API tools faq
paste
Advertisement
Guest User

Failed log.clientIP

a guest
Oct 29th, 2018
64
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 37.91 KB | None | 0 0
raw download clone embed print report
  1. [2018/10/29 15:31:18.305042, 3] ../source3/smbd/oplock.c:1340(init_oplocks)
  2. init_oplocks: initializing messages.
  3. [2018/10/29 15:31:18.305120, 3] ../source3/smbd/process.c:1959(process_smb)
  4. Transaction 0 of length 159 (0 toread)
  5. [2018/10/29 15:31:18.305158, 3] ../source3/smbd/process.c:1539(switch_message)
  6. switch message SMBnegprot (pid 18486) conn 0x0
  7. [2018/10/29 15:31:18.306276, 3] ../source3/smbd/negprot.c:612(reply_negprot)
  8. Requested protocol [PC NETWORK PROGRAM 1.0]
  9. [2018/10/29 15:31:18.306311, 3] ../source3/smbd/negprot.c:612(reply_negprot)
  10. Requested protocol [LANMAN1.0]
  11. [2018/10/29 15:31:18.306330, 3] ../source3/smbd/negprot.c:612(reply_negprot)
  12. Requested protocol [Windows for Workgroups 3.1a]
  13. [2018/10/29 15:31:18.306349, 3] ../source3/smbd/negprot.c:612(reply_negprot)
  14. Requested protocol [LM1.2X002]
  15. [2018/10/29 15:31:18.306368, 3] ../source3/smbd/negprot.c:612(reply_negprot)
  16. Requested protocol [LANMAN2.1]
  17. [2018/10/29 15:31:18.306386, 3] ../source3/smbd/negprot.c:612(reply_negprot)
  18. Requested protocol [NT LM 0.12]
  19. [2018/10/29 15:31:18.306404, 3] ../source3/smbd/negprot.c:612(reply_negprot)
  20. Requested protocol [SMB 2.002]
  21. [2018/10/29 15:31:18.306422, 3] ../source3/smbd/negprot.c:612(reply_negprot)
  22. Requested protocol [SMB 2.???]
  23. [2018/10/29 15:31:18.306585, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
  24. Selected protocol SMB2_FF
  25. [2018/10/29 15:31:18.308564, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  26. GENSEC backend 'gssapi_spnego' registered
  27. [2018/10/29 15:31:18.308602, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  28. GENSEC backend 'gssapi_krb5' registered
  29. [2018/10/29 15:31:18.308623, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  30. GENSEC backend 'gssapi_krb5_sasl' registered
  31. [2018/10/29 15:31:18.308642, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  32. GENSEC backend 'spnego' registered
  33. [2018/10/29 15:31:18.308660, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  34. GENSEC backend 'schannel' registered
  35. [2018/10/29 15:31:18.308679, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  36. GENSEC backend 'naclrpc_as_system' registered
  37. [2018/10/29 15:31:18.308697, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  38. GENSEC backend 'sasl-EXTERNAL' registered
  39. [2018/10/29 15:31:18.308716, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  40. GENSEC backend 'ntlmssp' registered
  41. [2018/10/29 15:31:18.308734, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  42. GENSEC backend 'ntlmssp_resume_ccache' registered
  43. [2018/10/29 15:31:18.308753, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  44. GENSEC backend 'http_basic' registered
  45. [2018/10/29 15:31:18.308772, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  46. GENSEC backend 'http_ntlm' registered
  47. [2018/10/29 15:31:18.308790, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  48. GENSEC backend 'krb5' registered
  49. [2018/10/29 15:31:18.308809, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  50. GENSEC backend 'fake_gssapi_krb5' registered
  51. [2018/10/29 15:31:18.308960, 3] ../source3/smbd/negprot.c:753(reply_negprot)
  52. Selected protocol SMB 2.???
  53. [2018/10/29 15:31:18.309864, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
  54. Selected protocol SMB2_10
  55. [2018/10/29 15:31:18.311640, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
  56. Got NTLMSSP neg_flags=0xe2088297
  57. [2018/10/29 15:31:18.312747, 3] ../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth)
  58. Got user=[user2] domain=[C09046344100] workstation=[C09046344100] len1=24 len2=274
  59. [2018/10/29 15:31:18.312796, 3] ../source3/param/loadparm.c:3860(lp_load_ex)
  60. lp_load_ex: refreshing parameters
  61. [2018/10/29 15:31:18.312869, 3] ../source3/param/loadparm.c:549(init_globals)
  62. Initialising global parameters
  63. [2018/10/29 15:31:18.312953, 3] ../source3/param/loadparm.c:2774(lp_do_section)
  64. Processing section "[global]"
  65. [2018/10/29 15:31:18.313022, 1] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
  66. WARNING: The "syslog" option is deprecated
  67. [2018/10/29 15:31:18.313151, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  68. Processing section "[homes]"
  69. [2018/10/29 15:31:18.313238, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  70. Processing section "[printers]"
  71. [2018/10/29 15:31:18.313293, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  72. Processing section "[print$]"
  73. [2018/10/29 15:31:18.313351, 3] ../source3/param/loadparm.c:1609(lp_add_ipc)
  74. adding IPC service
  75. [2018/10/29 15:31:18.313395, 3] ../source3/auth/auth.c:189(auth_check_ntlm_password)
  76. check_ntlm_password: Checking password for unmapped user [C09046344100]\[user2]@[C09046344100] with the new password interface
  77. [2018/10/29 15:31:18.313417, 3] ../source3/auth/auth.c:192(auth_check_ntlm_password)
  78. check_ntlm_password: mapped user is: [C09046344100]\[user2]@[C09046344100]
  79. [2018/10/29 15:31:18.313557, 3] ../source3/auth/check_samsec.c:399(check_sam_security)
  80. check_sam_security: Couldn't find user 'user2' in passdb.
  81. [2018/10/29 15:31:18.313587, 2] ../source3/auth/auth.c:332(auth_check_ntlm_password)
  82. check_ntlm_password: Authentication for user [user2] -> [user2] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
  83. [2018/10/29 15:31:18.313637, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable)
  84. Auth: [SMB2,(null)] user [C09046344100]\[user2] at [Mon, 29 Oct 2018 15:31:18.313624 CST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [C09046344100] remote host [ipv4:10.17.9.22:61353] mapped to [C09046344100]\[user2]. local host [ipv4:10.21.1.148:445]
  85. [2018/10/29 15:31:18.313747, 2] ../auth/auth_log.c:220(log_json)
  86. JSON Authentication: {"timestamp": "2018-10-29T15:31:18.313684+0800", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 0}, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:10.21.1.148:445", "remoteAddress": "ipv4:10.17.9.22:61353", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "C09046344100", "clientAccount": "user2", "workstation": "C09046344100", "becameAccount": null, "becameDomain": null, "becameSid": "(NULL SID)", "mappedAccount": "user2", "mappedDomain": "C09046344100", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": "(NULL SID)", "passwordType": "NTLMv2"}}
  87. [2018/10/29 15:31:18.313777, 3] ../source3/auth/auth_util.c:1626(do_map_to_guest_server_info)
  88. No such user user2 [C09046344100] - using guest account
  89. [2018/10/29 15:31:18.321931, 3] ../source3/smbd/oplock.c:1340(init_oplocks)
  90. init_oplocks: initializing messages.
  91. [2018/10/29 15:31:18.321990, 3] ../source3/smbd/process.c:1959(process_smb)
  92. Transaction 0 of length 108 (0 toread)
  93. [2018/10/29 15:31:18.322179, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
  94. Selected protocol SMB2_10
  95. [2018/10/29 15:31:18.324562, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  96. GENSEC backend 'gssapi_spnego' registered
  97. [2018/10/29 15:31:18.324596, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  98. GENSEC backend 'gssapi_krb5' registered
  99. [2018/10/29 15:31:18.324615, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  100. GENSEC backend 'gssapi_krb5_sasl' registered
  101. [2018/10/29 15:31:18.324631, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  102. GENSEC backend 'spnego' registered
  103. [2018/10/29 15:31:18.324648, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  104. GENSEC backend 'schannel' registered
  105. [2018/10/29 15:31:18.324664, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  106. GENSEC backend 'naclrpc_as_system' registered
  107. [2018/10/29 15:31:18.324680, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  108. GENSEC backend 'sasl-EXTERNAL' registered
  109. [2018/10/29 15:31:18.324696, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  110. GENSEC backend 'ntlmssp' registered
  111. [2018/10/29 15:31:18.324712, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  112. GENSEC backend 'ntlmssp_resume_ccache' registered
  113. [2018/10/29 15:31:18.324729, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  114. GENSEC backend 'http_basic' registered
  115. [2018/10/29 15:31:18.324753, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  116. GENSEC backend 'http_ntlm' registered
  117. [2018/10/29 15:31:18.324770, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  118. GENSEC backend 'krb5' registered
  119. [2018/10/29 15:31:18.324787, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  120. GENSEC backend 'fake_gssapi_krb5' registered
  121. [2018/10/29 15:31:18.326934, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
  122. Got NTLMSSP neg_flags=0xe2088297
  123. [2018/10/29 15:31:18.328313, 3] ../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth)
  124. Got user=[user2] domain=[C09046344100] workstation=[C09046344100] len1=24 len2=274
  125. [2018/10/29 15:31:18.328358, 3] ../source3/param/loadparm.c:3860(lp_load_ex)
  126. lp_load_ex: refreshing parameters
  127. [2018/10/29 15:31:18.328422, 3] ../source3/param/loadparm.c:549(init_globals)
  128. Initialising global parameters
  129. [2018/10/29 15:31:18.328497, 3] ../source3/param/loadparm.c:2774(lp_do_section)
  130. Processing section "[global]"
  131. [2018/10/29 15:31:18.328559, 1] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
  132. WARNING: The "syslog" option is deprecated
  133. [2018/10/29 15:31:18.328673, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  134. Processing section "[homes]"
  135. [2018/10/29 15:31:18.328742, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  136. Processing section "[printers]"
  137. [2018/10/29 15:31:18.328791, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  138. Processing section "[print$]"
  139. [2018/10/29 15:31:18.328842, 3] ../source3/param/loadparm.c:1609(lp_add_ipc)
  140. adding IPC service
  141. [2018/10/29 15:31:18.328875, 3] ../source3/auth/auth.c:189(auth_check_ntlm_password)
  142. check_ntlm_password: Checking password for unmapped user [C09046344100]\[user2]@[C09046344100] with the new password interface
  143. [2018/10/29 15:31:18.328894, 3] ../source3/auth/auth.c:192(auth_check_ntlm_password)
  144. check_ntlm_password: mapped user is: [C09046344100]\[user2]@[C09046344100]
  145. [2018/10/29 15:31:18.329010, 3] ../source3/auth/check_samsec.c:399(check_sam_security)
  146. check_sam_security: Couldn't find user 'user2' in passdb.
  147. [2018/10/29 15:31:18.329036, 2] ../source3/auth/auth.c:332(auth_check_ntlm_password)
  148. check_ntlm_password: Authentication for user [user2] -> [user2] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
  149. [2018/10/29 15:31:18.329078, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable)
  150. Auth: [SMB2,(null)] user [C09046344100]\[user2] at [Mon, 29 Oct 2018 15:31:18.329066 CST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [C09046344100] remote host [ipv4:10.17.9.22:61354] mapped to [C09046344100]\[user2]. local host [ipv4:10.21.1.148:445]
  151. [2018/10/29 15:31:18.329183, 2] ../auth/auth_log.c:220(log_json)
  152. JSON Authentication: {"timestamp": "2018-10-29T15:31:18.329119+0800", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 0}, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:10.21.1.148:445", "remoteAddress": "ipv4:10.17.9.22:61354", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "C09046344100", "clientAccount": "user2", "workstation": "C09046344100", "becameAccount": null, "becameDomain": null, "becameSid": "(NULL SID)", "mappedAccount": "user2", "mappedDomain": "C09046344100", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": "(NULL SID)", "passwordType": "NTLMv2"}}
  153. [2018/10/29 15:31:18.329213, 3] ../source3/auth/auth_util.c:1626(do_map_to_guest_server_info)
  154. No such user user2 [C09046344100] - using guest account
  155. [2018/10/29 15:31:18.371676, 3] ../source3/smbd/oplock.c:1340(init_oplocks)
  156. init_oplocks: initializing messages.
  157. [2018/10/29 15:31:18.371735, 3] ../source3/smbd/process.c:1959(process_smb)
  158. Transaction 0 of length 108 (0 toread)
  159. [2018/10/29 15:31:18.371914, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
  160. Selected protocol SMB2_10
  161. [2018/10/29 15:31:18.374290, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  162. GENSEC backend 'gssapi_spnego' registered
  163. [2018/10/29 15:31:18.374329, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  164. GENSEC backend 'gssapi_krb5' registered
  165. [2018/10/29 15:31:18.374361, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  166. GENSEC backend 'gssapi_krb5_sasl' registered
  167. [2018/10/29 15:31:18.374388, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  168. GENSEC backend 'spnego' registered
  169. [2018/10/29 15:31:18.374416, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  170. GENSEC backend 'schannel' registered
  171. [2018/10/29 15:31:18.374449, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  172. GENSEC backend 'naclrpc_as_system' registered
  173. [2018/10/29 15:31:18.374477, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  174. GENSEC backend 'sasl-EXTERNAL' registered
  175. [2018/10/29 15:31:18.374504, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  176. GENSEC backend 'ntlmssp' registered
  177. [2018/10/29 15:31:18.374525, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  178. GENSEC backend 'ntlmssp_resume_ccache' registered
  179. [2018/10/29 15:31:18.374542, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  180. GENSEC backend 'http_basic' registered
  181. [2018/10/29 15:31:18.374564, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  182. GENSEC backend 'http_ntlm' registered
  183. [2018/10/29 15:31:18.374581, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  184. GENSEC backend 'krb5' registered
  185. [2018/10/29 15:31:18.374598, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  186. GENSEC backend 'fake_gssapi_krb5' registered
  187. [2018/10/29 15:31:18.375918, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
  188. Got NTLMSSP neg_flags=0xe2088297
  189. [2018/10/29 15:31:18.376909, 3] ../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth)
  190. Got user=[user2] domain=[C09046344100] workstation=[C09046344100] len1=24 len2=274
  191. [2018/10/29 15:31:18.376962, 3] ../source3/param/loadparm.c:3860(lp_load_ex)
  192. lp_load_ex: refreshing parameters
  193. [2018/10/29 15:31:18.377038, 3] ../source3/param/loadparm.c:549(init_globals)
  194. Initialising global parameters
  195. [2018/10/29 15:31:18.377129, 3] ../source3/param/loadparm.c:2774(lp_do_section)
  196. Processing section "[global]"
  197. [2018/10/29 15:31:18.377211, 1] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
  198. WARNING: The "syslog" option is deprecated
  199. [2018/10/29 15:31:18.377344, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  200. Processing section "[homes]"
  201. [2018/10/29 15:31:18.377423, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  202. Processing section "[printers]"
  203. [2018/10/29 15:31:18.377478, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  204. Processing section "[print$]"
  205. [2018/10/29 15:31:18.377536, 3] ../source3/param/loadparm.c:1609(lp_add_ipc)
  206. adding IPC service
  207. [2018/10/29 15:31:18.377575, 3] ../source3/auth/auth.c:189(auth_check_ntlm_password)
  208. check_ntlm_password: Checking password for unmapped user [C09046344100]\[user2]@[C09046344100] with the new password interface
  209. [2018/10/29 15:31:18.377596, 3] ../source3/auth/auth.c:192(auth_check_ntlm_password)
  210. check_ntlm_password: mapped user is: [C09046344100]\[user2]@[C09046344100]
  211. [2018/10/29 15:31:18.377727, 3] ../source3/auth/check_samsec.c:399(check_sam_security)
  212. check_sam_security: Couldn't find user 'user2' in passdb.
  213. [2018/10/29 15:31:18.377756, 2] ../source3/auth/auth.c:332(auth_check_ntlm_password)
  214. check_ntlm_password: Authentication for user [user2] -> [user2] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
  215. [2018/10/29 15:31:18.377804, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable)
  216. Auth: [SMB2,(null)] user [C09046344100]\[user2] at [Mon, 29 Oct 2018 15:31:18.377792 CST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [C09046344100] remote host [ipv4:10.17.9.22:61355] mapped to [C09046344100]\[user2]. local host [ipv4:10.21.1.148:445]
  217. [2018/10/29 15:31:18.377913, 2] ../auth/auth_log.c:220(log_json)
  218. JSON Authentication: {"timestamp": "2018-10-29T15:31:18.377852+0800", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 0}, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:10.21.1.148:445", "remoteAddress": "ipv4:10.17.9.22:61355", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "C09046344100", "clientAccount": "user2", "workstation": "C09046344100", "becameAccount": null, "becameDomain": null, "becameSid": "(NULL SID)", "mappedAccount": "user2", "mappedDomain": "C09046344100", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": "(NULL SID)", "passwordType": "NTLMv2"}}
  219. [2018/10/29 15:31:18.377953, 3] ../source3/auth/auth_util.c:1626(do_map_to_guest_server_info)
  220. No such user user2 [C09046344100] - using guest account
  221. [2018/10/29 15:31:18.385441, 3] ../source3/smbd/oplock.c:1340(init_oplocks)
  222. init_oplocks: initializing messages.
  223. [2018/10/29 15:31:18.385503, 3] ../source3/smbd/process.c:1959(process_smb)
  224. Transaction 0 of length 108 (0 toread)
  225. [2018/10/29 15:31:18.385706, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
  226. Selected protocol SMB2_10
  227. [2018/10/29 15:31:18.388378, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  228. GENSEC backend 'gssapi_spnego' registered
  229. [2018/10/29 15:31:18.388415, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  230. GENSEC backend 'gssapi_krb5' registered
  231. [2018/10/29 15:31:18.388436, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  232. GENSEC backend 'gssapi_krb5_sasl' registered
  233. [2018/10/29 15:31:18.388455, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  234. GENSEC backend 'spnego' registered
  235. [2018/10/29 15:31:18.388474, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  236. GENSEC backend 'schannel' registered
  237. [2018/10/29 15:31:18.388492, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  238. GENSEC backend 'naclrpc_as_system' registered
  239. [2018/10/29 15:31:18.388511, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  240. GENSEC backend 'sasl-EXTERNAL' registered
  241. [2018/10/29 15:31:18.388529, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  242. GENSEC backend 'ntlmssp' registered
  243. [2018/10/29 15:31:18.388548, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  244. GENSEC backend 'ntlmssp_resume_ccache' registered
  245. [2018/10/29 15:31:18.388567, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  246. GENSEC backend 'http_basic' registered
  247. [2018/10/29 15:31:18.388586, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  248. GENSEC backend 'http_ntlm' registered
  249. [2018/10/29 15:31:18.388604, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  250. GENSEC backend 'krb5' registered
  251. [2018/10/29 15:31:18.388623, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  252. GENSEC backend 'fake_gssapi_krb5' registered
  253. [2018/10/29 15:31:18.403995, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
  254. Got NTLMSSP neg_flags=0xe2088297
  255. [2018/10/29 15:31:18.405227, 3] ../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth)
  256. Got user=[user2] domain=[C09046344100] workstation=[C09046344100] len1=24 len2=274
  257. [2018/10/29 15:31:18.405274, 3] ../source3/param/loadparm.c:3860(lp_load_ex)
  258. lp_load_ex: refreshing parameters
  259. [2018/10/29 15:31:18.405345, 3] ../source3/param/loadparm.c:549(init_globals)
  260. Initialising global parameters
  261. [2018/10/29 15:31:18.405434, 3] ../source3/param/loadparm.c:2774(lp_do_section)
  262. Processing section "[global]"
  263. [2018/10/29 15:31:18.405502, 1] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
  264. WARNING: The "syslog" option is deprecated
  265. [2018/10/29 15:31:18.405646, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  266. Processing section "[homes]"
  267. [2018/10/29 15:31:18.405745, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  268. Processing section "[printers]"
  269. [2018/10/29 15:31:18.405800, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  270. Processing section "[print$]"
  271. [2018/10/29 15:31:18.405857, 3] ../source3/param/loadparm.c:1609(lp_add_ipc)
  272. adding IPC service
  273. [2018/10/29 15:31:18.405895, 3] ../source3/auth/auth.c:189(auth_check_ntlm_password)
  274. check_ntlm_password: Checking password for unmapped user [C09046344100]\[user2]@[C09046344100] with the new password interface
  275. [2018/10/29 15:31:18.405925, 3] ../source3/auth/auth.c:192(auth_check_ntlm_password)
  276. check_ntlm_password: mapped user is: [C09046344100]\[user2]@[C09046344100]
  277. [2018/10/29 15:31:18.406046, 3] ../source3/auth/check_samsec.c:399(check_sam_security)
  278. check_sam_security: Couldn't find user 'user2' in passdb.
  279. [2018/10/29 15:31:18.406073, 2] ../source3/auth/auth.c:332(auth_check_ntlm_password)
  280. check_ntlm_password: Authentication for user [user2] -> [user2] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
  281. [2018/10/29 15:31:18.406125, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable)
  282. Auth: [SMB2,(null)] user [C09046344100]\[user2] at [Mon, 29 Oct 2018 15:31:18.406113 CST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [C09046344100] remote host [ipv4:10.17.9.22:61356] mapped to [C09046344100]\[user2]. local host [ipv4:10.21.1.148:445]
  283. [2018/10/29 15:31:18.406234, 2] ../auth/auth_log.c:220(log_json)
  284. JSON Authentication: {"timestamp": "2018-10-29T15:31:18.406169+0800", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 0}, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:10.21.1.148:445", "remoteAddress": "ipv4:10.17.9.22:61356", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "C09046344100", "clientAccount": "user2", "workstation": "C09046344100", "becameAccount": null, "becameDomain": null, "becameSid": "(NULL SID)", "mappedAccount": "user2", "mappedDomain": "C09046344100", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": "(NULL SID)", "passwordType": "NTLMv2"}}
  285. [2018/10/29 15:31:18.406264, 3] ../source3/auth/auth_util.c:1626(do_map_to_guest_server_info)
  286. No such user user2 [C09046344100] - using guest account
  287. [2018/10/29 15:31:18.413379, 3] ../source3/smbd/oplock.c:1340(init_oplocks)
  288. init_oplocks: initializing messages.
  289. [2018/10/29 15:31:18.413441, 3] ../source3/smbd/process.c:1959(process_smb)
  290. Transaction 0 of length 108 (0 toread)
  291. [2018/10/29 15:31:18.413634, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
  292. Selected protocol SMB2_10
  293. [2018/10/29 15:31:18.416173, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  294. GENSEC backend 'gssapi_spnego' registered
  295. [2018/10/29 15:31:18.416217, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  296. GENSEC backend 'gssapi_krb5' registered
  297. [2018/10/29 15:31:18.416239, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  298. GENSEC backend 'gssapi_krb5_sasl' registered
  299. [2018/10/29 15:31:18.416258, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  300. GENSEC backend 'spnego' registered
  301. [2018/10/29 15:31:18.416277, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  302. GENSEC backend 'schannel' registered
  303. [2018/10/29 15:31:18.416295, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  304. GENSEC backend 'naclrpc_as_system' registered
  305. [2018/10/29 15:31:18.416314, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  306. GENSEC backend 'sasl-EXTERNAL' registered
  307. [2018/10/29 15:31:18.416332, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  308. GENSEC backend 'ntlmssp' registered
  309. [2018/10/29 15:31:18.416351, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  310. GENSEC backend 'ntlmssp_resume_ccache' registered
  311. [2018/10/29 15:31:18.416370, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  312. GENSEC backend 'http_basic' registered
  313. [2018/10/29 15:31:18.416388, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  314. GENSEC backend 'http_ntlm' registered
  315. [2018/10/29 15:31:18.416407, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  316. GENSEC backend 'krb5' registered
  317. [2018/10/29 15:31:18.416426, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  318. GENSEC backend 'fake_gssapi_krb5' registered
  319. [2018/10/29 15:31:18.419228, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
  320. Got NTLMSSP neg_flags=0xe2088297
  321. [2018/10/29 15:31:18.420321, 3] ../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth)
  322. Got user=[user2] domain=[C09046344100] workstation=[C09046344100] len1=24 len2=274
  323. [2018/10/29 15:31:18.420368, 3] ../source3/param/loadparm.c:3860(lp_load_ex)
  324. lp_load_ex: refreshing parameters
  325. [2018/10/29 15:31:18.420441, 3] ../source3/param/loadparm.c:549(init_globals)
  326. Initialising global parameters
  327. [2018/10/29 15:31:18.420528, 3] ../source3/param/loadparm.c:2774(lp_do_section)
  328. Processing section "[global]"
  329. [2018/10/29 15:31:18.420597, 1] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
  330. WARNING: The "syslog" option is deprecated
  331. [2018/10/29 15:31:18.420726, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  332. Processing section "[homes]"
  333. [2018/10/29 15:31:18.420803, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  334. Processing section "[printers]"
  335. [2018/10/29 15:31:18.420857, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  336. Processing section "[print$]"
  337. [2018/10/29 15:31:18.420915, 3] ../source3/param/loadparm.c:1609(lp_add_ipc)
  338. adding IPC service
  339. [2018/10/29 15:31:18.420952, 3] ../source3/auth/auth.c:189(auth_check_ntlm_password)
  340. check_ntlm_password: Checking password for unmapped user [C09046344100]\[user2]@[C09046344100] with the new password interface
  341. [2018/10/29 15:31:18.420973, 3] ../source3/auth/auth.c:192(auth_check_ntlm_password)
  342. check_ntlm_password: mapped user is: [C09046344100]\[user2]@[C09046344100]
  343. [2018/10/29 15:31:18.421097, 3] ../source3/auth/check_samsec.c:399(check_sam_security)
  344. check_sam_security: Couldn't find user 'user2' in passdb.
  345. [2018/10/29 15:31:18.421125, 2] ../source3/auth/auth.c:332(auth_check_ntlm_password)
  346. check_ntlm_password: Authentication for user [user2] -> [user2] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
  347. [2018/10/29 15:31:18.421170, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable)
  348. Auth: [SMB2,(null)] user [C09046344100]\[user2] at [Mon, 29 Oct 2018 15:31:18.421159 CST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [C09046344100] remote host [ipv4:10.17.9.22:61357] mapped to [C09046344100]\[user2]. local host [ipv4:10.21.1.148:445]
  349. [2018/10/29 15:31:18.421319, 2] ../auth/auth_log.c:220(log_json)
  350. JSON Authentication: {"timestamp": "2018-10-29T15:31:18.421225+0800", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 0}, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:10.21.1.148:445", "remoteAddress": "ipv4:10.17.9.22:61357", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "C09046344100", "clientAccount": "user2", "workstation": "C09046344100", "becameAccount": null, "becameDomain": null, "becameSid": "(NULL SID)", "mappedAccount": "user2", "mappedDomain": "C09046344100", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": "(NULL SID)", "passwordType": "NTLMv2"}}
  351. [2018/10/29 15:31:18.421360, 3] ../source3/auth/auth_util.c:1626(do_map_to_guest_server_info)
  352. No such user user2 [C09046344100] - using guest account
  353. [2018/10/29 15:31:18.429877, 3] ../source3/smbd/oplock.c:1340(init_oplocks)
  354. init_oplocks: initializing messages.
  355. [2018/10/29 15:31:18.429992, 3] ../source3/smbd/process.c:1959(process_smb)
  356. Transaction 0 of length 108 (0 toread)
  357. [2018/10/29 15:31:18.430328, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
  358. Selected protocol SMB2_10
  359. [2018/10/29 15:31:18.434823, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  360. GENSEC backend 'gssapi_spnego' registered
  361. [2018/10/29 15:31:18.434887, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  362. GENSEC backend 'gssapi_krb5' registered
  363. [2018/10/29 15:31:18.434924, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  364. GENSEC backend 'gssapi_krb5_sasl' registered
  365. [2018/10/29 15:31:18.434958, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  366. GENSEC backend 'spnego' registered
  367. [2018/10/29 15:31:18.434991, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  368. GENSEC backend 'schannel' registered
  369. [2018/10/29 15:31:18.435038, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  370. GENSEC backend 'naclrpc_as_system' registered
  371. [2018/10/29 15:31:18.435073, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  372. GENSEC backend 'sasl-EXTERNAL' registered
  373. [2018/10/29 15:31:18.435106, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  374. GENSEC backend 'ntlmssp' registered
  375. [2018/10/29 15:31:18.435139, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  376. GENSEC backend 'ntlmssp_resume_ccache' registered
  377. [2018/10/29 15:31:18.435173, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  378. GENSEC backend 'http_basic' registered
  379. [2018/10/29 15:31:18.435207, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  380. GENSEC backend 'http_ntlm' registered
  381. [2018/10/29 15:31:18.435241, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  382. GENSEC backend 'krb5' registered
  383. [2018/10/29 15:31:18.435274, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  384. GENSEC backend 'fake_gssapi_krb5' registered
  385. [2018/10/29 15:31:18.465770, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
  386. Got NTLMSSP neg_flags=0xe2088297
  387. [2018/10/29 15:31:18.467023, 3] ../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth)
  388. Got user=[user2] domain=[C09046344100] workstation=[C09046344100] len1=24 len2=274
  389. [2018/10/29 15:31:18.467107, 3] ../source3/param/loadparm.c:3860(lp_load_ex)
  390. lp_load_ex: refreshing parameters
  391. [2018/10/29 15:31:18.467238, 3] ../source3/param/loadparm.c:549(init_globals)
  392. Initialising global parameters
  393. [2018/10/29 15:31:18.467386, 3] ../source3/param/loadparm.c:2774(lp_do_section)
  394. Processing section "[global]"
  395. [2018/10/29 15:31:18.467457, 1] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
  396. WARNING: The "syslog" option is deprecated
  397. [2018/10/29 15:31:18.467613, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  398. Processing section "[homes]"
  399. [2018/10/29 15:31:18.467713, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  400. Processing section "[printers]"
  401. [2018/10/29 15:31:18.467772, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  402. Processing section "[print$]"
  403. [2018/10/29 15:31:18.467830, 3] ../source3/param/loadparm.c:1609(lp_add_ipc)
  404. adding IPC service
  405. [2018/10/29 15:31:18.467869, 3] ../source3/auth/auth.c:189(auth_check_ntlm_password)
  406. check_ntlm_password: Checking password for unmapped user [C09046344100]\[user2]@[C09046344100] with the new password interface
  407. [2018/10/29 15:31:18.467890, 3] ../source3/auth/auth.c:192(auth_check_ntlm_password)
  408. check_ntlm_password: mapped user is: [C09046344100]\[user2]@[C09046344100]
  409. [2018/10/29 15:31:18.468017, 3] ../source3/auth/check_samsec.c:399(check_sam_security)
  410. check_sam_security: Couldn't find user 'user2' in passdb.
  411. [2018/10/29 15:31:18.468046, 2] ../source3/auth/auth.c:332(auth_check_ntlm_password)
  412. check_ntlm_password: Authentication for user [user2] -> [user2] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
  413. [2018/10/29 15:31:18.468103, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable)
  414. Auth: [SMB2,(null)] user [C09046344100]\[user2] at [Mon, 29 Oct 2018 15:31:18.468081 CST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [C09046344100] remote host [ipv4:10.17.9.22:61358] mapped to [C09046344100]\[user2]. local host [ipv4:10.21.1.148:445]
  415. [2018/10/29 15:31:18.468236, 2] ../auth/auth_log.c:220(log_json)
  416. JSON Authentication: {"timestamp": "2018-10-29T15:31:18.468173+0800", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 0}, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:10.21.1.148:445", "remoteAddress": "ipv4:10.17.9.22:61358", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "C09046344100", "clientAccount": "user2", "workstation": "C09046344100", "becameAccount": null, "becameDomain": null, "becameSid": "(NULL SID)", "mappedAccount": "user2", "mappedDomain": "C09046344100", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": "(NULL SID)", "passwordType": "NTLMv2"}}
  417. [2018/10/29 15:31:18.468277, 3] ../source3/auth/auth_util.c:1626(do_map_to_guest_server_info)
  418. No such user user2 [C09046344100] - using guest account
  419. [2018/10/29 15:31:19.782847, 3] ../source3/smbd/oplock.c:1340(init_oplocks)
  420. init_oplocks: initializing messages.
  421. [2018/10/29 15:31:19.782953, 3] ../source3/smbd/process.c:1959(process_smb)
  422. Transaction 0 of length 108 (0 toread)
  423. [2018/10/29 15:31:19.783284, 3] ../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
  424. Selected protocol SMB2_10
  425. [2018/10/29 15:31:19.787383, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  426. GENSEC backend 'gssapi_spnego' registered
  427. [2018/10/29 15:31:19.787419, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  428. GENSEC backend 'gssapi_krb5' registered
  429. [2018/10/29 15:31:19.787438, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  430. GENSEC backend 'gssapi_krb5_sasl' registered
  431. [2018/10/29 15:31:19.787456, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  432. GENSEC backend 'spnego' registered
  433. [2018/10/29 15:31:19.787473, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  434. GENSEC backend 'schannel' registered
  435. [2018/10/29 15:31:19.787490, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  436. GENSEC backend 'naclrpc_as_system' registered
  437. [2018/10/29 15:31:19.787508, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  438. GENSEC backend 'sasl-EXTERNAL' registered
  439. [2018/10/29 15:31:19.787525, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  440. GENSEC backend 'ntlmssp' registered
  441. [2018/10/29 15:31:19.787543, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  442. GENSEC backend 'ntlmssp_resume_ccache' registered
  443. [2018/10/29 15:31:19.787560, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  444. GENSEC backend 'http_basic' registered
  445. [2018/10/29 15:31:19.787578, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  446. GENSEC backend 'http_ntlm' registered
  447. [2018/10/29 15:31:19.787595, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  448. GENSEC backend 'krb5' registered
  449. [2018/10/29 15:31:19.787613, 3] ../auth/gensec/gensec_start.c:977(gensec_register)
  450. GENSEC backend 'fake_gssapi_krb5' registered
  451. [2018/10/29 15:31:19.788752, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
  452. Got NTLMSSP neg_flags=0xe2088297
  453. [2018/10/29 15:31:19.789792, 3] ../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth)
  454. Got user=[user2] domain=[C09046344100] workstation=[C09046344100] len1=24 len2=274
  455. [2018/10/29 15:31:19.789836, 3] ../source3/param/loadparm.c:3860(lp_load_ex)
  456. lp_load_ex: refreshing parameters
  457. [2018/10/29 15:31:19.789906, 3] ../source3/param/loadparm.c:549(init_globals)
  458. Initialising global parameters
  459. [2018/10/29 15:31:19.789991, 3] ../source3/param/loadparm.c:2774(lp_do_section)
  460. Processing section "[global]"
  461. [2018/10/29 15:31:19.790058, 1] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
  462. WARNING: The "syslog" option is deprecated
  463. [2018/10/29 15:31:19.790186, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  464. Processing section "[homes]"
  465. [2018/10/29 15:31:19.790261, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  466. Processing section "[printers]"
  467. [2018/10/29 15:31:19.790314, 2] ../source3/param/loadparm.c:2791(lp_do_section)
  468. Processing section "[print$]"
  469. [2018/10/29 15:31:19.790369, 3] ../source3/param/loadparm.c:1609(lp_add_ipc)
  470. adding IPC service
  471. [2018/10/29 15:31:19.790405, 3] ../source3/auth/auth.c:189(auth_check_ntlm_password)
  472. check_ntlm_password: Checking password for unmapped user [C09046344100]\[user2]@[C09046344100] with the new password interface
  473. [2018/10/29 15:31:19.790425, 3] ../source3/auth/auth.c:192(auth_check_ntlm_password)
  474. check_ntlm_password: mapped user is: [C09046344100]\[user2]@[C09046344100]
  475. [2018/10/29 15:31:19.790541, 3] ../source3/auth/check_samsec.c:399(check_sam_security)
  476. check_sam_security: Couldn't find user 'user2' in passdb.
  477. [2018/10/29 15:31:19.790568, 2] ../source3/auth/auth.c:332(auth_check_ntlm_password)
  478. check_ntlm_password: Authentication for user [user2] -> [user2] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
  479. [2018/10/29 15:31:19.790624, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable)
  480. Auth: [SMB2,(null)] user [C09046344100]\[user2] at [Mon, 29 Oct 2018 15:31:19.790612 CST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [C09046344100] remote host [ipv4:10.17.9.22:61360] mapped to [C09046344100]\[user2]. local host [ipv4:10.21.1.148:445]
  481. [2018/10/29 15:31:19.790729, 2] ../auth/auth_log.c:220(log_json)
  482. JSON Authentication: {"timestamp": "2018-10-29T15:31:19.790669+0800", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 0}, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:10.21.1.148:445", "remoteAddress": "ipv4:10.17.9.22:61360", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "C09046344100", "clientAccount": "user2", "workstation": "C09046344100", "becameAccount": null, "becameDomain": null, "becameSid": "(NULL SID)", "mappedAccount": "user2", "mappedDomain": "C09046344100", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": "(NULL SID)", "passwordType": "NTLMv2"}}
  483. [2018/10/29 15:31:19.790759, 3] ../source3/auth/auth_util.c:1626(do_map_to_guest_server_info)
  484. No such user user2 [C09046344100] - using guest account
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!