 00
  2952. 0006 pack_type2: 00
  2953. 0007 pack_type3: 00
  2954. 0008 frag_len : 0048
  2955. 000a auth_len : 0000
  2956. 000c call_id : 00000001
  2957. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  2958. write_to_pipe: data_used = 56
  2959. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2960. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77dffe8
  2961. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  2962. s3_event: Run immediate event "tevent_req_trigger": 0xb77dffe8
  2963. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  2964. writeX-IPC nwritten=72
  2965. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  2966. got smb length of 59
  2967. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  2968. got message type 0x0 of len 0x3b
  2969. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  2970. Transaction 12 of length 63 (0 toread)
  2971. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  2972. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  2973. size=59
  2974. smb_com=0x2e
  2975. smb_rcls=0
  2976. smb_reh=0
  2977. smb_err=0
  2978. smb_flg=24
  2979. smb_flg2=51207
  2980. smb_tid=1
  2981. smb_pid=65279
  2982. smb_uid=100
  2983. smb_mid=769
  2984. smt_wct=12
  2985. smb_vwv[ 0]= 255 (0xFF)
  2986. smb_vwv[ 1]=57054 (0xDEDE)
  2987. smb_vwv[ 2]= 4720 (0x1270)
  2988. smb_vwv[ 3]= 0 (0x0)
  2989. smb_vwv[ 4]= 0 (0x0)
  2990. smb_vwv[ 5]= 1024 (0x400)
  2991. smb_vwv[ 6]= 1024 (0x400)
  2992. smb_vwv[ 7]=65535 (0xFFFF)
  2993. smb_vwv[ 8]=65535 (0xFFFF)
  2994. smb_vwv[ 9]= 1024 (0x400)
  2995. smb_vwv[10]= 0 (0x0)
  2996. smb_vwv[11]= 0 (0x0)
  2997. smb_bcc=0
  2998. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  2999. switch message SMBreadX (pid 2903) conn 0xb77dcab8
  3000. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  3001. change_to_user: Skipping user change - already user
  3002. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  3003. name: \NETLOGON len: 1024
  3004. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
  3005. read_from_pipe: \NETLOGON: current_pdu_len = 72, current_pdu_sent = 0 returning 72 bytes.
  3006. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3007. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  3008. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3009. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  3010. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  3011. readX-IPC min=1024 max=1024 nread=72
  3012. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  3013. got smb length of 168
  3014. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  3015. got message type 0x0 of len 0xa8
  3016. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  3017. Transaction 13 of length 172 (0 toread)
  3018. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  3019. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  3020. size=168
  3021. smb_com=0x2f
  3022. smb_rcls=0
  3023. smb_reh=0
  3024. smb_err=0
  3025. smb_flg=24
  3026. smb_flg2=51207
  3027. smb_tid=1
  3028. smb_pid=65279
  3029. smb_uid=100
  3030. smb_mid=833
  3031. smt_wct=14
  3032. smb_vwv[ 0]= 255 (0xFF)
  3033. smb_vwv[ 1]=57054 (0xDEDE)
  3034. smb_vwv[ 2]= 4720 (0x1270)
  3035. smb_vwv[ 3]= 0 (0x0)
  3036. smb_vwv[ 4]= 0 (0x0)
  3037. smb_vwv[ 5]=65535 (0xFFFF)
  3038. smb_vwv[ 6]=65535 (0xFFFF)
  3039. smb_vwv[ 7]= 8 (0x8)
  3040. smb_vwv[ 8]= 104 (0x68)
  3041. smb_vwv[ 9]= 0 (0x0)
  3042. smb_vwv[10]= 104 (0x68)
  3043. smb_vwv[11]= 64 (0x40)
  3044. smb_vwv[12]= 0 (0x0)
  3045. smb_vwv[13]= 0 (0x0)
  3046. smb_bcc=105
  3047. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  3048. [0000] EE 05 00 00 03 10 00 00 00 68 00 00 00 01 00 00 ........ .h......
  3049. [0010] 00 50 00 00 00 00 00 04 00 E8 17 0C 00 0C 00 00 .P...... ........
  3050. [0020] 00 00 00 00 00 0C 00 00 00 5C 00 5C 00 41 00 44 ........ .\.\.A.D
  3051. [0030] 00 4D 00 49 00 4E 00 2D 00 50 00 44 00 43 00 00 .M.I.N.- .P.D.C..
  3052. [0040] 00 0A 00 00 00 00 00 00 00 0A 00 00 00 54 00 45 ........ .....T.E
  3053. [0050] 00 53 00 54 00 53 00 49 00 47 00 45 00 33 00 00 .S.T.S.I .G.E.3..
  3054. [0060] 00 56 D8 15 76 95 E0 D2 46 .V..v... F
  3055. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  3056. switch message SMBwriteX (pid 2903) conn 0xb77dcab8
  3057. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  3058. created /tmp/SMBwriteX.32.req len 172
  3059. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  3060. change_to_user: Skipping user change - already user
  3061. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  3062. reply_pipe_write_and_X: 1270 name: NETLOGON len: 104
  3063. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  3064. np_write_send: len: 104
  3065. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  3066. [0000] 05 00 00 03 10 00 00 00 68 00 00 00 01 00 00 00 ........ h.......
  3067. [0010] 50 00 00 00 00 00 04 00 E8 17 0C 00 0C 00 00 00 P....... ........
  3068. [0020] 00 00 00 00 0C 00 00 00 5C 00 5C 00 41 00 44 00 ........ \.\.A.D.
  3069. [0030] 4D 00 49 00 4E 00 2D 00 50 00 44 00 43 00 00 00 M.I.N.-. P.D.C...
  3070. [0040] 0A 00 00 00 00 00 00 00 0A 00 00 00 54 00 45 00 ........ ....T.E.
  3071. [0050] 53 00 54 00 53 00 49 00 47 00 45 00 33 00 00 00 S.T.S.I. G.E.3...
  3072. [0060] 56 D8 15 76 95 E0 D2 46 V..v...F
  3073. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  3074. write_to_pipe: data_left = 104
  3075. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  3076. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 104
  3077. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  3078. fill_rpc_header: data_to_copy = 104, len_needed_to_complete_hdr = 16, receive_len = 0
  3079. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  3080. write_to_pipe: data_used = 16
  3081. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  3082. write_to_pipe: data_left = 88
  3083. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  3084. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 88
  3085. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  3086. 000000 smb_io_rpc_hdr
  3087. 0000 major : 05
  3088. 0001 minor : 00
  3089. 0002 pkt_type : 00
  3090. 0003 flags : 03
  3091. 0004 pack_type0: 10
  3092. 0005 pack_type1: 00
  3093. 0006 pack_type2: 00
  3094. 0007 pack_type3: 00
  3095. 0008 frag_len : 0068
  3096. 000a auth_len : 0000
  3097. 000c call_id : 00000001
  3098. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  3099. unmarshall_rpc_header: using little-endian RPC
  3100. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  3101. unmarshall_rpc_header: type = 0, flags = 3
  3102. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  3103. write_to_pipe: data_used = 0
  3104. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  3105. write_to_pipe: data_left = 88
  3106. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  3107. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 88, incoming data = 88
  3108. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  3109. process_complete_pdu: processing packet type 0
  3110. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  3111. 000000 smb_io_rpc_hdr_req req
  3112. 0000 alloc_hint: 00000050
  3113. 0004 context_id: 0000
  3114. 0006 opnum : 0004
  3115. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  3116. free_pipe_context: destroying talloc pool of size 74
  3117. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2261(api_pipe_request)
  3118. Requested \PIPE\\NETLOGON
  3119. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
  3120. api_rpcTNP: \NETLOGON op 0x4 - created /tmp/in_\NETLOGON_4.2.prs
  3121. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
  3122. api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
  3123. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
  3124. api_rpc_cmds[4].fn == 0xb724deb0
  3125. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  3126. netr_ServerReqChallenge: struct netr_ServerReqChallenge
  3127. in: struct netr_ServerReqChallenge
  3128. server_name : *
  3129. server_name : '\\ADMIN-PDC'
  3130. computer_name : 'TESTSIGE3'
  3131. credentials : *
  3132. credentials: struct netr_Credential
  3133. data : 56d8157695e0d246
  3134. [2011/11/22 12:36:24, 6] rpc_server/srv_netlog_nt.c:41(init_net_r_req_chal)
  3135. init_net_r_req_chal: 41
  3136. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  3137. netr_ServerReqChallenge: struct netr_ServerReqChallenge
  3138. out: struct netr_ServerReqChallenge
  3139. return_credentials : *
  3140. return_credentials: struct netr_Credential
  3141. data : 097f8d85b9d74a22
  3142. result : NT_STATUS_OK
  3143. [2011/11/22 12:36:24, 0] rpc_parse/parse_prs.c:73(prs_dump_region)
  3144. created /tmp/out_\NETLOGON_4.2.prs
  3145. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
  3146. api_rpcTNP: called \NETLOGON successfully
  3147. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  3148. free_pipe_context: destroying talloc pool of size 0
  3149. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  3150. write_to_pipe: data_used = 88
  3151. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3152. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0008
  3153. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3154. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0008
  3155. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  3156. writeX-IPC nwritten=104
  3157. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  3158. got smb length of 59
  3159. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  3160. got message type 0x0 of len 0x3b
  3161. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  3162. Transaction 14 of length 63 (0 toread)
  3163. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  3164. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  3165. size=59
  3166. smb_com=0x2e
  3167. smb_rcls=0
  3168. smb_reh=0
  3169. smb_err=0
  3170. smb_flg=24
  3171. smb_flg2=51207
  3172. smb_tid=1
  3173. smb_pid=65279
  3174. smb_uid=100
  3175. smb_mid=897
  3176. smt_wct=12
  3177. smb_vwv[ 0]= 255 (0xFF)
  3178. smb_vwv[ 1]=57054 (0xDEDE)
  3179. smb_vwv[ 2]= 4720 (0x1270)
  3180. smb_vwv[ 3]= 0 (0x0)
  3181. smb_vwv[ 4]= 0 (0x0)
  3182. smb_vwv[ 5]= 1024 (0x400)
  3183. smb_vwv[ 6]= 1024 (0x400)
  3184. smb_vwv[ 7]=65535 (0xFFFF)
  3185. smb_vwv[ 8]=65535 (0xFFFF)
  3186. smb_vwv[ 9]= 1024 (0x400)
  3187. smb_vwv[10]= 0 (0x0)
  3188. smb_vwv[11]= 0 (0x0)
  3189. smb_bcc=0
  3190. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  3191. switch message SMBreadX (pid 2903) conn 0xb77dcab8
  3192. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  3193. change_to_user: Skipping user change - already user
  3194. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  3195. name: \NETLOGON len: 1024
  3196. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
  3197. read_from_pipe: \NETLOGON: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 12.
  3198. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  3199. 000000 smb_io_rpc_hdr hdr
  3200. 0000 major : 05
  3201. 0001 minor : 00
  3202. 0002 pkt_type : 02
  3203. 0003 flags : 03
  3204. 0004 pack_type0: 10
  3205. 0005 pack_type1: 00
  3206. 0006 pack_type2: 00
  3207. 0007 pack_type3: 00
  3208. 0008 frag_len : 0024
  3209. 000a auth_len : 0000
  3210. 000c call_id : 00000001
  3211. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  3212. 000010 smb_io_rpc_hdr_resp resp
  3213. 0010 alloc_hint: 0000000c
  3214. 0014 context_id: 0000
  3215. 0016 cancel_ct : 00
  3216. 0017 reserved : 00
  3217. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3218. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  3219. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3220. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  3221. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  3222. readX-IPC min=1024 max=1024 nread=36
  3223. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  3224. got smb length of 208
  3225. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  3226. got message type 0x0 of len 0xd0
  3227. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  3228. Transaction 15 of length 212 (0 toread)
  3229. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  3230. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  3231. size=208
  3232. smb_com=0x2f
  3233. smb_rcls=0
  3234. smb_reh=0
  3235. smb_err=0
  3236. smb_flg=24
  3237. smb_flg2=51207
  3238. smb_tid=1
  3239. smb_pid=65279
  3240. smb_uid=100
  3241. smb_mid=961
  3242. smt_wct=14
  3243. smb_vwv[ 0]= 255 (0xFF)
  3244. smb_vwv[ 1]=57054 (0xDEDE)
  3245. smb_vwv[ 2]= 4720 (0x1270)
  3246. smb_vwv[ 3]= 0 (0x0)
  3247. smb_vwv[ 4]= 0 (0x0)
  3248. smb_vwv[ 5]=65535 (0xFFFF)
  3249. smb_vwv[ 6]=65535 (0xFFFF)
  3250. smb_vwv[ 7]= 8 (0x8)
  3251. smb_vwv[ 8]= 144 (0x90)
  3252. smb_vwv[ 9]= 0 (0x0)
  3253. smb_vwv[10]= 144 (0x90)
  3254. smb_vwv[11]= 64 (0x40)
  3255. smb_vwv[12]= 0 (0x0)
  3256. smb_vwv[13]= 0 (0x0)
  3257. smb_bcc=145
  3258. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  3259. [0000] EE 05 00 00 03 10 00 00 00 90 00 00 00 02 00 00 ........ ........
  3260. [0010] 00 78 00 00 00 00 00 1A 00 E8 17 0C 00 0C 00 00 .x...... ........
  3261. [0020] 00 00 00 00 00 0C 00 00 00 5C 00 5C 00 41 00 44 ........ .\.\.A.D
  3262. [0030] 00 4D 00 49 00 4E 00 2D 00 50 00 44 00 43 00 00 .M.I.N.- .P.D.C..
  3263. [0040] 00 0B 00 00 00 00 00 00 00 0B 00 00 00 54 00 45 ........ .....T.E
  3264. [0050] 00 53 00 54 00 53 00 49 00 47 00 45 00 33 00 24 .S.T.S.I .G.E.3.$
  3265. [0060] 00 00 00 02 00 0A 00 00 00 00 00 00 00 0A 00 00 ........ ........
  3266. [0070] 00 54 00 45 00 53 00 54 00 53 00 49 00 47 00 45 .T.E.S.T .S.I.G.E
  3267. [0080] 00 33 00 00 00 9F 68 09 8B CB A5 AC FD FF BF 0F .3....h. ........
  3268. [0090] 60 `
  3269. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  3270. switch message SMBwriteX (pid 2903) conn 0xb77dcab8
  3271. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  3272. created /tmp/SMBwriteX.33.req len 212
  3273. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  3274. change_to_user: Skipping user change - already user
  3275. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  3276. reply_pipe_write_and_X: 1270 name: NETLOGON len: 144
  3277. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  3278. np_write_send: len: 144
  3279. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  3280. [0000] 05 00 00 03 10 00 00 00 90 00 00 00 02 00 00 00 ........ ........
  3281. [0010] 78 00 00 00 00 00 1A 00 E8 17 0C 00 0C 00 00 00 x....... ........
  3282. [0020] 00 00 00 00 0C 00 00 00 5C 00 5C 00 41 00 44 00 ........ \.\.A.D.
  3283. [0030] 4D 00 49 00 4E 00 2D 00 50 00 44 00 43 00 00 00 M.I.N.-. P.D.C...
  3284. [0040] 0B 00 00 00 00 00 00 00 0B 00 00 00 54 00 45 00 ........ ....T.E.
  3285. [0050] 53 00 54 00 53 00 49 00 47 00 45 00 33 00 24 00 S.T.S.I. G.E.3.$.
  3286. [0060] 00 00 02 00 0A 00 00 00 00 00 00 00 0A 00 00 00 ........ ........
  3287. [0070] 54 00 45 00 53 00 54 00 53 00 49 00 47 00 45 00 T.E.S.T. S.I.G.E.
  3288. [0080] 33 00 00 00 9F 68 09 8B CB A5 AC FD FF BF 0F 60 3....h.. .......`
  3289. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  3290. write_to_pipe: data_left = 144
  3291. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  3292. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 144
  3293. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  3294. fill_rpc_header: data_to_copy = 144, len_needed_to_complete_hdr = 16, receive_len = 0
  3295. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  3296. write_to_pipe: data_used = 16
  3297. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  3298. write_to_pipe: data_left = 128
  3299. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  3300. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 128
  3301. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  3302. 000000 smb_io_rpc_hdr
  3303. 0000 major : 05
  3304. 0001 minor : 00
  3305. 0002 pkt_type : 00
  3306. 0003 flags : 03
  3307. 0004 pack_type0: 10
  3308. 0005 pack_type1: 00
  3309. 0006 pack_type2: 00
  3310. 0007 pack_type3: 00
  3311. 0008 frag_len : 0090
  3312. 000a auth_len : 0000
  3313. 000c call_id : 00000002
  3314. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  3315. unmarshall_rpc_header: using little-endian RPC
  3316. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  3317. unmarshall_rpc_header: type = 0, flags = 3
  3318. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  3319. write_to_pipe: data_used = 0
  3320. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  3321. write_to_pipe: data_left = 128
  3322. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  3323. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 128, incoming data = 128
  3324. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  3325. process_complete_pdu: processing packet type 0
  3326. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  3327. 000000 smb_io_rpc_hdr_req req
  3328. 0000 alloc_hint: 00000078
  3329. 0004 context_id: 0000
  3330. 0006 opnum : 001a
  3331. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  3332. free_pipe_context: destroying talloc pool of size 0
  3333. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2261(api_pipe_request)
  3334. Requested \PIPE\\NETLOGON
  3335. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
  3336. api_rpcTNP: \NETLOGON op 0x1a - created /tmp/in_\NETLOGON_26.2.prs
  3337. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
  3338. api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3
  3339. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
  3340. api_rpc_cmds[26].fn == 0xb7249c80
  3341. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  3342. netr_ServerAuthenticate3: struct netr_ServerAuthenticate3
  3343. in: struct netr_ServerAuthenticate3
  3344. server_name : *
  3345. server_name : '\\ADMIN-PDC'
  3346. account_name : 'TESTSIGE3$'
  3347. secure_channel_type : SEC_CHAN_WKSTA (2)
  3348. computer_name : 'TESTSIGE3'
  3349. credentials : *
  3350. credentials: struct netr_Credential
  3351. data : 9f68098bcba5acfd
  3352. negotiate_flags : *
  3353. negotiate_flags : 0x600fbfff (1611644927)
  3354. 1: NETLOGON_NEG_ACCOUNT_LOCKOUT
  3355. 1: NETLOGON_NEG_PERSISTENT_SAMREPL
  3356. 1: NETLOGON_NEG_ARCFOUR
  3357. 1: NETLOGON_NEG_PROMOTION_COUNT
  3358. 1: NETLOGON_NEG_CHANGELOG_BDC
  3359. 1: NETLOGON_NEG_FULL_SYNC_REPL
  3360. 1: NETLOGON_NEG_MULTIPLE_SIDS
  3361. 1: NETLOGON_NEG_REDO
  3362. 1: NETLOGON_NEG_PASSWORD_CHANGE_REFUSAL
  3363. 1: NETLOGON_NEG_SEND_PASSWORD_INFO_PDC
  3364. 1: NETLOGON_NEG_GENERIC_PASSTHROUGH
  3365. 1: NETLOGON_NEG_CONCURRENT_RPC
  3366. 1: NETLOGON_NEG_AVOID_ACCOUNT_DB_REPL
  3367. 1: NETLOGON_NEG_AVOID_SECURITYAUTH_DB_REPL
  3368. 0: NETLOGON_NEG_STRONG_KEYS
  3369. 1: NETLOGON_NEG_TRANSITIVE_TRUSTS
  3370. 1: NETLOGON_NEG_DNS_DOMAIN_TRUSTS
  3371. 1: NETLOGON_NEG_PASSWORD_SET2
  3372. 1: NETLOGON_NEG_GETDOMAININFO
  3373. 1: NETLOGON_NEG_CROSS_FOREST_TRUSTS
  3374. 0: NETLOGON_NEG_NEUTRALIZE_NT4_EMULATION
  3375. 0: NETLOGON_NEG_RODC_PASSTHROUGH
  3376. 0: NETLOGON_NEG_SUPPORTS_AES_SHA2
  3377. 1: NETLOGON_NEG_AUTHENTICATED_RPC_LSASS
  3378. 1: NETLOGON_NEG_AUTHENTICATED_RPC
  3379. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  3380. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  3381. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  3382. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  3383. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  3384. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  3385. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  3386. NT user token: (NULL)
  3387. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  3388. UNIX token of user 0
  3389. Primary group is 0 and contains 0 supplementary groups
  3390. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  3391. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(uid=TESTSIGE3$)(objectclass=sambaSamAccount))], scope => [2]
  3392. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  3393. smbldap_open: already connected to the LDAP server
  3394. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:571(init_sam_from_ldap)
  3395. init_sam_from_ldap: Entry found for user: testsige3$
  3396. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  3397. pdb_set_username: setting username testsige3$, was
  3398. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3399. element 12 -> now SET
  3400. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  3401. pdb_set_domain: setting domain IA92, was
  3402. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  3403. element 14 -> now DEFAULT
  3404. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  3405. pdb_set_nt_username: setting nt username testsige3$, was
  3406. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3407. element 15 -> now SET
  3408. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:514(pdb_set_user_sid_from_string)
  3409. pdb_set_user_sid_from_string: setting user sid S-1-5-21-1187454690-116783985-3613760195-1427
  3410. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  3411. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-1427
  3412. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3413. element 18 -> now SET
  3414. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:263(pdb_get_init_flags)
  3415. element 18: SET
  3416. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3417. element 21 -> now SET
  3418. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3419. attribute sambaLogonTime does not exist
  3420. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3421. attribute sambaLogoffTime does not exist
  3422. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3423. attribute sambaKickoffTime does not exist
  3424. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3425. attribute sambaPwdCanChange does not exist
  3426. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3427. attribute sambaPwdMustChange does not exist
  3428. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  3429. pdb_set_full_name: setting full name TESTSIGE3$, was
  3430. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3431. element 13 -> now SET
  3432. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3433. attribute sambaHomeDrive does not exist
  3434. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  3435. pdb_set_dir_drive: setting dir drive , was NULL
  3436. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  3437. element 3 -> now DEFAULT
  3438. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3439. attribute sambaHomePath does not exist
  3440. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  3441. pdb_set_homedir: setting home dir \admin-pdctestsige3_\perso, was
  3442. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  3443. element 1 -> now DEFAULT
  3444. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3445. attribute sambaLogonScript does not exist
  3446. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  3447. pdb_set_logon_script: setting logon script testsige3_.bat, was
  3448. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  3449. element 4 -> now DEFAULT
  3450. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3451. attribute sambaProfilePath does not exist
  3452. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  3453. pdb_set_profile_path: setting profile path , was
  3454. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  3455. element 2 -> now DEFAULT
  3456. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3457. element 22 -> now SET
  3458. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3459. attribute sambaUserWorkstations does not exist
  3460. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3461. attribute sambaMungedDial does not exist
  3462. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3463. attribute sambaLMPassword does not exist
  3464. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3465. element 32 -> now SET
  3466. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  3467. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  3468. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  3469. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  3470. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  3471. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  3472. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  3473. NT user token: (NULL)
  3474. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  3475. UNIX token of user 0
  3476. Primary group is 0 and contains 0 supplementary groups
  3477. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  3478. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  3479. , timeout = Tue Nov 22 12:37:24 2011
  3480. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  3481. ldapsam_get_account_policy: got valid value from cache
  3482. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  3483. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  3484. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3485. element 20 -> now SET
  3486. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3487. element 16 -> now SET
  3488. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3489. element 17 -> now SET
  3490. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3491. attribute sambaBadPasswordCount does not exist
  3492. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3493. attribute sambaBadPasswordTime does not exist
  3494. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3495. attribute sambaLogonHours does not exist
  3496. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3497. attribute modifyTimestamp does not exist
  3498. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:463(pdb_set_init_flags)
  3499. element 34 -> now CHANGED
  3500. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  3501. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  3502. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  3503. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  3504. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  3505. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  3506. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  3507. NT user token: (NULL)
  3508. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  3509. UNIX token of user 0
  3510. Primary group is 0 and contains 0 supplementary groups
  3511. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  3512. Returning expired cache entry: key = ACCT_POL/maximum password age, value = 4294967295
  3513. , timeout = Tue Nov 22 12:34:10 2011
  3514. [2011/11/22 12:36:24, 10] passdb/pdb_ldap.c:3854(ldapsam_get_account_policy_from_ldap)
  3515. ldapsam_get_account_policy_from_ldap
  3516. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  3517. smbldap_search_ext: base => [sambaDomainName=ia92,o=gouv,c=fr], filter => [(objectclass=*)], scope => [0]
  3518. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  3519. smbldap_open: already connected to the LDAP server
  3520. [2011/11/22 12:36:24, 10] lib/account_pol.c:396(cache_account_policy_set)
  3521. cache_account_policy_set: updating account pol cache
  3522. [2011/11/22 12:36:24, 10] lib/gencache.c:131(gencache_set)
  3523. Adding cache entry with key = ACCT_POL/maximum password age; value = 4294967295
  3524. and timeout = Tue Nov 22 12:37:24 2011
  3525. (60 seconds ahead)
  3526. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  3527. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  3528. [2011/11/22 12:36:24, 5] lib/username.c:133(Get_Pwnam_alloc)
  3529. Finding user testsige3$
  3530. [2011/11/22 12:36:24, 5] lib/username.c:77(Get_Pwnam_internals)
  3531. Trying _Get_Pwnam(), username as lowercase is testsige3$
  3532. [2011/11/22 12:36:24, 5] lib/username.c:110(Get_Pwnam_internals)
  3533. Get_Pwnam_internals did find user [testsige3$]!
  3534. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  3535. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=515))], scope => [2]
  3536. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  3537. smbldap_open: already connected to the LDAP server
  3538. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  3539. init_group_from_ldap: Entry found for group: 515
  3540. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3541. attribute displayName does not exist
  3542. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:953(lookup_sid)
  3543. lookup_sid called for SID 'S-1-5-21-1187454690-116783985-3613760195-515'
  3544. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:708(check_dom_sid_to_level)
  3545. Accepting SID S-1-5-21-1187454690-116783985-3613760195 in level 1
  3546. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:468(lookup_rids)
  3547. lookup_rids called for domain sid 'S-1-5-21-1187454690-116783985-3613760195'
  3548. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  3549. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  3550. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  3551. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  3552. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  3553. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  3554. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  3555. NT user token: (NULL)
  3556. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  3557. UNIX token of user 0
  3558. Primary group is 0 and contains 0 supplementary groups
  3559. [2011/11/22 12:36:24, 5] passdb/pdb_interface.c:1513(lookup_global_sam_rid)
  3560. lookup_global_sam_rid: looking up RID 515.
  3561. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  3562. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
  3563. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  3564. push_conn_ctx(100) : conn_ctx_stack_ndx = 2
  3565. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  3566. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
  3567. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  3568. NT user token: (NULL)
  3569. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  3570. UNIX token of user 0
  3571. Primary group is 0 and contains 0 supplementary groups
  3572. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  3573. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(sambaSID=S-1-5-21-1187454690-116783985-3613760195-515)(objectclass=sambaSamAccount))], scope => [2]
  3574. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  3575. smbldap_open: already connected to the LDAP server
  3576. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:1613(ldapsam_getsampwsid)
  3577. ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-1187454690-116783985-3613760195-515] count=0
  3578. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  3579. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1187454690-116783985-3613760195-515))], scope => [2]
  3580. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  3581. smbldap_open: already connected to the LDAP server
  3582. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  3583. init_group_from_ldap: Entry found for group: 515
  3584. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  3585. attribute displayName does not exist
  3586. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  3587. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
  3588. [2011/11/22 12:36:24, 5] passdb/pdb_interface.c:1635(pdb_default_lookup_rids)
  3589. lookup_rids: DomainComputers:2
  3590. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  3591. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  3592. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:988(lookup_sid)
  3593. Sid S-1-5-21-1187454690-116783985-3613760195-515 -> IA92\DomainComputers(2)
  3594. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  3595. element 3: DEFAULT
  3596. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  3597. element 1: DEFAULT
  3598. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  3599. element 4: DEFAULT
  3600. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  3601. element 2: DEFAULT
  3602. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  3603. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  3604. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  3605. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  3606. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  3607. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  3608. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  3609. NT user token: (NULL)
  3610. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  3611. UNIX token of user 0
  3612. Primary group is 0 and contains 0 supplementary groups
  3613. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  3614. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  3615. , timeout = Tue Nov 22 12:37:24 2011
  3616. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  3617. ldapsam_get_account_policy: got valid value from cache
  3618. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  3619. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  3620. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  3621. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 215
  3622. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  3623. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 215) -> 215
  3624. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  3625. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 215) -> 215
  3626. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3627. element 5 -> now SET
  3628. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3629. element 6 -> now SET
  3630. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3631. element 7 -> now SET
  3632. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3633. element 8 -> now SET
  3634. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3635. element 9 -> now SET
  3636. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3637. element 10 -> now SET
  3638. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3639. element 21 -> now SET
  3640. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  3641. pdb_set_username: setting username testsige3$, was
  3642. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3643. element 12 -> now SET
  3644. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  3645. pdb_set_domain: setting domain IA92, was
  3646. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3647. element 14 -> now SET
  3648. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  3649. pdb_set_nt_username: setting nt username testsige3$, was
  3650. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3651. element 15 -> now SET
  3652. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  3653. pdb_set_full_name: setting full name TESTSIGE3$, was
  3654. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3655. element 13 -> now SET
  3656. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  3657. pdb_set_homedir: setting home dir \admin-pdctestsige3_\perso, was
  3658. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  3659. element 1 -> now DEFAULT
  3660. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  3661. pdb_set_dir_drive: setting dir drive , was NULL
  3662. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  3663. element 3 -> now DEFAULT
  3664. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  3665. pdb_set_logon_script: setting logon script testsige3_.bat, was
  3666. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  3667. element 4 -> now DEFAULT
  3668. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  3669. pdb_set_profile_path: setting profile path , was
  3670. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  3671. element 2 -> now DEFAULT
  3672. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3673. element 22 -> now SET
  3674. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  3675. pdb_set_workstations: setting workstations , was
  3676. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3677. element 23 -> now SET
  3678. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3679. element 25 -> now SET
  3680. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3681. element 32 -> now SET
  3682. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  3683. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  3684. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  3685. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  3686. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  3687. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  3688. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  3689. NT user token: (NULL)
  3690. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  3691. UNIX token of user 0
  3692. Primary group is 0 and contains 0 supplementary groups
  3693. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  3694. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  3695. , timeout = Tue Nov 22 12:37:24 2011
  3696. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  3697. ldapsam_get_account_policy: got valid value from cache
  3698. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  3699. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  3700. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3701. element 33 -> now SET
  3702. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  3703. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-1427
  3704. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3705. element 18 -> now SET
  3706. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  3707. pdb_set_user_sid_from_rid:
  3708. setting user sid S-1-5-21-1187454690-116783985-3613760195-1427 from rid 1427
  3709. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3710. element 16 -> now SET
  3711. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3712. element 28 -> now SET
  3713. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3714. element 29 -> now SET
  3715. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3716. element 30 -> now SET
  3717. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3718. element 20 -> now SET
  3719. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3720. element 17 -> now SET
  3721. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  3722. element 26 -> now SET
  3723. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  3724. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  3725. [2011/11/22 12:36:24, 5] ../lib/util/util.c:304(_dump_data)
  3726. [0000] 7C F3 CE DC E1 B1 86 45 34 5D 30 CE 16 40 2F EE |......E 4]0..@/.
  3727. [2011/11/22 12:36:24, 10] libsmb/credentials.c:185(creds_server_init)
  3728. creds_server_init: neg_flags : 600fbfff
  3729. [2011/11/22 12:36:24, 10] libsmb/credentials.c:186(creds_server_init)
  3730. creds_server_init: client chal : 56D8157695E0D246
  3731. [2011/11/22 12:36:24, 10] libsmb/credentials.c:187(creds_server_init)
  3732. creds_server_init: server chal : 097F8D85B9D74A22
  3733. [2011/11/22 12:36:24, 5] libsmb/credentials.c:120(creds_init_64)
  3734. creds_init_64
  3735. [2011/11/22 12:36:24, 5] libsmb/credentials.c:121(creds_init_64)
  3736. clnt_chal_in: 56D8157695E0D246
  3737. [2011/11/22 12:36:24, 5] libsmb/credentials.c:122(creds_init_64)
  3738. srv_chal_in : 097F8D85B9D74A22
  3739. [2011/11/22 12:36:24, 5] libsmb/credentials.c:123(creds_init_64)
  3740. clnt+srv : 5F57A3FB4EB81D69
  3741. [2011/11/22 12:36:24, 5] libsmb/credentials.c:124(creds_init_64)
  3742. sess_key_out : A0C3D11604862EF9
  3743. [2011/11/22 12:36:24, 10] libsmb/credentials.c:205(creds_server_init)
  3744. creds_server_init: clnt : 9F68098BCBA5ACFD
  3745. [2011/11/22 12:36:24, 10] libsmb/credentials.c:206(creds_server_init)
  3746. creds_server_init: server : 536023BF79A0DAAB
  3747. [2011/11/22 12:36:24, 10] libsmb/credentials.c:207(creds_server_init)
  3748. creds_server_init: seed : 9F68098BCBA5ACFD
  3749. [2011/11/22 12:36:24, 10] libsmb/credentials.c:227(netlogon_creds_server_check)
  3750. netlogon_creds_server_check: credentials check OK.
  3751. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  3752. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  3753. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  3754. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  3755. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  3756. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  3757. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  3758. NT user token: (NULL)
  3759. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  3760. UNIX token of user 0
  3761. Primary group is 0 and contains 0 supplementary groups
  3762. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  3763. tdb_pack_va(dBBBBBfff, 0) -> 106
  3764. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  3765. tdb_pack_va(dBBBBBfff, 106) -> 106
  3766. [2011/11/22 12:36:24, 3] passdb/secrets.c:1242(secrets_store_schannel_session_info)
  3767. secrets_store_schannel_session_info: stored schannel info with key SECRETS/SCHANNEL/TESTSIGE3
  3768. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  3769. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  3770. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  3771. netr_ServerAuthenticate3: struct netr_ServerAuthenticate3
  3772. out: struct netr_ServerAuthenticate3
  3773. return_credentials : *
  3774. return_credentials: struct netr_Credential
  3775. data : 536023bf79a0daab
  3776. negotiate_flags : *
  3777. negotiate_flags : 0x400001ff (1073742335)
  3778. 1: NETLOGON_NEG_ACCOUNT_LOCKOUT
  3779. 1: NETLOGON_NEG_PERSISTENT_SAMREPL
  3780. 1: NETLOGON_NEG_ARCFOUR
  3781. 1: NETLOGON_NEG_PROMOTION_COUNT
  3782. 1: NETLOGON_NEG_CHANGELOG_BDC
  3783. 1: NETLOGON_NEG_FULL_SYNC_REPL
  3784. 1: NETLOGON_NEG_MULTIPLE_SIDS
  3785. 1: NETLOGON_NEG_REDO
  3786. 1: NETLOGON_NEG_PASSWORD_CHANGE_REFUSAL
  3787. 0: NETLOGON_NEG_SEND_PASSWORD_INFO_PDC
  3788. 0: NETLOGON_NEG_GENERIC_PASSTHROUGH
  3789. 0: NETLOGON_NEG_CONCURRENT_RPC
  3790. 0: NETLOGON_NEG_AVOID_ACCOUNT_DB_REPL
  3791. 0: NETLOGON_NEG_AVOID_SECURITYAUTH_DB_REPL
  3792. 0: NETLOGON_NEG_STRONG_KEYS
  3793. 0: NETLOGON_NEG_TRANSITIVE_TRUSTS
  3794. 0: NETLOGON_NEG_DNS_DOMAIN_TRUSTS
  3795. 0: NETLOGON_NEG_PASSWORD_SET2
  3796. 0: NETLOGON_NEG_GETDOMAININFO
  3797. 0: NETLOGON_NEG_CROSS_FOREST_TRUSTS
  3798. 0: NETLOGON_NEG_NEUTRALIZE_NT4_EMULATION
  3799. 0: NETLOGON_NEG_RODC_PASSTHROUGH
  3800. 0: NETLOGON_NEG_SUPPORTS_AES_SHA2
  3801. 0: NETLOGON_NEG_AUTHENTICATED_RPC_LSASS
  3802. 1: NETLOGON_NEG_AUTHENTICATED_RPC
  3803. rid : *
  3804. rid : 0x00000593 (1427)
  3805. result : NT_STATUS_OK
  3806. [2011/11/22 12:36:24, 0] rpc_parse/parse_prs.c:73(prs_dump_region)
  3807. created /tmp/out_\NETLOGON_26.2.prs
  3808. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
  3809. api_rpcTNP: called \NETLOGON successfully
  3810. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  3811. free_pipe_context: destroying talloc pool of size 0
  3812. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  3813. write_to_pipe: data_used = 128
  3814. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3815. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0038
  3816. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3817. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0038
  3818. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  3819. writeX-IPC nwritten=144
  3820. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  3821. got smb length of 59
  3822. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  3823. got message type 0x0 of len 0x3b
  3824. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  3825. Transaction 16 of length 63 (0 toread)
  3826. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  3827. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  3828. size=59
  3829. smb_com=0x2e
  3830. smb_rcls=0
  3831. smb_reh=0
  3832. smb_err=0
  3833. smb_flg=24
  3834. smb_flg2=51207
  3835. smb_tid=1
  3836. smb_pid=65279
  3837. smb_uid=100
  3838. smb_mid=1025
  3839. smt_wct=12
  3840. smb_vwv[ 0]= 255 (0xFF)
  3841. smb_vwv[ 1]=57054 (0xDEDE)
  3842. smb_vwv[ 2]= 4720 (0x1270)
  3843. smb_vwv[ 3]= 0 (0x0)
  3844. smb_vwv[ 4]= 0 (0x0)
  3845. smb_vwv[ 5]= 1024 (0x400)
  3846. smb_vwv[ 6]= 1024 (0x400)
  3847. smb_vwv[ 7]=65535 (0xFFFF)
  3848. smb_vwv[ 8]=65535 (0xFFFF)
  3849. smb_vwv[ 9]= 1024 (0x400)
  3850. smb_vwv[10]= 0 (0x0)
  3851. smb_vwv[11]= 0 (0x0)
  3852. smb_bcc=0
  3853. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  3854. switch message SMBreadX (pid 2903) conn 0xb77dcab8
  3855. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  3856. change_to_user: Skipping user change - already user
  3857. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  3858. name: \NETLOGON len: 1024
  3859. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
  3860. read_from_pipe: \NETLOGON: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 20.
  3861. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  3862. 000000 smb_io_rpc_hdr hdr
  3863. 0000 major : 05
  3864. 0001 minor : 00
  3865. 0002 pkt_type : 02
  3866. 0003 flags : 03
  3867. 0004 pack_type0: 10
  3868. 0005 pack_type1: 00
  3869. 0006 pack_type2: 00
  3870. 0007 pack_type3: 00
  3871. 0008 frag_len : 002c
  3872. 000a auth_len : 0000
  3873. 000c call_id : 00000002
  3874. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  3875. 000010 smb_io_rpc_hdr_resp resp
  3876. 0010 alloc_hint: 00000014
  3877. 0014 context_id: 0000
  3878. 0016 cancel_ct : 00
  3879. 0017 reserved : 00
  3880. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3881. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  3882. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  3883. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  3884. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  3885. readX-IPC min=1024 max=1024 nread=44
  3886. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  3887. got smb length of 236
  3888. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  3889. got message type 0x0 of len 0xec
  3890. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  3891. Transaction 17 of length 240 (0 toread)
  3892. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  3893. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  3894. size=236
  3895. smb_com=0x73
  3896. smb_rcls=0
  3897. smb_reh=0
  3898. smb_err=0
  3899. smb_flg=24
  3900. smb_flg2=51207
  3901. smb_tid=0
  3902. smb_pid=65279
  3903. smb_uid=0
  3904. smb_mid=1089
  3905. smt_wct=12
  3906. smb_vwv[ 0]= 255 (0xFF)
  3907. smb_vwv[ 1]= 236 (0xEC)
  3908. smb_vwv[ 2]=16644 (0x4104)
  3909. smb_vwv[ 3]= 50 (0x32)
  3910. smb_vwv[ 4]= 1 (0x1)
  3911. smb_vwv[ 5]= 0 (0x0)
  3912. smb_vwv[ 6]= 0 (0x0)
  3913. smb_vwv[ 7]= 74 (0x4A)
  3914. smb_vwv[ 8]= 0 (0x0)
  3915. smb_vwv[ 9]= 0 (0x0)
  3916. smb_vwv[10]= 212 (0xD4)
  3917. smb_vwv[11]=40960 (0xA000)
  3918. smb_bcc=177
  3919. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  3920. [0000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<..
  3921. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....*
  3922. [0020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P.......
  3923. [0030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  3924. [0040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n
  3925. [0050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0
  3926. [0060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c
  3927. [0070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2
  3928. [0080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i
  3929. [0090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0
  3930. [00A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1....
  3931. [00B0] 00 .
  3932. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  3933. switch message SMBsesssetupX (pid 2903) conn 0x0
  3934. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  3935. created /tmp/SMBsesssetupX.33.req len 240
  3936. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  3937. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  3938. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  3939. NT user token: (NULL)
  3940. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  3941. UNIX token of user 0
  3942. Primary group is 0 and contains 0 supplementary groups
  3943. [2011/11/22 12:36:24, 5] smbd/uid.c:368(change_to_root_user)
  3944. change_to_root_user: now uid=(0,0) gid=(0,0)
  3945. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
  3946. wct=12 flg2=0xc807
  3947. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
  3948. Doing spnego session setup
  3949. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
  3950. NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
  3951. [2011/11/22 12:36:24, 10] smbd/password.c:172(register_initial_vuid)
  3952. register_initial_vuid: allocated vuid = 101
  3953. [2011/11/22 12:36:24, 10] smbd/sesssetup.c:1106(check_spnego_blob_complete)
  3954. check_spnego_blob_complete: needed_len = 74, pblob->length = 74
  3955. [2011/11/22 12:36:24, 5] smbd/sesssetup.c:735(parse_spnego_mechanisms)
  3956. parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10
  3957. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:786(reply_spnego_negotiate)
  3958. reply_spnego_negotiate: Got secblob of size 40
  3959. [2011/11/22 12:36:24, 5] auth/auth.c:487(make_auth_context_subsystem)
  3960. Making default auth method list for DC, security=user, encrypt passwords = yes
  3961. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  3962. load_auth_module: Attempting to find an auth method to match guest
  3963. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  3964. load_auth_module: auth method guest has a valid init
  3965. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  3966. load_auth_module: Attempting to find an auth method to match sam
  3967. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  3968. load_auth_module: auth method sam has a valid init
  3969. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  3970. load_auth_module: Attempting to find an auth method to match winbind:trustdomain
  3971. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  3972. load_auth_module: Attempting to find an auth method to match trustdomain
  3973. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  3974. load_auth_module: auth method trustdomain has a valid init
  3975. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  3976. load_auth_module: auth method winbind has a valid init
  3977. [2011/11/22 12:36:24, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
  3978. Got NTLMSSP neg_flags=0xe2088297
  3979. NTLMSSP_NEGOTIATE_UNICODE
  3980. NTLMSSP_NEGOTIATE_OEM
  3981. NTLMSSP_REQUEST_TARGET
  3982. NTLMSSP_NEGOTIATE_SIGN
  3983. NTLMSSP_NEGOTIATE_LM_KEY
  3984. NTLMSSP_NEGOTIATE_NTLM
  3985. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  3986. NTLMSSP_NEGOTIATE_NTLM2
  3987. NTLMSSP_NEGOTIATE_VERSION
  3988. NTLMSSP_NEGOTIATE_128
  3989. NTLMSSP_NEGOTIATE_KEY_EXCH
  3990. NTLMSSP_NEGOTIATE_56
  3991. [2011/11/22 12:36:24, 5] auth/auth.c:98(get_ntlm_challenge)
  3992. auth_get_challenge: module guest did not want to specify a challenge
  3993. [2011/11/22 12:36:24, 5] auth/auth.c:98(get_ntlm_challenge)
  3994. auth_get_challenge: module sam did not want to specify a challenge
  3995. [2011/11/22 12:36:24, 5] auth/auth.c:98(get_ntlm_challenge)
  3996. auth_get_challenge: module winbind did not want to specify a challenge
  3997. [2011/11/22 12:36:24, 5] auth/auth.c:138(get_ntlm_challenge)
  3998. auth_context challenge created by random
  3999. [2011/11/22 12:36:24, 5] auth/auth.c:139(get_ntlm_challenge)
  4000. challenge is:
  4001. [2011/11/22 12:36:24, 5] ../lib/util/util.c:304(_dump_data)
  4002. [0000] 45 7D 5F 0E 50 18 DD 3A E}_.P..:
  4003. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  4004. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  4005. size=332
  4006. smb_com=0x73
  4007. smb_rcls=22
  4008. smb_reh=0
  4009. smb_err=49152
  4010. smb_flg=136
  4011. smb_flg2=51201
  4012. smb_tid=0
  4013. smb_pid=65279
  4014. smb_uid=101
  4015. smb_mid=1089
  4016. smt_wct=4
  4017. smb_vwv[ 0]= 255 (0xFF)
  4018. smb_vwv[ 1]= 0 (0x0)
  4019. smb_vwv[ 2]= 0 (0x0)
  4020. smb_vwv[ 3]= 245 (0xF5)
  4021. smb_bcc=289
  4022. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  4023. [0000] A1 81 F2 30 81 EF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+
  4024. [0010] 06 01 04 01 82 37 02 02 0A A2 81 D9 04 81 D6 4E .....7.. .......N
  4025. [0020] 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 TLMSSP.. .......0
  4026. [0030] 00 00 00 95 82 89 E2 45 7D 5F 0E 50 18 DD 3A 00 .......E }_.P..:.
  4027. [0040] 00 00 00 00 00 00 00 9E 00 9E 00 38 00 00 00 49 ........ ...8...I
  4028. [0050] 00 41 00 39 00 32 00 02 00 08 00 49 00 41 00 39 .A.9.2.. ...I.A.9
  4029. [0060] 00 32 00 01 00 12 00 41 00 44 00 4D 00 49 00 4E .2.....A .D.M.I.N
  4030. [0070] 00 2D 00 50 00 44 00 43 00 04 00 2E 00 69 00 39 .-.P.D.C .....i.9
  4031. [0080] 00 32 00 2E 00 69 00 6E 00 2E 00 61 00 63 00 2D .2...i.n ...a.c.-
  4032. [0090] 00 76 00 65 00 72 00 73 00 61 00 69 00 6C 00 6C .v.e.r.s .a.i.l.l
  4033. [00A0] 00 65 00 73 00 2E 00 66 00 72 00 03 00 42 00 61 .e.s...f .r...B.a
  4034. [00B0] 00 64 00 6D 00 69 00 6E 00 2D 00 70 00 64 00 63 .d.m.i.n .-.p.d.c
  4035. [00C0] 00 2E 00 69 00 39 00 32 00 2E 00 69 00 6E 00 2E ...i.9.2 ...i.n..
  4036. [00D0] 00 61 00 63 00 2D 00 76 00 65 00 72 00 73 00 61 .a.c.-.v .e.r.s.a
  4037. [00E0] 00 69 00 6C 00 6C 00 65 00 73 00 2E 00 66 00 72 .i.l.l.e .s...f.r
  4038. [00F0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S
  4039. [0100] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 34 .a.m.b.a . .3...4
  4040. [0110] 00 2E 00 35 00 00 00 49 00 41 00 39 00 32 00 00 ...5...I .A.9.2..
  4041. [0120] 00 .
  4042. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  4043. got smb length of 276
  4044. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  4045. got message type 0x0 of len 0x114
  4046. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  4047. Transaction 18 of length 280 (0 toread)
  4048. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  4049. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  4050. size=276
  4051. smb_com=0x73
  4052. smb_rcls=0
  4053. smb_reh=0
  4054. smb_err=0
  4055. smb_flg=24
  4056. smb_flg2=51207
  4057. smb_tid=0
  4058. smb_pid=65279
  4059. smb_uid=101
  4060. smb_mid=1153
  4061. smt_wct=12
  4062. smb_vwv[ 0]= 255 (0xFF)
  4063. smb_vwv[ 1]= 276 (0x114)
  4064. smb_vwv[ 2]=16644 (0x4104)
  4065. smb_vwv[ 3]= 50 (0x32)
  4066. smb_vwv[ 4]= 1 (0x1)
  4067. smb_vwv[ 5]= 0 (0x0)
  4068. smb_vwv[ 6]= 0 (0x0)
  4069. smb_vwv[ 7]= 115 (0x73)
  4070. smb_vwv[ 8]= 0 (0x0)
  4071. smb_vwv[ 9]= 0 (0x0)
  4072. smb_vwv[10]= 212 (0xD4)
  4073. smb_vwv[11]=40960 (0xA000)
  4074. smb_bcc=217
  4075. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  4076. [0000] A1 71 30 6F A2 6D 04 6B 4E 54 4C 4D 53 53 50 00 .q0o.m.k NTLMSSP.
  4077. [0010] 03 00 00 00 01 00 01 00 5A 00 00 00 00 00 00 00 ........ Z.......
  4078. [0020] 5B 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 [....... H.......
  4079. [0030] 48 00 00 00 12 00 12 00 48 00 00 00 10 00 10 00 H....... H.......
  4080. [0040] 5B 00 00 00 15 8A 88 E2 05 01 28 0A 00 00 00 0F [....... ..(.....
  4081. [0050] 54 00 45 00 53 00 54 00 53 00 49 00 47 00 45 00 T.E.S.T. S.I.G.E.
  4082. [0060] 33 00 00 33 56 3A F3 99 84 A2 95 45 79 72 97 0B 3..3V:.. ...Eyr..
  4083. [0070] B4 D1 51 57 00 69 00 6E 00 64 00 6F 00 77 00 73 ..QW.i.n .d.o.w.s
  4084. [0080] 00 20 00 32 00 30 00 30 00 32 00 20 00 53 00 65 . .2.0.0 .2. .S.e
  4085. [0090] 00 72 00 76 00 69 00 63 00 65 00 20 00 50 00 61 .r.v.i.c .e. .P.a
  4086. [00A0] 00 63 00 6B 00 20 00 32 00 20 00 32 00 36 00 30 .c.k. .2 . .2.6.0
  4087. [00B0] 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .0...W.i .n.d.o.w
  4088. [00C0] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 35 .s. .2.0 .0.2. .5
  4089. [00D0] 00 2E 00 31 00 00 00 00 00 ...1.... .
  4090. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  4091. switch message SMBsesssetupX (pid 2903) conn 0x0
  4092. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  4093. created /tmp/SMBsesssetupX.34.req len 280
  4094. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4095. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  4096. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4097. NT user token: (NULL)
  4098. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4099. UNIX token of user 0
  4100. Primary group is 0 and contains 0 supplementary groups
  4101. [2011/11/22 12:36:24, 5] smbd/uid.c:368(change_to_root_user)
  4102. change_to_root_user: now uid=(0,0) gid=(0,0)
  4103. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
  4104. wct=12 flg2=0xc807
  4105. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
  4106. Doing spnego session setup
  4107. [2011/11/22 12:36:24, 3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
  4108. NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
  4109. [2011/11/22 12:36:24, 10] smbd/sesssetup.c:1106(check_spnego_blob_complete)
  4110. check_spnego_blob_complete: needed_len = 115, pblob->length = 115
  4111. [2011/11/22 12:36:24, 3] libsmb/ntlmssp.c:745(ntlmssp_server_auth)
  4112. Got user=[] domain=[] workstation=[TESTSIGE3] len1=1 len2=0
  4113. [2011/11/22 12:36:24, 6] param/loadparm.c:7018(lp_file_list_changed)
  4114. lp_file_list_changed()
  4115. file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Nov 22 12:25:53 2011
  4116.  
  4117. [2011/11/22 12:36:24, 5] auth/auth_util.c:208(make_user_info_map)
  4118. Mapping user []\[] from workstation [TESTSIGE3]
  4119. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4120. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4121. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4122. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4123. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4124. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4125. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4126. NT user token: (NULL)
  4127. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4128. UNIX token of user 0
  4129. Primary group is 0 and contains 0 supplementary groups
  4130. [2011/11/22 12:36:24, 5] auth/auth_util.c:2184(is_trusted_domain)
  4131. is_trusted_domain: Checking for domain trust with []
  4132. [2011/11/22 12:36:24, 10] passdb/pdb_ldap.c:5913(ldapsam_get_trusteddom_pw)
  4133. ldapsam_get_trusteddom_pw called for domain
  4134. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4135. smbldap_search_ext: base => [sambaDomainName=,sambaDomainName=ia92,o=gouv,c=fr], filter => [(&(objectClass=sambaTrustedDomainPassword)(sambaDomainName=))], scope => [2]
  4136. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4137. smbldap_open: already connected to the LDAP server
  4138. [2011/11/22 12:36:24, 10] lib/smbldap.c:1325(smbldap_search_ext)
  4139. Failed search for base: sambaDomainName=,sambaDomainName=ia92,o=gouv,c=fr, error: 34 (Invalid DN syntax) (invalid DN)
  4140. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4141. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4142. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  4143. Cache entry with key = TDOM/ couldn't be found
  4144. [2011/11/22 12:36:24, 5] libsmb/trustdom_cache.c:183(trustdom_cache_fetch)
  4145. no entry for trusted domain found.
  4146. [2011/11/22 12:36:24, 5] auth/auth_util.c:229(make_user_info_map)
  4147. Mapped domain from [] to [IA92] for user [] from workstation [TESTSIGE3]
  4148. [2011/11/22 12:36:24, 5] auth/auth_util.c:120(make_user_info)
  4149. attempting to make a user_info for ()
  4150. [2011/11/22 12:36:24, 5] auth/auth_util.c:130(make_user_info)
  4151. making strings for 's user_info struct
  4152. [2011/11/22 12:36:24, 5] auth/auth_util.c:162(make_user_info)
  4153. making blobs for 's user_info struct
  4154. [2011/11/22 12:36:24, 10] auth/auth_util.c:180(make_user_info)
  4155. made an encrypted user_info for ()
  4156. [2011/11/22 12:36:24, 3] auth/auth.c:222(check_ntlm_password)
  4157. check_ntlm_password: Checking password for unmapped user []\[]@[TESTSIGE3] with the new password interface
  4158. [2011/11/22 12:36:24, 3] auth/auth.c:225(check_ntlm_password)
  4159. check_ntlm_password: mapped user is: [IA92]\[]@[TESTSIGE3]
  4160. [2011/11/22 12:36:24, 10] auth/auth.c:234(check_ntlm_password)
  4161. check_ntlm_password: auth_context challenge created by random
  4162. [2011/11/22 12:36:24, 10] auth/auth.c:236(check_ntlm_password)
  4163. challenge is:
  4164. [2011/11/22 12:36:24, 5] ../lib/util/util.c:304(_dump_data)
  4165. [0000] 45 7D 5F 0E 50 18 DD 3A E}_.P..:
  4166. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  4167. element 3: DEFAULT
  4168. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  4169. element 1: DEFAULT
  4170. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  4171. element 4: DEFAULT
  4172. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  4173. element 2: DEFAULT
  4174. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4175. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4176. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4177. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4178. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4179. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4180. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4181. NT user token: (NULL)
  4182. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4183. UNIX token of user 0
  4184. Primary group is 0 and contains 0 supplementary groups
  4185. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  4186. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  4187. , timeout = Tue Nov 22 12:37:24 2011
  4188. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  4189. ldapsam_get_account_policy: got valid value from cache
  4190. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4191. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4192. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  4193. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  4194. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  4195. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  4196. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  4197. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  4198. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4199. element 5 -> now SET
  4200. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4201. element 6 -> now SET
  4202. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4203. element 7 -> now SET
  4204. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4205. element 8 -> now SET
  4206. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4207. element 9 -> now SET
  4208. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4209. element 10 -> now SET
  4210. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4211. element 21 -> now SET
  4212. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  4213. pdb_set_username: setting username nobody, was
  4214. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4215. element 12 -> now SET
  4216. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  4217. pdb_set_domain: setting domain IA92, was
  4218. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4219. element 14 -> now SET
  4220. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  4221. pdb_set_nt_username: setting nt username , was
  4222. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4223. element 15 -> now SET
  4224. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  4225. pdb_set_full_name: setting full name nobody, was
  4226. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4227. element 13 -> now SET
  4228. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  4229. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  4230. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  4231. element 1 -> now DEFAULT
  4232. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  4233. pdb_set_dir_drive: setting dir drive , was NULL
  4234. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  4235. element 3 -> now DEFAULT
  4236. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  4237. pdb_set_logon_script: setting logon script nobody.bat, was
  4238. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  4239. element 4 -> now DEFAULT
  4240. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  4241. pdb_set_profile_path: setting profile path , was
  4242. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  4243. element 2 -> now DEFAULT
  4244. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4245. element 22 -> now SET
  4246. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  4247. pdb_set_workstations: setting workstations , was
  4248. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4249. element 23 -> now SET
  4250. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4251. element 25 -> now SET
  4252. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4253. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4254. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4255. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4256. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4257. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4258. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4259. NT user token: (NULL)
  4260. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4261. UNIX token of user 0
  4262. Primary group is 0 and contains 0 supplementary groups
  4263. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  4264. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  4265. , timeout = Tue Nov 22 12:37:24 2011
  4266. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  4267. ldapsam_get_account_policy: got valid value from cache
  4268. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4269. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4270. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4271. element 33 -> now SET
  4272. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  4273. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  4274. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4275. element 18 -> now SET
  4276. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  4277. pdb_set_user_sid_from_rid:
  4278. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  4279. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4280. element 16 -> now SET
  4281. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4282. element 28 -> now SET
  4283. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4284. element 29 -> now SET
  4285. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4286. element 30 -> now SET
  4287. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4288. element 20 -> now SET
  4289. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4290. element 17 -> now SET
  4291. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4292. element 26 -> now SET
  4293. [2011/11/22 12:36:24, 3] auth/auth.c:271(check_ntlm_password)
  4294. check_ntlm_password: guest authentication for user [] succeeded
  4295. [2011/11/22 12:36:24, 5] auth/auth.c:310(check_ntlm_password)
  4296. check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded
  4297. [2011/11/22 12:36:24, 5] auth/auth_util.c:2114(free_user_info)
  4298. attempting to free (and zero) a user_info structure
  4299. [2011/11/22 12:36:24, 10] auth/auth_util.c:2118(free_user_info)
  4300. structure was created for
  4301. [2011/11/22 12:36:24, 10] auth/token_util.c:353(create_local_nt_token)
  4302. Create local NT token for S-1-5-21-1187454690-116783985-3613760195-501
  4303. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  4304. Cache entry with key = IDMAP/SID2GID/S-1-5-32-544 couldn't be found
  4305. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  4306. winbind failed to find a gid for sid S-1-5-32-544
  4307. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4308. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4309. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4310. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4311. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4312. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4313. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4314. NT user token: (NULL)
  4315. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4316. UNIX token of user 0
  4317. Primary group is 0 and contains 0 supplementary groups
  4318. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4319. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
  4320. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4321. smbldap_open: already connected to the LDAP server
  4322. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  4323. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
  4324. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4325. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4326. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  4327. LEGACY: mapping failed for sid S-1-5-32-544
  4328. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4329. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4330. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4331. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4332. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4333. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4334. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4335. NT user token: (NULL)
  4336. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4337. UNIX token of user 0
  4338. Primary group is 0 and contains 0 supplementary groups
  4339. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  4340. Cache entry with key = IDMAP/SID2GID/S-1-5-32-544 couldn't be found
  4341. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  4342. winbind failed to find a gid for sid S-1-5-32-544
  4343. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4344. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  4345. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4346. push_conn_ctx(0) : conn_ctx_stack_ndx = 1
  4347. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4348. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  4349. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4350. NT user token: (NULL)
  4351. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4352. UNIX token of user 0
  4353. Primary group is 0 and contains 0 supplementary groups
  4354. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4355. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
  4356. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4357. smbldap_open: already connected to the LDAP server
  4358. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  4359. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
  4360. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4361. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  4362. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  4363. LEGACY: mapping failed for sid S-1-5-32-544
  4364. [2011/11/22 12:36:24, 5] auth/token_util.c:303(create_builtin_administrators)
  4365. create_builtin_administrators: Failed to create Administrators
  4366. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4367. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4368. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  4369. Cache entry with key = IDMAP/SID2GID/S-1-5-32-545 couldn't be found
  4370. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  4371. winbind failed to find a gid for sid S-1-5-32-545
  4372. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4373. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4374. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4375. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4376. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4377. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4378. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4379. NT user token: (NULL)
  4380. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4381. UNIX token of user 0
  4382. Primary group is 0 and contains 0 supplementary groups
  4383. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4384. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
  4385. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4386. smbldap_open: already connected to the LDAP server
  4387. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  4388. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
  4389. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4390. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4391. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  4392. LEGACY: mapping failed for sid S-1-5-32-545
  4393. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4394. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4395. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4396. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4397. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4398. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4399. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4400. NT user token: (NULL)
  4401. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4402. UNIX token of user 0
  4403. Primary group is 0 and contains 0 supplementary groups
  4404. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  4405. Cache entry with key = IDMAP/SID2GID/S-1-5-32-545 couldn't be found
  4406. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  4407. winbind failed to find a gid for sid S-1-5-32-545
  4408. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4409. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  4410. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4411. push_conn_ctx(0) : conn_ctx_stack_ndx = 1
  4412. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4413. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  4414. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4415. NT user token: (NULL)
  4416. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4417. UNIX token of user 0
  4418. Primary group is 0 and contains 0 supplementary groups
  4419. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4420. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
  4421. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4422. smbldap_open: already connected to the LDAP server
  4423. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  4424. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
  4425. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4426. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  4427. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  4428. LEGACY: mapping failed for sid S-1-5-32-545
  4429. [2011/11/22 12:36:24, 5] auth/token_util.c:274(create_builtin_users)
  4430. create_builtin_users: Failed to create Users
  4431. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4432. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4433. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4434. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4435. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4436. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4437. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4438. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4439. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4440. NT user token: (NULL)
  4441. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4442. UNIX token of user 0
  4443. Primary group is 0 and contains 0 supplementary groups
  4444. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4445. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-1187454690-116783985-3613760195-501)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)))], scope => [2]
  4446. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4447. smbldap_open: already connected to the LDAP server
  4448. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4449. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-1187454690-116783985-3613760195-501)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)))], scope => [2]
  4450. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4451. smbldap_open: already connected to the LDAP server
  4452. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4453. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4454. [2011/11/22 12:36:24, 3] lib/privileges.c:63(get_privileges)
  4455. get_privileges: No privileges assigned to SID [S-1-5-21-1187454690-116783985-3613760195-501]
  4456. [2011/11/22 12:36:24, 5] lib/privileges.c:128(get_privileges_for_sids)
  4457. get_privileges_for_sids: sid = S-1-1-0
  4458. Privilege set:
  4459. SE_PRIV 0x0 0x0 0x0 0x0
  4460. [2011/11/22 12:36:24, 3] lib/privileges.c:63(get_privileges)
  4461. get_privileges: No privileges assigned to SID [S-1-5-2]
  4462. [2011/11/22 12:36:24, 3] lib/privileges.c:63(get_privileges)
  4463. get_privileges: No privileges assigned to SID [S-1-5-32-546]
  4464. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  4465. Cache entry with key = IDMAP/SID2GID/S-1-1-0 couldn't be found
  4466. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  4467. winbind failed to find a gid for sid S-1-1-0
  4468. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4469. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4470. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4471. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4472. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4473. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4474. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4475. NT user token: (NULL)
  4476. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4477. UNIX token of user 0
  4478. Primary group is 0 and contains 0 supplementary groups
  4479. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4480. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))], scope => [2]
  4481. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4482. smbldap_open: already connected to the LDAP server
  4483. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  4484. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))
  4485. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4486. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4487. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  4488. LEGACY: mapping failed for sid S-1-1-0
  4489. [2011/11/22 12:36:24, 10] auth/auth_util.c:750(create_local_token)
  4490. Could not convert SID S-1-1-0 to gid, ignoring it
  4491. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  4492. Cache entry with key = IDMAP/SID2GID/S-1-5-2 couldn't be found
  4493. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  4494. winbind failed to find a gid for sid S-1-5-2
  4495. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4496. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4497. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4498. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4499. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4500. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4501. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4502. NT user token: (NULL)
  4503. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4504. UNIX token of user 0
  4505. Primary group is 0 and contains 0 supplementary groups
  4506. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4507. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))], scope => [2]
  4508. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4509. smbldap_open: already connected to the LDAP server
  4510. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  4511. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
  4512. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4513. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4514. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  4515. LEGACY: mapping failed for sid S-1-5-2
  4516. [2011/11/22 12:36:24, 10] auth/auth_util.c:750(create_local_token)
  4517. Could not convert SID S-1-5-2 to gid, ignoring it
  4518. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  4519. Cache entry with key = IDMAP/SID2GID/S-1-5-32-546 couldn't be found
  4520. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1502(sid_to_gid)
  4521. winbind failed to find a gid for sid S-1-5-32-546
  4522. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4523. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4524. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4525. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4526. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4527. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4528. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4529. NT user token: (NULL)
  4530. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4531. UNIX token of user 0
  4532. Primary group is 0 and contains 0 supplementary groups
  4533. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4534. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))], scope => [2]
  4535. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4536. smbldap_open: already connected to the LDAP server
  4537. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  4538. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))
  4539. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4540. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4541. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1247(legacy_sid_to_gid)
  4542. LEGACY: mapping failed for sid S-1-5-32-546
  4543. [2011/11/22 12:36:24, 10] auth/auth_util.c:750(create_local_token)
  4544. Could not convert SID S-1-5-32-546 to gid, ignoring it
  4545. [2011/11/22 12:36:24, 10] auth/token_util.c:528(debug_nt_user_token)
  4546. NT user token of user S-1-5-21-1187454690-116783985-3613760195-501
  4547. contains 5 SIDs
  4548. SID[ 0]: S-1-5-21-1187454690-116783985-3613760195-501
  4549. SID[ 1]: S-1-1-0
  4550. SID[ 2]: S-1-5-2
  4551. SID[ 3]: S-1-5-32-546
  4552. SID[ 4]: S-1-22-1-65534
  4553. SE_PRIV 0x0 0x0 0x0 0x0
  4554. [2011/11/22 12:36:24, 10] auth/token_util.c:548(debug_unix_user_token)
  4555. UNIX token of user 65534
  4556. Primary group is 65534 and contains 0 supplementary groups
  4557. [2011/11/22 12:36:24, 10] auth/auth_ntlmssp.c:139(auth_ntlmssp_check_password)
  4558. Got NT session key of length 16
  4559. [2011/11/22 12:36:24, 10] auth/auth_ntlmssp.c:146(auth_ntlmssp_check_password)
  4560. Got LM session key of length 16
  4561. [2011/11/22 12:36:24, 10] libsmb/ntlmssp.c:851(ntlmssp_server_auth)
  4562. ntlmssp_server_auth: Using unmodified nt session key.
  4563. [2011/11/22 12:36:24, 3] libsmb/ntlmssp_sign.c:342(ntlmssp_sign_init)
  4564. NTLMSSP Sign/Seal - Initialising with flags:
  4565. [2011/11/22 12:36:24, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
  4566. Got NTLMSSP neg_flags=0xe2088215
  4567. NTLMSSP_NEGOTIATE_UNICODE
  4568. NTLMSSP_REQUEST_TARGET
  4569. NTLMSSP_NEGOTIATE_SIGN
  4570. NTLMSSP_NEGOTIATE_NTLM
  4571. NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  4572. NTLMSSP_NEGOTIATE_NTLM2
  4573. NTLMSSP_NEGOTIATE_VERSION
  4574. NTLMSSP_NEGOTIATE_128
  4575. NTLMSSP_NEGOTIATE_KEY_EXCH
  4576. NTLMSSP_NEGOTIATE_56
  4577. [2011/11/22 12:36:24, 10] smbd/password.c:265(register_existing_vuid)
  4578. register_existing_vuid: (65534,65534) nobody IA92 guest=1
  4579. [2011/11/22 12:36:24, 3] smbd/password.c:269(register_existing_vuid)
  4580. register_existing_vuid: User name: nobody Real name: nobody
  4581. [2011/11/22 12:36:24, 3] smbd/password.c:279(register_existing_vuid)
  4582. register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 101
  4583. [2011/11/22 12:36:24, 6] param/loadparm.c:7018(lp_file_list_changed)
  4584. lp_file_list_changed()
  4585. file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Nov 22 12:25:53 2011
  4586.  
  4587. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  4588. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  4589. size=96
  4590. smb_com=0x73
  4591. smb_rcls=0
  4592. smb_reh=0
  4593. smb_err=0
  4594. smb_flg=136
  4595. smb_flg2=51201
  4596. smb_tid=0
  4597. smb_pid=65279
  4598. smb_uid=101
  4599. smb_mid=1153
  4600. smt_wct=4
  4601. smb_vwv[ 0]= 255 (0xFF)
  4602. smb_vwv[ 1]= 0 (0x0)
  4603. smb_vwv[ 2]= 1 (0x1)
  4604. smb_vwv[ 3]= 9 (0x9)
  4605. smb_bcc=53
  4606. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  4607. [0000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x
  4608. [0010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3
  4609. [0020] 00 2E 00 34 00 2E 00 35 00 00 00 49 00 41 00 39 ...4...5 ...I.A.9
  4610. [0030] 00 32 00 00 00 .2...
  4611. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  4612. got smb length of 84
  4613. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  4614. got message type 0x0 of len 0x54
  4615. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  4616. Transaction 19 of length 88 (0 toread)
  4617. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  4618. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  4619. size=84
  4620. smb_com=0x75
  4621. smb_rcls=0
  4622. smb_reh=0
  4623. smb_err=0
  4624. smb_flg=24
  4625. smb_flg2=51207
  4626. smb_tid=0
  4627. smb_pid=65279
  4628. smb_uid=101
  4629. smb_mid=1217
  4630. smt_wct=4
  4631. smb_vwv[ 0]= 255 (0xFF)
  4632. smb_vwv[ 1]= 84 (0x54)
  4633. smb_vwv[ 2]= 8 (0x8)
  4634. smb_vwv[ 3]= 1 (0x1)
  4635. smb_bcc=41
  4636. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  4637. [0000] 00 5C 00 5C 00 41 00 44 00 4D 00 49 00 4E 00 2D .\.\.A.D .M.I.N.-
  4638. [0010] 00 50 00 44 00 43 00 5C 00 49 00 50 00 43 00 24 .P.D.C.\ .I.P.C.$
  4639. [0020] 00 00 00 3F 3F 3F 3F 3F 00 ...????? .
  4640. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  4641. switch message SMBtconX (pid 2903) conn 0x0
  4642. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  4643. created /tmp/SMBtconX.26.req len 88
  4644. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4645. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  4646. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4647. NT user token: (NULL)
  4648. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4649. UNIX token of user 0
  4650. Primary group is 0 and contains 0 supplementary groups
  4651. [2011/11/22 12:36:24, 5] smbd/uid.c:368(change_to_root_user)
  4652. change_to_root_user: now uid=(0,0) gid=(0,0)
  4653. [2011/11/22 12:36:24, 4] smbd/reply.c:680(reply_tcon_and_X)
  4654. Client requested device type [?????] for share [IPC$]
  4655. [2011/11/22 12:36:24, 5] smbd/service.c:1202(make_connection)
  4656. making a connection to 'normal' service ipc$
  4657. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  4658. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65534))], scope => [2]
  4659. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  4660. smbldap_open: already connected to the LDAP server
  4661. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  4662. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65534))
  4663. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  4664. element 3: DEFAULT
  4665. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  4666. element 1: DEFAULT
  4667. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  4668. element 4: DEFAULT
  4669. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  4670. element 2: DEFAULT
  4671. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4672. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4673. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4674. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4675. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4676. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4677. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4678. NT user token: (NULL)
  4679. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4680. UNIX token of user 0
  4681. Primary group is 0 and contains 0 supplementary groups
  4682. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  4683. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  4684. , timeout = Tue Nov 22 12:37:24 2011
  4685. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  4686. ldapsam_get_account_policy: got valid value from cache
  4687. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4688. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4689. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  4690. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  4691. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  4692. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  4693. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  4694. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  4695. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4696. element 5 -> now SET
  4697. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4698. element 6 -> now SET
  4699. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4700. element 7 -> now SET
  4701. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4702. element 8 -> now SET
  4703. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4704. element 9 -> now SET
  4705. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4706. element 10 -> now SET
  4707. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4708. element 21 -> now SET
  4709. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  4710. pdb_set_username: setting username nobody, was
  4711. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4712. element 12 -> now SET
  4713. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  4714. pdb_set_domain: setting domain IA92, was
  4715. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4716. element 14 -> now SET
  4717. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  4718. pdb_set_nt_username: setting nt username , was
  4719. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4720. element 15 -> now SET
  4721. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  4722. pdb_set_full_name: setting full name nobody, was
  4723. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4724. element 13 -> now SET
  4725. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  4726. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  4727. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  4728. element 1 -> now DEFAULT
  4729. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  4730. pdb_set_dir_drive: setting dir drive , was NULL
  4731. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  4732. element 3 -> now DEFAULT
  4733. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  4734. pdb_set_logon_script: setting logon script nobody.bat, was
  4735. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  4736. element 4 -> now DEFAULT
  4737. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  4738. pdb_set_profile_path: setting profile path , was
  4739. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  4740. element 2 -> now DEFAULT
  4741. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4742. element 22 -> now SET
  4743. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  4744. pdb_set_workstations: setting workstations , was
  4745. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4746. element 23 -> now SET
  4747. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4748. element 25 -> now SET
  4749. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  4750. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  4751. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  4752. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  4753. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  4754. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  4755. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  4756. NT user token: (NULL)
  4757. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  4758. UNIX token of user 0
  4759. Primary group is 0 and contains 0 supplementary groups
  4760. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  4761. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  4762. , timeout = Tue Nov 22 12:37:24 2011
  4763. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  4764. ldapsam_get_account_policy: got valid value from cache
  4765. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  4766. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  4767. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4768. element 33 -> now SET
  4769. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  4770. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  4771. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4772. element 18 -> now SET
  4773. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  4774. pdb_set_user_sid_from_rid:
  4775. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  4776. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4777. element 16 -> now SET
  4778. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4779. element 28 -> now SET
  4780. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4781. element 29 -> now SET
  4782. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4783. element 30 -> now SET
  4784. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4785. element 20 -> now SET
  4786. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4787. element 17 -> now SET
  4788. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  4789. element 26 -> now SET
  4790. [2011/11/22 12:36:24, 5] lib/username.c:133(Get_Pwnam_alloc)
  4791. Finding user nobody
  4792. [2011/11/22 12:36:24, 5] lib/username.c:77(Get_Pwnam_internals)
  4793. Trying _Get_Pwnam(), username as lowercase is nobody
  4794. [2011/11/22 12:36:24, 5] lib/username.c:110(Get_Pwnam_internals)
  4795. Get_Pwnam_internals did find user [nobody]!
  4796. [2011/11/22 12:36:24, 10] smbd/service.c:162(set_conn_connectpath)
  4797. set_conn_connectpath: service IPC$, connectpath = /tmp
  4798. [2011/11/22 12:36:24, 3] smbd/service.c:807(make_connection_snum)
  4799. Connect path is '/tmp' for service [IPC$]
  4800. [2011/11/22 12:36:24, 10] lib/util_seaccess.c:58(se_map_generic)
  4801. se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
  4802. [2011/11/22 12:36:24, 3] smbd/vfs.c:95(vfs_init_default)
  4803. Initialising default vfs hooks
  4804. [2011/11/22 12:36:24, 3] smbd/vfs.c:129(vfs_init_custom)
  4805. Initialising custom vfs hooks from [/[Default VFS]/]
  4806. [2011/11/22 12:36:24, 10] smbd/vfs.c:47(vfs_find_backend_entry)
  4807. vfs_find_backend_entry called for /[Default VFS]/
  4808. Successfully loaded vfs module [/[Default VFS]/] with the new modules system
  4809. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4810. Checking operation #0 (type 0, layer 0)
  4811. Making operation type 0 opaque [module /[Default VFS]/]
  4812. Accepting operation type 0 from module /[Default VFS]/
  4813. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4814. Checking operation #1 (type 1, layer 0)
  4815. Making operation type 1 opaque [module /[Default VFS]/]
  4816. Accepting operation type 1 from module /[Default VFS]/
  4817. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4818. Checking operation #2 (type 2, layer 0)
  4819. Making operation type 2 opaque [module /[Default VFS]/]
  4820. Accepting operation type 2 from module /[Default VFS]/
  4821. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4822. Checking operation #3 (type 3, layer 0)
  4823. Making operation type 3 opaque [module /[Default VFS]/]
  4824. Accepting operation type 3 from module /[Default VFS]/
  4825. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4826. Checking operation #4 (type 4, layer 0)
  4827. Making operation type 4 opaque [module /[Default VFS]/]
  4828. Accepting operation type 4 from module /[Default VFS]/
  4829. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4830. Checking operation #5 (type 5, layer 0)
  4831. Making operation type 5 opaque [module /[Default VFS]/]
  4832. Accepting operation type 5 from module /[Default VFS]/
  4833. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4834. Checking operation #6 (type 6, layer 0)
  4835. Making operation type 6 opaque [module /[Default VFS]/]
  4836. Accepting operation type 6 from module /[Default VFS]/
  4837. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4838. Checking operation #7 (type 7, layer 0)
  4839. Making operation type 7 opaque [module /[Default VFS]/]
  4840. Accepting operation type 7 from module /[Default VFS]/
  4841. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4842. Checking operation #8 (type 8, layer 0)
  4843. Making operation type 8 opaque [module /[Default VFS]/]
  4844. Accepting operation type 8 from module /[Default VFS]/
  4845. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4846. Checking operation #9 (type 9, layer 0)
  4847. Making operation type 9 opaque [module /[Default VFS]/]
  4848. Accepting operation type 9 from module /[Default VFS]/
  4849. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4850. Checking operation #10 (type 10, layer 0)
  4851. Making operation type 10 opaque [module /[Default VFS]/]
  4852. Accepting operation type 10 from module /[Default VFS]/
  4853. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4854. Checking operation #11 (type 11, layer 0)
  4855. Making operation type 11 opaque [module /[Default VFS]/]
  4856. Accepting operation type 11 from module /[Default VFS]/
  4857. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4858. Checking operation #12 (type 12, layer 0)
  4859. Making operation type 12 opaque [module /[Default VFS]/]
  4860. Accepting operation type 12 from module /[Default VFS]/
  4861. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4862. Checking operation #13 (type 13, layer 0)
  4863. Making operation type 13 opaque [module /[Default VFS]/]
  4864. Accepting operation type 13 from module /[Default VFS]/
  4865. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4866. Checking operation #14 (type 14, layer 0)
  4867. Making operation type 14 opaque [module /[Default VFS]/]
  4868. Accepting operation type 14 from module /[Default VFS]/
  4869. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4870. Checking operation #15 (type 15, layer 0)
  4871. Making operation type 15 opaque [module /[Default VFS]/]
  4872. Accepting operation type 15 from module /[Default VFS]/
  4873. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4874. Checking operation #16 (type 16, layer 0)
  4875. Making operation type 16 opaque [module /[Default VFS]/]
  4876. Accepting operation type 16 from module /[Default VFS]/
  4877. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4878. Checking operation #17 (type 17, layer 0)
  4879. Making operation type 17 opaque [module /[Default VFS]/]
  4880. Accepting operation type 17 from module /[Default VFS]/
  4881. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4882. Checking operation #18 (type 18, layer 0)
  4883. Making operation type 18 opaque [module /[Default VFS]/]
  4884. Accepting operation type 18 from module /[Default VFS]/
  4885. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4886. Checking operation #19 (type 19, layer 0)
  4887. Making operation type 19 opaque [module /[Default VFS]/]
  4888. Accepting operation type 19 from module /[Default VFS]/
  4889. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4890. Checking operation #20 (type 20, layer 0)
  4891. Making operation type 20 opaque [module /[Default VFS]/]
  4892. Accepting operation type 20 from module /[Default VFS]/
  4893. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4894. Checking operation #21 (type 21, layer 0)
  4895. Making operation type 21 opaque [module /[Default VFS]/]
  4896. Accepting operation type 21 from module /[Default VFS]/
  4897. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4898. Checking operation #22 (type 22, layer 0)
  4899. Making operation type 22 opaque [module /[Default VFS]/]
  4900. Accepting operation type 22 from module /[Default VFS]/
  4901. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4902. Checking operation #23 (type 23, layer 0)
  4903. Making operation type 23 opaque [module /[Default VFS]/]
  4904. Accepting operation type 23 from module /[Default VFS]/
  4905. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4906. Checking operation #24 (type 24, layer 0)
  4907. Making operation type 24 opaque [module /[Default VFS]/]
  4908. Accepting operation type 24 from module /[Default VFS]/
  4909. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4910. Checking operation #25 (type 25, layer 0)
  4911. Making operation type 25 opaque [module /[Default VFS]/]
  4912. Accepting operation type 25 from module /[Default VFS]/
  4913. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4914. Checking operation #26 (type 26, layer 0)
  4915. Making operation type 26 opaque [module /[Default VFS]/]
  4916. Accepting operation type 26 from module /[Default VFS]/
  4917. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4918. Checking operation #27 (type 27, layer 0)
  4919. Making operation type 27 opaque [module /[Default VFS]/]
  4920. Accepting operation type 27 from module /[Default VFS]/
  4921. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4922. Checking operation #28 (type 28, layer 0)
  4923. Making operation type 28 opaque [module /[Default VFS]/]
  4924. Accepting operation type 28 from module /[Default VFS]/
  4925. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4926. Checking operation #29 (type 29, layer 0)
  4927. Making operation type 29 opaque [module /[Default VFS]/]
  4928. Accepting operation type 29 from module /[Default VFS]/
  4929. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4930. Checking operation #30 (type 30, layer 0)
  4931. Making operation type 30 opaque [module /[Default VFS]/]
  4932. Accepting operation type 30 from module /[Default VFS]/
  4933. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4934. Checking operation #31 (type 31, layer 0)
  4935. Making operation type 31 opaque [module /[Default VFS]/]
  4936. Accepting operation type 31 from module /[Default VFS]/
  4937. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4938. Checking operation #32 (type 32, layer 0)
  4939. Making operation type 32 opaque [module /[Default VFS]/]
  4940. Accepting operation type 32 from module /[Default VFS]/
  4941. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4942. Checking operation #33 (type 33, layer 0)
  4943. Making operation type 33 opaque [module /[Default VFS]/]
  4944. Accepting operation type 33 from module /[Default VFS]/
  4945. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4946. Checking operation #34 (type 34, layer 0)
  4947. Making operation type 34 opaque [module /[Default VFS]/]
  4948. Accepting operation type 34 from module /[Default VFS]/
  4949. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4950. Checking operation #35 (type 35, layer 0)
  4951. Making operation type 35 opaque [module /[Default VFS]/]
  4952. Accepting operation type 35 from module /[Default VFS]/
  4953. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4954. Checking operation #36 (type 36, layer 0)
  4955. Making operation type 36 opaque [module /[Default VFS]/]
  4956. Accepting operation type 36 from module /[Default VFS]/
  4957. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4958. Checking operation #37 (type 37, layer 0)
  4959. Making operation type 37 opaque [module /[Default VFS]/]
  4960. Accepting operation type 37 from module /[Default VFS]/
  4961. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4962. Checking operation #38 (type 38, layer 0)
  4963. Making operation type 38 opaque [module /[Default VFS]/]
  4964. Accepting operation type 38 from module /[Default VFS]/
  4965. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4966. Checking operation #39 (type 39, layer 0)
  4967. Making operation type 39 opaque [module /[Default VFS]/]
  4968. Accepting operation type 39 from module /[Default VFS]/
  4969. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4970. Checking operation #40 (type 40, layer 0)
  4971. Making operation type 40 opaque [module /[Default VFS]/]
  4972. Accepting operation type 40 from module /[Default VFS]/
  4973. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4974. Checking operation #41 (type 41, layer 0)
  4975. Making operation type 41 opaque [module /[Default VFS]/]
  4976. Accepting operation type 41 from module /[Default VFS]/
  4977. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4978. Checking operation #42 (type 42, layer 0)
  4979. Making operation type 42 opaque [module /[Default VFS]/]
  4980. Accepting operation type 42 from module /[Default VFS]/
  4981. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4982. Checking operation #43 (type 43, layer 0)
  4983. Making operation type 43 opaque [module /[Default VFS]/]
  4984. Accepting operation type 43 from module /[Default VFS]/
  4985. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4986. Checking operation #44 (type 44, layer 0)
  4987. Making operation type 44 opaque [module /[Default VFS]/]
  4988. Accepting operation type 44 from module /[Default VFS]/
  4989. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4990. Checking operation #45 (type 45, layer 0)
  4991. Making operation type 45 opaque [module /[Default VFS]/]
  4992. Accepting operation type 45 from module /[Default VFS]/
  4993. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4994. Checking operation #46 (type 46, layer 0)
  4995. Making operation type 46 opaque [module /[Default VFS]/]
  4996. Accepting operation type 46 from module /[Default VFS]/
  4997. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  4998. Checking operation #47 (type 47, layer 0)
  4999. Making operation type 47 opaque [module /[Default VFS]/]
  5000. Accepting operation type 47 from module /[Default VFS]/
  5001. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5002. Checking operation #48 (type 48, layer 0)
  5003. Making operation type 48 opaque [module /[Default VFS]/]
  5004. Accepting operation type 48 from module /[Default VFS]/
  5005. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5006. Checking operation #49 (type 49, layer 0)
  5007. Making operation type 49 opaque [module /[Default VFS]/]
  5008. Accepting operation type 49 from module /[Default VFS]/
  5009. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5010. Checking operation #50 (type 50, layer 0)
  5011. Making operation type 50 opaque [module /[Default VFS]/]
  5012. Accepting operation type 50 from module /[Default VFS]/
  5013. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5014. Checking operation #51 (type 51, layer 0)
  5015. Making operation type 51 opaque [module /[Default VFS]/]
  5016. Accepting operation type 51 from module /[Default VFS]/
  5017. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5018. Checking operation #52 (type 52, layer 0)
  5019. Making operation type 52 opaque [module /[Default VFS]/]
  5020. Accepting operation type 52 from module /[Default VFS]/
  5021. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5022. Checking operation #53 (type 53, layer 0)
  5023. Making operation type 53 opaque [module /[Default VFS]/]
  5024. Accepting operation type 53 from module /[Default VFS]/
  5025. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5026. Checking operation #54 (type 54, layer 0)
  5027. Making operation type 54 opaque [module /[Default VFS]/]
  5028. Accepting operation type 54 from module /[Default VFS]/
  5029. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5030. Checking operation #55 (type 55, layer 0)
  5031. Making operation type 55 opaque [module /[Default VFS]/]
  5032. Accepting operation type 55 from module /[Default VFS]/
  5033. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5034. Checking operation #56 (type 56, layer 0)
  5035. Making operation type 56 opaque [module /[Default VFS]/]
  5036. Accepting operation type 56 from module /[Default VFS]/
  5037. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5038. Checking operation #57 (type 57, layer 0)
  5039. Making operation type 57 opaque [module /[Default VFS]/]
  5040. Accepting operation type 57 from module /[Default VFS]/
  5041. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5042. Checking operation #58 (type 58, layer 0)
  5043. Making operation type 58 opaque [module /[Default VFS]/]
  5044. Accepting operation type 58 from module /[Default VFS]/
  5045. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5046. Checking operation #59 (type 59, layer 0)
  5047. Making operation type 59 opaque [module /[Default VFS]/]
  5048. Accepting operation type 59 from module /[Default VFS]/
  5049. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5050. Checking operation #60 (type 60, layer 0)
  5051. Making operation type 60 opaque [module /[Default VFS]/]
  5052. Accepting operation type 60 from module /[Default VFS]/
  5053. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5054. Checking operation #61 (type 61, layer 0)
  5055. Making operation type 61 opaque [module /[Default VFS]/]
  5056. Accepting operation type 61 from module /[Default VFS]/
  5057. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5058. Checking operation #62 (type 62, layer 0)
  5059. Making operation type 62 opaque [module /[Default VFS]/]
  5060. Accepting operation type 62 from module /[Default VFS]/
  5061. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5062. Checking operation #63 (type 63, layer 0)
  5063. Making operation type 63 opaque [module /[Default VFS]/]
  5064. Accepting operation type 63 from module /[Default VFS]/
  5065. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5066. Checking operation #64 (type 64, layer 0)
  5067. Making operation type 64 opaque [module /[Default VFS]/]
  5068. Accepting operation type 64 from module /[Default VFS]/
  5069. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5070. Checking operation #65 (type 65, layer 0)
  5071. Making operation type 65 opaque [module /[Default VFS]/]
  5072. Accepting operation type 65 from module /[Default VFS]/
  5073. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5074. Checking operation #66 (type 66, layer 0)
  5075. Making operation type 66 opaque [module /[Default VFS]/]
  5076. Accepting operation type 66 from module /[Default VFS]/
  5077. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5078. Checking operation #67 (type 67, layer 0)
  5079. Making operation type 67 opaque [module /[Default VFS]/]
  5080. Accepting operation type 67 from module /[Default VFS]/
  5081. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5082. Checking operation #68 (type 68, layer 0)
  5083. Making operation type 68 opaque [module /[Default VFS]/]
  5084. Accepting operation type 68 from module /[Default VFS]/
  5085. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5086. Checking operation #69 (type 69, layer 0)
  5087. Making operation type 69 opaque [module /[Default VFS]/]
  5088. Accepting operation type 69 from module /[Default VFS]/
  5089. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5090. Checking operation #70 (type 70, layer 0)
  5091. Making operation type 70 opaque [module /[Default VFS]/]
  5092. Accepting operation type 70 from module /[Default VFS]/
  5093. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5094. Checking operation #71 (type 71, layer 0)
  5095. Making operation type 71 opaque [module /[Default VFS]/]
  5096. Accepting operation type 71 from module /[Default VFS]/
  5097. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5098. Checking operation #72 (type 72, layer 0)
  5099. Making operation type 72 opaque [module /[Default VFS]/]
  5100. Accepting operation type 72 from module /[Default VFS]/
  5101. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5102. Checking operation #73 (type 73, layer 0)
  5103. Making operation type 73 opaque [module /[Default VFS]/]
  5104. Accepting operation type 73 from module /[Default VFS]/
  5105. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5106. Checking operation #74 (type 74, layer 0)
  5107. Making operation type 74 opaque [module /[Default VFS]/]
  5108. Accepting operation type 74 from module /[Default VFS]/
  5109. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5110. Checking operation #75 (type 75, layer 0)
  5111. Making operation type 75 opaque [module /[Default VFS]/]
  5112. Accepting operation type 75 from module /[Default VFS]/
  5113. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5114. Checking operation #76 (type 76, layer 0)
  5115. Making operation type 76 opaque [module /[Default VFS]/]
  5116. Accepting operation type 76 from module /[Default VFS]/
  5117. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5118. Checking operation #77 (type 77, layer 0)
  5119. Making operation type 77 opaque [module /[Default VFS]/]
  5120. Accepting operation type 77 from module /[Default VFS]/
  5121. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5122. Checking operation #78 (type 78, layer 0)
  5123. Making operation type 78 opaque [module /[Default VFS]/]
  5124. Accepting operation type 78 from module /[Default VFS]/
  5125. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5126. Checking operation #79 (type 79, layer 0)
  5127. Making operation type 79 opaque [module /[Default VFS]/]
  5128. Accepting operation type 79 from module /[Default VFS]/
  5129. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5130. Checking operation #80 (type 80, layer 0)
  5131. Making operation type 80 opaque [module /[Default VFS]/]
  5132. Accepting operation type 80 from module /[Default VFS]/
  5133. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5134. Checking operation #81 (type 81, layer 0)
  5135. Making operation type 81 opaque [module /[Default VFS]/]
  5136. Accepting operation type 81 from module /[Default VFS]/
  5137. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5138. Checking operation #82 (type 82, layer 0)
  5139. Making operation type 82 opaque [module /[Default VFS]/]
  5140. Accepting operation type 82 from module /[Default VFS]/
  5141. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5142. Checking operation #83 (type 83, layer 0)
  5143. Making operation type 83 opaque [module /[Default VFS]/]
  5144. Accepting operation type 83 from module /[Default VFS]/
  5145. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5146. Checking operation #84 (type 84, layer 0)
  5147. Making operation type 84 opaque [module /[Default VFS]/]
  5148. Accepting operation type 84 from module /[Default VFS]/
  5149. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5150. Checking operation #85 (type 85, layer 0)
  5151. Making operation type 85 opaque [module /[Default VFS]/]
  5152. Accepting operation type 85 from module /[Default VFS]/
  5153. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5154. Checking operation #86 (type 86, layer 0)
  5155. Making operation type 86 opaque [module /[Default VFS]/]
  5156. Accepting operation type 86 from module /[Default VFS]/
  5157. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5158. Checking operation #87 (type 87, layer 0)
  5159. Making operation type 87 opaque [module /[Default VFS]/]
  5160. Accepting operation type 87 from module /[Default VFS]/
  5161. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5162. Checking operation #88 (type 88, layer 0)
  5163. Making operation type 88 opaque [module /[Default VFS]/]
  5164. Accepting operation type 88 from module /[Default VFS]/
  5165. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5166. Checking operation #89 (type 89, layer 0)
  5167. Making operation type 89 opaque [module /[Default VFS]/]
  5168. Accepting operation type 89 from module /[Default VFS]/
  5169. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5170. Checking operation #90 (type 90, layer 0)
  5171. Making operation type 90 opaque [module /[Default VFS]/]
  5172. Accepting operation type 90 from module /[Default VFS]/
  5173. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5174. Checking operation #91 (type 91, layer 0)
  5175. Making operation type 91 opaque [module /[Default VFS]/]
  5176. Accepting operation type 91 from module /[Default VFS]/
  5177. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5178. Checking operation #92 (type 92, layer 0)
  5179. Making operation type 92 opaque [module /[Default VFS]/]
  5180. Accepting operation type 92 from module /[Default VFS]/
  5181. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5182. Checking operation #93 (type 93, layer 0)
  5183. Making operation type 93 opaque [module /[Default VFS]/]
  5184. Accepting operation type 93 from module /[Default VFS]/
  5185. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5186. Checking operation #94 (type 94, layer 0)
  5187. Making operation type 94 opaque [module /[Default VFS]/]
  5188. Accepting operation type 94 from module /[Default VFS]/
  5189. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5190. Checking operation #95 (type 95, layer 0)
  5191. Making operation type 95 opaque [module /[Default VFS]/]
  5192. Accepting operation type 95 from module /[Default VFS]/
  5193. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5194. Checking operation #96 (type 96, layer 0)
  5195. Making operation type 96 opaque [module /[Default VFS]/]
  5196. Accepting operation type 96 from module /[Default VFS]/
  5197. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5198. Checking operation #97 (type 97, layer 0)
  5199. Making operation type 97 opaque [module /[Default VFS]/]
  5200. Accepting operation type 97 from module /[Default VFS]/
  5201. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5202. Checking operation #98 (type 98, layer 0)
  5203. Making operation type 98 opaque [module /[Default VFS]/]
  5204. Accepting operation type 98 from module /[Default VFS]/
  5205. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5206. Checking operation #99 (type 99, layer 0)
  5207. Making operation type 99 opaque [module /[Default VFS]/]
  5208. Accepting operation type 99 from module /[Default VFS]/
  5209. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5210. Checking operation #100 (type 100, layer 0)
  5211. Making operation type 100 opaque [module /[Default VFS]/]
  5212. Accepting operation type 100 from module /[Default VFS]/
  5213. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5214. Checking operation #101 (type 101, layer 0)
  5215. Making operation type 101 opaque [module /[Default VFS]/]
  5216. Accepting operation type 101 from module /[Default VFS]/
  5217. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5218. Checking operation #102 (type 102, layer 0)
  5219. Making operation type 102 opaque [module /[Default VFS]/]
  5220. Accepting operation type 102 from module /[Default VFS]/
  5221. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5222. Checking operation #103 (type 103, layer 0)
  5223. Making operation type 103 opaque [module /[Default VFS]/]
  5224. Accepting operation type 103 from module /[Default VFS]/
  5225. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5226. Checking operation #104 (type 104, layer 0)
  5227. Making operation type 104 opaque [module /[Default VFS]/]
  5228. Accepting operation type 104 from module /[Default VFS]/
  5229. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5230. Checking operation #105 (type 105, layer 0)
  5231. Making operation type 105 opaque [module /[Default VFS]/]
  5232. Accepting operation type 105 from module /[Default VFS]/
  5233. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5234. Checking operation #106 (type 106, layer 0)
  5235. Making operation type 106 opaque [module /[Default VFS]/]
  5236. Accepting operation type 106 from module /[Default VFS]/
  5237. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5238. Checking operation #107 (type 107, layer 0)
  5239. Making operation type 107 opaque [module /[Default VFS]/]
  5240. Accepting operation type 107 from module /[Default VFS]/
  5241. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5242. Checking operation #108 (type 108, layer 0)
  5243. Making operation type 108 opaque [module /[Default VFS]/]
  5244. Accepting operation type 108 from module /[Default VFS]/
  5245. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5246. Checking operation #109 (type 109, layer 0)
  5247. Making operation type 109 opaque [module /[Default VFS]/]
  5248. Accepting operation type 109 from module /[Default VFS]/
  5249. [2011/11/22 12:36:24, 5] smbd/vfs.c:192(vfs_init_custom)
  5250. Checking operation #110 (type 110, layer 0)
  5251. Making operation type 110 opaque [module /[Default VFS]/]
  5252. Accepting operation type 110 from module /[Default VFS]/
  5253. [2011/11/22 12:36:24, 5] smbd/connection.c:142(claim_connection)
  5254. claiming [IPC$]
  5255. [2011/11/22 12:36:24, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
  5256. Locking key 570B00000200000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  5257. [2011/11/22 12:36:24, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
  5258. Allocated locked data 0x0xb77e0bd8
  5259. [2011/11/22 12:36:24, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
  5260. Unlocking key 570B00000200000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  5261. [2011/11/22 12:36:24, 10] smbd/share_access.c:234(user_ok_token)
  5262. user_ok_token: share IPC$ is ok for unix user nobody
  5263. [2011/11/22 12:36:24, 10] smbd/share_access.c:279(is_share_read_only_for_token)
  5264. is_share_read_only_for_user: share IPC$ is read-only for unix user nobody
  5265. [2011/11/22 12:36:24, 10] lib/util_seaccess.c:58(se_map_generic)
  5266. se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
  5267. [2011/11/22 12:36:24, 3] lib/util_sid.c:228(string_to_sid)
  5268. string_to_sid: Sid @DomainAdmins does not start with 'S-'.
  5269. [2011/11/22 12:36:24, 5] smbd/password.c:407(user_in_netgroup)
  5270. looking for user nobody of domain i92.in.ac-versailles.fr in netgroup DomainAdmins
  5271. [2011/11/22 12:36:24, 5] smbd/password.c:423(user_in_netgroup)
  5272. looking for user nobody of domain i92.in.ac-versailles.fr in netgroup DomainAdmins
  5273. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:69(lookup_name)
  5274. lookup_name: IA92\DomainAdmins => IA92 (domain), DomainAdmins (name)
  5275. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:70(lookup_name)
  5276. lookup_name: flags = 0x077
  5277. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  5278. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  5279. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  5280. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  5281. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  5282. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  5283. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  5284. NT user token: (NULL)
  5285. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  5286. UNIX token of user 0
  5287. Primary group is 0 and contains 0 supplementary groups
  5288. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  5289. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(|(displayName=DomainAdmins)(cn=DomainAdmins)))], scope => [2]
  5290. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  5291. smbldap_open: already connected to the LDAP server
  5292. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  5293. init_group_from_ldap: Entry found for group: 512
  5294. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  5295. attribute displayName does not exist
  5296. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  5297. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  5298. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  5299. element 3: DEFAULT
  5300. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  5301. element 1: DEFAULT
  5302. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  5303. element 4: DEFAULT
  5304. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  5305. element 2: DEFAULT
  5306. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  5307. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  5308. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  5309. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  5310. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  5311. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  5312. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  5313. NT user token: (NULL)
  5314. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  5315. UNIX token of user 0
  5316. Primary group is 0 and contains 0 supplementary groups
  5317. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  5318. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  5319. , timeout = Tue Nov 22 12:37:24 2011
  5320. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  5321. ldapsam_get_account_policy: got valid value from cache
  5322. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  5323. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  5324. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  5325. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  5326. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  5327. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  5328. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  5329. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  5330. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5331. element 5 -> now SET
  5332. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5333. element 6 -> now SET
  5334. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5335. element 7 -> now SET
  5336. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5337. element 8 -> now SET
  5338. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5339. element 9 -> now SET
  5340. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5341. element 10 -> now SET
  5342. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5343. element 21 -> now SET
  5344. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  5345. pdb_set_username: setting username nobody, was
  5346. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5347. element 12 -> now SET
  5348. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  5349. pdb_set_domain: setting domain IA92, was
  5350. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5351. element 14 -> now SET
  5352. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  5353. pdb_set_nt_username: setting nt username , was
  5354. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5355. element 15 -> now SET
  5356. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  5357. pdb_set_full_name: setting full name nobody, was
  5358. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5359. element 13 -> now SET
  5360. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  5361. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  5362. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  5363. element 1 -> now DEFAULT
  5364. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  5365. pdb_set_dir_drive: setting dir drive , was NULL
  5366. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  5367. element 3 -> now DEFAULT
  5368. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  5369. pdb_set_logon_script: setting logon script nobody.bat, was
  5370. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  5371. element 4 -> now DEFAULT
  5372. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  5373. pdb_set_profile_path: setting profile path , was
  5374. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  5375. element 2 -> now DEFAULT
  5376. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5377. element 22 -> now SET
  5378. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  5379. pdb_set_workstations: setting workstations , was
  5380. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5381. element 23 -> now SET
  5382. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5383. element 25 -> now SET
  5384. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  5385. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  5386. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  5387. push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  5388. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  5389. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  5390. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  5391. NT user token: (NULL)
  5392. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  5393. UNIX token of user 0
  5394. Primary group is 0 and contains 0 supplementary groups
  5395. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  5396. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  5397. , timeout = Tue Nov 22 12:37:24 2011
  5398. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  5399. ldapsam_get_account_policy: got valid value from cache
  5400. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  5401. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  5402. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5403. element 33 -> now SET
  5404. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  5405. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  5406. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5407. element 18 -> now SET
  5408. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  5409. pdb_set_user_sid_from_rid:
  5410. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  5411. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5412. element 16 -> now SET
  5413. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5414. element 28 -> now SET
  5415. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5416. element 29 -> now SET
  5417. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5418. element 30 -> now SET
  5419. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5420. element 20 -> now SET
  5421. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5422. element 17 -> now SET
  5423. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5424. element 26 -> now SET
  5425. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  5426. setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  5427. [2011/11/22 12:36:24, 5] auth/token_util.c:528(debug_nt_user_token)
  5428. NT user token of user S-1-5-21-1187454690-116783985-3613760195-501
  5429. contains 5 SIDs
  5430. SID[ 0]: S-1-5-21-1187454690-116783985-3613760195-501
  5431. SID[ 1]: S-1-1-0
  5432. SID[ 2]: S-1-5-2
  5433. SID[ 3]: S-1-5-32-546
  5434. SID[ 4]: S-1-22-1-65534
  5435. SE_PRIV 0x0 0x0 0x0 0x0
  5436. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  5437. UNIX token of user 65534
  5438. Primary group is 65534 and contains 0 supplementary groups
  5439. [2011/11/22 12:36:24, 5] smbd/uid.c:353(change_to_user)
  5440. change_to_user uid=(0,65534) gid=(0,65534)
  5441. [2011/11/22 12:36:24, 3] smbd/service.c:1047(make_connection_snum)
  5442. testsige3 (192.168.0.10) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 2903)
  5443. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  5444. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  5445. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  5446. NT user token: (NULL)
  5447. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  5448. UNIX token of user 0
  5449. Primary group is 0 and contains 0 supplementary groups
  5450. [2011/11/22 12:36:24, 5] smbd/uid.c:368(change_to_root_user)
  5451. change_to_root_user: now uid=(0,0) gid=(0,0)
  5452. [2011/11/22 12:36:24, 3] smbd/reply.c:759(reply_tcon_and_X)
  5453. tconX service=IPC$
  5454. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  5455. got smb length of 100
  5456. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  5457. got message type 0x0 of len 0x64
  5458. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  5459. Transaction 20 of length 104 (0 toread)
  5460. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  5461. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  5462. size=100
  5463. smb_com=0xa2
  5464. smb_rcls=0
  5465. smb_reh=0
  5466. smb_err=0
  5467. smb_flg=24
  5468. smb_flg2=51207
  5469. smb_tid=2
  5470. smb_pid=676
  5471. smb_uid=101
  5472. smb_mid=1281
  5473. smt_wct=24
  5474. smb_vwv[ 0]= 255 (0xFF)
  5475. smb_vwv[ 1]=57054 (0xDEDE)
  5476. smb_vwv[ 2]= 3584 (0xE00)
  5477. smb_vwv[ 3]= 5632 (0x1600)
  5478. smb_vwv[ 4]= 0 (0x0)
  5479. smb_vwv[ 5]= 0 (0x0)
  5480. smb_vwv[ 6]= 0 (0x0)
  5481. smb_vwv[ 7]=40704 (0x9F00)
  5482. smb_vwv[ 8]= 513 (0x201)
  5483. smb_vwv[ 9]= 0 (0x0)
  5484. smb_vwv[10]= 0 (0x0)
  5485. smb_vwv[11]= 0 (0x0)
  5486. smb_vwv[12]= 0 (0x0)
  5487. smb_vwv[13]= 0 (0x0)
  5488. smb_vwv[14]= 0 (0x0)
  5489. smb_vwv[15]= 768 (0x300)
  5490. smb_vwv[16]= 0 (0x0)
  5491. smb_vwv[17]= 256 (0x100)
  5492. smb_vwv[18]= 0 (0x0)
  5493. smb_vwv[19]=16384 (0x4000)
  5494. smb_vwv[20]= 0 (0x0)
  5495. smb_vwv[21]= 512 (0x200)
  5496. smb_vwv[22]= 0 (0x0)
  5497. smb_vwv[23]= 768 (0x300)
  5498. smb_bcc=17
  5499. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  5500. [0000] 00 5C 00 6C 00 73 00 61 00 72 00 70 00 63 00 00 .\.l.s.a .r.p.c..
  5501. [0010] 00 .
  5502. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  5503. switch message SMBntcreateX (pid 2903) conn 0xb77e2320
  5504. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  5505. setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  5506. [2011/11/22 12:36:24, 5] auth/token_util.c:528(debug_nt_user_token)
  5507. NT user token of user S-1-5-21-1187454690-116783985-3613760195-501
  5508. contains 5 SIDs
  5509. SID[ 0]: S-1-5-21-1187454690-116783985-3613760195-501
  5510. SID[ 1]: S-1-1-0
  5511. SID[ 2]: S-1-5-2
  5512. SID[ 3]: S-1-5-32-546
  5513. SID[ 4]: S-1-22-1-65534
  5514. SE_PRIV 0x0 0x0 0x0 0x0
  5515. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  5516. UNIX token of user 65534
  5517. Primary group is 65534 and contains 0 supplementary groups
  5518. [2011/11/22 12:36:24, 5] smbd/uid.c:353(change_to_user)
  5519. change_to_user uid=(0,65534) gid=(0,65534)
  5520. [2011/11/22 12:36:24, 10] smbd/nttrans.c:484(reply_ntcreate_and_X)
  5521. reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = lsarpc
  5522. [2011/11/22 12:36:24, 4] smbd/nttrans.c:315(nt_open_pipe)
  5523. nt_open_pipe: Opening pipe \lsarpc.
  5524. [2011/11/22 12:36:24, 5] smbd/files.c:103(file_new)
  5525. allocated file structure 625, fnum = 4721 (2 used)
  5526. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
  5527. Create pipe requested \lsarpc
  5528. [2011/11/22 12:36:24, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
  5529. init_pipe_handles: created handle list for pipe \lsarpc
  5530. [2011/11/22 12:36:24, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
  5531. init_pipe_handles: pipe_handles ref count = 1 for pipe \lsarpc
  5532. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  5533. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=65534))], scope => [2]
  5534. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  5535. smbldap_open: already connected to the LDAP server
  5536. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:2468(ldapsam_getgroup)
  5537. ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=65534))
  5538. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  5539. element 3: DEFAULT
  5540. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  5541. element 1: DEFAULT
  5542. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  5543. element 4: DEFAULT
  5544. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  5545. element 2: DEFAULT
  5546. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  5547. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  5548. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  5549. push_conn_ctx(101) : conn_ctx_stack_ndx = 0
  5550. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  5551. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  5552. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  5553. NT user token: (NULL)
  5554. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  5555. UNIX token of user 0
  5556. Primary group is 0 and contains 0 supplementary groups
  5557. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  5558. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  5559. , timeout = Tue Nov 22 12:37:24 2011
  5560. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  5561. ldapsam_get_account_policy: got valid value from cache
  5562. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  5563. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  5564. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  5565. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  5566. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  5567. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  5568. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  5569. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  5570. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5571. element 5 -> now SET
  5572. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5573. element 6 -> now SET
  5574. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5575. element 7 -> now SET
  5576. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5577. element 8 -> now SET
  5578. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5579. element 9 -> now SET
  5580. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5581. element 10 -> now SET
  5582. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5583. element 21 -> now SET
  5584. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  5585. pdb_set_username: setting username nobody, was
  5586. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5587. element 12 -> now SET
  5588. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  5589. pdb_set_domain: setting domain IA92, was
  5590. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5591. element 14 -> now SET
  5592. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  5593. pdb_set_nt_username: setting nt username , was
  5594. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5595. element 15 -> now SET
  5596. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  5597. pdb_set_full_name: setting full name nobody, was
  5598. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5599. element 13 -> now SET
  5600. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  5601. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  5602. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  5603. element 1 -> now DEFAULT
  5604. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  5605. pdb_set_dir_drive: setting dir drive , was NULL
  5606. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  5607. element 3 -> now DEFAULT
  5608. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  5609. pdb_set_logon_script: setting logon script nobody.bat, was
  5610. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  5611. element 4 -> now DEFAULT
  5612. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  5613. pdb_set_profile_path: setting profile path , was
  5614. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  5615. element 2 -> now DEFAULT
  5616. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5617. element 22 -> now SET
  5618. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  5619. pdb_set_workstations: setting workstations , was
  5620. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5621. element 23 -> now SET
  5622. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5623. element 25 -> now SET
  5624. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  5625. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  5626. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  5627. push_conn_ctx(101) : conn_ctx_stack_ndx = 0
  5628. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  5629. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  5630. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  5631. NT user token: (NULL)
  5632. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  5633. UNIX token of user 0
  5634. Primary group is 0 and contains 0 supplementary groups
  5635. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  5636. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  5637. , timeout = Tue Nov 22 12:37:24 2011
  5638. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  5639. ldapsam_get_account_policy: got valid value from cache
  5640. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  5641. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  5642. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5643. element 33 -> now SET
  5644. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  5645. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  5646. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5647. element 18 -> now SET
  5648. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  5649. pdb_set_user_sid_from_rid:
  5650. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  5651. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5652. element 16 -> now SET
  5653. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5654. element 28 -> now SET
  5655. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5656. element 29 -> now SET
  5657. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5658. element 30 -> now SET
  5659. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5660. element 20 -> now SET
  5661. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5662. element 17 -> now SET
  5663. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  5664. element 26 -> now SET
  5665. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
  5666. Created internal pipe \lsarpc (pipes_open=0)
  5667. [2011/11/22 12:36:24, 5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
  5668. do_ntcreate_pipe_open: open pipe = \lsarpc
  5669. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  5670. got smb length of 136
  5671. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  5672. got message type 0x0 of len 0x88
  5673. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  5674. Transaction 21 of length 140 (0 toread)
  5675. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  5676. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  5677. size=136
  5678. smb_com=0x2f
  5679. smb_rcls=0
  5680. smb_reh=0
  5681. smb_err=0
  5682. smb_flg=24
  5683. smb_flg2=51207
  5684. smb_tid=2
  5685. smb_pid=65279
  5686. smb_uid=101
  5687. smb_mid=1345
  5688. smt_wct=14
  5689. smb_vwv[ 0]= 255 (0xFF)
  5690. smb_vwv[ 1]=57054 (0xDEDE)
  5691. smb_vwv[ 2]= 4721 (0x1271)
  5692. smb_vwv[ 3]= 0 (0x0)
  5693. smb_vwv[ 4]= 0 (0x0)
  5694. smb_vwv[ 5]=65535 (0xFFFF)
  5695. smb_vwv[ 6]=65535 (0xFFFF)
  5696. smb_vwv[ 7]= 8 (0x8)
  5697. smb_vwv[ 8]= 72 (0x48)
  5698. smb_vwv[ 9]= 0 (0x0)
  5699. smb_vwv[10]= 72 (0x48)
  5700. smb_vwv[11]= 64 (0x40)
  5701. smb_vwv[12]= 0 (0x0)
  5702. smb_vwv[13]= 0 (0x0)
  5703. smb_bcc=73
  5704. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  5705. [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H......
  5706. [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........
  5707. [0020] 00 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 .xW4.4.. ....#Eg.
  5708. [0030] AB 00 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........
  5709. [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... .
  5710. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  5711. switch message SMBwriteX (pid 2903) conn 0xb77e2320
  5712. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  5713. created /tmp/SMBwriteX.34.req len 140
  5714. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  5715. change_to_user: Skipping user change - already user
  5716. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  5717. reply_pipe_write_and_X: 1271 name: lsarpc len: 72
  5718. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  5719. np_write_send: len: 72
  5720. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  5721. [0000] 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 ........ H.......
  5722. [0010] B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 ........ ........
  5723. [0020] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg..
  5724. [0030] 00 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 .....].. ........
  5725. [0040] 2B 10 48 60 02 00 00 00 +.H`....
  5726. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  5727. write_to_pipe: data_left = 72
  5728. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  5729. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
  5730. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  5731. fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
  5732. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  5733. write_to_pipe: data_used = 16
  5734. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  5735. write_to_pipe: data_left = 56
  5736. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  5737. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
  5738. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  5739. 000000 smb_io_rpc_hdr
  5740. 0000 major : 05
  5741. 0001 minor : 00
  5742. 0002 pkt_type : 0b
  5743. 0003 flags : 03
  5744. 0004 pack_type0: 10
  5745. 0005 pack_type1: 00
  5746. 0006 pack_type2: 00
  5747. 0007 pack_type3: 00
  5748. 0008 frag_len : 0048
  5749. 000a auth_len : 0000
  5750. 000c call_id : 00000001
  5751. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  5752. unmarshall_rpc_header: using little-endian RPC
  5753. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  5754. unmarshall_rpc_header: type = 11, flags = 3
  5755. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  5756. write_to_pipe: data_used = 0
  5757. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  5758. write_to_pipe: data_left = 56
  5759. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  5760. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
  5761. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  5762. process_complete_pdu: processing packet type 11
  5763. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
  5764. api_pipe_bind_req: decode request. 1558
  5765. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  5766. 000000 smb_io_rpc_hdr_rb
  5767. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  5768. 000000 smb_io_rpc_hdr_bba
  5769. 0000 max_tsize: 10b8
  5770. 0002 max_rsize: 10b8
  5771. 0004 assoc_gid: 00000000
  5772. 0008 num_contexts: 01
  5773. 000c context_id : 0000
  5774. 000e num_transfer_syntaxes: 01
  5775. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  5776. 00000f smb_io_rpc_iface
  5777. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  5778. 000010 smb_io_uuid uuid
  5779. 0010 data : 12345778
  5780. 0014 data : 1234
  5781. 0016 data : abcd
  5782. 0018 data : ef 00
  5783. 001a data : 01 23 45 67 89 ab
  5784. 0020 version: 00000000
  5785. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  5786. 000024 smb_io_rpc_iface
  5787. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  5788. 000024 smb_io_uuid uuid
  5789. 0024 data : 8a885d04
  5790. 0028 data : 1ceb
  5791. 002a data : 11c9
  5792. 002c data : 9f e8
  5793. 002e data : 08 00 2b 10 48 60
  5794. 0034 version: 00000002
  5795. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
  5796. api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
  5797. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
  5798. api_pipe_bind_req: make response. 1628
  5799. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:960(check_bind_req)
  5800. check_bind_req for \lsarpc
  5801. checking lsarpc
  5802. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  5803. 000000 smb_io_rpc_hdr_ba
  5804. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  5805. 000000 smb_io_rpc_hdr_bba
  5806. 0000 max_tsize: 10b8
  5807. 0002 max_rsize: 10b8
  5808. 0004 assoc_gid: 000053f0
  5809. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  5810. 000008 smb_io_rpc_addr_str
  5811. 0008 len: 000d
  5812. 000a str: \PIPE\lsarpc.
  5813. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  5814. 000017 smb_io_rpc_results
  5815. 0018 num_results: 01
  5816. 001c result : 0000
  5817. 001e reason : 0000
  5818. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  5819. 000020 smb_io_rpc_iface
  5820. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  5821. 000020 smb_io_uuid uuid
  5822. 0020 data : 8a885d04
  5823. 0024 data : 1ceb
  5824. 0026 data : 11c9
  5825. 0028 data : 9f e8
  5826. 002a data : 08 00 2b 10 48 60
  5827. 0030 version: 00000002
  5828. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  5829. 000000 smb_io_rpc_hdr
  5830. 0000 major : 05
  5831. 0001 minor : 00
  5832. 0002 pkt_type : 0c
  5833. 0003 flags : 03
  5834. 0004 pack_type0: 10
  5835. 0005 pack_type1: 00
  5836. 0006 pack_type2: 00
  5837. 0007 pack_type3: 00
  5838. 0008 frag_len : 0044
  5839. 000a auth_len : 0000
  5840. 000c call_id : 00000001
  5841. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  5842. write_to_pipe: data_used = 56
  5843. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  5844. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77dffe8
  5845. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  5846. s3_event: Run immediate event "tevent_req_trigger": 0xb77dffe8
  5847. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  5848. writeX-IPC nwritten=72
  5849. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  5850. got smb length of 59
  5851. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  5852. got message type 0x0 of len 0x3b
  5853. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  5854. Transaction 22 of length 63 (0 toread)
  5855. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  5856. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  5857. size=59
  5858. smb_com=0x2e
  5859. smb_rcls=0
  5860. smb_reh=0
  5861. smb_err=0
  5862. smb_flg=24
  5863. smb_flg2=51207
  5864. smb_tid=2
  5865. smb_pid=65279
  5866. smb_uid=101
  5867. smb_mid=1409
  5868. smt_wct=12
  5869. smb_vwv[ 0]= 255 (0xFF)
  5870. smb_vwv[ 1]=57054 (0xDEDE)
  5871. smb_vwv[ 2]= 4721 (0x1271)
  5872. smb_vwv[ 3]= 0 (0x0)
  5873. smb_vwv[ 4]= 0 (0x0)
  5874. smb_vwv[ 5]= 1024 (0x400)
  5875. smb_vwv[ 6]= 1024 (0x400)
  5876. smb_vwv[ 7]=65535 (0xFFFF)
  5877. smb_vwv[ 8]=65535 (0xFFFF)
  5878. smb_vwv[ 9]= 1024 (0x400)
  5879. smb_vwv[10]= 0 (0x0)
  5880. smb_vwv[11]= 0 (0x0)
  5881. smb_bcc=0
  5882. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  5883. switch message SMBreadX (pid 2903) conn 0xb77e2320
  5884. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  5885. change_to_user: Skipping user change - already user
  5886. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  5887. name: \lsarpc len: 1024
  5888. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
  5889. read_from_pipe: \lsarpc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
  5890. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  5891. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  5892. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  5893. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  5894. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  5895. readX-IPC min=1024 max=1024 nread=68
  5896. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  5897. got smb length of 156
  5898. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  5899. got message type 0x0 of len 0x9c
  5900. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  5901. Transaction 23 of length 160 (0 toread)
  5902. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  5903. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  5904. size=156
  5905. smb_com=0x2f
  5906. smb_rcls=0
  5907. smb_reh=0
  5908. smb_err=0
  5909. smb_flg=24
  5910. smb_flg2=51207
  5911. smb_tid=2
  5912. smb_pid=65279
  5913. smb_uid=101
  5914. smb_mid=1473
  5915. smt_wct=14
  5916. smb_vwv[ 0]= 255 (0xFF)
  5917. smb_vwv[ 1]=57054 (0xDEDE)
  5918. smb_vwv[ 2]= 4721 (0x1271)
  5919. smb_vwv[ 3]= 0 (0x0)
  5920. smb_vwv[ 4]= 0 (0x0)
  5921. smb_vwv[ 5]=65535 (0xFFFF)
  5922. smb_vwv[ 6]=65535 (0xFFFF)
  5923. smb_vwv[ 7]= 8 (0x8)
  5924. smb_vwv[ 8]= 92 (0x5C)
  5925. smb_vwv[ 9]= 0 (0x0)
  5926. smb_vwv[10]= 92 (0x5C)
  5927. smb_vwv[11]= 64 (0x40)
  5928. smb_vwv[12]= 0 (0x0)
  5929. smb_vwv[13]= 0 (0x0)
  5930. smb_bcc=93
  5931. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  5932. [0000] EE 05 00 00 03 10 00 00 00 5C 00 00 00 01 00 00 ........ .\......
  5933. [0010] 00 44 00 00 00 00 00 2C 00 60 74 0D 00 0C 00 00 .D....., .`t.....
  5934. [0020] 00 00 00 00 00 0C 00 00 00 5C 00 5C 00 41 00 44 ........ .\.\.A.D
  5935. [0030] 00 4D 00 49 00 4E 00 2D 00 50 00 44 00 43 00 00 .M.I.N.- .P.D.C..
  5936. [0040] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  5937. [0050] 00 00 00 00 00 00 00 00 00 01 00 00 00 ........ .....
  5938. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  5939. switch message SMBwriteX (pid 2903) conn 0xb77e2320
  5940. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  5941. created /tmp/SMBwriteX.35.req len 160
  5942. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  5943. change_to_user: Skipping user change - already user
  5944. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  5945. reply_pipe_write_and_X: 1271 name: lsarpc len: 92
  5946. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  5947. np_write_send: len: 92
  5948. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  5949. [0000] 05 00 00 03 10 00 00 00 5C 00 00 00 01 00 00 00 ........ \.......
  5950. [0010] 44 00 00 00 00 00 2C 00 60 74 0D 00 0C 00 00 00 D.....,. `t......
  5951. [0020] 00 00 00 00 0C 00 00 00 5C 00 5C 00 41 00 44 00 ........ \.\.A.D.
  5952. [0030] 4D 00 49 00 4E 00 2D 00 50 00 44 00 43 00 00 00 M.I.N.-. P.D.C...
  5953. [0040] 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
  5954. [0050] 00 00 00 00 00 00 00 00 01 00 00 00 ........ ....
  5955. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  5956. write_to_pipe: data_left = 92
  5957. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  5958. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 92
  5959. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  5960. fill_rpc_header: data_to_copy = 92, len_needed_to_complete_hdr = 16, receive_len = 0
  5961. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  5962. write_to_pipe: data_used = 16
  5963. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  5964. write_to_pipe: data_left = 76
  5965. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  5966. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 76
  5967. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  5968. 000000 smb_io_rpc_hdr
  5969. 0000 major : 05
  5970. 0001 minor : 00
  5971. 0002 pkt_type : 00
  5972. 0003 flags : 03
  5973. 0004 pack_type0: 10
  5974. 0005 pack_type1: 00
  5975. 0006 pack_type2: 00
  5976. 0007 pack_type3: 00
  5977. 0008 frag_len : 005c
  5978. 000a auth_len : 0000
  5979. 000c call_id : 00000001
  5980. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  5981. unmarshall_rpc_header: using little-endian RPC
  5982. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  5983. unmarshall_rpc_header: type = 0, flags = 3
  5984. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  5985. write_to_pipe: data_used = 0
  5986. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  5987. write_to_pipe: data_left = 76
  5988. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  5989. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 76, incoming data = 76
  5990. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  5991. process_complete_pdu: processing packet type 0
  5992. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  5993. 000000 smb_io_rpc_hdr_req req
  5994. 0000 alloc_hint: 00000044
  5995. 0004 context_id: 0000
  5996. 0006 opnum : 002c
  5997. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  5998. free_pipe_context: destroying talloc pool of size 72
  5999. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2261(api_pipe_request)
  6000. Requested \PIPE\\lsarpc
  6001. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
  6002. api_rpcTNP: \lsarpc op 0x2c - created /tmp/in_\lsarpc_44.7.prs
  6003. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
  6004. api_rpcTNP: rpc command: LSA_OPENPOLICY2
  6005. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
  6006. api_rpc_cmds[44].fn == 0xb720da80
  6007. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  6008. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  6009. in: struct lsa_OpenPolicy2
  6010. system_name : *
  6011. system_name : '\\ADMIN-PDC'
  6012. attr : *
  6013. attr: struct lsa_ObjectAttribute
  6014. len : 0x00000018 (24)
  6015. root_dir : NULL
  6016. object_name : NULL
  6017. attributes : 0x00000000 (0)
  6018. sec_desc : NULL
  6019. sec_qos : NULL
  6020. access_mask : 0x00000001 (1)
  6021. 1: LSA_POLICY_VIEW_LOCAL_INFORMATION
  6022. 0: LSA_POLICY_VIEW_AUDIT_INFORMATION
  6023. 0: LSA_POLICY_GET_PRIVATE_INFORMATION
  6024. 0: LSA_POLICY_TRUST_ADMIN
  6025. 0: LSA_POLICY_CREATE_ACCOUNT
  6026. 0: LSA_POLICY_CREATE_SECRET
  6027. 0: LSA_POLICY_CREATE_PRIVILEGE
  6028. 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
  6029. 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS
  6030. 0: LSA_POLICY_AUDIT_LOG_ADMIN
  6031. 0: LSA_POLICY_SERVER_ADMIN
  6032. 0: LSA_POLICY_LOOKUP_NAMES
  6033. 0: LSA_POLICY_NOTIFICATION
  6034. [2011/11/22 12:36:24, 4] rpc_server/srv_samr_nt.c:219(access_check_object)
  6035. _lsa_OpenPolicy2: access GRANTED (requested: 0x00000001, granted: 0x00000001)
  6036. [2011/11/22 12:36:24, 4] rpc_server/srv_lsa_hnd.c:160(create_policy_hnd)
  6037. Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 CB 4E 38 89 ........ .....N8.
  6038. [0010] 57 0B 00 00 W...
  6039. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  6040. lsa_OpenPolicy2: struct lsa_OpenPolicy2
  6041. out: struct lsa_OpenPolicy2
  6042. handle : *
  6043. handle: struct policy_handle
  6044. handle_type : 0x00000000 (0)
  6045. uuid : 00000001-0000-0000-cb4e-3889570b0000
  6046. result : NT_STATUS_OK
  6047. [2011/11/22 12:36:24, 0] rpc_parse/parse_prs.c:73(prs_dump_region)
  6048. created /tmp/out_\lsarpc_44.7.prs
  6049. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
  6050. api_rpcTNP: called \lsarpc successfully
  6051. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  6052. free_pipe_context: destroying talloc pool of size 1052
  6053. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  6054. write_to_pipe: data_used = 76
  6055. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6056. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77dfff8
  6057. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6058. s3_event: Run immediate event "tevent_req_trigger": 0xb77dfff8
  6059. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  6060. writeX-IPC nwritten=92
  6061. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  6062. got smb length of 59
  6063. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  6064. got message type 0x0 of len 0x3b
  6065. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  6066. Transaction 24 of length 63 (0 toread)
  6067. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  6068. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  6069. size=59
  6070. smb_com=0x2e
  6071. smb_rcls=0
  6072. smb_reh=0
  6073. smb_err=0
  6074. smb_flg=24
  6075. smb_flg2=51207
  6076. smb_tid=2
  6077. smb_pid=65279
  6078. smb_uid=101
  6079. smb_mid=1537
  6080. smt_wct=12
  6081. smb_vwv[ 0]= 255 (0xFF)
  6082. smb_vwv[ 1]=57054 (0xDEDE)
  6083. smb_vwv[ 2]= 4721 (0x1271)
  6084. smb_vwv[ 3]= 0 (0x0)
  6085. smb_vwv[ 4]= 0 (0x0)
  6086. smb_vwv[ 5]= 1024 (0x400)
  6087. smb_vwv[ 6]= 1024 (0x400)
  6088. smb_vwv[ 7]=65535 (0xFFFF)
  6089. smb_vwv[ 8]=65535 (0xFFFF)
  6090. smb_vwv[ 9]= 1024 (0x400)
  6091. smb_vwv[10]= 0 (0x0)
  6092. smb_vwv[11]= 0 (0x0)
  6093. smb_bcc=0
  6094. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  6095. switch message SMBreadX (pid 2903) conn 0xb77e2320
  6096. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  6097. change_to_user: Skipping user change - already user
  6098. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  6099. name: \lsarpc len: 1024
  6100. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
  6101. read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
  6102. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6103. 000000 smb_io_rpc_hdr hdr
  6104. 0000 major : 05
  6105. 0001 minor : 00
  6106. 0002 pkt_type : 02
  6107. 0003 flags : 03
  6108. 0004 pack_type0: 10
  6109. 0005 pack_type1: 00
  6110. 0006 pack_type2: 00
  6111. 0007 pack_type3: 00
  6112. 0008 frag_len : 0030
  6113. 000a auth_len : 0000
  6114. 000c call_id : 00000001
  6115. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6116. 000010 smb_io_rpc_hdr_resp resp
  6117. 0010 alloc_hint: 00000018
  6118. 0014 context_id: 0000
  6119. 0016 cancel_ct : 00
  6120. 0017 reserved : 00
  6121. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6122. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  6123. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6124. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  6125. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  6126. readX-IPC min=1024 max=1024 nread=48
  6127. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  6128. got smb length of 116
  6129. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  6130. got message type 0x0 of len 0x74
  6131. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  6132. Transaction 25 of length 120 (0 toread)
  6133. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  6134. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  6135. size=116
  6136. smb_com=0x2f
  6137. smb_rcls=0
  6138. smb_reh=0
  6139. smb_err=0
  6140. smb_flg=24
  6141. smb_flg2=51207
  6142. smb_tid=2
  6143. smb_pid=65279
  6144. smb_uid=101
  6145. smb_mid=1601
  6146. smt_wct=14
  6147. smb_vwv[ 0]= 255 (0xFF)
  6148. smb_vwv[ 1]=57054 (0xDEDE)
  6149. smb_vwv[ 2]= 4721 (0x1271)
  6150. smb_vwv[ 3]= 0 (0x0)
  6151. smb_vwv[ 4]= 0 (0x0)
  6152. smb_vwv[ 5]=65535 (0xFFFF)
  6153. smb_vwv[ 6]=65535 (0xFFFF)
  6154. smb_vwv[ 7]= 8 (0x8)
  6155. smb_vwv[ 8]= 52 (0x34)
  6156. smb_vwv[ 9]= 0 (0x0)
  6157. smb_vwv[10]= 52 (0x34)
  6158. smb_vwv[11]= 64 (0x40)
  6159. smb_vwv[12]= 0 (0x0)
  6160. smb_vwv[13]= 0 (0x0)
  6161. smb_bcc=53
  6162. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  6163. [0000] EE 05 00 00 03 10 00 00 00 34 00 00 00 02 00 00 ........ .4......
  6164. [0010] 00 1C 00 00 00 00 00 0D 00 00 00 00 00 01 00 00 ........ ........
  6165. [0020] 00 00 00 00 00 CB 4E 38 89 57 0B 00 00 00 00 00 ......N8 .W......
  6166. [0030] 00 FF FF FF FF .....
  6167. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  6168. switch message SMBwriteX (pid 2903) conn 0xb77e2320
  6169. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  6170. created /tmp/SMBwriteX.36.req len 120
  6171. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  6172. change_to_user: Skipping user change - already user
  6173. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  6174. reply_pipe_write_and_X: 1271 name: lsarpc len: 52
  6175. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  6176. np_write_send: len: 52
  6177. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  6178. [0000] 05 00 00 03 10 00 00 00 34 00 00 00 02 00 00 00 ........ 4.......
  6179. [0010] 1C 00 00 00 00 00 0D 00 00 00 00 00 01 00 00 00 ........ ........
  6180. [0020] 00 00 00 00 CB 4E 38 89 57 0B 00 00 00 00 00 00 .....N8. W.......
  6181. [0030] FF FF FF FF ....
  6182. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  6183. write_to_pipe: data_left = 52
  6184. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  6185. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 52
  6186. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  6187. fill_rpc_header: data_to_copy = 52, len_needed_to_complete_hdr = 16, receive_len = 0
  6188. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  6189. write_to_pipe: data_used = 16
  6190. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  6191. write_to_pipe: data_left = 36
  6192. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  6193. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 36
  6194. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6195. 000000 smb_io_rpc_hdr
  6196. 0000 major : 05
  6197. 0001 minor : 00
  6198. 0002 pkt_type : 00
  6199. 0003 flags : 03
  6200. 0004 pack_type0: 10
  6201. 0005 pack_type1: 00
  6202. 0006 pack_type2: 00
  6203. 0007 pack_type3: 00
  6204. 0008 frag_len : 0034
  6205. 000a auth_len : 0000
  6206. 000c call_id : 00000002
  6207. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  6208. unmarshall_rpc_header: using little-endian RPC
  6209. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  6210. unmarshall_rpc_header: type = 0, flags = 3
  6211. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  6212. write_to_pipe: data_used = 0
  6213. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  6214. write_to_pipe: data_left = 36
  6215. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  6216. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 36, incoming data = 36
  6217. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  6218. process_complete_pdu: processing packet type 0
  6219. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6220. 000000 smb_io_rpc_hdr_req req
  6221. 0000 alloc_hint: 0000001c
  6222. 0004 context_id: 0000
  6223. 0006 opnum : 000d
  6224. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  6225. free_pipe_context: destroying talloc pool of size 0
  6226. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2261(api_pipe_request)
  6227. Requested \PIPE\\lsarpc
  6228. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
  6229. api_rpcTNP: \lsarpc op 0xd - created /tmp/in_\lsarpc_13.5.prs
  6230. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
  6231. api_rpcTNP: rpc command: LSA_ENUMTRUSTDOM
  6232. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
  6233. api_rpc_cmds[13].fn == 0xb72131b0
  6234. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  6235. lsa_EnumTrustDom: struct lsa_EnumTrustDom
  6236. in: struct lsa_EnumTrustDom
  6237. handle : *
  6238. handle: struct policy_handle
  6239. handle_type : 0x00000000 (0)
  6240. uuid : 00000001-0000-0000-cb4e-3889570b0000
  6241. resume_handle : *
  6242. resume_handle : 0x00000000 (0)
  6243. max_size : 0xffffffff (4294967295)
  6244. [2011/11/22 12:36:24, 4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
  6245. Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 CB 4E 38 89 ........ .....N8.
  6246. [0010] 57 0B 00 00 W...
  6247. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  6248. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  6249. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  6250. push_conn_ctx(101) : conn_ctx_stack_ndx = 0
  6251. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  6252. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  6253. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  6254. NT user token: (NULL)
  6255. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  6256. UNIX token of user 0
  6257. Primary group is 0 and contains 0 supplementary groups
  6258. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  6259. smbldap_search_ext: base => [sambaDomainName=ia92,o=gouv,c=fr], filter => [(objectClass=sambaTrustedDomainPassword)], scope => [2]
  6260. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  6261. smbldap_open: already connected to the LDAP server
  6262. [2011/11/22 12:36:24, 5] passdb/pdb_ldap.c:6151(ldapsam_enum_trusteddoms)
  6263. ldapsam_enum_trusteddoms: got 0 domains
  6264. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  6265. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  6266. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  6267. lsa_EnumTrustDom: struct lsa_EnumTrustDom
  6268. out: struct lsa_EnumTrustDom
  6269. resume_handle : *
  6270. resume_handle : 0xffffffff (4294967295)
  6271. domains : *
  6272. domains: struct lsa_DomainList
  6273. count : 0x00000000 (0)
  6274. domains : *
  6275. domains: ARRAY(0)
  6276. result : NT_STATUS_NO_MORE_ENTRIES
  6277. [2011/11/22 12:36:24, 0] rpc_parse/parse_prs.c:73(prs_dump_region)
  6278. created /tmp/out_\lsarpc_13.5.prs
  6279. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
  6280. api_rpcTNP: called \lsarpc successfully
  6281. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  6282. free_pipe_context: destroying talloc pool of size 8
  6283. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  6284. write_to_pipe: data_used = 36
  6285. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6286. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77dffd8
  6287. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6288. s3_event: Run immediate event "tevent_req_trigger": 0xb77dffd8
  6289. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  6290. writeX-IPC nwritten=52
  6291. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  6292. got smb length of 59
  6293. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  6294. got message type 0x0 of len 0x3b
  6295. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  6296. Transaction 26 of length 63 (0 toread)
  6297. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  6298. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  6299. size=59
  6300. smb_com=0x2e
  6301. smb_rcls=0
  6302. smb_reh=0
  6303. smb_err=0
  6304. smb_flg=24
  6305. smb_flg2=51207
  6306. smb_tid=2
  6307. smb_pid=65279
  6308. smb_uid=101
  6309. smb_mid=1665
  6310. smt_wct=12
  6311. smb_vwv[ 0]= 255 (0xFF)
  6312. smb_vwv[ 1]=57054 (0xDEDE)
  6313. smb_vwv[ 2]= 4721 (0x1271)
  6314. smb_vwv[ 3]= 0 (0x0)
  6315. smb_vwv[ 4]= 0 (0x0)
  6316. smb_vwv[ 5]= 1024 (0x400)
  6317. smb_vwv[ 6]= 1024 (0x400)
  6318. smb_vwv[ 7]=65535 (0xFFFF)
  6319. smb_vwv[ 8]=65535 (0xFFFF)
  6320. smb_vwv[ 9]= 1024 (0x400)
  6321. smb_vwv[10]= 0 (0x0)
  6322. smb_vwv[11]= 0 (0x0)
  6323. smb_bcc=0
  6324. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  6325. switch message SMBreadX (pid 2903) conn 0xb77e2320
  6326. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  6327. change_to_user: Skipping user change - already user
  6328. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  6329. name: \lsarpc len: 1024
  6330. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
  6331. read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 20.
  6332. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6333. 000000 smb_io_rpc_hdr hdr
  6334. 0000 major : 05
  6335. 0001 minor : 00
  6336. 0002 pkt_type : 02
  6337. 0003 flags : 03
  6338. 0004 pack_type0: 10
  6339. 0005 pack_type1: 00
  6340. 0006 pack_type2: 00
  6341. 0007 pack_type3: 00
  6342. 0008 frag_len : 002c
  6343. 000a auth_len : 0000
  6344. 000c call_id : 00000002
  6345. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6346. 000010 smb_io_rpc_hdr_resp resp
  6347. 0010 alloc_hint: 00000014
  6348. 0014 context_id: 0000
  6349. 0016 cancel_ct : 00
  6350. 0017 reserved : 00
  6351. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6352. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  6353. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6354. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  6355. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  6356. readX-IPC min=1024 max=1024 nread=44
  6357. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  6358. got smb length of 108
  6359. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  6360. got message type 0x0 of len 0x6c
  6361. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  6362. Transaction 27 of length 112 (0 toread)
  6363. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  6364. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  6365. size=108
  6366. smb_com=0x2f
  6367. smb_rcls=0
  6368. smb_reh=0
  6369. smb_err=0
  6370. smb_flg=24
  6371. smb_flg2=51207
  6372. smb_tid=2
  6373. smb_pid=65279
  6374. smb_uid=101
  6375. smb_mid=1728
  6376. smt_wct=14
  6377. smb_vwv[ 0]= 255 (0xFF)
  6378. smb_vwv[ 1]=57054 (0xDEDE)
  6379. smb_vwv[ 2]= 4721 (0x1271)
  6380. smb_vwv[ 3]= 0 (0x0)
  6381. smb_vwv[ 4]= 0 (0x0)
  6382. smb_vwv[ 5]=65535 (0xFFFF)
  6383. smb_vwv[ 6]=65535 (0xFFFF)
  6384. smb_vwv[ 7]= 8 (0x8)
  6385. smb_vwv[ 8]= 44 (0x2C)
  6386. smb_vwv[ 9]= 0 (0x0)
  6387. smb_vwv[10]= 44 (0x2C)
  6388. smb_vwv[11]= 64 (0x40)
  6389. smb_vwv[12]= 0 (0x0)
  6390. smb_vwv[13]= 0 (0x0)
  6391. smb_bcc=45
  6392. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  6393. [0000] EE 05 00 00 03 10 00 00 00 2C 00 00 00 03 00 00 ........ .,......
  6394. [0010] 00 14 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........
  6395. [0020] 00 00 00 00 00 CB 4E 38 89 57 0B 00 00 ......N8 .W...
  6396. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  6397. switch message SMBwriteX (pid 2903) conn 0xb77e2320
  6398. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  6399. created /tmp/SMBwriteX.37.req len 112
  6400. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  6401. change_to_user: Skipping user change - already user
  6402. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  6403. reply_pipe_write_and_X: 1271 name: lsarpc len: 44
  6404. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  6405. np_write_send: len: 44
  6406. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  6407. [0000] 05 00 00 03 10 00 00 00 2C 00 00 00 03 00 00 00 ........ ,.......
  6408. [0010] 14 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ........ ........
  6409. [0020] 00 00 00 00 CB 4E 38 89 57 0B 00 00 .....N8. W...
  6410. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  6411. write_to_pipe: data_left = 44
  6412. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  6413. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
  6414. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  6415. fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
  6416. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  6417. write_to_pipe: data_used = 16
  6418. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  6419. write_to_pipe: data_left = 28
  6420. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  6421. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
  6422. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6423. 000000 smb_io_rpc_hdr
  6424. 0000 major : 05
  6425. 0001 minor : 00
  6426. 0002 pkt_type : 00
  6427. 0003 flags : 03
  6428. 0004 pack_type0: 10
  6429. 0005 pack_type1: 00
  6430. 0006 pack_type2: 00
  6431. 0007 pack_type3: 00
  6432. 0008 frag_len : 002c
  6433. 000a auth_len : 0000
  6434. 000c call_id : 00000003
  6435. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  6436. unmarshall_rpc_header: using little-endian RPC
  6437. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  6438. unmarshall_rpc_header: type = 0, flags = 3
  6439. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  6440. write_to_pipe: data_used = 0
  6441. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  6442. write_to_pipe: data_left = 28
  6443. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  6444. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28
  6445. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  6446. process_complete_pdu: processing packet type 0
  6447. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6448. 000000 smb_io_rpc_hdr_req req
  6449. 0000 alloc_hint: 00000014
  6450. 0004 context_id: 0000
  6451. 0006 opnum : 0000
  6452. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  6453. free_pipe_context: destroying talloc pool of size 0
  6454. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2261(api_pipe_request)
  6455. Requested \PIPE\\lsarpc
  6456. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
  6457. api_rpcTNP: \lsarpc op 0x0 - created /tmp/in_\lsarpc_0.7.prs
  6458. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
  6459. api_rpcTNP: rpc command: LSA_CLOSE
  6460. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
  6461. api_rpc_cmds[0].fn == 0xb7217060
  6462. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  6463. lsa_Close: struct lsa_Close
  6464. in: struct lsa_Close
  6465. handle : *
  6466. handle: struct policy_handle
  6467. handle_type : 0x00000000 (0)
  6468. uuid : 00000001-0000-0000-cb4e-3889570b0000
  6469. [2011/11/22 12:36:24, 4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
  6470. Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 CB 4E 38 89 ........ .....N8.
  6471. [0010] 57 0B 00 00 W...
  6472. [2011/11/22 12:36:24, 4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
  6473. Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 CB 4E 38 89 ........ .....N8.
  6474. [0010] 57 0B 00 00 W...
  6475. [2011/11/22 12:36:24, 3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd)
  6476. Closed policy
  6477. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  6478. lsa_Close: struct lsa_Close
  6479. out: struct lsa_Close
  6480. handle : *
  6481. handle: struct policy_handle
  6482. handle_type : 0x00000000 (0)
  6483. uuid : 00000000-0000-0000-0000-000000000000
  6484. result : NT_STATUS_OK
  6485. [2011/11/22 12:36:24, 0] rpc_parse/parse_prs.c:73(prs_dump_region)
  6486. created /tmp/out_\lsarpc_0.7.prs
  6487. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
  6488. api_rpcTNP: called \lsarpc successfully
  6489. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  6490. free_pipe_context: destroying talloc pool of size 0
  6491. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  6492. write_to_pipe: data_used = 28
  6493. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6494. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77dffc8
  6495. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6496. s3_event: Run immediate event "tevent_req_trigger": 0xb77dffc8
  6497. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  6498. writeX-IPC nwritten=44
  6499. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  6500. got smb length of 59
  6501. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  6502. got message type 0x0 of len 0x3b
  6503. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  6504. Transaction 28 of length 63 (0 toread)
  6505. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  6506. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  6507. size=59
  6508. smb_com=0x2e
  6509. smb_rcls=0
  6510. smb_reh=0
  6511. smb_err=0
  6512. smb_flg=24
  6513. smb_flg2=51207
  6514. smb_tid=2
  6515. smb_pid=65279
  6516. smb_uid=101
  6517. smb_mid=1792
  6518. smt_wct=12
  6519. smb_vwv[ 0]= 255 (0xFF)
  6520. smb_vwv[ 1]=57054 (0xDEDE)
  6521. smb_vwv[ 2]= 4721 (0x1271)
  6522. smb_vwv[ 3]= 0 (0x0)
  6523. smb_vwv[ 4]= 0 (0x0)
  6524. smb_vwv[ 5]= 1024 (0x400)
  6525. smb_vwv[ 6]= 1024 (0x400)
  6526. smb_vwv[ 7]=65535 (0xFFFF)
  6527. smb_vwv[ 8]=65535 (0xFFFF)
  6528. smb_vwv[ 9]= 1024 (0x400)
  6529. smb_vwv[10]= 0 (0x0)
  6530. smb_vwv[11]= 0 (0x0)
  6531. smb_bcc=0
  6532. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  6533. switch message SMBreadX (pid 2903) conn 0xb77e2320
  6534. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  6535. change_to_user: Skipping user change - already user
  6536. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  6537. name: \lsarpc len: 1024
  6538. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
  6539. read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
  6540. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6541. 000000 smb_io_rpc_hdr hdr
  6542. 0000 major : 05
  6543. 0001 minor : 00
  6544. 0002 pkt_type : 02
  6545. 0003 flags : 03
  6546. 0004 pack_type0: 10
  6547. 0005 pack_type1: 00
  6548. 0006 pack_type2: 00
  6549. 0007 pack_type3: 00
  6550. 0008 frag_len : 0030
  6551. 000a auth_len : 0000
  6552. 000c call_id : 00000003
  6553. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6554. 000010 smb_io_rpc_hdr_resp resp
  6555. 0010 alloc_hint: 00000018
  6556. 0014 context_id: 0000
  6557. 0016 cancel_ct : 00
  6558. 0017 reserved : 00
  6559. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6560. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  6561. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  6562. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  6563. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  6564. readX-IPC min=1024 max=1024 nread=48
  6565. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  6566. got smb length of 41
  6567. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  6568. got message type 0x0 of len 0x29
  6569. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  6570. Transaction 29 of length 45 (0 toread)
  6571. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  6572. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  6573. size=41
  6574. smb_com=0x4
  6575. smb_rcls=0
  6576. smb_reh=0
  6577. smb_err=0
  6578. smb_flg=24
  6579. smb_flg2=51207
  6580. smb_tid=2
  6581. smb_pid=65279
  6582. smb_uid=101
  6583. smb_mid=1856
  6584. smt_wct=3
  6585. smb_vwv[ 0]= 4721 (0x1271)
  6586. smb_vwv[ 1]=65535 (0xFFFF)
  6587. smb_vwv[ 2]=65535 (0xFFFF)
  6588. smb_bcc=0
  6589. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  6590. switch message SMBclose (pid 2903) conn 0xb77e2320
  6591. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  6592. created /tmp/SMBclose.96.req len 45
  6593. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  6594. change_to_user: Skipping user change - already user
  6595. [2011/11/22 12:36:24, 3] smbd/reply.c:4488(reply_close)
  6596. close fd=-1 fnum=4721 (numopen=1)
  6597. [2011/11/22 12:36:24, 6] smbd/close.c:454(set_close_write_time)
  6598. close_write_time: Thu Jan 1 00:59:59 1970
  6599. [2011/11/22 12:36:24, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
  6600. close_policy_by_pipe: deleted handle list for pipe \lsarpc
  6601. [2011/11/22 12:36:24, 5] smbd/files.c:474(file_free)
  6602. freed files structure 4721 (1 used)
  6603. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  6604. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  6605. size=35
  6606. smb_com=0x4
  6607. smb_rcls=0
  6608. smb_reh=0
  6609. smb_err=0
  6610. smb_flg=136
  6611. smb_flg2=51201
  6612. smb_tid=2
  6613. smb_pid=65279
  6614. smb_uid=101
  6615. smb_mid=1856
  6616. smt_wct=0
  6617. smb_bcc=0
  6618. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  6619. got smb length of 104
  6620. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  6621. got message type 0x0 of len 0x68
  6622. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  6623. Transaction 30 of length 108 (0 toread)
  6624. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  6625. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  6626. size=104
  6627. smb_com=0xa2
  6628. smb_rcls=0
  6629. smb_reh=0
  6630. smb_err=0
  6631. smb_flg=24
  6632. smb_flg2=51207
  6633. smb_tid=1
  6634. smb_pid=676
  6635. smb_uid=100
  6636. smb_mid=1920
  6637. smt_wct=24
  6638. smb_vwv[ 0]= 255 (0xFF)
  6639. smb_vwv[ 1]=57054 (0xDEDE)
  6640. smb_vwv[ 2]= 4608 (0x1200)
  6641. smb_vwv[ 3]= 5632 (0x1600)
  6642. smb_vwv[ 4]= 0 (0x0)
  6643. smb_vwv[ 5]= 0 (0x0)
  6644. smb_vwv[ 6]= 0 (0x0)
  6645. smb_vwv[ 7]=40704 (0x9F00)
  6646. smb_vwv[ 8]= 513 (0x201)
  6647. smb_vwv[ 9]= 0 (0x0)
  6648. smb_vwv[10]= 0 (0x0)
  6649. smb_vwv[11]= 0 (0x0)
  6650. smb_vwv[12]= 0 (0x0)
  6651. smb_vwv[13]= 0 (0x0)
  6652. smb_vwv[14]= 0 (0x0)
  6653. smb_vwv[15]= 768 (0x300)
  6654. smb_vwv[16]= 0 (0x0)
  6655. smb_vwv[17]= 256 (0x100)
  6656. smb_vwv[18]= 0 (0x0)
  6657. smb_vwv[19]=16384 (0x4000)
  6658. smb_vwv[20]=16384 (0x4000)
  6659. smb_vwv[21]= 512 (0x200)
  6660. smb_vwv[22]= 0 (0x0)
  6661. smb_vwv[23]= 256 (0x100)
  6662. smb_bcc=21
  6663. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  6664. [0000] 00 5C 00 4E 00 45 00 54 00 4C 00 4F 00 47 00 4F .\.N.E.T .L.O.G.O
  6665. [0010] 00 4E 00 00 00 .N...
  6666. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  6667. switch message SMBntcreateX (pid 2903) conn 0xb77dcab8
  6668. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  6669. setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  6670. [2011/11/22 12:36:24, 5] auth/token_util.c:528(debug_nt_user_token)
  6671. NT user token of user S-1-5-21-1187454690-116783985-3613760195-501
  6672. contains 5 SIDs
  6673. SID[ 0]: S-1-5-21-1187454690-116783985-3613760195-501
  6674. SID[ 1]: S-1-1-0
  6675. SID[ 2]: S-1-5-2
  6676. SID[ 3]: S-1-5-32-546
  6677. SID[ 4]: S-1-22-1-65534
  6678. SE_PRIV 0x0 0x0 0x0 0x0
  6679. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  6680. UNIX token of user 65534
  6681. Primary group is 65534 and contains 0 supplementary groups
  6682. [2011/11/22 12:36:24, 5] smbd/uid.c:353(change_to_user)
  6683. change_to_user uid=(0,65534) gid=(0,65534)
  6684. [2011/11/22 12:36:24, 10] smbd/nttrans.c:484(reply_ntcreate_and_X)
  6685. reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = NETLOGON
  6686. [2011/11/22 12:36:24, 4] smbd/nttrans.c:315(nt_open_pipe)
  6687. nt_open_pipe: Opening pipe \NETLOGON.
  6688. [2011/11/22 12:36:24, 5] smbd/files.c:103(file_new)
  6689. allocated file structure 626, fnum = 4722 (2 used)
  6690. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
  6691. Create pipe requested \NETLOGON
  6692. [2011/11/22 12:36:24, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
  6693. init_pipe_handles: pipe_handles ref count = 2 for pipe \NETLOGON
  6694. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  6695. element 3: DEFAULT
  6696. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  6697. element 1: DEFAULT
  6698. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  6699. element 4: DEFAULT
  6700. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  6701. element 2: DEFAULT
  6702. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  6703. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  6704. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  6705. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  6706. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  6707. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  6708. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  6709. NT user token: (NULL)
  6710. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  6711. UNIX token of user 0
  6712. Primary group is 0 and contains 0 supplementary groups
  6713. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  6714. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  6715. , timeout = Tue Nov 22 12:37:24 2011
  6716. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  6717. ldapsam_get_account_policy: got valid value from cache
  6718. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  6719. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  6720. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  6721. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 173
  6722. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  6723. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  6724. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  6725. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 173) -> 173
  6726. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6727. element 5 -> now SET
  6728. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6729. element 6 -> now SET
  6730. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6731. element 7 -> now SET
  6732. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6733. element 8 -> now SET
  6734. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6735. element 9 -> now SET
  6736. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6737. element 10 -> now SET
  6738. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6739. element 21 -> now SET
  6740. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  6741. pdb_set_username: setting username nobody, was
  6742. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6743. element 12 -> now SET
  6744. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  6745. pdb_set_domain: setting domain IA92, was
  6746. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6747. element 14 -> now SET
  6748. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  6749. pdb_set_nt_username: setting nt username , was
  6750. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6751. element 15 -> now SET
  6752. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  6753. pdb_set_full_name: setting full name nobody, was
  6754. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6755. element 13 -> now SET
  6756. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  6757. pdb_set_homedir: setting home dir \admin-pdcnobody\perso, was
  6758. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  6759. element 1 -> now DEFAULT
  6760. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  6761. pdb_set_dir_drive: setting dir drive , was NULL
  6762. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  6763. element 3 -> now DEFAULT
  6764. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  6765. pdb_set_logon_script: setting logon script nobody.bat, was
  6766. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  6767. element 4 -> now DEFAULT
  6768. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  6769. pdb_set_profile_path: setting profile path , was
  6770. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  6771. element 2 -> now DEFAULT
  6772. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6773. element 22 -> now SET
  6774. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  6775. pdb_set_workstations: setting workstations , was
  6776. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6777. element 23 -> now SET
  6778. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6779. element 25 -> now SET
  6780. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  6781. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  6782. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  6783. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  6784. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  6785. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  6786. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  6787. NT user token: (NULL)
  6788. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  6789. UNIX token of user 0
  6790. Primary group is 0 and contains 0 supplementary groups
  6791. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  6792. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  6793. , timeout = Tue Nov 22 12:37:24 2011
  6794. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  6795. ldapsam_get_account_policy: got valid value from cache
  6796. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  6797. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  6798. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6799. element 33 -> now SET
  6800. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  6801. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-501
  6802. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6803. element 18 -> now SET
  6804. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  6805. pdb_set_user_sid_from_rid:
  6806. setting user sid S-1-5-21-1187454690-116783985-3613760195-501 from rid 501
  6807. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6808. element 16 -> now SET
  6809. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6810. element 28 -> now SET
  6811. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6812. element 29 -> now SET
  6813. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6814. element 30 -> now SET
  6815. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6816. element 20 -> now SET
  6817. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6818. element 17 -> now SET
  6819. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  6820. element 26 -> now SET
  6821. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
  6822. Created internal pipe \NETLOGON (pipes_open=0)
  6823. [2011/11/22 12:36:24, 5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
  6824. do_ntcreate_pipe_open: open pipe = \NETLOGON
  6825. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  6826. got smb length of 178
  6827. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  6828. got message type 0x0 of len 0xb2
  6829. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  6830. Transaction 31 of length 182 (0 toread)
  6831. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  6832. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  6833. size=178
  6834. smb_com=0x2f
  6835. smb_rcls=0
  6836. smb_reh=0
  6837. smb_err=0
  6838. smb_flg=24
  6839. smb_flg2=51207
  6840. smb_tid=1
  6841. smb_pid=65279
  6842. smb_uid=100
  6843. smb_mid=1984
  6844. smt_wct=14
  6845. smb_vwv[ 0]= 255 (0xFF)
  6846. smb_vwv[ 1]=57054 (0xDEDE)
  6847. smb_vwv[ 2]= 4722 (0x1272)
  6848. smb_vwv[ 3]= 0 (0x0)
  6849. smb_vwv[ 4]= 0 (0x0)
  6850. smb_vwv[ 5]=65535 (0xFFFF)
  6851. smb_vwv[ 6]=65535 (0xFFFF)
  6852. smb_vwv[ 7]= 8 (0x8)
  6853. smb_vwv[ 8]= 114 (0x72)
  6854. smb_vwv[ 9]= 0 (0x0)
  6855. smb_vwv[10]= 114 (0x72)
  6856. smb_vwv[11]= 64 (0x40)
  6857. smb_vwv[12]= 0 (0x0)
  6858. smb_vwv[13]= 0 (0x0)
  6859. smb_bcc=115
  6860. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  6861. [0000] EE 05 00 0B 07 10 00 00 00 72 00 22 00 03 00 00 ........ .r."....
  6862. [0010] 00 B8 10 B8 10 F0 53 00 00 01 00 00 00 00 00 01 ......S. ........
  6863. [0020] 00 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF .xV4.4.. ....#Eg.
  6864. [0030] FB 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........
  6865. [0040] 00 2B 10 48 60 02 00 00 00 44 06 00 00 F0 59 0B .+.H`... .D....Y.
  6866. [0050] 00 00 00 00 00 13 00 00 00 49 41 39 32 00 54 45 ........ .IA92.TE
  6867. [0060] 53 54 53 49 47 45 33 00 09 54 45 53 54 53 49 47 STSIGE3. .TESTSIG
  6868. [0070] 45 33 00 E3.
  6869. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  6870. switch message SMBwriteX (pid 2903) conn 0xb77dcab8
  6871. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  6872. created /tmp/SMBwriteX.38.req len 182
  6873. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  6874. change_to_user: Skipping user change - already user
  6875. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  6876. reply_pipe_write_and_X: 1272 name: NETLOGON len: 114
  6877. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  6878. np_write_send: len: 114
  6879. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  6880. [0000] 05 00 0B 07 10 00 00 00 72 00 22 00 03 00 00 00 ........ r.".....
  6881. [0010] B8 10 B8 10 F0 53 00 00 01 00 00 00 00 00 01 00 .....S.. ........
  6882. [0020] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg..
  6883. [0030] 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 .....].. ........
  6884. [0040] 2B 10 48 60 02 00 00 00 44 06 00 00 F0 59 0B 00 +.H`.... D....Y..
  6885. [0050] 00 00 00 00 13 00 00 00 49 41 39 32 00 54 45 53 ........ IA92.TES
  6886. [0060] 54 53 49 47 45 33 00 09 54 45 53 54 53 49 47 45 TSIGE3.. TESTSIGE
  6887. [0070] 33 00 3.
  6888. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  6889. write_to_pipe: data_left = 114
  6890. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  6891. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 114
  6892. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  6893. fill_rpc_header: data_to_copy = 114, len_needed_to_complete_hdr = 16, receive_len = 0
  6894. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  6895. write_to_pipe: data_used = 16
  6896. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  6897. write_to_pipe: data_left = 98
  6898. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  6899. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 98
  6900. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6901. 000000 smb_io_rpc_hdr
  6902. 0000 major : 05
  6903. 0001 minor : 00
  6904. 0002 pkt_type : 0b
  6905. 0003 flags : 07
  6906. 0004 pack_type0: 10
  6907. 0005 pack_type1: 00
  6908. 0006 pack_type2: 00
  6909. 0007 pack_type3: 00
  6910. 0008 frag_len : 0072
  6911. 000a auth_len : 0022
  6912. 000c call_id : 00000003
  6913. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  6914. unmarshall_rpc_header: using little-endian RPC
  6915. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  6916. unmarshall_rpc_header: type = 11, flags = 7
  6917. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  6918. write_to_pipe: data_used = 0
  6919. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  6920. write_to_pipe: data_left = 98
  6921. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  6922. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 98, incoming data = 98
  6923. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  6924. process_complete_pdu: processing packet type 11
  6925. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
  6926. api_pipe_bind_req: decode request. 1558
  6927. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6928. 000000 smb_io_rpc_hdr_rb
  6929. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  6930. 000000 smb_io_rpc_hdr_bba
  6931. 0000 max_tsize: 10b8
  6932. 0002 max_rsize: 10b8
  6933. 0004 assoc_gid: 000053f0
  6934. 0008 num_contexts: 01
  6935. 000c context_id : 0000
  6936. 000e num_transfer_syntaxes: 01
  6937. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  6938. 00000f smb_io_rpc_iface
  6939. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  6940. 000010 smb_io_uuid uuid
  6941. 0010 data : 12345678
  6942. 0014 data : 1234
  6943. 0016 data : abcd
  6944. 0018 data : ef 00
  6945. 001a data : 01 23 45 67 cf fb
  6946. 0020 version: 00000001
  6947. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  6948. 000024 smb_io_rpc_iface
  6949. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  6950. 000024 smb_io_uuid uuid
  6951. 0024 data : 8a885d04
  6952. 0028 data : 1ceb
  6953. 002a data : 11c9
  6954. 002c data : 9f e8
  6955. 002e data : 08 00 2b 10 48 60
  6956. 0034 version: 00000002
  6957. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
  6958. api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
  6959. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
  6960. api_pipe_bind_req: make response. 1628
  6961. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6962. 000038 smb_io_rpc_hdr_auth
  6963. 0038 auth_type : 44
  6964. 0039 auth_level : 06
  6965. 003a auth_pad_len : 00
  6966. 003b auth_reserved: 00
  6967. 003c auth_context_id: 000b59f0
  6968. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6969. 000040 smb_io_rpc_auth_schannel_neg
  6970. 0040 type1: 00000000
  6971. 0044 type2: 00000013
  6972. [2011/11/22 12:36:24, 6] ../lib/util/util.c:304(_dump_data)
  6973. [0000] 49 41 39 32 IA92
  6974. [2011/11/22 12:36:24, 6] ../lib/util/util.c:304(_dump_data)
  6975. [0000] 54 45 53 54 53 49 47 45 33 TESTSIGE 3
  6976. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  6977. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  6978. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  6979. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  6980. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  6981. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  6982. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  6983. NT user token: (NULL)
  6984. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  6985. UNIX token of user 0
  6986. Primary group is 0 and contains 0 supplementary groups
  6987. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  6988. tdb_unpack(dBBBBBfff, 106) -> 106
  6989. [2011/11/22 12:36:24, 3] passdb/secrets.c:1335(secrets_restore_schannel_session_info)
  6990. secrets_restore_schannel_session_info: restored schannel info key SECRETS/SCHANNEL/TESTSIGE3
  6991. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  6992. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  6993. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  6994. 000000 smb_io_rpc_hdr_auth
  6995. 0000 auth_type : 44
  6996. 0001 auth_level : 06
  6997. 0002 auth_pad_len : 08
  6998. 0003 auth_reserved: 00
  6999. 0004 auth_context_id: 00000001
  7000. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  7001. 000008 smb_io_rpc_schannel_verifier
  7002. [2011/11/22 12:36:24, 6] ../lib/util/util.c:304(_dump_data)
  7003. [0000] 01 .
  7004. 000a msg_type : 00000000
  7005. 0010 flags : 00000005
  7006. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe.c:1416(pipe_schannel_auth_bind)
  7007. pipe_schannel_auth_bind: schannel auth: domain [IA92] myname [TESTSIGE3]
  7008. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:960(check_bind_req)
  7009. check_bind_req for \NETLOGON
  7010. checking lsarpc
  7011. checking winreg
  7012. checking initshutdown
  7013. checking dssetup
  7014. checking wkssvc
  7015. checking svcctl
  7016. checking ntsvcs
  7017. checking netlogon
  7018. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  7019. 000000 smb_io_rpc_hdr_ba
  7020. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  7021. 000000 smb_io_rpc_hdr_bba
  7022. 0000 max_tsize: 10b8
  7023. 0002 max_rsize: 10b8
  7024. 0004 assoc_gid: 000053f0
  7025. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  7026. 000008 smb_io_rpc_addr_str
  7027. 0008 len: 000f
  7028. 000a str: \PIPE\netlogon.
  7029. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  7030. 000019 smb_io_rpc_results
  7031. 001c num_results: 01
  7032. 0020 result : 0000
  7033. 0022 reason : 0000
  7034. [2011/11/22 12:36:24, 6] rpc_parse/parse_prs.c:88(prs_debug)
  7035. 000024 smb_io_rpc_iface
  7036. [2011/11/22 12:36:24, 7] rpc_parse/parse_prs.c:88(prs_debug)
  7037. 000024 smb_io_uuid uuid
  7038. 0024 data : 8a885d04
  7039. 0028 data : 1ceb
  7040. 002a data : 11c9
  7041. 002c data : 9f e8
  7042. 002e data : 08 00 2b 10 48 60
  7043. 0034 version: 00000002
  7044. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  7045. 000000 smb_io_rpc_hdr
  7046. 0000 major : 05
  7047. 0001 minor : 00
  7048. 0002 pkt_type : 0c
  7049. 0003 flags : 03
  7050. 0004 pack_type0: 10
  7051. 0005 pack_type1: 00
  7052. 0006 pack_type2: 00
  7053. 0007 pack_type3: 00
  7054. 0008 frag_len : 005c
  7055. 000a auth_len : 000c
  7056. 000c call_id : 00000003
  7057. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  7058. write_to_pipe: data_used = 98
  7059. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  7060. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0018
  7061. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  7062. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0018
  7063. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  7064. writeX-IPC nwritten=114
  7065. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  7066. got smb length of 59
  7067. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  7068. got message type 0x0 of len 0x3b
  7069. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  7070. Transaction 32 of length 63 (0 toread)
  7071. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  7072. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  7073. size=59
  7074. smb_com=0x2e
  7075. smb_rcls=0
  7076. smb_reh=0
  7077. smb_err=0
  7078. smb_flg=24
  7079. smb_flg2=51207
  7080. smb_tid=1
  7081. smb_pid=65279
  7082. smb_uid=100
  7083. smb_mid=2049
  7084. smt_wct=12
  7085. smb_vwv[ 0]= 255 (0xFF)
  7086. smb_vwv[ 1]=57054 (0xDEDE)
  7087. smb_vwv[ 2]= 4722 (0x1272)
  7088. smb_vwv[ 3]= 0 (0x0)
  7089. smb_vwv[ 4]= 0 (0x0)
  7090. smb_vwv[ 5]= 1024 (0x400)
  7091. smb_vwv[ 6]= 1024 (0x400)
  7092. smb_vwv[ 7]=65535 (0xFFFF)
  7093. smb_vwv[ 8]=65535 (0xFFFF)
  7094. smb_vwv[ 9]= 1024 (0x400)
  7095. smb_vwv[10]= 0 (0x0)
  7096. smb_vwv[11]= 0 (0x0)
  7097. smb_bcc=0
  7098. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  7099. switch message SMBreadX (pid 2903) conn 0xb77dcab8
  7100. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  7101. change_to_user: Skipping user change - already user
  7102. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  7103. name: \NETLOGON len: 1024
  7104. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
  7105. read_from_pipe: \NETLOGON: current_pdu_len = 92, current_pdu_sent = 0 returning 92 bytes.
  7106. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  7107. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  7108. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  7109. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  7110. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  7111. readX-IPC min=1024 max=1024 nread=92
  7112. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  7113. got smb length of 416
  7114. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  7115. got message type 0x0 of len 0x1a0
  7116. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  7117. Transaction 33 of length 420 (0 toread)
  7118. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  7119. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  7120. size=416
  7121. smb_com=0x2f
  7122. smb_rcls=0
  7123. smb_reh=0
  7124. smb_err=0
  7125. smb_flg=24
  7126. smb_flg2=51207
  7127. smb_tid=1
  7128. smb_pid=65279
  7129. smb_uid=100
  7130. smb_mid=2113
  7131. smt_wct=14
  7132. smb_vwv[ 0]= 255 (0xFF)
  7133. smb_vwv[ 1]=57054 (0xDEDE)
  7134. smb_vwv[ 2]= 4722 (0x1272)
  7135. smb_vwv[ 3]= 0 (0x0)
  7136. smb_vwv[ 4]= 0 (0x0)
  7137. smb_vwv[ 5]=65535 (0xFFFF)
  7138. smb_vwv[ 6]=65535 (0xFFFF)
  7139. smb_vwv[ 7]= 8 (0x8)
  7140. smb_vwv[ 8]= 352 (0x160)
  7141. smb_vwv[ 9]= 0 (0x0)
  7142. smb_vwv[10]= 352 (0x160)
  7143. smb_vwv[11]= 64 (0x40)
  7144. smb_vwv[12]= 0 (0x0)
  7145. smb_vwv[13]= 0 (0x0)
  7146. smb_bcc=353
  7147. [2011/11/22 12:36:24, 10] ../lib/util/util.c:304(_dump_data)
  7148. [0000] EE 05 00 00 03 10 00 00 00 60 01 20 00 03 00 00 ........ .`. ....
  7149. [0010] 00 14 01 00 00 00 00 02 00 9D 9F 00 91 B9 F7 27 ........ .......'
  7150. [0020] EF 3E 4E 3C 8A FE 8F C9 4D F7 AC E1 FE 11 64 59 .>N<.... M.....dY
  7151. [0030] 65 45 9E 77 08 0F FB D7 FF 49 B0 44 9B 21 AB D3 eE.w.... .I.D.!..
  7152. [0040] BF 39 D3 4F 19 C1 2D C4 CE A5 D7 10 58 AE EF 30 .9.O..-. ....X..0
  7153. [0050] D6 FD 24 B9 DB 56 A2 D7 7E 53 09 66 F8 19 CD EF ..$..V.. ~S.f....
  7154. [0060] 17 35 C2 12 61 14 89 56 5C E0 2D 30 84 96 12 16 .5..a..V \.-0....
  7155. [0070] 6B D2 24 12 74 CA 32 4C 87 90 07 9E 86 5B 7E 99 k.$.t.2L .....[~.
  7156. [0080] 0A EA 2D F7 CD 45 5C DA CA 53 1C D0 D7 79 90 8D ..-..E\. .S...y..
  7157. [0090] BE 95 07 CF E0 A2 03 E8 9B 90 12 9D D7 D8 78 C6 ........ ......x.
  7158. [00A0] 42 25 9D 74 27 A1 91 22 C4 EC 2A A4 74 DB DA 8F B%.t'.." ..*.t...
  7159. [00B0] BC E5 8F 40 24 0C 63 B1 81 32 A2 68 ED 51 9C AA ...@$.c. .2.h.Q..
  7160. [00C0] 6F C5 F4 64 38 99 75 D5 0B E6 BE D0 A0 7E D8 1B o..d8.u. .....~..
  7161. [00D0] 5D 15 E0 EE 71 1D FD F8 60 0A 2B 28 88 06 B2 F2 ]...q... `.+(....
  7162. [00E0] 20 19 D5 2C 5F B0 63 1D F4 29 91 7F DF AE 7B FC ..,_.c. .)....{.
  7163. [00F0] E6 3F F1 95 4F 49 1A B8 FF 30 C4 5F 1C A6 87 80 .?..OI.. .0._....
  7164. [0100] 8E 94 37 15 FB C4 3F 77 CC FD 12 11 CF 3F E6 15 ..7...?w .....?..
  7165. [0110] 29 39 4D 80 B5 A0 E5 6A A6 8E EF 73 90 2D 20 09 )9M....j ...s.- .
  7166. [0120] AD 0F 5A 94 F3 9F 8D 96 2F D5 BD CF 25 3F BA A2 ..Z..... /...%?..
  7167. [0130] 16 3E AB B4 BA 33 E5 2A 33 44 06 0C 00 F0 59 0B .>...3.* 3D....Y.
  7168. [0140] 00 77 00 7A 00 FF FF 00 00 31 B2 99 12 11 87 CE .w.z.... .1......
  7169. [0150] 38 BD 89 33 8C DD 8D E1 BD 63 93 E9 22 C1 C3 54 8..3.... .c.."..T
  7170. [0160] 25 %
  7171. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  7172. switch message SMBwriteX (pid 2903) conn 0xb77dcab8
  7173. [2011/11/22 12:36:24, 0] smbd/process.c:1223(smb_dump)
  7174. created /tmp/SMBwriteX.39.req len 420
  7175. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  7176. change_to_user: Skipping user change - already user
  7177. [2011/11/22 12:36:24, 6] smbd/pipes.c:271(reply_pipe_write_and_X)
  7178. reply_pipe_write_and_X: 1272 name: NETLOGON len: 352
  7179. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:1195(np_write_send)
  7180. np_write_send: len: 352
  7181. [2011/11/22 12:36:24, 50] ../lib/util/util.c:304(_dump_data)
  7182. [0000] 05 00 00 03 10 00 00 00 60 01 20 00 03 00 00 00 ........ `. .....
  7183. [0010] 14 01 00 00 00 00 02 00 9D 9F 00 91 B9 F7 27 EF ........ ......'.
  7184. [0020] 3E 4E 3C 8A FE 8F C9 4D F7 AC E1 FE 11 64 59 65 >N<....M .....dYe
  7185. [0030] 45 9E 77 08 0F FB D7 FF 49 B0 44 9B 21 AB D3 BF E.w..... I.D.!...
  7186. [0040] 39 D3 4F 19 C1 2D C4 CE A5 D7 10 58 AE EF 30 D6 9.O..-.. ...X..0.
  7187. [0050] FD 24 B9 DB 56 A2 D7 7E 53 09 66 F8 19 CD EF 17 .$..V..~ S.f.....
  7188. [0060] 35 C2 12 61 14 89 56 5C E0 2D 30 84 96 12 16 6B 5..a..V\ .-0....k
  7189. [0070] D2 24 12 74 CA 32 4C 87 90 07 9E 86 5B 7E 99 0A .$.t.2L. ....[~..
  7190. [0080] EA 2D F7 CD 45 5C DA CA 53 1C D0 D7 79 90 8D BE .-..E\.. S...y...
  7191. [0090] 95 07 CF E0 A2 03 E8 9B 90 12 9D D7 D8 78 C6 42 ........ .....x.B
  7192. [00A0] 25 9D 74 27 A1 91 22 C4 EC 2A A4 74 DB DA 8F BC %.t'..". .*.t....
  7193. [00B0] E5 8F 40 24 0C 63 B1 81 32 A2 68 ED 51 9C AA 6F ..@$.c.. 2.h.Q..o
  7194. [00C0] C5 F4 64 38 99 75 D5 0B E6 BE D0 A0 7E D8 1B 5D ..d8.u.. ....~..]
  7195. [00D0] 15 E0 EE 71 1D FD F8 60 0A 2B 28 88 06 B2 F2 20 ...q...` .+(....
  7196. [00E0] 19 D5 2C 5F B0 63 1D F4 29 91 7F DF AE 7B FC E6 ..,_.c.. )....{..
  7197. [00F0] 3F F1 95 4F 49 1A B8 FF 30 C4 5F 1C A6 87 80 8E ?..OI... 0._.....
  7198. [0100] 94 37 15 FB C4 3F 77 CC FD 12 11 CF 3F E6 15 29 .7...?w. ....?..)
  7199. [0110] 39 4D 80 B5 A0 E5 6A A6 8E EF 73 90 2D 20 09 AD 9M....j. ..s.- ..
  7200. [0120] 0F 5A 94 F3 9F 8D 96 2F D5 BD CF 25 3F BA A2 16 .Z...../ ...%?...
  7201. [0130] 3E AB B4 BA 33 E5 2A 33 44 06 0C 00 F0 59 0B 00 >...3.*3 D....Y..
  7202. [0140] 77 00 7A 00 FF FF 00 00 31 B2 99 12 11 87 CE 38 w.z..... 1......8
  7203. [0150] BD 89 33 8C DD 8D E1 BD 63 93 E9 22 C1 C3 54 25 ..3..... c.."..T%
  7204. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  7205. write_to_pipe: data_left = 352
  7206. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  7207. process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 352
  7208. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
  7209. fill_rpc_header: data_to_copy = 352, len_needed_to_complete_hdr = 16, receive_len = 0
  7210. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  7211. write_to_pipe: data_used = 16
  7212. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  7213. write_to_pipe: data_left = 336
  7214. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  7215. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 336
  7216. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  7217. 000000 smb_io_rpc_hdr
  7218. 0000 major : 05
  7219. 0001 minor : 00
  7220. 0002 pkt_type : 00
  7221. 0003 flags : 03
  7222. 0004 pack_type0: 10
  7223. 0005 pack_type1: 00
  7224. 0006 pack_type2: 00
  7225. 0007 pack_type3: 00
  7226. 0008 frag_len : 0160
  7227. 000a auth_len : 0020
  7228. 000c call_id : 00000003
  7229. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
  7230. unmarshall_rpc_header: using little-endian RPC
  7231. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
  7232. unmarshall_rpc_header: type = 0, flags = 3
  7233. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  7234. write_to_pipe: data_used = 0
  7235. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
  7236. write_to_pipe: data_left = 336
  7237. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
  7238. process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 336, incoming data = 336
  7239. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
  7240. process_complete_pdu: processing packet type 0
  7241. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  7242. 000000 smb_io_rpc_hdr_req req
  7243. 0000 alloc_hint: 00000114
  7244. 0004 context_id: 0000
  7245. 0006 opnum : 0002
  7246. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2141(api_pipe_schannel_process)
  7247. data 288 auth 32
  7248. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  7249. 000128 smb_io_rpc_hdr_auth hdr_auth
  7250. 0128 auth_type : 44
  7251. 0129 auth_level : 06
  7252. 012a auth_pad_len : 0c
  7253. 012b auth_reserved: 00
  7254. 012c auth_context_id: 000b59f0
  7255. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  7256. 000130 smb_io_rpc_auth_schannel_chk
  7257. 0130 sig : 77 00 7a 00 ff ff 00 00
  7258. 0138 seq_num: 31 b2 99 12 11 87 ce 38
  7259. 0140 packet_digest: bd 89 33 8c dd 8d e1 bd
  7260. 0148 confounder: 63 93 e9 22 c1 c3 54 25
  7261. [2011/11/22 12:36:24, 10] rpc_parse/parse_prs.c:1593(schannel_decode)
  7262. SCHANNEL: schannel_decode seq_num=0 data_len=288
  7263. [2011/11/22 12:36:24, 10] rpc_parse/parse_prs.c:1613(schannel_decode)
  7264. SCHANNEL: schannel_decode seq_num=0 data_len=288
  7265. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  7266. free_pipe_context: destroying talloc pool of size 74
  7267. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2261(api_pipe_request)
  7268. Requested \PIPE\\NETLOGON
  7269. [2011/11/22 12:36:24, 4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
  7270. api_rpcTNP: \NETLOGON op 0x2 - created /tmp/in_\NETLOGON_2.5.prs
  7271. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe.c:2308(api_rpcTNP)
  7272. api_rpcTNP: rpc command: NETR_LOGONSAMLOGON
  7273. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
  7274. api_rpc_cmds[2].fn == 0xb724e450
  7275. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  7276. netr_LogonSamLogon: struct netr_LogonSamLogon
  7277. in: struct netr_LogonSamLogon
  7278. server_name : *
  7279. server_name : '\\ADMIN-PDC'
  7280. computer_name : *
  7281. computer_name : 'TESTSIGE3'
  7282. credential : *
  7283. credential: struct netr_Authenticator
  7284. cred: struct netr_Credential
  7285. data : 5136c45e3d2222ce
  7286. timestamp : mar 22 nov 2011 12:36:24 CET CET
  7287. return_authenticator : *
  7288. return_authenticator: struct netr_Authenticator
  7289. cred: struct netr_Credential
  7290. data : bc09927c00000900
  7291. timestamp : (time_t)0
  7292. logon_level : NetlogonInteractiveInformation (1)
  7293. logon : *
  7294. logon : union netr_LogonLevel(case 1)
  7295. password : *
  7296. password: struct netr_PasswordInfo
  7297. identity_info: struct netr_IdentityInfo
  7298. domain_name: struct lsa_String
  7299. length : 0x0008 (8)
  7300. size : 0x0008 (8)
  7301. string : *
  7302. string : 'IA92'
  7303. parameter_control : 0x00000000 (0)
  7304. 0: MSV1_0_CLEARTEXT_PASSWORD_ALLOWED
  7305. 0: MSV1_0_UPDATE_LOGON_STATISTICS
  7306. 0: MSV1_0_RETURN_USER_PARAMETERS
  7307. 0: MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT
  7308. 0: MSV1_0_RETURN_PROFILE_PATH
  7309. 0: MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT
  7310. logon_id_low : 0x000245e0 (148960)
  7311. logon_id_high : 0x00000000 (0)
  7312. account_name: struct lsa_String
  7313. length : 0x000a (10)
  7314. size : 0x000a (10)
  7315. string : *
  7316. string : 'admin'
  7317. workstation: struct lsa_String
  7318. length : 0x0012 (18)
  7319. size : 0x0012 (18)
  7320. string : *
  7321. string : 'TESTSIGE3'
  7322. lmpassword: struct samr_Password
  7323. hash : ea98310eb73c2dc69715fab78cde7eb8
  7324. ntpassword: struct samr_Password
  7325. hash : b3dfbd44c8ac2ed300738adfbaca7fbd
  7326. validation_level : 0x0003 (3)
  7327. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7328. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  7329. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7330. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  7331. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7332. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  7333. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7334. NT user token: (NULL)
  7335. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7336. UNIX token of user 0
  7337. Primary group is 0 and contains 0 supplementary groups
  7338. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  7339. tdb_unpack(dBBBBBfff, 106) -> 106
  7340. [2011/11/22 12:36:24, 3] passdb/secrets.c:1335(secrets_restore_schannel_session_info)
  7341. secrets_restore_schannel_session_info: restored schannel info key SECRETS/SCHANNEL/TESTSIGE3
  7342. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7343. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  7344. [2011/11/22 12:36:24, 5] libsmb/credentials.c:151(creds_step)
  7345. sequence = 0x4ecb8938
  7346. [2011/11/22 12:36:24, 5] libsmb/credentials.c:153(creds_step)
  7347. seed: 9F68098BCBA5ACFD
  7348. [2011/11/22 12:36:24, 5] libsmb/credentials.c:158(creds_step)
  7349. seed+seq D7F1D4D9CBA5ACFD
  7350. [2011/11/22 12:36:24, 5] libsmb/credentials.c:162(creds_step)
  7351. CLIENT 5136C45E3D2222CE
  7352. [2011/11/22 12:36:24, 5] libsmb/credentials.c:167(creds_step)
  7353. seed+seq+1 D8F1D4D9CBA5ACFD
  7354. [2011/11/22 12:36:24, 5] libsmb/credentials.c:171(creds_step)
  7355. SERVER 141C36E35C6377A2
  7356. [2011/11/22 12:36:24, 5] libsmb/credentials.c:244(creds_reseed)
  7357. cred_reseed: seed D8F1D4D9CBA5ACFD
  7358. [2011/11/22 12:36:24, 10] libsmb/credentials.c:227(netlogon_creds_server_check)
  7359. netlogon_creds_server_check: credentials check OK.
  7360. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7361. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  7362. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7363. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  7364. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7365. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  7366. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7367. NT user token: (NULL)
  7368. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7369. UNIX token of user 0
  7370. Primary group is 0 and contains 0 supplementary groups
  7371. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  7372. tdb_pack_va(dBBBBBfff, 0) -> 106
  7373. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  7374. tdb_pack_va(dBBBBBfff, 106) -> 106
  7375. [2011/11/22 12:36:24, 3] passdb/secrets.c:1242(secrets_store_schannel_session_info)
  7376. secrets_store_schannel_session_info: stored schannel info with key SECRETS/SCHANNEL/TESTSIGE3
  7377. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7378. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  7379. [2011/11/22 12:36:24, 3] rpc_server/srv_netlog_nt.c:945(_netr_LogonSamLogon)
  7380. SAM Logon (Interactive). Domain:[IA92]. User:[admin@TESTSIGE3] Requested Domain:[IA92]
  7381. [2011/11/22 12:36:24, 5] rpc_server/srv_netlog_nt.c:967(_netr_LogonSamLogon)
  7382. Attempting validation level 3 for unmapped username admin.
  7383. [2011/11/22 12:36:24, 5] auth/auth.c:487(make_auth_context_subsystem)
  7384. Making default auth method list for DC, security=user, encrypt passwords = yes
  7385. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  7386. load_auth_module: Attempting to find an auth method to match guest
  7387. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  7388. load_auth_module: auth method guest has a valid init
  7389. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  7390. load_auth_module: Attempting to find an auth method to match sam
  7391. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  7392. load_auth_module: auth method sam has a valid init
  7393. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  7394. load_auth_module: Attempting to find an auth method to match winbind:trustdomain
  7395. [2011/11/22 12:36:24, 5] auth/auth.c:389(load_auth_module)
  7396. load_auth_module: Attempting to find an auth method to match trustdomain
  7397. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  7398. load_auth_module: auth method trustdomain has a valid init
  7399. [2011/11/22 12:36:24, 5] auth/auth.c:414(load_auth_module)
  7400. load_auth_module: auth method winbind has a valid init
  7401. [2011/11/22 12:36:24, 5] auth/auth.c:98(get_ntlm_challenge)
  7402. auth_get_challenge: module guest did not want to specify a challenge
  7403. [2011/11/22 12:36:24, 5] auth/auth.c:98(get_ntlm_challenge)
  7404. auth_get_challenge: module sam did not want to specify a challenge
  7405. [2011/11/22 12:36:24, 5] auth/auth.c:98(get_ntlm_challenge)
  7406. auth_get_challenge: module winbind did not want to specify a challenge
  7407. [2011/11/22 12:36:24, 5] auth/auth.c:138(get_ntlm_challenge)
  7408. auth_context challenge created by random
  7409. [2011/11/22 12:36:24, 5] auth/auth.c:139(get_ntlm_challenge)
  7410. challenge is:
  7411. [2011/11/22 12:36:24, 5] ../lib/util/util.c:304(_dump_data)
  7412. [0000] BE B4 A2 BC 15 A4 A8 C0 ........
  7413. [2011/11/22 12:36:24, 5] auth/auth_util.c:208(make_user_info_map)
  7414. Mapping user [IA92]\[admin] from workstation [TESTSIGE3]
  7415. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7416. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  7417. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7418. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  7419. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7420. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  7421. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7422. NT user token: (NULL)
  7423. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7424. UNIX token of user 0
  7425. Primary group is 0 and contains 0 supplementary groups
  7426. [2011/11/22 12:36:24, 5] auth/auth_util.c:2184(is_trusted_domain)
  7427. is_trusted_domain: Checking for domain trust with [IA92]
  7428. [2011/11/22 12:36:24, 10] passdb/pdb_ldap.c:5913(ldapsam_get_trusteddom_pw)
  7429. ldapsam_get_trusteddom_pw called for domain IA92
  7430. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7431. smbldap_search_ext: base => [sambaDomainName=IA92,sambaDomainName=ia92,o=gouv,c=fr], filter => [(&(objectClass=sambaTrustedDomainPassword)(sambaDomainName=IA92))], scope => [2]
  7432. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7433. smbldap_open: already connected to the LDAP server
  7434. [2011/11/22 12:36:24, 10] lib/smbldap.c:1325(smbldap_search_ext)
  7435. Failed search for base: sambaDomainName=IA92,sambaDomainName=ia92,o=gouv,c=fr, error: 32 (No such object) (value does not conform to assertion syntax)
  7436. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7437. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  7438. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  7439. Cache entry with key = TDOM/IA92 couldn't be found
  7440. [2011/11/22 12:36:24, 5] libsmb/trustdom_cache.c:183(trustdom_cache_fetch)
  7441. no entry for trusted domain IA92 found.
  7442. [2011/11/22 12:36:24, 5] auth/auth_util.c:120(make_user_info)
  7443. attempting to make a user_info for admin (admin)
  7444. [2011/11/22 12:36:24, 5] auth/auth_util.c:130(make_user_info)
  7445. making strings for admin's user_info struct
  7446. [2011/11/22 12:36:24, 5] auth/auth_util.c:162(make_user_info)
  7447. making blobs for admin's user_info struct
  7448. [2011/11/22 12:36:24, 10] auth/auth_util.c:180(make_user_info)
  7449. made an encrypted user_info for admin (admin)
  7450. [2011/11/22 12:36:24, 3] auth/auth.c:222(check_ntlm_password)
  7451. check_ntlm_password: Checking password for unmapped user [IA92]\[admin]@[TESTSIGE3] with the new password interface
  7452. [2011/11/22 12:36:24, 3] auth/auth.c:225(check_ntlm_password)
  7453. check_ntlm_password: mapped user is: [IA92]\[admin]@[TESTSIGE3]
  7454. [2011/11/22 12:36:24, 10] auth/auth.c:234(check_ntlm_password)
  7455. check_ntlm_password: auth_context challenge created by random
  7456. [2011/11/22 12:36:24, 10] auth/auth.c:236(check_ntlm_password)
  7457. challenge is:
  7458. [2011/11/22 12:36:24, 5] ../lib/util/util.c:304(_dump_data)
  7459. [0000] BE B4 A2 BC 15 A4 A8 C0 ........
  7460. [2011/11/22 12:36:24, 10] auth/auth.c:262(check_ntlm_password)
  7461. check_ntlm_password: guest had nothing to say
  7462. [2011/11/22 12:36:24, 8] lib/util.c:1879(is_myname)
  7463. is_myname("IA92") returns 0
  7464. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7465. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  7466. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7467. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  7468. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7469. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  7470. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7471. NT user token: (NULL)
  7472. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7473. UNIX token of user 0
  7474. Primary group is 0 and contains 0 supplementary groups
  7475. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7476. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(uid=admin)(objectclass=sambaSamAccount))], scope => [2]
  7477. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7478. smbldap_open: already connected to the LDAP server
  7479. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:571(init_sam_from_ldap)
  7480. init_sam_from_ldap: Entry found for user: admin
  7481. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  7482. pdb_set_username: setting username admin, was
  7483. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7484. element 12 -> now SET
  7485. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  7486. pdb_set_domain: setting domain IA92, was
  7487. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  7488. element 14 -> now DEFAULT
  7489. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  7490. pdb_set_nt_username: setting nt username admin, was
  7491. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7492. element 15 -> now SET
  7493. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:514(pdb_set_user_sid_from_string)
  7494. pdb_set_user_sid_from_string: setting user sid S-1-5-21-1187454690-116783985-3613760195-21000
  7495. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  7496. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-21000
  7497. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7498. element 18 -> now SET
  7499. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:263(pdb_get_init_flags)
  7500. element 18: SET
  7501. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7502. element 21 -> now SET
  7503. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7504. element 5 -> now SET
  7505. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7506. element 6 -> now SET
  7507. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7508. element 7 -> now SET
  7509. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7510. element 9 -> now SET
  7511. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7512. element 10 -> now SET
  7513. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  7514. pdb_set_full_name: setting full name admin, was
  7515. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7516. element 13 -> now SET
  7517. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  7518. pdb_set_dir_drive: setting dir drive U:, was NULL
  7519. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7520. element 3 -> now SET
  7521. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  7522. pdb_set_homedir: setting home dir \\admin-pdc\admin\perso, was
  7523. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7524. element 1 -> now SET
  7525. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  7526. pdb_set_logon_script: setting logon script admin.bat, was
  7527. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7528. element 4 -> now SET
  7529. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7530. attribute sambaProfilePath does not exist
  7531. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  7532. pdb_set_profile_path: setting profile path , was
  7533. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  7534. element 2 -> now DEFAULT
  7535. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7536. attribute description does not exist
  7537. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7538. attribute sambaUserWorkstations does not exist
  7539. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7540. attribute sambaMungedDial does not exist
  7541. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7542. element 31 -> now SET
  7543. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7544. element 32 -> now SET
  7545. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7546. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7547. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7548. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7549. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7550. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7551. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7552. NT user token: (NULL)
  7553. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7554. UNIX token of user 0
  7555. Primary group is 0 and contains 0 supplementary groups
  7556. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  7557. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  7558. , timeout = Tue Nov 22 12:37:24 2011
  7559. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  7560. ldapsam_get_account_policy: got valid value from cache
  7561. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7562. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7563. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7564. element 20 -> now SET
  7565. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7566. element 16 -> now SET
  7567. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7568. element 17 -> now SET
  7569. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7570. attribute sambaBadPasswordCount does not exist
  7571. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7572. attribute sambaBadPasswordTime does not exist
  7573. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7574. attribute sambaLogonHours does not exist
  7575. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7576. attribute modifyTimestamp does not exist
  7577. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:463(pdb_set_init_flags)
  7578. element 34 -> now CHANGED
  7579. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7580. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7581. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7582. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7583. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7584. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7585. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7586. NT user token: (NULL)
  7587. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7588. UNIX token of user 0
  7589. Primary group is 0 and contains 0 supplementary groups
  7590. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  7591. Returning valid cache entry: key = ACCT_POL/maximum password age, value = 4294967295
  7592. , timeout = Tue Nov 22 12:37:24 2011
  7593. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  7594. ldapsam_get_account_policy: got valid value from cache
  7595. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7596. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7597. [2011/11/22 12:36:24, 5] lib/username.c:133(Get_Pwnam_alloc)
  7598. Finding user admin
  7599. [2011/11/22 12:36:24, 5] lib/username.c:77(Get_Pwnam_internals)
  7600. Trying _Get_Pwnam(), username as lowercase is admin
  7601. [2011/11/22 12:36:24, 5] lib/username.c:110(Get_Pwnam_internals)
  7602. Get_Pwnam_internals did find user [admin]!
  7603. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7604. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=513))], scope => [2]
  7605. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7606. smbldap_open: already connected to the LDAP server
  7607. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  7608. init_group_from_ldap: Entry found for group: 513
  7609. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7610. attribute displayName does not exist
  7611. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:953(lookup_sid)
  7612. lookup_sid called for SID 'S-1-5-21-1187454690-116783985-3613760195-513'
  7613. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:708(check_dom_sid_to_level)
  7614. Accepting SID S-1-5-21-1187454690-116783985-3613760195 in level 1
  7615. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:468(lookup_rids)
  7616. lookup_rids called for domain sid 'S-1-5-21-1187454690-116783985-3613760195'
  7617. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7618. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7619. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7620. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7621. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7622. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7623. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7624. NT user token: (NULL)
  7625. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7626. UNIX token of user 0
  7627. Primary group is 0 and contains 0 supplementary groups
  7628. [2011/11/22 12:36:24, 5] passdb/pdb_interface.c:1513(lookup_global_sam_rid)
  7629. lookup_global_sam_rid: looking up RID 513.
  7630. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7631. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
  7632. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7633. push_conn_ctx(100) : conn_ctx_stack_ndx = 2
  7634. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7635. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
  7636. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7637. NT user token: (NULL)
  7638. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7639. UNIX token of user 0
  7640. Primary group is 0 and contains 0 supplementary groups
  7641. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7642. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(sambaSID=S-1-5-21-1187454690-116783985-3613760195-513)(objectclass=sambaSamAccount))], scope => [2]
  7643. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7644. smbldap_open: already connected to the LDAP server
  7645. [2011/11/22 12:36:24, 4] passdb/pdb_ldap.c:1613(ldapsam_getsampwsid)
  7646. ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-1187454690-116783985-3613760195-513] count=0
  7647. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7648. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1187454690-116783985-3613760195-513))], scope => [2]
  7649. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7650. smbldap_open: already connected to the LDAP server
  7651. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  7652. init_group_from_ldap: Entry found for group: 513
  7653. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7654. attribute displayName does not exist
  7655. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7656. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
  7657. [2011/11/22 12:36:24, 5] passdb/pdb_interface.c:1635(pdb_default_lookup_rids)
  7658. lookup_rids: DomainUsers:2
  7659. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7660. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7661. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:988(lookup_sid)
  7662. Sid S-1-5-21-1187454690-116783985-3613760195-513 -> IA92\DomainUsers(2)
  7663. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:263(pdb_get_init_flags)
  7664. element 3: SET
  7665. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:263(pdb_get_init_flags)
  7666. element 1: SET
  7667. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:263(pdb_get_init_flags)
  7668. element 4: SET
  7669. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:273(pdb_get_init_flags)
  7670. element 2: DEFAULT
  7671. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7672. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7673. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7674. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7675. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7676. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7677. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7678. NT user token: (NULL)
  7679. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7680. UNIX token of user 0
  7681. Primary group is 0 and contains 0 supplementary groups
  7682. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  7683. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  7684. , timeout = Tue Nov 22 12:37:24 2011
  7685. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  7686. ldapsam_get_account_policy: got valid value from cache
  7687. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7688. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7689. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  7690. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 245
  7691. [2011/11/22 12:36:24, 18] lib/util_tdb.c:204(tdb_pack_va)
  7692. tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 245) -> 245
  7693. [2011/11/22 12:36:24, 18] lib/util_tdb.c:358(tdb_unpack)
  7694. tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 245) -> 245
  7695. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7696. element 5 -> now SET
  7697. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7698. element 6 -> now SET
  7699. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7700. element 7 -> now SET
  7701. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7702. element 8 -> now SET
  7703. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7704. element 9 -> now SET
  7705. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7706. element 10 -> now SET
  7707. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7708. element 21 -> now SET
  7709. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:572(pdb_set_username)
  7710. pdb_set_username: setting username admin, was
  7711. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7712. element 12 -> now SET
  7713. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
  7714. pdb_set_domain: setting domain IA92, was
  7715. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7716. element 14 -> now SET
  7717. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
  7718. pdb_set_nt_username: setting nt username admin, was
  7719. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7720. element 15 -> now SET
  7721. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
  7722. pdb_set_full_name: setting full name admin, was
  7723. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7724. element 13 -> now SET
  7725. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
  7726. pdb_set_homedir: setting home dir \\admin-pdc\admin\perso, was
  7727. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7728. element 1 -> now SET
  7729. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
  7730. pdb_set_dir_drive: setting dir drive U:, was NULL
  7731. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7732. element 3 -> now SET
  7733. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
  7734. pdb_set_logon_script: setting logon script admin.bat, was
  7735. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7736. element 4 -> now SET
  7737. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
  7738. pdb_set_profile_path: setting profile path , was
  7739. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:486(pdb_set_init_flags)
  7740. element 2 -> now DEFAULT
  7741. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7742. element 22 -> now SET
  7743. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
  7744. pdb_set_workstations: setting workstations , was
  7745. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7746. element 23 -> now SET
  7747. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7748. element 25 -> now SET
  7749. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7750. element 31 -> now SET
  7751. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7752. element 32 -> now SET
  7753. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7754. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7755. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7756. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7757. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7758. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7759. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7760. NT user token: (NULL)
  7761. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7762. UNIX token of user 0
  7763. Primary group is 0 and contains 0 supplementary groups
  7764. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  7765. Returning valid cache entry: key = ACCT_POL/password history, value = 0
  7766. , timeout = Tue Nov 22 12:37:24 2011
  7767. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  7768. ldapsam_get_account_policy: got valid value from cache
  7769. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7770. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7771. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7772. element 33 -> now SET
  7773. [2011/11/22 12:36:24, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
  7774. pdb_set_user_sid: setting user sid S-1-5-21-1187454690-116783985-3613760195-21000
  7775. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7776. element 18 -> now SET
  7777. [2011/11/22 12:36:24, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
  7778. pdb_set_user_sid_from_rid:
  7779. setting user sid S-1-5-21-1187454690-116783985-3613760195-21000 from rid 21000
  7780. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7781. element 16 -> now SET
  7782. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7783. element 28 -> now SET
  7784. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7785. element 29 -> now SET
  7786. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7787. element 30 -> now SET
  7788. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7789. element 20 -> now SET
  7790. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7791. element 17 -> now SET
  7792. [2011/11/22 12:36:24, 11] passdb/pdb_get_set.c:474(pdb_set_init_flags)
  7793. element 26 -> now SET
  7794. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7795. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  7796. [2011/11/22 12:36:24, 9] passdb/passdb.c:2142(pdb_update_autolock_flag)
  7797. pdb_update_autolock_flag: Account admin not autolocked, no check needed
  7798. [2011/11/22 12:36:24, 4] auth/auth_sam.c:137(sam_account_ok)
  7799. sam_account_ok: Checking SMB password for user admin
  7800. [2011/11/22 12:36:24, 5] auth/auth_sam.c:119(logon_hours_ok)
  7801. logon_hours_ok: user admin allowed to logon at this time (Tue Nov 22 11:36:24 2011
  7802. )
  7803. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7804. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  7805. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7806. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  7807. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7808. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  7809. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7810. NT user token: (NULL)
  7811. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7812. UNIX token of user 0
  7813. Primary group is 0 and contains 0 supplementary groups
  7814. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  7815. Returning valid cache entry: key = ACCT_POL/maximum password age, value = 4294967295
  7816. , timeout = Tue Nov 22 12:37:24 2011
  7817. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  7818. ldapsam_get_account_policy: got valid value from cache
  7819. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7820. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  7821. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7822. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  7823. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7824. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  7825. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7826. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  7827. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7828. NT user token: (NULL)
  7829. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7830. UNIX token of user 0
  7831. Primary group is 0 and contains 0 supplementary groups
  7832. [2011/11/22 12:36:24, 10] lib/system_smbd.c:122(sys_getgrouplist)
  7833. sys_getgrouplist: user [admin]
  7834. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  7835. Cache entry with key = IDMAP/GID2SID/513 couldn't be found
  7836. [2011/11/22 12:36:24, 5] passdb/lookup_sid.c:1378(gid_to_sid)
  7837. gid_to_sid: winbind failed to find a sid for gid 513
  7838. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7839. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7840. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7841. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7842. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7843. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7844. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7845. NT user token: (NULL)
  7846. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7847. UNIX token of user 0
  7848. Primary group is 0 and contains 0 supplementary groups
  7849. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7850. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=513))], scope => [2]
  7851. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7852. smbldap_open: already connected to the LDAP server
  7853. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  7854. init_group_from_ldap: Entry found for group: 513
  7855. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7856. attribute displayName does not exist
  7857. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7858. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7859. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1173(legacy_gid_to_sid)
  7860. LEGACY: gid 513 -> sid S-1-5-21-1187454690-116783985-3613760195-513
  7861. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  7862. Cache entry with key = IDMAP/GID2SID/512 couldn't be found
  7863. [2011/11/22 12:36:24, 5] passdb/lookup_sid.c:1378(gid_to_sid)
  7864. gid_to_sid: winbind failed to find a sid for gid 512
  7865. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7866. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7867. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7868. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7869. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7870. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7871. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7872. NT user token: (NULL)
  7873. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7874. UNIX token of user 0
  7875. Primary group is 0 and contains 0 supplementary groups
  7876. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7877. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=512))], scope => [2]
  7878. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7879. smbldap_open: already connected to the LDAP server
  7880. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  7881. init_group_from_ldap: Entry found for group: 512
  7882. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7883. attribute displayName does not exist
  7884. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7885. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7886. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1173(legacy_gid_to_sid)
  7887. LEGACY: gid 512 -> sid S-1-5-21-1187454690-116783985-3613760195-512
  7888. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  7889. Cache entry with key = IDMAP/GID2SID/550 couldn't be found
  7890. [2011/11/22 12:36:24, 5] passdb/lookup_sid.c:1378(gid_to_sid)
  7891. gid_to_sid: winbind failed to find a sid for gid 550
  7892. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7893. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7894. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7895. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7896. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7897. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7898. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7899. NT user token: (NULL)
  7900. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7901. UNIX token of user 0
  7902. Primary group is 0 and contains 0 supplementary groups
  7903. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7904. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=550))], scope => [2]
  7905. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7906. smbldap_open: already connected to the LDAP server
  7907. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  7908. init_group_from_ldap: Entry found for group: 550
  7909. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7910. attribute displayName does not exist
  7911. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7912. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7913. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1173(legacy_gid_to_sid)
  7914. LEGACY: gid 550 -> sid S-1-5-32-550
  7915. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  7916. Cache entry with key = IDMAP/GID2SID/10366 couldn't be found
  7917. [2011/11/22 12:36:24, 5] passdb/lookup_sid.c:1378(gid_to_sid)
  7918. gid_to_sid: winbind failed to find a sid for gid 10366
  7919. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7920. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7921. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7922. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7923. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7924. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7925. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7926. NT user token: (NULL)
  7927. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7928. UNIX token of user 0
  7929. Primary group is 0 and contains 0 supplementary groups
  7930. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7931. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=10366))], scope => [2]
  7932. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7933. smbldap_open: already connected to the LDAP server
  7934. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  7935. init_group_from_ldap: Entry found for group: 10366
  7936. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7937. attribute description does not exist
  7938. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7939. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7940. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1173(legacy_gid_to_sid)
  7941. LEGACY: gid 10366 -> sid S-1-5-21-1187454690-116783985-3613760195-21733
  7942. [2011/11/22 12:36:24, 10] lib/gencache.c:194(gencache_get)
  7943. Cache entry with key = IDMAP/GID2SID/10464 couldn't be found
  7944. [2011/11/22 12:36:24, 5] passdb/lookup_sid.c:1378(gid_to_sid)
  7945. gid_to_sid: winbind failed to find a sid for gid 10464
  7946. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7947. push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
  7948. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7949. push_conn_ctx(100) : conn_ctx_stack_ndx = 1
  7950. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7951. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
  7952. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7953. NT user token: (NULL)
  7954. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7955. UNIX token of user 0
  7956. Primary group is 0 and contains 0 supplementary groups
  7957. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  7958. smbldap_search_ext: base => [o=gouv,c=fr], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=10464))], scope => [2]
  7959. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  7960. smbldap_open: already connected to the LDAP server
  7961. [2011/11/22 12:36:24, 2] passdb/pdb_ldap.c:2353(init_group_from_ldap)
  7962. init_group_from_ldap: Entry found for group: 10464
  7963. [2011/11/22 12:36:24, 10] lib/smbldap.c:310(smbldap_talloc_single_attribute)
  7964. attribute description does not exist
  7965. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7966. pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
  7967. [2011/11/22 12:36:24, 10] passdb/lookup_sid.c:1173(legacy_gid_to_sid)
  7968. LEGACY: gid 10464 -> sid S-1-5-21-1187454690-116783985-3613760195-21929
  7969. [2011/11/22 12:36:24, 5] auth/auth_util.c:646(make_server_info_sam)
  7970. make_server_info_sam: made server info for user admin -> admin
  7971. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7972. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  7973. [2011/11/22 12:36:24, 3] auth/auth.c:271(check_ntlm_password)
  7974. check_ntlm_password: sam authentication for user [admin] succeeded
  7975. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7976. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  7977. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  7978. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  7979. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  7980. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  7981. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  7982. NT user token: (NULL)
  7983. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  7984. UNIX token of user 0
  7985. Primary group is 0 and contains 0 supplementary groups
  7986. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  7987. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  7988. [2011/11/22 12:36:24, 5] auth/auth.c:297(check_ntlm_password)
  7989. check_ntlm_password: PAM Account for user [admin] succeeded
  7990. [2011/11/22 12:36:24, 2] auth/auth.c:310(check_ntlm_password)
  7991. check_ntlm_password: authentication for user [admin] -> [admin] -> [admin] succeeded
  7992. [2011/11/22 12:36:24, 5] auth/auth_util.c:2114(free_user_info)
  7993. attempting to free (and zero) a user_info structure
  7994. [2011/11/22 12:36:24, 10] auth/auth_util.c:2118(free_user_info)
  7995. structure was created for admin
  7996. [2011/11/22 12:36:24, 5] rpc_server/srv_netlog_nt.c:1041(_netr_LogonSamLogon)
  7997. _netr_LogonSamLogon: check_password returned status NT_STATUS_OK
  7998. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  7999. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  8000. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  8001. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  8002. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8003. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  8004. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  8005. NT user token: (NULL)
  8006. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  8007. UNIX token of user 0
  8008. Primary group is 0 and contains 0 supplementary groups
  8009. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  8010. Returning expired cache entry: key = ACCT_POL/minimum password age, value = 0
  8011. , timeout = Tue Nov 22 12:34:10 2011
  8012. [2011/11/22 12:36:24, 10] passdb/pdb_ldap.c:3854(ldapsam_get_account_policy_from_ldap)
  8013. ldapsam_get_account_policy_from_ldap
  8014. [2011/11/22 12:36:24, 5] lib/smbldap.c:1261(smbldap_search_ext)
  8015. smbldap_search_ext: base => [sambaDomainName=ia92,o=gouv,c=fr], filter => [(objectclass=*)], scope => [0]
  8016. [2011/11/22 12:36:24, 11] lib/smbldap.c:1116(smbldap_open)
  8017. smbldap_open: already connected to the LDAP server
  8018. [2011/11/22 12:36:24, 10] lib/account_pol.c:396(cache_account_policy_set)
  8019. cache_account_policy_set: updating account pol cache
  8020. [2011/11/22 12:36:24, 10] lib/gencache.c:131(gencache_set)
  8021. Adding cache entry with key = ACCT_POL/minimum password age; value = 0
  8022. and timeout = Tue Nov 22 12:37:24 2011
  8023. (60 seconds ahead)
  8024. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  8025. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  8026. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:210(push_sec_ctx)
  8027. push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
  8028. [2011/11/22 12:36:24, 3] smbd/uid.c:428(push_conn_ctx)
  8029. push_conn_ctx(100) : conn_ctx_stack_ndx = 0
  8030. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8031. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  8032. [2011/11/22 12:36:24, 5] auth/token_util.c:522(debug_nt_user_token)
  8033. NT user token: (NULL)
  8034. [2011/11/22 12:36:24, 5] auth/token_util.c:548(debug_unix_user_token)
  8035. UNIX token of user 0
  8036. Primary group is 0 and contains 0 supplementary groups
  8037. [2011/11/22 12:36:24, 10] lib/gencache.c:208(gencache_get)
  8038. Returning valid cache entry: key = ACCT_POL/maximum password age, value = 4294967295
  8039. , timeout = Tue Nov 22 12:37:24 2011
  8040. [2011/11/22 12:36:24, 11] passdb/pdb_ldap.c:3923(ldapsam_get_account_policy)
  8041. ldapsam_get_account_policy: got valid value from cache
  8042. [2011/11/22 12:36:24, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
  8043. pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  8044. [2011/11/22 12:36:24, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
  8045. netr_LogonSamLogon: struct netr_LogonSamLogon
  8046. out: struct netr_LogonSamLogon
  8047. return_authenticator : *
  8048. return_authenticator: struct netr_Authenticator
  8049. cred: struct netr_Credential
  8050. data : 141c36e35c6377a2
  8051. timestamp : mar 22 nov 2011 12:36:25 CET CET
  8052. validation : *
  8053. validation : union netr_Validation(case 3)
  8054. sam3 : *
  8055. sam3: struct netr_SamInfo3
  8056. base: struct netr_SamBaseInfo
  8057. last_logon : NTTIME(0)
  8058. last_logoff : mar 19 jan 2038 04:14:07 CET CET
  8059. acct_expiry : mar 19 jan 2038 04:14:07 CET CET
  8060. last_password_change : mer 09 nov 2011 14:26:22 CET CET
  8061. allow_password_change : mer 09 nov 2011 14:26:22 CET CET
  8062. force_password_change : mar 19 jan 2038 04:14:07 CET CET
  8063. account_name: struct lsa_String
  8064. length : 0x000a (10)
  8065. size : 0x000a (10)
  8066. string : *
  8067. string : 'admin'
  8068. full_name: struct lsa_String
  8069. length : 0x000a (10)
  8070. size : 0x000a (10)
  8071. string : *
  8072. string : 'admin'
  8073. logon_script: struct lsa_String
  8074. length : 0x0012 (18)
  8075. size : 0x0012 (18)
  8076. string : *
  8077. string : 'admin.bat'
  8078. profile_path: struct lsa_String
  8079. length : 0x0000 (0)
  8080. size : 0x0000 (0)
  8081. string : *
  8082. string : ''
  8083. home_directory: struct lsa_String
  8084. length : 0x002e (46)
  8085. size : 0x002e (46)
  8086. string : *
  8087. string : '\\admin-pdc\admin\perso'
  8088. home_drive: struct lsa_String
  8089. length : 0x0004 (4)
  8090. size : 0x0004 (4)
  8091. string : *
  8092. string : 'U:'
  8093. logon_count : 0x0000 (0)
  8094. bad_password_count : 0x0000 (0)
  8095. rid : 0x00005208 (21000)
  8096. primary_gid : 0x00000201 (513)
  8097. groups: struct samr_RidWithAttributeArray
  8098. count : 0x00000004 (4)
  8099. rids : *
  8100. rids: ARRAY(4)
  8101. rids: struct samr_RidWithAttribute
  8102. rid : 0x00000201 (513)
  8103. attributes : 0x00000007 (7)
  8104. 1: SE_GROUP_MANDATORY
  8105. 1: SE_GROUP_ENABLED_BY_DEFAULT
  8106. 1: SE_GROUP_ENABLED
  8107. 0: SE_GROUP_OWNER
  8108. 0: SE_GROUP_USE_FOR_DENY_ONLY
  8109. 0: SE_GROUP_RESOURCE
  8110. 0x00: SE_GROUP_LOGON_ID (0)
  8111. rids: struct samr_RidWithAttribute
  8112. rid : 0x00000200 (512)
  8113. attributes : 0x00000007 (7)
  8114. 1: SE_GROUP_MANDATORY
  8115. 1: SE_GROUP_ENABLED_BY_DEFAULT
  8116. 1: SE_GROUP_ENABLED
  8117. 0: SE_GROUP_OWNER
  8118. 0: SE_GROUP_USE_FOR_DENY_ONLY
  8119. 0: SE_GROUP_RESOURCE
  8120. 0x00: SE_GROUP_LOGON_ID (0)
  8121. rids: struct samr_RidWithAttribute
  8122. rid : 0x000054e5 (21733)
  8123. attributes : 0x00000007 (7)
  8124. 1: SE_GROUP_MANDATORY
  8125. 1: SE_GROUP_ENABLED_BY_DEFAULT
  8126. 1: SE_GROUP_ENABLED
  8127. 0: SE_GROUP_OWNER
  8128. 0: SE_GROUP_USE_FOR_DENY_ONLY
  8129. 0: SE_GROUP_RESOURCE
  8130. 0x00: SE_GROUP_LOGON_ID (0)
  8131. rids: struct samr_RidWithAttribute
  8132. rid : 0x000055a9 (21929)
  8133. attributes : 0x00000007 (7)
  8134. 1: SE_GROUP_MANDATORY
  8135. 1: SE_GROUP_ENABLED_BY_DEFAULT
  8136. 1: SE_GROUP_ENABLED
  8137. 0: SE_GROUP_OWNER
  8138. 0: SE_GROUP_USE_FOR_DENY_ONLY
  8139. 0: SE_GROUP_RESOURCE
  8140. 0x00: SE_GROUP_LOGON_ID (0)
  8141. user_flags : 0x00000020 (32)
  8142. 0: NETLOGON_GUEST
  8143. 0: NETLOGON_NOENCRYPTION
  8144. 0: NETLOGON_CACHED_ACCOUNT
  8145. 0: NETLOGON_USED_LM_PASSWORD
  8146. 1: NETLOGON_EXTRA_SIDS
  8147. 0: NETLOGON_SUBAUTH_SESSION_KEY
  8148. 0: NETLOGON_SERVER_TRUST_ACCOUNT
  8149. 0: NETLOGON_NTLMV2_ENABLED
  8150. 0: NETLOGON_RESOURCE_GROUPS
  8151. 0: NETLOGON_PROFILE_PATH_RETURNED
  8152. 0: NETLOGON_GRACE_LOGON
  8153. key: struct netr_UserSessionKey
  8154. key : 2fafe44f9206f70db4fce3075680b563
  8155. logon_server: struct lsa_StringLarge
  8156. length : 0x0000 (0)
  8157. size : 0x0000 (0)
  8158. string : *
  8159. string : 'ADMIN-PDC'
  8160. domain: struct lsa_StringLarge
  8161. length : 0x0000 (0)
  8162. size : 0x0000 (0)
  8163. string : *
  8164. string : 'IA92'
  8165. domain_sid : *
  8166. domain_sid : S-1-5-21-1187454690-116783985-3613760195
  8167. LMSessKey: struct netr_LMSessionKey
  8168. key : 0000000000000000
  8169. acct_flags : 0x00000010 (16)
  8170. 0: ACB_DISABLED
  8171. 0: ACB_HOMDIRREQ
  8172. 0: ACB_PWNOTREQ
  8173. 0: ACB_TEMPDUP
  8174. 1: ACB_NORMAL
  8175. 0: ACB_MNS
  8176. 0: ACB_DOMTRUST
  8177. 0: ACB_WSTRUST
  8178. 0: ACB_SVRTRUST
  8179. 0: ACB_PWNOEXP
  8180. 0: ACB_AUTOLOCK
  8181. 0: ACB_ENC_TXT_PWD_ALLOWED
  8182. 0: ACB_SMARTCARD_REQUIRED
  8183. 0: ACB_TRUSTED_FOR_DELEGATION
  8184. 0: ACB_NOT_DELEGATED
  8185. 0: ACB_USE_DES_KEY_ONLY
  8186. 0: ACB_DONT_REQUIRE_PREAUTH
  8187. 0: ACB_PW_EXPIRED
  8188. 0: ACB_NO_AUTH_DATA_REQD
  8189. unknown: ARRAY(7)
  8190. unknown : 0x00000000 (0)
  8191. unknown : 0x00000000 (0)
  8192. unknown : 0x00000000 (0)
  8193. unknown : 0x00000000 (0)
  8194. unknown : 0x00000000 (0)
  8195. unknown : 0x00000000 (0)
  8196. unknown : 0x00000000 (0)
  8197. sidcount : 0x00000000 (0)
  8198. sids : NULL
  8199. authoritative : *
  8200. authoritative : 0x01 (1)
  8201. result : NT_STATUS_OK
  8202. [2011/11/22 12:36:24, 0] rpc_parse/parse_prs.c:73(prs_dump_region)
  8203. created /tmp/out_\NETLOGON_2.5.prs
  8204. [2011/11/22 12:36:24, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
  8205. api_rpcTNP: called \NETLOGON successfully
  8206. [2011/11/22 12:36:24, 3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  8207. free_pipe_context: destroying talloc pool of size 401
  8208. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
  8209. write_to_pipe: data_used = 336
  8210. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  8211. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0108
  8212. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  8213. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0108
  8214. [2011/11/22 12:36:24, 3] smbd/pipes.c:325(pipe_write_andx_done)
  8215. writeX-IPC nwritten=352
  8216. [2011/11/22 12:36:24, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  8217. got smb length of 59
  8218. [2011/11/22 12:36:24, 6] smbd/process.c:1456(process_smb)
  8219. got message type 0x0 of len 0x3b
  8220. [2011/11/22 12:36:24, 3] smbd/process.c:1459(process_smb)
  8221. Transaction 34 of length 63 (0 toread)
  8222. [2011/11/22 12:36:24, 5] lib/util.c:632(show_msg)
  8223. [2011/11/22 12:36:24, 5] lib/util.c:642(show_msg)
  8224. size=59
  8225. smb_com=0x2e
  8226. smb_rcls=0
  8227. smb_reh=0
  8228. smb_err=0
  8229. smb_flg=24
  8230. smb_flg2=51207
  8231. smb_tid=1
  8232. smb_pid=65279
  8233. smb_uid=100
  8234. smb_mid=2177
  8235. smt_wct=12
  8236. smb_vwv[ 0]= 255 (0xFF)
  8237. smb_vwv[ 1]=57054 (0xDEDE)
  8238. smb_vwv[ 2]= 4722 (0x1272)
  8239. smb_vwv[ 3]= 0 (0x0)
  8240. smb_vwv[ 4]= 0 (0x0)
  8241. smb_vwv[ 5]= 1024 (0x400)
  8242. smb_vwv[ 6]= 1024 (0x400)
  8243. smb_vwv[ 7]=65535 (0xFFFF)
  8244. smb_vwv[ 8]=65535 (0xFFFF)
  8245. smb_vwv[ 9]= 1024 (0x400)
  8246. smb_vwv[10]= 0 (0x0)
  8247. smb_vwv[11]= 0 (0x0)
  8248. smb_bcc=0
  8249. [2011/11/22 12:36:24, 3] smbd/process.c:1273(switch_message)
  8250. switch message SMBreadX (pid 2903) conn 0xb77dcab8
  8251. [2011/11/22 12:36:24, 4] smbd/uid.c:256(change_to_user)
  8252. change_to_user: Skipping user change - already user
  8253. [2011/11/22 12:36:24, 6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
  8254. name: \NETLOGON len: 1024
  8255. [2011/11/22 12:36:24, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
  8256. read_from_pipe: \NETLOGON: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 520.
  8257. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  8258. 000000 smb_io_rpc_hdr hdr
  8259. 0000 major : 05
  8260. 0001 minor : 00
  8261. 0002 pkt_type : 02
  8262. 0003 flags : 03
  8263. 0004 pack_type0: 10
  8264. 0005 pack_type1: 00
  8265. 0006 pack_type2: 00
  8266. 0007 pack_type3: 00
  8267. 0008 frag_len : 0248
  8268. 000a auth_len : 0020
  8269. 000c call_id : 00000003
  8270. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  8271. 000010 smb_io_rpc_hdr_resp resp
  8272. 0010 alloc_hint: 00000208
  8273. 0014 context_id: 0000
  8274. 0016 cancel_ct : 00
  8275. 0017 reserved : 00
  8276. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  8277. 000220 smb_io_rpc_hdr_auth hdr_auth
  8278. 0220 auth_type : 44
  8279. 0221 auth_level : 06
  8280. 0222 auth_pad_len : 00
  8281. 0223 auth_reserved: 00
  8282. 0224 auth_context_id: 00000001
  8283. [2011/11/22 12:36:24, 10] rpc_parse/parse_prs.c:1516(schannel_encode)
  8284. SCHANNEL: schannel_encode seq_num=1 data_len=520
  8285. [2011/11/22 12:36:24, 5] rpc_parse/parse_prs.c:88(prs_debug)
  8286. 000228 smb_io_rpc_auth_schannel_chk
  8287. 0228 sig : 77 00 7a 00 ff ff 00 00
  8288. 0230 seq_num: 8c 3b 04 8a 63 fb a9 d0
  8289. 0238 packet_digest: 63 6a 00 0d ed 0a 05 79
  8290. 0240 confounder: 96 55 9c be 4e 80 2b 46
  8291. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  8292. s3_event: Schedule immediate event "tevent_req_trigger": 0xb77e0408
  8293. [2011/11/22 12:36:24, 10] lib/events.c:287(s3_event_debug)
  8294. s3_event: Run immediate event "tevent_req_trigger": 0xb77e0408
  8295. [2011/11/22 12:36:24, 3] smbd/pipes.c:435(pipe_read_andx_done)
  8296. readX-IPC min=1024 max=1024 nread=584
  8297. [2011/11/22 12:36:35, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  8298. got smb length of 39
  8299. [2011/11/22 12:36:35, 6] smbd/process.c:1456(process_smb)
  8300. got message type 0x0 of len 0x27
  8301. [2011/11/22 12:36:35, 3] smbd/process.c:1459(process_smb)
  8302. Transaction 35 of length 43 (0 toread)
  8303. [2011/11/22 12:36:35, 5] lib/util.c:632(show_msg)
  8304. [2011/11/22 12:36:35, 5] lib/util.c:642(show_msg)
  8305. size=39
  8306. smb_com=0x74
  8307. smb_rcls=0
  8308. smb_reh=0
  8309. smb_err=0
  8310. smb_flg=24
  8311. smb_flg2=51207
  8312. smb_tid=0
  8313. smb_pid=65279
  8314. smb_uid=101
  8315. smb_mid=2241
  8316. smt_wct=2
  8317. smb_vwv[ 0]= 255 (0xFF)
  8318. smb_vwv[ 1]= 0 (0x0)
  8319. smb_bcc=0
  8320. [2011/11/22 12:36:35, 3] smbd/process.c:1273(switch_message)
  8321. switch message SMBulogoffX (pid 2903) conn 0x0
  8322. [2011/11/22 12:36:35, 0] smbd/process.c:1223(smb_dump)
  8323. created /tmp/SMBulogoffX.14.req len 43
  8324. [2011/11/22 12:36:35, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8325. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  8326. [2011/11/22 12:36:35, 5] auth/token_util.c:522(debug_nt_user_token)
  8327. NT user token: (NULL)
  8328. [2011/11/22 12:36:35, 5] auth/token_util.c:548(debug_unix_user_token)
  8329. UNIX token of user 0
  8330. Primary group is 0 and contains 0 supplementary groups
  8331. [2011/11/22 12:36:35, 5] smbd/uid.c:368(change_to_root_user)
  8332. change_to_root_user: now uid=(0,0) gid=(0,0)
  8333. [2011/11/22 12:36:35, 3] smbd/reply.c:1948(reply_ulogoffX)
  8334. ulogoffX vuid=101
  8335. [2011/11/22 12:36:35, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  8336. got smb length of 35
  8337. [2011/11/22 12:36:35, 6] smbd/process.c:1456(process_smb)
  8338. got message type 0x0 of len 0x23
  8339. [2011/11/22 12:36:35, 3] smbd/process.c:1459(process_smb)
  8340. Transaction 36 of length 39 (0 toread)
  8341. [2011/11/22 12:36:35, 5] lib/util.c:632(show_msg)
  8342. [2011/11/22 12:36:35, 5] lib/util.c:642(show_msg)
  8343. size=35
  8344. smb_com=0x71
  8345. smb_rcls=0
  8346. smb_reh=0
  8347. smb_err=0
  8348. smb_flg=24
  8349. smb_flg2=51207
  8350. smb_tid=2
  8351. smb_pid=65279
  8352. smb_uid=101
  8353. smb_mid=2305
  8354. smt_wct=0
  8355. smb_bcc=0
  8356. [2011/11/22 12:36:35, 3] smbd/process.c:1273(switch_message)
  8357. switch message SMBtdis (pid 2903) conn 0xb77e2320
  8358. [2011/11/22 12:36:35, 0] smbd/process.c:1223(smb_dump)
  8359. created /tmp/SMBtdis.16.req len 39
  8360. [2011/11/22 12:36:35, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8361. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  8362. [2011/11/22 12:36:35, 5] auth/token_util.c:522(debug_nt_user_token)
  8363. NT user token: (NULL)
  8364. [2011/11/22 12:36:35, 5] auth/token_util.c:548(debug_unix_user_token)
  8365. UNIX token of user 0
  8366. Primary group is 0 and contains 0 supplementary groups
  8367. [2011/11/22 12:36:35, 5] smbd/uid.c:368(change_to_root_user)
  8368. change_to_root_user: now uid=(0,0) gid=(0,0)
  8369. [2011/11/22 12:36:35, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8370. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  8371. [2011/11/22 12:36:35, 5] auth/token_util.c:522(debug_nt_user_token)
  8372. NT user token: (NULL)
  8373. [2011/11/22 12:36:35, 5] auth/token_util.c:548(debug_unix_user_token)
  8374. UNIX token of user 0
  8375. Primary group is 0 and contains 0 supplementary groups
  8376. [2011/11/22 12:36:35, 5] smbd/uid.c:368(change_to_root_user)
  8377. change_to_root_user: now uid=(0,0) gid=(0,0)
  8378. [2011/11/22 12:36:35, 3] smbd/service.c:1226(close_cnum)
  8379. testsige3 (192.168.0.10) closed connection to service IPC$
  8380. [2011/11/22 12:36:35, 3] smbd/connection.c:31(yield_connection)
  8381. Yielding connection to IPC$
  8382. [2011/11/22 12:36:35, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
  8383. Locking key 570B00000200000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  8384. [2011/11/22 12:36:35, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
  8385. Allocated locked data 0x0xb7850a68
  8386. [2011/11/22 12:36:35, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
  8387. Unlocking key 570B00000200000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  8388. [2011/11/22 12:36:35, 4] smbd/vfs.c:753(vfs_ChDir)
  8389. vfs_ChDir to /
  8390. [2011/11/22 12:36:35, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8391. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  8392. [2011/11/22 12:36:35, 5] auth/token_util.c:522(debug_nt_user_token)
  8393. NT user token: (NULL)
  8394. [2011/11/22 12:36:35, 5] auth/token_util.c:548(debug_unix_user_token)
  8395. UNIX token of user 0
  8396. Primary group is 0 and contains 0 supplementary groups
  8397. [2011/11/22 12:36:35, 5] smbd/uid.c:368(change_to_root_user)
  8398. change_to_root_user: now uid=(0,0) gid=(0,0)
  8399. [2011/11/22 12:36:35, 5] lib/util.c:632(show_msg)
  8400. [2011/11/22 12:36:35, 5] lib/util.c:642(show_msg)
  8401. size=35
  8402. smb_com=0x71
  8403. smb_rcls=0
  8404. smb_reh=0
  8405. smb_err=0
  8406. smb_flg=136
  8407. smb_flg2=51201
  8408. smb_tid=2
  8409. smb_pid=65279
  8410. smb_uid=101
  8411. smb_mid=2305
  8412. smt_wct=0
  8413. smb_bcc=0
  8414. [2011/11/22 12:36:40, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  8415. got smb length of 41
  8416. [2011/11/22 12:36:40, 6] smbd/process.c:1456(process_smb)
  8417. got message type 0x0 of len 0x29
  8418. [2011/11/22 12:36:40, 3] smbd/process.c:1459(process_smb)
  8419. Transaction 37 of length 45 (0 toread)
  8420. [2011/11/22 12:36:40, 5] lib/util.c:632(show_msg)
  8421. [2011/11/22 12:36:40, 5] lib/util.c:642(show_msg)
  8422. size=41
  8423. smb_com=0x4
  8424. smb_rcls=0
  8425. smb_reh=0
  8426. smb_err=0
  8427. smb_flg=24
  8428. smb_flg2=51207
  8429. smb_tid=1
  8430. smb_pid=65279
  8431. smb_uid=100
  8432. smb_mid=2369
  8433. smt_wct=3
  8434. smb_vwv[ 0]= 4722 (0x1272)
  8435. smb_vwv[ 1]=65535 (0xFFFF)
  8436. smb_vwv[ 2]=65535 (0xFFFF)
  8437. smb_bcc=0
  8438. [2011/11/22 12:36:40, 3] smbd/process.c:1273(switch_message)
  8439. switch message SMBclose (pid 2903) conn 0xb77dcab8
  8440. [2011/11/22 12:36:40, 0] smbd/process.c:1223(smb_dump)
  8441. created /tmp/SMBclose.97.req len 45
  8442. [2011/11/22 12:36:40, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8443. setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  8444. [2011/11/22 12:36:40, 5] auth/token_util.c:528(debug_nt_user_token)
  8445. NT user token of user S-1-5-21-1187454690-116783985-3613760195-501
  8446. contains 5 SIDs
  8447. SID[ 0]: S-1-5-21-1187454690-116783985-3613760195-501
  8448. SID[ 1]: S-1-1-0
  8449. SID[ 2]: S-1-5-2
  8450. SID[ 3]: S-1-5-32-546
  8451. SID[ 4]: S-1-22-1-65534
  8452. SE_PRIV 0x0 0x0 0x0 0x0
  8453. [2011/11/22 12:36:40, 5] auth/token_util.c:548(debug_unix_user_token)
  8454. UNIX token of user 65534
  8455. Primary group is 65534 and contains 0 supplementary groups
  8456. [2011/11/22 12:36:40, 5] smbd/uid.c:353(change_to_user)
  8457. change_to_user uid=(0,65534) gid=(0,65534)
  8458. [2011/11/22 12:36:40, 4] smbd/vfs.c:753(vfs_ChDir)
  8459. vfs_ChDir to /tmp
  8460. [2011/11/22 12:36:40, 3] smbd/reply.c:4488(reply_close)
  8461. close fd=-1 fnum=4722 (numopen=2)
  8462. [2011/11/22 12:36:40, 6] smbd/close.c:454(set_close_write_time)
  8463. close_write_time: Thu Jan 1 00:59:59 1970
  8464. [2011/11/22 12:36:40, 5] smbd/files.c:474(file_free)
  8465. freed files structure 4722 (1 used)
  8466. [2011/11/22 12:36:40, 5] lib/util.c:632(show_msg)
  8467. [2011/11/22 12:36:40, 5] lib/util.c:642(show_msg)
  8468. size=35
  8469. smb_com=0x4
  8470. smb_rcls=0
  8471. smb_reh=0
  8472. smb_err=0
  8473. smb_flg=136
  8474. smb_flg2=51201
  8475. smb_tid=1
  8476. smb_pid=65279
  8477. smb_uid=100
  8478. smb_mid=2369
  8479. smt_wct=0
  8480. smb_bcc=0
  8481. [2011/11/22 12:36:40, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  8482. got smb length of 41
  8483. [2011/11/22 12:36:40, 6] smbd/process.c:1456(process_smb)
  8484. got message type 0x0 of len 0x29
  8485. [2011/11/22 12:36:40, 3] smbd/process.c:1459(process_smb)
  8486. Transaction 38 of length 45 (0 toread)
  8487. [2011/11/22 12:36:40, 5] lib/util.c:632(show_msg)
  8488. [2011/11/22 12:36:40, 5] lib/util.c:642(show_msg)
  8489. size=41
  8490. smb_com=0x4
  8491. smb_rcls=0
  8492. smb_reh=0
  8493. smb_err=0
  8494. smb_flg=24
  8495. smb_flg2=51207
  8496. smb_tid=1
  8497. smb_pid=65279
  8498. smb_uid=100
  8499. smb_mid=2433
  8500. smt_wct=3
  8501. smb_vwv[ 0]= 4720 (0x1270)
  8502. smb_vwv[ 1]=65535 (0xFFFF)
  8503. smb_vwv[ 2]=65535 (0xFFFF)
  8504. smb_bcc=0
  8505. [2011/11/22 12:36:40, 3] smbd/process.c:1273(switch_message)
  8506. switch message SMBclose (pid 2903) conn 0xb77dcab8
  8507. [2011/11/22 12:36:40, 0] smbd/process.c:1223(smb_dump)
  8508. created /tmp/SMBclose.98.req len 45
  8509. [2011/11/22 12:36:40, 4] smbd/uid.c:256(change_to_user)
  8510. change_to_user: Skipping user change - already user
  8511. [2011/11/22 12:36:40, 3] smbd/reply.c:4488(reply_close)
  8512. close fd=-1 fnum=4720 (numopen=1)
  8513. [2011/11/22 12:36:40, 6] smbd/close.c:454(set_close_write_time)
  8514. close_write_time: Thu Jan 1 00:59:59 1970
  8515. [2011/11/22 12:36:40, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
  8516. close_policy_by_pipe: deleted handle list for pipe \NETLOGON
  8517. [2011/11/22 12:36:40, 5] smbd/files.c:474(file_free)
  8518. freed files structure 4720 (0 used)
  8519. [2011/11/22 12:36:40, 5] lib/util.c:632(show_msg)
  8520. [2011/11/22 12:36:40, 5] lib/util.c:642(show_msg)
  8521. size=35
  8522. smb_com=0x4
  8523. smb_rcls=0
  8524. smb_reh=0
  8525. smb_err=0
  8526. smb_flg=136
  8527. smb_flg2=51201
  8528. smb_tid=1
  8529. smb_pid=65279
  8530. smb_uid=100
  8531. smb_mid=2433
  8532. smt_wct=0
  8533. smb_bcc=0
  8534. [2011/11/22 12:36:51, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  8535. got smb length of 39
  8536. [2011/11/22 12:36:51, 6] smbd/process.c:1456(process_smb)
  8537. got message type 0x0 of len 0x27
  8538. [2011/11/22 12:36:51, 3] smbd/process.c:1459(process_smb)
  8539. Transaction 39 of length 43 (0 toread)
  8540. [2011/11/22 12:36:51, 5] lib/util.c:632(show_msg)
  8541. [2011/11/22 12:36:51, 5] lib/util.c:642(show_msg)
  8542. size=39
  8543. smb_com=0x74
  8544. smb_rcls=0
  8545. smb_reh=0
  8546. smb_err=0
  8547. smb_flg=24
  8548. smb_flg2=51207
  8549. smb_tid=0
  8550. smb_pid=65279
  8551. smb_uid=100
  8552. smb_mid=2497
  8553. smt_wct=2
  8554. smb_vwv[ 0]= 255 (0xFF)
  8555. smb_vwv[ 1]= 0 (0x0)
  8556. smb_bcc=0
  8557. [2011/11/22 12:36:51, 3] smbd/process.c:1273(switch_message)
  8558. switch message SMBulogoffX (pid 2903) conn 0x0
  8559. [2011/11/22 12:36:51, 0] smbd/process.c:1223(smb_dump)
  8560. created /tmp/SMBulogoffX.15.req len 43
  8561. [2011/11/22 12:36:51, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8562. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  8563. [2011/11/22 12:36:51, 5] auth/token_util.c:522(debug_nt_user_token)
  8564. NT user token: (NULL)
  8565. [2011/11/22 12:36:51, 5] auth/token_util.c:548(debug_unix_user_token)
  8566. UNIX token of user 0
  8567. Primary group is 0 and contains 0 supplementary groups
  8568. [2011/11/22 12:36:51, 5] smbd/uid.c:368(change_to_root_user)
  8569. change_to_root_user: now uid=(0,0) gid=(0,0)
  8570. [2011/11/22 12:36:51, 3] smbd/reply.c:1948(reply_ulogoffX)
  8571. ulogoffX vuid=100
  8572. [2011/11/22 12:36:51, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
  8573. got smb length of 35
  8574. [2011/11/22 12:36:51, 6] smbd/process.c:1456(process_smb)
  8575. got message type 0x0 of len 0x23
  8576. [2011/11/22 12:36:51, 3] smbd/process.c:1459(process_smb)
  8577. Transaction 40 of length 39 (0 toread)
  8578. [2011/11/22 12:36:51, 5] lib/util.c:632(show_msg)
  8579. [2011/11/22 12:36:51, 5] lib/util.c:642(show_msg)
  8580. size=35
  8581. smb_com=0x71
  8582. smb_rcls=0
  8583. smb_reh=0
  8584. smb_err=0
  8585. smb_flg=24
  8586. smb_flg2=51207
  8587. smb_tid=1
  8588. smb_pid=65279
  8589. smb_uid=100
  8590. smb_mid=2561
  8591. smt_wct=0
  8592. smb_bcc=0
  8593. [2011/11/22 12:36:51, 3] smbd/process.c:1273(switch_message)
  8594. switch message SMBtdis (pid 2903) conn 0xb77dcab8
  8595. [2011/11/22 12:36:51, 0] smbd/process.c:1223(smb_dump)
  8596. created /tmp/SMBtdis.17.req len 39
  8597. [2011/11/22 12:36:51, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8598. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  8599. [2011/11/22 12:36:51, 5] auth/token_util.c:522(debug_nt_user_token)
  8600. NT user token: (NULL)
  8601. [2011/11/22 12:36:51, 5] auth/token_util.c:548(debug_unix_user_token)
  8602. UNIX token of user 0
  8603. Primary group is 0 and contains 0 supplementary groups
  8604. [2011/11/22 12:36:51, 5] smbd/uid.c:368(change_to_root_user)
  8605. change_to_root_user: now uid=(0,0) gid=(0,0)
  8606. [2011/11/22 12:36:51, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8607. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  8608. [2011/11/22 12:36:51, 5] auth/token_util.c:522(debug_nt_user_token)
  8609. NT user token: (NULL)
  8610. [2011/11/22 12:36:51, 5] auth/token_util.c:548(debug_unix_user_token)
  8611. UNIX token of user 0
  8612. Primary group is 0 and contains 0 supplementary groups
  8613. [2011/11/22 12:36:51, 5] smbd/uid.c:368(change_to_root_user)
  8614. change_to_root_user: now uid=(0,0) gid=(0,0)
  8615. [2011/11/22 12:36:51, 3] smbd/service.c:1226(close_cnum)
  8616. testsige3 (192.168.0.10) closed connection to service IPC$
  8617. [2011/11/22 12:36:51, 3] smbd/connection.c:31(yield_connection)
  8618. Yielding connection to IPC$
  8619. [2011/11/22 12:36:51, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
  8620. Locking key 570B00000100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  8621. [2011/11/22 12:36:51, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
  8622. Allocated locked data 0x0xb7831758
  8623. [2011/11/22 12:36:51, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
  8624. Unlocking key 570B00000100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  8625. [2011/11/22 12:36:51, 4] smbd/vfs.c:753(vfs_ChDir)
  8626. vfs_ChDir to /
  8627. [2011/11/22 12:36:51, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8628. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  8629. [2011/11/22 12:36:51, 5] auth/token_util.c:522(debug_nt_user_token)
  8630. NT user token: (NULL)
  8631. [2011/11/22 12:36:51, 5] auth/token_util.c:548(debug_unix_user_token)
  8632. UNIX token of user 0
  8633. Primary group is 0 and contains 0 supplementary groups
  8634. [2011/11/22 12:36:51, 5] smbd/uid.c:368(change_to_root_user)
  8635. change_to_root_user: now uid=(0,0) gid=(0,0)
  8636. [2011/11/22 12:36:51, 5] lib/util.c:632(show_msg)
  8637. [2011/11/22 12:36:51, 5] lib/util.c:642(show_msg)
  8638. size=35
  8639. smb_com=0x71
  8640. smb_rcls=0
  8641. smb_reh=0
  8642. smb_err=0
  8643. smb_flg=136
  8644. smb_flg2=51201
  8645. smb_tid=1
  8646. smb_pid=65279
  8647. smb_uid=100
  8648. smb_mid=2561
  8649. smt_wct=0
  8650. smb_bcc=0
  8651. [2011/11/22 12:36:51, 5] lib/util_sock.c:528(read_fd_with_timeout)
  8652. read_fd_with_timeout: blocking read. EOF from client.
  8653. [2011/11/22 12:36:51, 10] smbd/process.c:271(receive_smb_raw_talloc)
  8654. receive_smb_raw: NT_STATUS_END_OF_FILE
  8655. [2011/11/22 12:36:51, 3] smbd/sec_ctx.c:310(set_sec_ctx)
  8656. setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  8657. [2011/11/22 12:36:51, 5] auth/token_util.c:522(debug_nt_user_token)
  8658. NT user token: (NULL)
  8659. [2011/11/22 12:36:51, 5] auth/token_util.c:548(debug_unix_user_token)
  8660. UNIX token of user 0
  8661. Primary group is 0 and contains 0 supplementary groups
  8662. [2011/11/22 12:36:51, 5] smbd/uid.c:368(change_to_root_user)
  8663. change_to_root_user: now uid=(0,0) gid=(0,0)
  8664. [2011/11/22 12:36:51, 3] smbd/connection.c:31(yield_connection)
  8665. Yielding connection to
  8666. [2011/11/22 12:36:51, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
  8667. Locking key 570B0000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  8668. [2011/11/22 12:36:51, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
  8669. Allocated locked data 0x0xb7831758
  8670. [2011/11/22 12:36:51, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
  8671. Unlocking key 570B0000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  8672. [2011/11/22 12:36:51, 3] smbd/server.c:845(exit_server_common)
  8673. Server exit (failed to receive smb request)
  8674.  
RAW Paste Data