API tools faq
paste
mamcllc

blog.mamc-llc.com/2019/04/25/netlogon-errors-due-to-rpc-mism

mamcllc
Apr 25th, 2019
360
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 495.21 KB | None | 0 0
raw download clone embed print report
  1. 04/24 19:17:58 [MISC] [1760] DbFlag is set to 2080ffff
  2. 04/24 19:18:00 [INIT] [1632] Group Policy is not defined for Netlogon
  3. 04/24 19:18:00 [INIT] [1632] Following are the effective values after parsing
  4. 04/24 19:18:02 [MISC] [600] In control handler (Opcode: 4)
  5. 04/24 19:18:02 [MISC] [600] In control handler (Opcode: 1)
  6. 04/24 19:18:02 [MISC] [600] NlExit: Netlogon exiting 0 0x0
  7. 04/24 19:18:02 [DOMAIN] [1632] NlDeleteDomain called
  8. 04/24 19:18:02 [DOMAIN] [1632] Domain RefCount is zero. Domain being rundown.
  9. 04/24 19:18:02 [PERF] [1632] NlFreeClientSession: Closing Instance (000001A728271F08): "CH03ADC003.DOMAIN.COM"
  10. ClientSession: 000001A72827AFA0NlFreeClientSession: Delete successful.
  11. 04/24 19:18:02 [INIT] [1632] NlRegisterNQMNotifications: PowerSettingUnregisterNotification returned 0x0
  12. 04/24 19:18:02 [SITE] [1632] Setting site name to '(null)'
  13. 04/24 19:18:06 [INIT] [4880] Group Policy is not defined for Netlogon
  14. 04/24 19:18:06 [INIT] [4880] Following are the effective values after parsing
  15. 04/24 19:18:06 [INIT] [4880] Sysvol = C:\Windows\SYSVOL\SYSVOL
  16. 04/24 19:18:06 [INIT] [4880] Scripts = (null)
  17. 04/24 19:18:06 [INIT] [4880] RpcDacl = (null)
  18. 04/24 19:18:06 [INIT] [4880] RemoteAccessCheckDacl = (null)
  19. 04/24 19:18:06 [INIT] [4880] SiteName (0) = Datacenter-CHI
  20. 04/24 19:18:06 [INIT] [4880] Pulse = 300 (0x12c)
  21. 04/24 19:18:06 [INIT] [4880] Randomize = 1 (0x1)
  22. 04/24 19:18:06 [INIT] [4880] PulseMaximum = 7200 (0x1c20)
  23. 04/24 19:18:06 [INIT] [4880] PulseConcurrency = 10 (0xa)
  24. 04/24 19:18:06 [INIT] [4880] PulseTimeout1 = 10 (0xa)
  25. 04/24 19:18:06 [INIT] [4880] PulseTimeout2 = 300 (0x12c)
  26. 04/24 19:18:06 [INIT] [4880] MaximumMailslotMessages = 500 (0x1f4)
  27. 04/24 19:18:06 [INIT] [4880] MailslotMessageTimeout = 10 (0xa)
  28. 04/24 19:18:06 [INIT] [4880] MailslotDuplicateTimeout = 2 (0x2)
  29. 04/24 19:18:06 [INIT] [4880] ExpectedDialupDelay = 0 (0x0)
  30. 04/24 19:18:06 [INIT] [4880] ScavengeInterval = 900 (0x384)
  31. 04/24 19:18:06 [INIT] [4880] EventLogPeriodicity = 1800 (0x708)
  32. 04/24 19:18:06 [INIT] [4880] WarningEventThreshold = 0 (0x0)
  33. 04/24 19:18:06 [INIT] [4880] MaximumPasswordAge = 30 (0x1e)
  34. 04/24 19:18:06 [INIT] [4880] LdapSrvPriority = 0 (0x0)
  35. 04/24 19:18:06 [INIT] [4880] LdapSrvWeight = 100 (0x64)
  36. 04/24 19:18:06 [INIT] [4880] LdapSrvPort = 389 (0x185)
  37. 04/24 19:18:06 [INIT] [4880] LdapGcSrvPort = 3268 (0xcc4)
  38. 04/24 19:18:06 [INIT] [4880] KdcSrvPort = 88 (0x58)
  39. 04/24 19:18:06 [INIT] [4880] KerbIsDoneWithJoinDomainEntry = 0 (0x0)
  40. 04/24 19:18:06 [INIT] [4880] DcLocatorIsDoneWithJoinDomainEntry = 0 (0x0)
  41. 04/24 19:18:06 [INIT] [4880] DnsTtl = 600 (0x258)
  42. 04/24 19:18:06 [INIT] [4880] DnsRefreshInterval = 3600 (0xe10)
  43. 04/24 19:18:06 [INIT] [4880] CloseSiteTimeout = 900 (0x384)
  44. 04/24 19:18:06 [INIT] [4880] SiteNameTimeout = 300 (0x12c)
  45. 04/24 19:18:06 [INIT] [4880] DuplicateEventlogTimeout = 14400 (0x3840)
  46. 04/24 19:18:06 [INIT] [4880] MaxConcurrentApi = 0 (0x0)
  47. 04/24 19:18:06 [INIT] [4880] NegativeCachePeriod = 45 (0x2d)
  48. 04/24 19:18:06 [INIT] [4880] BackgroundRetryInitialPeriod = 600 (0x258)
  49. 04/24 19:18:06 [INIT] [4880] BackgroundRetryMaximumPeriod = 3600 (0xe10)
  50. 04/24 19:18:06 [INIT] [4880] BackgroundRetryQuitTime = 0 (0x0)
  51. 04/24 19:18:06 [INIT] [4880] BackgroundSuccessfulRefreshPeriod = 4294967295 (0xffffffff)
  52. 04/24 19:18:06 [INIT] [4880] NonBackgroundSuccessfulRefreshPeriod = 1800 (0x708)
  53. 04/24 19:18:06 [INIT] [4880] DnsFailedDeregisterTimeout = 172800 (0x2a300)
  54. 04/24 19:18:06 [INIT] [4880] MaxLdapServersPinged = 55 (0x37)
  55. 04/24 19:18:06 [INIT] [4880] PingUrgencyMode = 0 (0x0)
  56. 04/24 19:18:06 [INIT] [4880] SiteCoverageRefreshInterval = 3600 (0xe10)
  57. 04/24 19:18:06 [INIT] [4880] FtInfoUpdateInterval = 86400 (0x15180)
  58. 04/24 19:18:06 [INIT] [4880] DBFlag = 545325055 (0x2080ffff)
  59. 04/24 19:18:06 [INIT] [4880] MaximumLogFileSize = 20000000 (0x1312d00)
  60. 04/24 19:18:06 [INIT] [4880] AddressTypeReturned = 1 (0x1)
  61. 04/24 19:18:06 [INIT] [4880] ForceRediscoveryInterval = 43200 (0xa8c0)
  62. 04/24 19:18:06 [INIT] [4880] RestrictNTLMInDomain = 0 (0x0)
  63. 04/24 19:18:06 [INIT] [4880] AuditNTLMInDomain = 0 (0x0)
  64. 04/24 19:18:06 [INIT] [4880] NextClosestSiteFilter = 2 (0x2)
  65. 04/24 19:18:06 [INIT] [4880] NextClosestSiteRefreshInterval = 10800 (0x2a30)
  66. 04/24 19:18:06 [INIT] [4880] CompoundIdEnabled = 1 (0x1)
  67. 04/24 19:18:06 [INIT] [4880] CompoundIdDisabled = 0 (0x0)
  68. 04/24 19:18:06 [INIT] [4880] AddressLookupOnPingBehavior = 2 (0x2)
  69. 04/24 19:18:06 [INIT] [4880] DnsHostNameInLocatorPing = 1 (0x1)
  70. 04/24 19:18:06 [INIT] [4880] JoinDCPingThreadTimeout = 60 (0x3c)
  71. 04/24 19:18:06 [INIT] [4880] RefusePasswordChange = FALSE
  72. 04/24 19:18:06 [INIT] [4880] AvoidSamRepl = TRUE
  73. 04/24 19:18:06 [INIT] [4880] AvoidLsaRepl = TRUE
  74. 04/24 19:18:06 [INIT] [4880] SignSecureChannel = TRUE
  75. 04/24 19:18:06 [INIT] [4880] SealSecureChannel = TRUE
  76. 04/24 19:18:06 [INIT] [4880] RequireSignOrSeal = TRUE
  77. 04/24 19:18:06 [INIT] [4880] RequireStrongKey = TRUE
  78. 04/24 19:18:06 [INIT] [4880] SysVolReady = TRUE
  79. 04/24 19:18:06 [INIT] [4880] UseDynamicDns = TRUE
  80. 04/24 19:18:06 [INIT] [4880] RegisterDnsARecords = TRUE
  81. 04/24 19:18:06 [INIT] [4880] AvoidPdcOnWan = FALSE
  82. 04/24 19:18:06 [INIT] [4880] AutoSiteCoverage = TRUE
  83. 04/24 19:18:06 [INIT] [4880] AvoidDnsDeregOnShutdown = TRUE
  84. 04/24 19:18:06 [INIT] [4880] DnsUpdateOnAllAdapters = FALSE
  85. 04/24 19:18:06 [INIT] [4880] Nt4Emulator = FALSE
  86. 04/24 19:18:06 [INIT] [4880] EnableChainSetClientAttributes = TRUE
  87. 04/24 19:18:06 [INIT] [4880] DCLocatorReplyEnabled = TRUE
  88. 04/24 19:18:06 [INIT] [4880] DisablePasswordChange = FALSE
  89. 04/24 19:18:06 [INIT] [4880] NeutralizeNt4Emulator = FALSE
  90. 04/24 19:18:06 [INIT] [4880] AllowSingleLabelDnsDomain = FALSE
  91. 04/24 19:18:06 [INIT] [4880] AllowDnsSuffixSearch = TRUE
  92. 04/24 19:18:06 [INIT] [4880] AllowExclusiveSysvolShareAccess = FALSE
  93. 04/24 19:18:06 [INIT] [4880] AllowExclusiveScriptsShareAccess = FALSE
  94. 04/24 19:18:06 [INIT] [4880] AvoidLocatorAccountLookup = FALSE
  95. 04/24 19:18:06 [INIT] [4880] NeverPing = FALSE
  96. 04/24 19:18:06 [INIT] [4880] RegisterSiteSpecificDnsRecordsOnly = FALSE
  97. 04/24 19:18:06 [INIT] [4880] TryNextClosestSite = FALSE
  98. 04/24 19:18:06 [INIT] [4880] AllowNT4Crypto = FALSE
  99. 04/24 19:18:06 [INIT] [4880] IgnoreIncomingMailslotMessages = FALSE
  100. 04/24 19:18:06 [INIT] [4880] RejectMd5Servers = FALSE
  101. 04/24 19:18:06 [INIT] [4880] RejectMd5Clients = FALSE
  102. 04/24 19:18:06 [INIT] [4880] AvoidFallbackNetbiosDiscovery = TRUE
  103. 04/24 19:18:06 [INIT] [4880] Command line parsed successfully ...
  104. 04/24 19:18:06 [INIT] [4880] NlInitChangeLogServiceInit: policy notification registered on previous service start, nothing to do
  105. 04/24 19:18:06 [PERF] [4880] NlInit: New NlPcGlobalTotalInstance (000001A72820B698): "_Total"
  106. 04/24 19:18:06 [INIT] [4880] NlRegisterNQMNotifications: PowerSettingRegisterNotification returned 0x0
  107. 04/24 19:18:06 [SITE] [4880] Enter NlSiteInitializationWrapper
  108. 04/24 19:18:06 [SITE] [624] NlSiteInitializeCallback: Calling NlSiteInitialize
  109. 04/24 19:18:06 [MISC] [1760] NlNQMPowerStateChangeCallback: not running in network-low-power state
  110. 04/24 19:18:06 [SITE] [624] Setting site name to 'Datacenter-CHI'
  111. 04/24 19:18:06 [SITE] [624] NlSiteInitializeCallback: NlSiteInitialize returned with status:0
  112. 04/24 19:18:06 [SITE] [4880] NlSiteInitializationWrapper: Exit with status:0
  113. 04/24 19:18:06 [SESSION] [4880] Winsock Addrs: 10.5.10.14 (1)
  114. 04/24 19:18:06 [SESSION] [4880] V6 Winsock Addrs: fe80::cd4f:3c8d:b1b5:a156%3 (1)
  115. 04/24 19:18:06 [DNS] [4880] Set DnsForestName to:
  116. 04/24 19:18:06 [DOMAIN] [4880] DOMAIN: Adding new domain
  117. 04/24 19:18:06 [DOMAIN] [4880] Setting our computer name to TRORAWDFS001 TRORAWDFS001.DOMAIN.COM
  118. 04/24 19:18:06 [DOMAIN] [4880] Setting Netbios domain name to DOMAIN
  119. 04/24 19:18:06 [DOMAIN] [4880] Setting DNS domain name to DOMAIN.COM.
  120. 04/24 19:18:06 [DOMAIN] [4880] Setting Domain GUID to <DOMAIN GUID>
  121. 04/24 19:18:06 [CRITICAL] [4880] C:\Windows\system32\config\netlogon.ftj: Unable to open. 2
  122. 04/24 19:18:06 [MISC] [5576] NlpInitializeTrace succeeded 0
  123. 04/24 19:18:06 [INIT] [4880] Getting cached trusted domain list from binary file.
  124. 04/24 19:18:06 [LOGON] [4880] NlSetForestTrustList: New trusted domain list:
  125. 04/24 19:18:06 [LOGON] [4880] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  126. 04/24 19:18:06 [LOGON] [4880] Dom Guid: <DOMAIN GUID>
  127. 04/24 19:18:06 [LOGON] [4880] Dom Sid: <DOMAIN SID>
  128. 04/24 19:18:06 [LOGON] [4880] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  129. 04/24 19:18:06 [LOGON] [4880] Dom Guid: <DOMAIN GUID>
  130. 04/24 19:18:06 [LOGON] [4880] Dom Sid: <DOMAIN SID>
  131. 04/24 19:18:06 [INIT] [4880] Starting RPC server.
  132. 04/24 19:18:06 [SESSION] [4880] DOMAIN: NlSessionSetup: Try Session setup
  133. 04/24 19:18:06 [SESSION] [4880] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  134. 04/24 19:18:06 [MISC] [624] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  135. 04/24 19:18:06 [MISC] [4880] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  136. 04/24 19:18:06 [MISC] [624] NetpDcGetName: DOMAIN.COM cache doesn't have right account name.
  137. 04/24 19:18:06 [CRITICAL] [4880] NlCacheJoinDomainControllerInfo: Failed to open JoinDomain breadcrumb in registry; assuming
  138. 04/24 19:18:06 [CRITICAL] [4880] NlCacheJoinDomainControllerInfo: therefore that this is not a post-join scenario.
  139. 04/24 19:18:06 [CRITICAL] [4880] NetpDcGetName: NlCacheJoinDomainControllerInfo returned success
  140. 04/24 19:18:06 [MISC] [4880] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000001A729287A20 )
  141. 04/24 19:18:06 [PERF] [4880] NlAllocateClientSession: New Perf Instance (000001A728273508): "CH03ADC003.DOMAIN.COM"
  142. ClientSession: 000001A7282795A0
  143. 04/24 19:18:06 [SESSION] [4880] DOMAIN: NlDiscoverDc: Found DC CH03ADC003.DOMAIN.COM
  144. 04/24 19:18:06 [MAILSLOT] [624] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  145. 04/24 19:18:06 [MISC] [624] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRCH03ADC003.DOMAIN.COM
  146. 04/24 19:18:06 [MISC] [624] NetpDcAllocateCacheEntry: new entry 0x000001A7282D7AA0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  147. 04/24 19:18:06 [MISC] [624] NlPingDcNameWithContext: TRCH03ADC003.DOMAIN.COM responded over IP.
  148. 04/24 19:18:06 [MISC] [624] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000001A7282D7AA0 )
  149. 04/24 19:18:06 [MISC] [624] NetpDcDerefCacheEntry: destroying entry 0x000001A7282D7AA0
  150. 04/24 19:18:06 [MISC] [608] DsGetDcName function called: client PID=576, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  151. 04/24 19:18:06 [MISC] [608] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  152. 04/24 19:18:06 [MISC] [608] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000001A729287A20 )
  153. 04/24 19:18:06 [MISC] [608] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  154. 04/24 19:18:06 [MISC] [608] DsGetDcName function returns 0 (client PID=576): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  155. 04/24 19:18:06 [SESSION] [4880] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  156. 04/24 19:18:06 [SESSION] [4880] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  157. 04/24 19:18:06 [DOMAIN] [4880] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  158. 04/24 19:18:06 [LOGON] [4880] NlSetForestTrustList: New trusted domain list:
  159. 04/24 19:18:06 [LOGON] [4880] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  160. 04/24 19:18:06 [LOGON] [4880] Dom Guid: <DOMAIN GUID>
  161. 04/24 19:18:06 [LOGON] [4880] Dom Sid: <DOMAIN SID>
  162. 04/24 19:18:06 [LOGON] [4880] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  163. 04/24 19:18:06 [LOGON] [4880] Dom Guid: <DOMAIN GUID>
  164. 04/24 19:18:06 [LOGON] [4880] Dom Sid: <DOMAIN SID>
  165. 04/24 19:18:06 [SESSION] [4880] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  166. 04/24 19:18:06 [SESSION] [4880] DOMAIN: NlSessionSetup: Session setup Succeeded
  167. 04/24 19:18:06 [INIT] [4880] Started successfully
  168. 04/24 19:18:06 [MISC] [4880] DsGetDcName function called: client PID=-1, Dom:(null) Acct:(null) Flags: RET_DNS
  169. 04/24 19:18:06 [MISC] [4880] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  170. 04/24 19:18:06 [MISC] [4880] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000001A729287A20 )
  171. 04/24 19:18:06 [MISC] [4880] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  172. 04/24 19:18:06 [MISC] [4880] DsGetDcName function returns 0 (client PID=-1): Dom:(null) Acct:(null) Flags: RET_DNS
  173. 04/24 19:18:07 [MSA] [4880] GetAccountObject: attempting to find DN for TRORAWDFS001
  174. 04/24 19:18:07 [MISC] [608] DsGetDcName function called: client PID=576, Dom:DomainDnsZones.DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  175. 04/24 19:18:07 [MISC] [608] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  176. 04/24 19:18:07 [MISC] [608] NetpDcGetName: DomainDnsZones.DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000001A7282A96A0 )
  177. 04/24 19:18:07 [MISC] [608] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DomainDnsZones.DOMAIN.COM DnsForestName: Flags:0xe0000588 DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  178. 04/24 19:18:07 [MISC] [608] DsGetDcName function returns 0 (client PID=576): Dom:DomainDnsZones.DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  179. 04/24 19:18:07 [MISC] [4880] NlWksScavenger: Can be called again in 30 days (0x9c4f82ad)
  180. 04/24 19:18:07 [ERROR] [624] NlpGenerateIumBoundMachineAuthCert: Provisioning interface not responding; treating as if IUM weren't available: 1722
  181. 04/24 19:18:07 [MISC] [624] NlpStoreKeyInDS: IUM Provisioning interface not up.
  182. 04/24 19:18:07 [ERROR] [624] NlpStoreKeyInDS: No machine bound certificate could be created: 1722
  183. 04/24 19:18:07 [ERROR] [624] NlProvisionMachineAuthKey: Unable to store auth key in DS: 1722
  184. 04/24 19:18:08 [MISC] [600] In control handler (Opcode: 4)
  185. 04/24 19:18:08 [INIT] [4880] Group Policy is not defined for Netlogon
  186. 04/24 19:18:08 [INIT] [4880] Following are the effective values after parsing
  187. 04/24 19:21:07 [SESSION] [4880] DOMAIN: NlTimeoutApiClientSession: Unbind from server CH03ADC003.DOMAIN.COM (TCP) 0.
  188. 04/24 19:22:00 [INIT] [1684] Group Policy is not defined for Netlogon
  189. 04/24 19:22:00 [INIT] [1684] Following are the effective values after parsing
  190. 04/24 19:22:00 [INIT] [1684] Sysvol = C:\Windows\SYSVOL\SYSVOL
  191. 04/24 19:22:00 [INIT] [1684] Scripts = (null)
  192. 04/24 19:22:00 [INIT] [1684] RpcDacl = (null)
  193. 04/24 19:22:00 [INIT] [1684] RemoteAccessCheckDacl = (null)
  194. 04/24 19:22:00 [INIT] [1684] SiteName (0) = Datacenter-CHI
  195. 04/24 19:22:00 [INIT] [1684] Pulse = 300 (0x12c)
  196. 04/24 19:22:00 [INIT] [1684] Randomize = 1 (0x1)
  197. 04/24 19:22:00 [INIT] [1684] PulseMaximum = 7200 (0x1c20)
  198. 04/24 19:22:00 [INIT] [1684] PulseConcurrency = 10 (0xa)
  199. 04/24 19:22:00 [INIT] [1684] PulseTimeout1 = 10 (0xa)
  200. 04/24 19:22:00 [INIT] [1684] PulseTimeout2 = 300 (0x12c)
  201. 04/24 19:22:00 [INIT] [1684] MaximumMailslotMessages = 500 (0x1f4)
  202. 04/24 19:22:00 [INIT] [1684] MailslotMessageTimeout = 10 (0xa)
  203. 04/24 19:22:00 [INIT] [1684] MailslotDuplicateTimeout = 2 (0x2)
  204. 04/24 19:22:00 [INIT] [1684] ExpectedDialupDelay = 0 (0x0)
  205. 04/24 19:22:00 [INIT] [1684] ScavengeInterval = 900 (0x384)
  206. 04/24 19:22:00 [INIT] [1684] EventLogPeriodicity = 1800 (0x708)
  207. 04/24 19:22:00 [INIT] [1684] WarningEventThreshold = 0 (0x0)
  208. 04/24 19:22:00 [INIT] [1684] MaximumPasswordAge = 30 (0x1e)
  209. 04/24 19:22:00 [INIT] [1684] LdapSrvPriority = 0 (0x0)
  210. 04/24 19:22:00 [INIT] [1684] LdapSrvWeight = 100 (0x64)
  211. 04/24 19:22:00 [INIT] [1684] LdapSrvPort = 389 (0x185)
  212. 04/24 19:22:00 [INIT] [1684] LdapGcSrvPort = 3268 (0xcc4)
  213. 04/24 19:22:00 [INIT] [1684] KdcSrvPort = 88 (0x58)
  214. 04/24 19:22:00 [INIT] [1684] KerbIsDoneWithJoinDomainEntry = 0 (0x0)
  215. 04/24 19:22:00 [INIT] [1684] DcLocatorIsDoneWithJoinDomainEntry = 0 (0x0)
  216. 04/24 19:22:00 [INIT] [1684] DnsTtl = 600 (0x258)
  217. 04/24 19:22:00 [INIT] [1684] DnsRefreshInterval = 3600 (0xe10)
  218. 04/24 19:22:00 [INIT] [1684] CloseSiteTimeout = 900 (0x384)
  219. 04/24 19:22:00 [INIT] [1684] SiteNameTimeout = 300 (0x12c)
  220. 04/24 19:22:00 [INIT] [1684] DuplicateEventlogTimeout = 14400 (0x3840)
  221. 04/24 19:22:00 [INIT] [1684] MaxConcurrentApi = 0 (0x0)
  222. 04/24 19:22:00 [INIT] [1684] NegativeCachePeriod = 45 (0x2d)
  223. 04/24 19:22:00 [INIT] [1684] BackgroundRetryInitialPeriod = 600 (0x258)
  224. 04/24 19:22:00 [INIT] [1684] BackgroundRetryMaximumPeriod = 3600 (0xe10)
  225. 04/24 19:22:00 [INIT] [1684] BackgroundRetryQuitTime = 0 (0x0)
  226. 04/24 19:22:00 [INIT] [1684] BackgroundSuccessfulRefreshPeriod = 4294967295 (0xffffffff)
  227. 04/24 19:22:00 [INIT] [1684] NonBackgroundSuccessfulRefreshPeriod = 1800 (0x708)
  228. 04/24 19:22:00 [INIT] [1684] DnsFailedDeregisterTimeout = 172800 (0x2a300)
  229. 04/24 19:22:00 [INIT] [1684] MaxLdapServersPinged = 55 (0x37)
  230. 04/24 19:22:00 [INIT] [1684] PingUrgencyMode = 0 (0x0)
  231. 04/24 19:22:00 [INIT] [1684] SiteCoverageRefreshInterval = 3600 (0xe10)
  232. 04/24 19:22:00 [INIT] [1684] FtInfoUpdateInterval = 86400 (0x15180)
  233. 04/24 19:22:00 [INIT] [1684] DBFlag = 545325055 (0x2080ffff)
  234. 04/24 19:22:00 [INIT] [1684] MaximumLogFileSize = 20000000 (0x1312d00)
  235. 04/24 19:22:00 [INIT] [1684] AddressTypeReturned = 1 (0x1)
  236. 04/24 19:22:00 [INIT] [1684] ForceRediscoveryInterval = 43200 (0xa8c0)
  237. 04/24 19:22:00 [INIT] [1684] RestrictNTLMInDomain = 0 (0x0)
  238. 04/24 19:22:00 [INIT] [1684] AuditNTLMInDomain = 0 (0x0)
  239. 04/24 19:22:00 [INIT] [1684] NextClosestSiteFilter = 2 (0x2)
  240. 04/24 19:22:00 [INIT] [1684] NextClosestSiteRefreshInterval = 10800 (0x2a30)
  241. 04/24 19:22:00 [INIT] [1684] CompoundIdEnabled = 1 (0x1)
  242. 04/24 19:22:00 [INIT] [1684] CompoundIdDisabled = 0 (0x0)
  243. 04/24 19:22:00 [INIT] [1684] AddressLookupOnPingBehavior = 2 (0x2)
  244. 04/24 19:22:00 [INIT] [1684] DnsHostNameInLocatorPing = 1 (0x1)
  245. 04/24 19:22:00 [INIT] [1684] JoinDCPingThreadTimeout = 60 (0x3c)
  246. 04/24 19:22:00 [INIT] [1684] RefusePasswordChange = FALSE
  247. 04/24 19:22:00 [INIT] [1684] AvoidSamRepl = TRUE
  248. 04/24 19:22:00 [INIT] [1684] AvoidLsaRepl = TRUE
  249. 04/24 19:22:00 [INIT] [1684] SignSecureChannel = TRUE
  250. 04/24 19:22:00 [INIT] [1684] SealSecureChannel = TRUE
  251. 04/24 19:22:00 [INIT] [1684] RequireSignOrSeal = TRUE
  252. 04/24 19:22:00 [INIT] [1684] RequireStrongKey = TRUE
  253. 04/24 19:22:00 [INIT] [1684] SysVolReady = TRUE
  254. 04/24 19:22:00 [INIT] [1684] UseDynamicDns = TRUE
  255. 04/24 19:22:00 [INIT] [1684] RegisterDnsARecords = TRUE
  256. 04/24 19:22:00 [INIT] [1684] AvoidPdcOnWan = FALSE
  257. 04/24 19:22:00 [INIT] [1684] AutoSiteCoverage = TRUE
  258. 04/24 19:22:00 [INIT] [1684] AvoidDnsDeregOnShutdown = TRUE
  259. 04/24 19:22:00 [INIT] [1684] DnsUpdateOnAllAdapters = FALSE
  260. 04/24 19:22:00 [INIT] [1684] Nt4Emulator = FALSE
  261. 04/24 19:22:00 [INIT] [1684] EnableChainSetClientAttributes = TRUE
  262. 04/24 19:22:00 [INIT] [1684] DCLocatorReplyEnabled = TRUE
  263. 04/24 19:22:00 [INIT] [1684] DisablePasswordChange = FALSE
  264. 04/24 19:22:00 [INIT] [1684] NeutralizeNt4Emulator = FALSE
  265. 04/24 19:22:00 [INIT] [1684] AllowSingleLabelDnsDomain = FALSE
  266. 04/24 19:22:00 [INIT] [1684] AllowDnsSuffixSearch = TRUE
  267. 04/24 19:22:00 [INIT] [1684] AllowExclusiveSysvolShareAccess = FALSE
  268. 04/24 19:22:00 [INIT] [1684] AllowExclusiveScriptsShareAccess = FALSE
  269. 04/24 19:22:00 [INIT] [1684] AvoidLocatorAccountLookup = FALSE
  270. 04/24 19:22:00 [INIT] [1684] NeverPing = FALSE
  271. 04/24 19:22:00 [INIT] [1684] RegisterSiteSpecificDnsRecordsOnly = FALSE
  272. 04/24 19:22:00 [INIT] [1684] TryNextClosestSite = FALSE
  273. 04/24 19:22:00 [INIT] [1684] AllowNT4Crypto = FALSE
  274. 04/24 19:22:00 [INIT] [1684] IgnoreIncomingMailslotMessages = FALSE
  275. 04/24 19:22:00 [INIT] [1684] RejectMd5Servers = FALSE
  276. 04/24 19:22:00 [INIT] [1684] RejectMd5Clients = FALSE
  277. 04/24 19:22:00 [INIT] [1684] AvoidFallbackNetbiosDiscovery = TRUE
  278. 04/24 19:22:00 [INIT] [1684] Command line parsed successfully ...
  279. 04/24 19:22:00 [INIT] [1684] Netlogon.dll has been unloaded (recover from it).
  280. 04/24 19:22:00 [PERF] [1684] NlInit: New NlPcGlobalTotalInstance (00000169DE89BF78): "_Total"
  281. 04/24 19:22:00 [INIT] [1684] NlRegisterNQMNotifications: PowerSettingRegisterNotification returned 0x0
  282. 04/24 19:22:00 [MISC] [652] NlNQMPowerStateChangeCallback: not running in network-low-power state
  283. 04/24 19:22:00 [SITE] [1684] Enter NlSiteInitializationWrapper
  284. 04/24 19:22:00 [SITE] [612] NlSiteInitializeCallback: Calling NlSiteInitialize
  285. 04/24 19:22:00 [SITE] [612] Setting site name to 'Datacenter-CHI'
  286. 04/24 19:22:00 [SITE] [612] NlSiteInitializeCallback: NlSiteInitialize returned with status:0
  287. 04/24 19:22:00 [SITE] [1684] NlSiteInitializationWrapper: Exit with status:0
  288. 04/24 19:22:00 [SESSION] [1684] Winsock Addrs: 10.5.10.14 (1)
  289. 04/24 19:22:00 [SESSION] [1684] V6 Winsock Addrs: fe80::cd4f:3c8d:b1b5:a156%3 (1)
  290. 04/24 19:22:00 [DNS] [1684] Set DnsForestName to:
  291. 04/24 19:22:00 [DOMAIN] [1684] DOMAIN: Adding new domain
  292. 04/24 19:22:00 [DOMAIN] [1684] Setting our computer name to TRORAWDFS001 TRORAWDFS001.DOMAIN.COM
  293. 04/24 19:22:00 [DOMAIN] [1684] Setting Netbios domain name to DOMAIN
  294. 04/24 19:22:00 [DOMAIN] [1684] Setting DNS domain name to DOMAIN.COM.
  295. 04/24 19:22:00 [DOMAIN] [1684] Setting Domain GUID to <DOMAIN GUID>
  296. 04/24 19:22:00 [MISC] [1704] NlpInitializeTrace succeeded 0
  297. 04/24 19:22:00 [CRITICAL] [1684] C:\Windows\system32\config\netlogon.ftj: Unable to open. 2
  298. 04/24 19:22:00 [INIT] [1684] Getting cached trusted domain list from binary file.
  299. 04/24 19:22:00 [LOGON] [1684] NlSetForestTrustList: New trusted domain list:
  300. 04/24 19:22:00 [LOGON] [1684] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  301. 04/24 19:22:00 [LOGON] [1684] Dom Guid: <DOMAIN GUID>
  302. 04/24 19:22:00 [LOGON] [1684] Dom Sid: <DOMAIN SID>
  303. 04/24 19:22:00 [LOGON] [1684] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  304. 04/24 19:22:00 [LOGON] [1684] Dom Guid: <DOMAIN GUID>
  305. 04/24 19:22:00 [LOGON] [1684] Dom Sid: <DOMAIN SID>
  306. 04/24 19:22:00 [INIT] [1684] Starting RPC server.
  307. 04/24 19:22:00 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  308. 04/24 19:22:00 [SESSION] [1684] DOMAIN: NlSessionSetup: Try Session setup
  309. 04/24 19:22:00 [SESSION] [1684] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  310. 04/24 19:22:00 [MISC] [1684] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  311. 04/24 19:22:00 [CRITICAL] [1684] NlCacheJoinDomainControllerInfo: Failed to open JoinDomain breadcrumb in registry; assuming
  312. 04/24 19:22:00 [CRITICAL] [1684] NlCacheJoinDomainControllerInfo: therefore that this is not a post-join scenario.
  313. 04/24 19:22:00 [CRITICAL] [1684] NetpDcGetName: NlCacheJoinDomainControllerInfo returned success
  314. 04/24 19:22:00 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  315. 04/24 19:22:00 [MAILSLOT] [1684] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  316. 04/24 19:22:00 [MISC] [652] DsGetDcName function called: client PID=4, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  317. 04/24 19:22:00 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  318. 04/24 19:22:00 [MAILSLOT] [652] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  319. 04/24 19:22:00 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DE955740 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  320. 04/24 19:22:00 [MISC] [612] NetpDcGetNameIp: DOMAIN.COM Trying to find a DC in a closer site: Datacenter-CHI
  321. 04/24 19:22:00 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.14
  322. 04/24 19:22:00 [MISC] [652] NetpDcAllocateCacheEntry: new entry 0x00000169DE9580E0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f17c
  323. 04/24 19:22:00 [MISC] [652] NetpDcGetNameIp: DOMAIN.COM Trying to find a DC in a closer site: Oracle-PHX
  324. 04/24 19:22:00 [MISC] [1684] NetpDcAllocateCacheEntry: new entry 0x00000169DE9583C0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f17c
  325. 04/24 19:22:00 [MISC] [1684] NetpDcGetNameIp: DOMAIN.COM. Trying to find a DC in a closer site: Oracle-PHX
  326. 04/24 19:22:00 [MAILSLOT] [1684] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  327. 04/24 19:22:00 [MAILSLOT] [652] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  328. 04/24 19:22:00 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DE9579C0 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  329. 04/24 19:22:00 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DE955740
  330. 04/24 19:22:00 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  331. 04/24 19:22:00 [SITE] [612] Setting site name to 'Oracle-PHX'
  332. 04/24 19:22:00 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DE9579C0
  333. 04/24 19:22:00 [MISC] [652] NetpDcAllocateCacheEntry: new entry 0x00000169DE9579C0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  334. 04/24 19:22:00 [MISC] [652] NetpDcDerefCacheEntry: destroying entry 0x00000169DE9580E0
  335. 04/24 19:22:00 [MISC] [652] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  336. 04/24 19:22:00 [SITE] [652] Setting site name to 'Datacenter-CHI'
  337. 04/24 19:22:00 [MISC] [652] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  338. 04/24 19:22:00 [MISC] [652] DsGetDcName function returns 0 (client PID=4): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  339. 04/24 19:22:00 [MISC] [1684] NetpDcAllocateCacheEntry: new entry 0x00000169DE955740 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  340. 04/24 19:22:00 [MISC] [1684] NetpDcDerefCacheEntry: destroying entry 0x00000169DE9583C0
  341. 04/24 19:22:00 [MISC] [1684] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  342. 04/24 19:22:00 [PERF] [1684] NlAllocateClientSession: New Perf Instance (00000169DE8E8608): "ORAWADC001.DOMAIN.COM"
  343. ClientSession: 00000169DE937210
  344. 04/24 19:22:00 [SESSION] [1684] DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  345. 04/24 19:22:00 [CRITICAL] [1684] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  346. 04/24 19:22:00 [CRITICAL] [1684] [0] ProcessID is 572
  347. 04/24 19:22:00 [CRITICAL] [1684] [0] System Time is: 4/24/2019 23:22:0:485
  348. 04/24 19:22:00 [CRITICAL] [1684] [0] Generating component is 2
  349. 04/24 19:22:00 [CRITICAL] [1684] [0] Status is 5
  350. 04/24 19:22:00 [CRITICAL] [1684] [0] Detection location is 501
  351. 04/24 19:22:00 [CRITICAL] [1684] [0] Flags is 0
  352. 04/24 19:22:00 [CRITICAL] [1684] [0] NumberOfParameters is 4
  353. 04/24 19:22:00 [CRITICAL] [1684] Unicode string: ncacn_ip_tcp
  354. 04/24 19:22:00 [CRITICAL] [1684] Unicode string: TRORAWADC001.DOMAIN.COM
  355. 04/24 19:22:00 [CRITICAL] [1684] Long val: 305419896
  356. 04/24 19:22:00 [CRITICAL] [1684] Long val: 5
  357. 04/24 19:22:00 [CRITICAL] [1684] [1] ProcessID is 572
  358. 04/24 19:22:00 [CRITICAL] [1684] [1] System Time is: 4/24/2019 23:22:0:485
  359. 04/24 19:22:00 [CRITICAL] [1684] [1] Generating component is 2
  360. 04/24 19:22:00 [CRITICAL] [1684] [1] Status is 5
  361. 04/24 19:22:00 [CRITICAL] [1684] [1] Detection location is 1750
  362. 04/24 19:22:00 [CRITICAL] [1684] [1] Flags is 0
  363. 04/24 19:22:00 [CRITICAL] [1684] [1] NumberOfParameters is 1
  364. 04/24 19:22:00 [CRITICAL] [1684] Long val: 5
  365. 04/24 19:22:00 [CRITICAL] [1684] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  366. 04/24 19:22:00 [CRITICAL] [1684] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  367. 04/24 19:22:00 [CRITICAL] [1684] [0] ProcessID is 572
  368. 04/24 19:22:00 [CRITICAL] [1684] [0] System Time is: 4/24/2019 23:22:0:500
  369. 04/24 19:22:00 [CRITICAL] [1684] [0] Generating component is 2
  370. 04/24 19:22:00 [CRITICAL] [1684] [0] Status is 5
  371. 04/24 19:22:00 [CRITICAL] [1684] [0] Detection location is 501
  372. 04/24 19:22:00 [CRITICAL] [1684] [0] Flags is 0
  373. 04/24 19:22:00 [CRITICAL] [1684] [0] NumberOfParameters is 4
  374. 04/24 19:22:00 [CRITICAL] [1684] Unicode string: ncacn_ip_tcp
  375. 04/24 19:22:00 [CRITICAL] [1684] Unicode string: TRORAWADC001.DOMAIN.COM
  376. 04/24 19:22:00 [CRITICAL] [1684] Long val: 305419896
  377. 04/24 19:22:00 [CRITICAL] [1684] Long val: 5
  378. 04/24 19:22:00 [CRITICAL] [1684] [1] ProcessID is 572
  379. 04/24 19:22:00 [CRITICAL] [1684] [1] System Time is: 4/24/2019 23:22:0:500
  380. 04/24 19:22:00 [CRITICAL] [1684] [1] Generating component is 2
  381. 04/24 19:22:00 [CRITICAL] [1684] [1] Status is 5
  382. 04/24 19:22:00 [CRITICAL] [1684] [1] Detection location is 1750
  383. 04/24 19:22:00 [CRITICAL] [1684] [1] Flags is 0
  384. 04/24 19:22:00 [CRITICAL] [1684] [1] NumberOfParameters is 1
  385. 04/24 19:22:00 [CRITICAL] [1684] Long val: 5
  386. 04/24 19:22:00 [CRITICAL] [1684] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  387. 04/24 19:22:00 [MISC] [1684] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  388. 04/24 19:22:00 [SESSION] [1684] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  389. 04/24 19:22:00 [SESSION] [1684] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  390. 04/24 19:22:00 [SESSION] [1684] DOMAIN: NlSessionSetup: Session setup Failed
  391. 04/24 19:22:00 [INIT] [1684] Started successfully
  392. 04/24 19:22:00 [MISC] [1820] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  393. 04/24 19:22:00 [MISC] [1820] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  394. 04/24 19:22:00 [MISC] [1820] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  395. 04/24 19:22:00 [MISC] [1820] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  396. 04/24 19:22:00 [MISC] [1820] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  397. 04/24 19:22:00 [MISC] [1820] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  398. 04/24 19:22:00 [MISC] [1820] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  399. 04/24 19:22:00 [MISC] [1684] DsGetDcName function called: client PID=-1, Dom:(null) Acct:(null) Flags: RET_DNS
  400. 04/24 19:22:00 [MISC] [1684] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  401. 04/24 19:22:00 [MISC] [1684] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  402. 04/24 19:22:00 [MISC] [1684] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  403. 04/24 19:22:00 [MISC] [1684] DsGetDcName function returns 0 (client PID=-1): Dom:(null) Acct:(null) Flags: RET_DNS
  404. 04/24 19:22:00 [MSA] [1684] GetAccountObject: attempting to find DN for TRORAWDFS001
  405. 04/24 19:22:00 [MISC] [1984] DsGetDcName function called: client PID=572, Dom:DomainDnsZones.DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  406. 04/24 19:22:00 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  407. 04/24 19:22:00 [MAILSLOT] [1820] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  408. 04/24 19:22:00 [MAILSLOT] [1984] NetpDcPingListIp: DomainDnsZones.DOMAIN.COM: Sent UDP ping to 10.6.2.14
  409. 04/24 19:22:00 [MISC] [2016] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  410. 04/24 19:22:00 [MISC] [2016] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  411. 04/24 19:22:00 [MISC] [2016] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  412. 04/24 19:22:00 [MISC] [2016] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  413. 04/24 19:22:00 [MISC] [2016] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  414. 04/24 19:22:00 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DE951070 -> DC:TRCH03ADC004 DnsDomName:DomainDnsZones.DOMAIN.COM Flags:0x508
  415. 04/24 19:22:00 [MISC] [1984] NetpDcGetNameIp: DomainDnsZones.DOMAIN.COM Trying to find a DC in a closer site: Oracle-PHX
  416. 04/24 19:22:00 [MISC] [1820] NetpDcAllocateCacheEntry: new entry 0x00000169DE9709D0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f17c
  417. 04/24 19:22:00 [MISC] [1820] NetpDcGetNameIp: DOMAIN.COM. Trying to find a DC in a closer site: Oracle-PHX
  418. 04/24 19:22:00 [MAILSLOT] [1984] NetpDcPingListIp: DomainDnsZones.DOMAIN.COM: Sent UDP ping to 10.5.10.13
  419. 04/24 19:22:00 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DE951370 -> DC:TRORAWADC001 DnsDomName:DomainDnsZones.DOMAIN.COM Flags:0x508
  420. 04/24 19:22:00 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DE951070
  421. 04/24 19:22:00 [MISC] [1984] NetpDcGetName: NetpDcGetNameIp for DomainDnsZones.DOMAIN.COM returned 0
  422. 04/24 19:22:00 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DomainDnsZones.DOMAIN.COM DnsForestName: Flags:0xe0000508 DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  423. 04/24 19:22:00 [MISC] [1984] DsGetDcName function returns 0 (client PID=572): Dom:DomainDnsZones.DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  424. 04/24 19:22:00 [MAILSLOT] [1820] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  425. 04/24 19:22:00 [MISC] [1684] NlWksScavenger: Can be called again in 30 days (0x9a9568aa)
  426. 04/24 19:22:00 [MISC] [1820] NetpDcAllocateCacheEntry: new entry 0x00000169DE96EFC0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  427. 04/24 19:22:00 [MISC] [1820] NetpDcDerefCacheEntry: destroying entry 0x00000169DE9709D0
  428. 04/24 19:22:00 [MISC] [1820] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  429. 04/24 19:22:00 [MISC] [1820] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  430. 04/24 19:22:00 [MISC] [1820] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  431. 04/24 19:22:01 [MISC] [1820] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  432. 04/24 19:22:01 [MISC] [1820] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  433. 04/24 19:22:01 [MISC] [1820] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  434. 04/24 19:22:01 [MISC] [1820] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  435. 04/24 19:22:01 [MISC] [1820] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  436. 04/24 19:22:01 [MISC] [1820] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  437. 04/24 19:22:01 [MISC] [1820] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  438. 04/24 19:22:01 [MISC] [1820] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  439. 04/24 19:22:01 [MISC] [1820] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  440. 04/24 19:22:01 [MISC] [1820] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  441. 04/24 19:22:01 [ERROR] [612] NlpGenerateIumBoundMachineAuthCert: Provisioning interface not responding; treating as if IUM weren't available: 1722
  442. 04/24 19:22:01 [MISC] [612] NlpStoreKeyInDS: IUM Provisioning interface not up.
  443. 04/24 19:22:01 [ERROR] [612] NlpStoreKeyInDS: No machine bound certificate could be created: 1722
  444. 04/24 19:22:01 [MISC] [1820] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  445. 04/24 19:22:01 [MISC] [1820] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  446. 04/24 19:22:01 [MISC] [1820] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  447. 04/24 19:22:01 [MISC] [1820] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  448. 04/24 19:22:01 [MISC] [1820] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  449. 04/24 19:22:01 [ERROR] [612] NlProvisionMachineAuthKey: Unable to store auth key in DS: 1722
  450. 04/24 19:22:01 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  451. 04/24 19:22:01 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  452. 04/24 19:22:01 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  453. 04/24 19:22:01 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  454. 04/24 19:22:01 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  455. 04/24 19:22:01 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  456. 04/24 19:22:01 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  457. 04/24 19:22:01 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  458. 04/24 19:22:01 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  459. 04/24 19:22:01 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  460. 04/24 19:22:01 [MISC] [656] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  461. 04/24 19:22:01 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  462. 04/24 19:22:01 [MISC] [656] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE9579C0 )
  463. 04/24 19:22:01 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  464. 04/24 19:22:01 [MISC] [656] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  465. 04/24 19:22:01 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: WRITABLE LDAPONLY RET_DNS
  466. 04/24 19:22:01 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  467. 04/24 19:22:01 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  468. 04/24 19:22:01 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  469. 04/24 19:22:01 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: WRITABLE LDAPONLY RET_DNS
  470. 04/24 19:22:01 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS
  471. 04/24 19:22:01 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  472. 04/24 19:22:01 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  473. 04/24 19:22:01 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  474. 04/24 19:22:01 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS
  475. 04/24 19:22:01 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  476. 04/24 19:22:01 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  477. 04/24 19:22:01 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  478. 04/24 19:22:01 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  479. 04/24 19:22:01 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  480. 04/24 19:22:01 [MISC] [1984] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  481. 04/24 19:22:01 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  482. 04/24 19:22:01 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  483. 04/24 19:22:01 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  484. 04/24 19:22:01 [MISC] [1984] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  485. 04/24 19:22:01 [MISC] [1820] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE NETBIOS RET_DNS
  486. 04/24 19:22:01 [MISC] [1820] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  487. 04/24 19:22:01 [MISC] [1820] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  488. 04/24 19:22:01 [MISC] [1820] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  489. 04/24 19:22:01 [MISC] [1820] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE NETBIOS RET_DNS
  490. 04/24 19:22:01 [MISC] [1820] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS GC RET_DNS
  491. 04/24 19:22:01 [MISC] [1820] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  492. 04/24 19:22:01 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  493. 04/24 19:22:01 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  494. 04/24 19:22:01 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  495. 04/24 19:22:01 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  496. 04/24 19:22:01 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  497. 04/24 19:22:01 [MAILSLOT] [1820] NetpDcPingListIp: .: Sent UDP ping to 10.6.2.13
  498. 04/24 19:22:01 [MISC] [1820] NetpDcAllocateCacheEntry: new entry 0x00000169DF78F220 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f17c
  499. 04/24 19:22:01 [MISC] [1820] NetpDcGetNameIp: . Trying to find a DC in a closer site: Oracle-PHX
  500. 04/24 19:22:01 [MAILSLOT] [1820] NetpDcPingListIp: .: Sent UDP ping to 10.5.10.13
  501. 04/24 19:22:02 [SITE] [1984] DsrGetSiteName: Returning site name 'Datacenter-CHI' from local cache.
  502. 04/24 19:22:02 [MISC] [656] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  503. 04/24 19:22:02 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  504. 04/24 19:22:02 [MISC] [656] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  505. 04/24 19:22:02 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  506. 04/24 19:22:02 [MISC] [656] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  507. 04/24 19:22:02 [MISC] [1820] NetpDcAllocateCacheEntry: new entry 0x00000169DF7916B0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  508. 04/24 19:22:02 [MISC] [1820] NetpDcDerefCacheEntry: destroying entry 0x00000169DF78F220
  509. 04/24 19:22:02 [MISC] [1820] NetpDcGetName: NetpDcGetNameIp for . returned 0
  510. 04/24 19:22:02 [MISC] [1820] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  511. 04/24 19:22:02 [MISC] [1820] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS GC RET_DNS
  512. 04/24 19:22:02 [MISC] [1820] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  513. 04/24 19:22:02 [MISC] [1820] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  514. 04/24 19:22:02 [MISC] [1820] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  515. 04/24 19:22:02 [MISC] [1820] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  516. 04/24 19:22:02 [MISC] [1820] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  517. 04/24 19:22:02 [INIT] [1684] Group Policy is not defined for Netlogon
  518. 04/24 19:22:02 [INIT] [1684] Following are the effective values after parsing
  519. 04/24 19:22:03 [MISC] [1820] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: DS RET_DNS
  520. 04/24 19:22:03 [MISC] [1820] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  521. 04/24 19:22:03 [MISC] [1820] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  522. 04/24 19:22:03 [MISC] [1820] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  523. 04/24 19:22:03 [MISC] [1820] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: DS RET_DNS
  524. 04/24 19:22:03 [SESSION] [1984] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  525. 04/24 19:22:03 [CRITICAL] [1984] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  526. 04/24 19:22:03 [SESSION] [1984] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  527. 04/24 19:22:03 [CRITICAL] [1984] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  528. 04/24 19:22:04 [SESSION] [1984] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  529. 04/24 19:22:04 [CRITICAL] [1984] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  530. 04/24 19:22:04 [SESSION] [1984] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  531. 04/24 19:22:04 [CRITICAL] [1984] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  532. 04/24 19:22:04 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  533. 04/24 19:22:04 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  534. 04/24 19:22:04 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  535. 04/24 19:22:04 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  536. 04/24 19:22:04 [MISC] [656] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  537. 04/24 19:22:04 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  538. 04/24 19:22:04 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  539. 04/24 19:22:05 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DF798720 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  540. 04/24 19:22:05 [MISC] [656] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  541. 04/24 19:22:05 [SITE] [656] Setting site name to 'Oracle-PHX'
  542. 04/24 19:22:05 [MISC] [656] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  543. 04/24 19:22:05 [MISC] [656] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  544. 04/24 19:22:05 [CRITICAL] [1684] NlMainLoop: Registry changed
  545. 04/24 19:22:05 [SESSION] [1984] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  546. 04/24 19:22:05 [CRITICAL] [1984] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  547. 04/24 19:22:05 [MISC] [656] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  548. 04/24 19:22:05 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  549. 04/24 19:22:05 [MISC] [656] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  550. 04/24 19:22:05 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  551. 04/24 19:22:05 [MISC] [656] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  552. 04/24 19:22:07 [INIT] [1684] Group Policy is not defined for Netlogon
  553. 04/24 19:22:07 [INIT] [1684] Following are the effective values after parsing
  554. 04/24 19:22:07 [INIT] [1684] SiteName (0) = Oracle-PHX
  555. 04/24 19:22:09 [SITE] [656] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  556. 04/24 19:22:09 [MISC] [620] DsGetDcName function called: client PID=964, Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF BACKGROUND
  557. 04/24 19:22:09 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  558. 04/24 19:22:09 [MISC] [620] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  559. 04/24 19:22:09 [MISC] [620] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  560. 04/24 19:22:09 [MISC] [620] DsGetDcName function returns 0 (client PID=964): Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF BACKGROUND
  561. 04/24 19:22:11 [SITE] [620] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  562. 04/24 19:22:11 [MISC] [612] DsGetDcName function called: client PID=964, Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF BACKGROUND
  563. 04/24 19:22:11 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  564. 04/24 19:22:11 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  565. 04/24 19:22:11 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  566. 04/24 19:22:11 [MISC] [612] DsGetDcName function returns 0 (client PID=964): Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF BACKGROUND
  567. 04/24 19:22:12 [MISC] [620] DsGetDcName function called: client PID=384, Dom:trociphxvcn.oraclevcn.com Acct:(null) Flags: FORCE DNS
  568. 04/24 19:22:12 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  569. 04/24 19:22:13 [SESSION] [2016] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  570. 04/24 19:22:13 [CRITICAL] [2016] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  571. 04/24 19:22:13 [SESSION] [2016] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  572. 04/24 19:22:13 [CRITICAL] [2016] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  573. 04/24 19:22:13 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: IP KDC
  574. 04/24 19:22:13 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  575. 04/24 19:22:13 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE9579C0 )
  576. 04/24 19:22:13 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001 DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN DnsForestName: Flags:0x8001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  577. 04/24 19:22:13 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: IP KDC
  578. 04/24 19:22:14 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  579. 04/24 19:22:14 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  580. 04/24 19:22:14 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  581. 04/24 19:22:14 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  582. 04/24 19:22:14 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  583. 04/24 19:22:14 [MISC] [612] DsGetDcName function called: client PID=2828, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  584. 04/24 19:22:14 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  585. 04/24 19:22:14 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  586. 04/24 19:22:14 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  587. 04/24 19:22:14 [MISC] [612] DsGetDcName function returns 0 (client PID=2828): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  588. 04/24 19:22:15 [MISC] [612] DsGetDcName function called: client PID=2828, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  589. 04/24 19:22:15 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  590. 04/24 19:22:15 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  591. 04/24 19:22:15 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  592. 04/24 19:22:15 [MISC] [612] DsGetDcName function returns 0 (client PID=2828): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  593. 04/24 19:22:15 [MISC] [612] DsGetDcName function called: client PID=2828, Dom: Acct:(null) Flags: RET_DNS
  594. 04/24 19:22:15 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  595. 04/24 19:22:15 [MAILSLOT] [612] NetpDcPingListIp: : Sent UDP ping to 10.1.2.12
  596. 04/24 19:22:15 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DE960FC0 -> DC:11ADC002 DnsDomName: Flags:0x1f1fc
  597. 04/24 19:22:15 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for returned 0
  598. 04/24 19:22:15 [MISC] [612] DsGetDcName: results as follows: DCName:\\11ADC002. DCAddress:\\10.1.2.12 DCAddrType:0x1 DomainName: DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  599. 04/24 19:22:15 [MISC] [612] DsGetDcName function returns 0 (client PID=2828): Dom: Acct:(null) Flags: RET_DNS
  600. 04/24 19:22:15 [MISC] [612] DsGetDcName function called: client PID=2828, Dom:(null) Acct:(null) Flags: DSP
  601. 04/24 19:22:15 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  602. 04/24 19:22:15 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  603. 04/24 19:22:15 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  604. 04/24 19:22:15 [MISC] [612] DsGetDcName function returns 0 (client PID=2828): Dom:(null) Acct:(null) Flags: DSP
  605. 04/24 19:22:15 [MISC] [1984] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  606. 04/24 19:22:15 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  607. 04/24 19:22:15 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  608. 04/24 19:22:15 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  609. 04/24 19:22:15 [MISC] [1984] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  610. 04/24 19:22:15 [MISC] [612] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  611. 04/24 19:22:15 [MISC] [612] DsrEnumerateDomainTrusts: returns: 0
  612. 04/24 19:22:15 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  613. 04/24 19:22:15 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  614. 04/24 19:22:15 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  615. 04/24 19:22:15 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  616. 04/24 19:22:15 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  617. 04/24 19:22:15 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  618. 04/24 19:22:15 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  619. 04/24 19:22:15 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE955740 )
  620. 04/24 19:22:15 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  621. 04/24 19:22:15 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  622. 04/24 19:22:16 [SITE] [612] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  623. 04/24 19:22:16 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  624. 04/24 19:22:16 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  625. 04/24 19:22:16 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  626. 04/24 19:22:16 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  627. 04/24 19:22:16 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  628. 04/24 19:22:16 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  629. 04/24 19:22:16 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  630. 04/24 19:22:16 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  631. 04/24 19:22:16 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  632. 04/24 19:22:16 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  633. 04/24 19:22:17 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  634. 04/24 19:22:17 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  635. 04/24 19:22:17 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  636. 04/24 19:22:17 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  637. 04/24 19:22:17 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  638. 04/24 19:22:17 [MISC] [656] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  639. 04/24 19:22:17 [MISC] [656] DsrEnumerateDomainTrusts: returns: 0
  640. 04/24 19:22:20 [CRITICAL] [656] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  641. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  642. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  643. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  644. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  645. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  646. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  647. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  648. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  649. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  650. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  651. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  652. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  653. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  654. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  655. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  656. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  657. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  658. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  659. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  660. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  661. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  662. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  663. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  664. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  665. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  666. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  667. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  668. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  669. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  670. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  671. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  672. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  673. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  674. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  675. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  676. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  677. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  678. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  679. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  680. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  681. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  682. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  683. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  684. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  685. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  686. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  687. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  688. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  689. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  690. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  691. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  692. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  693. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  694. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  695. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  696. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  697. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  698. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  699. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  700. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  701. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  702. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  703. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  704. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  705. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  706. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  707. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  708. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  709. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  710. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  711. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  712. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  713. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  714. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  715. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  716. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  717. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  718. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  719. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  720. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  721. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  722. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  723. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  724. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  725. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  726. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  727. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  728. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  729. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  730. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  731. 04/24 19:22:23 [SESSION] [656] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  732. 04/24 19:22:23 [CRITICAL] [656] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  733. 04/24 19:22:24 [CRITICAL] [620] NetpDcGetDcNext: _ldap._tcp.Oracle-PHX._sites.dc._msdcs.trociphxvcn.oraclevcn.com.: Cannot Query DNS. 9002 0x232a
  734. 04/24 19:22:24 [CRITICAL] [620] NetpDcGetNameIp: trociphxvcn.oraclevcn.com: No data returned from DnsQuery.
  735. 04/24 19:22:24 [MISC] [620] NetpDcGetName: NetpDcGetNameIp for trociphxvcn.oraclevcn.com returned 1355
  736. 04/24 19:22:24 [CRITICAL] [620] NetpDcGetName: trociphxvcn.oraclevcn.com: IP and Netbios are both done.
  737. 04/24 19:22:24 [MISC] [620] DsGetDcName function returns 1355 (client PID=384): Dom:trociphxvcn.oraclevcn.com Acct:(null) Flags: FORCE DNS
  738. 04/24 19:22:30 [MISC] [612] DsGetDcName function called: client PID=2828, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  739. 04/24 19:22:30 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  740. 04/24 19:22:30 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  741. 04/24 19:22:30 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  742. 04/24 19:22:30 [MISC] [612] DsGetDcName function returns 0 (client PID=2828): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  743. 04/24 19:22:30 [CRITICAL] [612] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  744. 04/24 19:22:43 [CRITICAL] [612] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  745. 04/24 19:23:17 [MISC] [612] DsGetDcName function called: client PID=4660, Dom:(null) Acct:(null) Flags: FORCE DS
  746. 04/24 19:23:17 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  747. 04/24 19:23:17 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  748. 04/24 19:23:17 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DE897570 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  749. 04/24 19:23:17 [MISC] [612] NetpDcGetNameIp: DOMAIN.COM. Trying to find a DC in a closer site: Datacenter-CHI
  750. 04/24 19:23:17 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  751. 04/24 19:23:17 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DE897EB0 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  752. 04/24 19:23:17 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DE897570
  753. 04/24 19:23:17 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  754. 04/24 19:23:17 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DE955740
  755. 04/24 19:23:17 [MISC] [612] LoadBalanceDebug (Flags: FORCE DS ): DC=CH03ADC004, SrvCount=2, FailedAQueryCount=0, DcsPinged=2, LoopIndex=0
  756. 04/24 19:23:17 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Datacenter-CHI ClientSiteName:Oracle-PHX
  757. 04/24 19:23:17 [MISC] [612] DsGetDcName function returns 0 (client PID=4660): Dom:(null) Acct:(null) Flags: FORCE DS
  758. 04/24 19:23:17 [MISC] [612] DsGetDcName function called: client PID=4660, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  759. 04/24 19:23:17 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  760. 04/24 19:23:17 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE897EB0 )
  761. 04/24 19:23:17 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Datacenter-CHI ClientSiteName:Oracle-PHX
  762. 04/24 19:23:17 [MISC] [612] DsGetDcName function returns 0 (client PID=4660): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  763. 04/24 19:23:18 [MISC] [620] DsGetDcName function called: client PID=4660, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  764. 04/24 19:23:18 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  765. 04/24 19:23:18 [MISC] [620] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE897EB0 )
  766. 04/24 19:23:18 [MISC] [620] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Datacenter-CHI ClientSiteName:Oracle-PHX
  767. 04/24 19:23:18 [MISC] [620] DsGetDcName function returns 0 (client PID=4660): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  768. 04/24 19:23:18 [MISC] [620] DsGetDcName function called: client PID=4660, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  769. 04/24 19:23:18 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  770. 04/24 19:23:18 [MISC] [620] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  771. 04/24 19:23:18 [MISC] [620] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  772. 04/24 19:23:18 [MISC] [620] DsGetDcName function returns 0 (client PID=4660): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  773. 04/24 19:23:18 [MISC] [620] DsGetDcName function called: client PID=4660, Dom:DOMAIN Acct:(null) Flags: LDAPONLY RET_DNS
  774. 04/24 19:23:18 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  775. 04/24 19:23:18 [MISC] [620] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  776. 04/24 19:23:18 [MISC] [620] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  777. 04/24 19:23:18 [MISC] [620] DsGetDcName function returns 0 (client PID=4660): Dom:DOMAIN Acct:(null) Flags: LDAPONLY RET_DNS
  778. 04/24 19:24:14 [CRITICAL] [612] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  779. 04/24 19:26:07 [CRITICAL] [612] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  780. 04/24 19:26:11 [MISC] [656] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  781. 04/24 19:26:11 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  782. 04/24 19:26:11 [MISC] [656] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  783. 04/24 19:26:11 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  784. 04/24 19:26:11 [MISC] [656] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  785. 04/24 19:26:11 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  786. 04/24 19:26:11 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  787. 04/24 19:26:11 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  788. 04/24 19:26:11 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  789. 04/24 19:26:11 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  790. 04/24 19:26:25 [SESSION] [656] NETLOGON_CONTROL_TC_VERIFY function received.
  791. 04/24 19:26:25 [SESSION] [656] DOMAIN: NlSessionSetup: Try Session setup
  792. 04/24 19:26:25 [SESSION] [656] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  793. 04/24 19:26:25 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  794. 04/24 19:26:25 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  795. 04/24 19:26:25 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DF86B200 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  796. 04/24 19:26:25 [MISC] [656] NetpDcGetNameIp: DOMAIN.COM. Trying to find a DC in a closer site: Datacenter-CHI
  797. 04/24 19:26:25 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  798. 04/24 19:26:25 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DF86B4F0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f17c
  799. 04/24 19:26:25 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86B200
  800. 04/24 19:26:25 [MISC] [656] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  801. 04/24 19:26:25 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DE897EB0
  802. 04/24 19:26:25 [MISC] [656] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=CH03ADC003, SrvCount=2, FailedAQueryCount=0, DcsPinged=2, LoopIndex=0
  803. 04/24 19:26:25 [PERF] [656] NlSetServerClientSession: Connection changing (00000169DE8E8608): "ORAWADC001.DOMAIN.COM"
  804. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  805. 04/24 19:26:25 [PERF] [656] NlAllocateClientSession: New Perf Instance (00000169DE8E8608): "CH03ADC003.DOMAIN.COM"
  806. ClientSession: 00000169DE937210
  807. 04/24 19:26:25 [SESSION] [656] DOMAIN: NlDiscoverDc: Found DC CH03ADC003.DOMAIN.COM
  808. 04/24 19:26:25 [SESSION] [656] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  809. 04/24 19:26:25 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  810. 04/24 19:26:26 [DOMAIN] [656] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  811. 04/24 19:26:26 [LOGON] [656] NlSetForestTrustList: New trusted domain list:
  812. 04/24 19:26:26 [LOGON] [656] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  813. 04/24 19:26:26 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  814. 04/24 19:26:26 [LOGON] [656] Dom Sid: <DOMAIN SID>
  815. 04/24 19:26:26 [LOGON] [656] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  816. 04/24 19:26:26 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  817. 04/24 19:26:26 [LOGON] [656] Dom Sid: <DOMAIN SID>
  818. 04/24 19:26:26 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  819. 04/24 19:26:26 [SESSION] [656] DOMAIN: NlSessionSetup: Session setup Succeeded
  820. 04/24 19:26:26 [MISC] [656] DOMAIN: NlVerifyTrust: new-new password match (with trust attributes)
  821. 04/24 19:26:36 [CRITICAL] [612] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  822. 04/24 19:26:38 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  823. 04/24 19:26:38 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  824. 04/24 19:26:38 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  825. 04/24 19:26:38 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  826. 04/24 19:26:38 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  827. 04/24 19:26:38 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  828. 04/24 19:26:38 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  829. 04/24 19:26:38 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE96EFC0 )
  830. 04/24 19:26:38 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  831. 04/24 19:26:38 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  832. 04/24 19:27:15 [SESSION] [656] NETLOGON_CONTROL_TC_VERIFY function received.
  833. 04/24 19:27:15 [MISC] [656] DOMAIN: NlVerifyTrust: new-new password match (with trust attributes)
  834. 04/24 19:27:27 [MISC] [656] DsGetDcName function called: client PID=2108, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  835. 04/24 19:27:27 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  836. 04/24 19:27:28 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  837. 04/24 19:27:28 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DF78CA60 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  838. 04/24 19:27:28 [MISC] [656] NetpDcGetNameIp: DOMAIN.COM Trying to find a DC in a closer site: Datacenter-CHI
  839. 04/24 19:27:28 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.14
  840. 04/24 19:27:28 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DE897EB0 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  841. 04/24 19:27:28 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DF78CA60
  842. 04/24 19:27:28 [MISC] [656] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  843. 04/24 19:27:28 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86B4F0
  844. 04/24 19:27:28 [MISC] [656] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=CH03ADC004, SrvCount=2, FailedAQueryCount=0, DcsPinged=2, LoopIndex=0
  845. 04/24 19:27:28 [MISC] [656] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Datacenter-CHI ClientSiteName:Oracle-PHX
  846. 04/24 19:27:28 [MISC] [656] DsGetDcName function returns 0 (client PID=2108): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  847. 04/24 19:27:32 [MISC] [656] DsGetDcName function called: client PID=4340, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  848. 04/24 19:27:32 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  849. 04/24 19:27:32 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  850. 04/24 19:27:32 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DF78CA60 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  851. 04/24 19:27:32 [MISC] [656] NetpDcGetNameIp: DOMAIN.COM Trying to find a DC in a closer site: Datacenter-CHI
  852. 04/24 19:27:32 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.14
  853. 04/24 19:27:32 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DE986760 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  854. 04/24 19:27:32 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DF78CA60
  855. 04/24 19:27:32 [MISC] [656] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  856. 04/24 19:27:32 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DE897EB0
  857. 04/24 19:27:32 [MISC] [656] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=CH03ADC004, SrvCount=2, FailedAQueryCount=0, DcsPinged=2, LoopIndex=0
  858. 04/24 19:27:32 [MISC] [656] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Datacenter-CHI ClientSiteName:Oracle-PHX
  859. 04/24 19:27:32 [MISC] [656] DsGetDcName function returns 0 (client PID=4340): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  860. 04/24 19:30:55 [SESSION] [1684] DOMAIN: NlTimeoutApiClientSession: Unbind from server CH03ADC003.DOMAIN.COM (TCP) 0.
  861. 04/24 19:37:01 [MISC] [1984] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  862. 04/24 19:37:01 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  863. 04/24 19:37:01 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE986760 )
  864. 04/24 19:37:01 [MISC] [1984] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Datacenter-CHI ClientSiteName:Oracle-PHX
  865. 04/24 19:37:01 [MISC] [1984] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  866. 04/24 19:37:11 [SITE] [620] DsrGetSiteName: Site name 'Oracle-PHX' is old. Getting a new one from DC.
  867. 04/24 19:37:11 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  868. 04/24 19:37:11 [MAILSLOT] [620] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  869. 04/24 19:37:11 [MISC] [620] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRCH03ADC003.DOMAIN.COM
  870. 04/24 19:37:11 [MISC] [620] NetpDcAllocateCacheEntry: new entry 0x00000169DE897EB0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f17c
  871. 04/24 19:37:11 [MISC] [620] NlPingDcNameWithContext: TRCH03ADC003.DOMAIN.COM responded over IP.
  872. 04/24 19:37:11 [PERF] [620] NlSetServerClientSession: Not changing connection (00000169DE8E8608): "CH03ADC003.DOMAIN.COM"
  873. ClientSession: 00000169DE937210NetpDcDerefCacheEntry: destroying entry 0x00000169DE897EB0
  874. 04/24 19:37:11 [MISC] [620] DsGetDcName function called: client PID=964, Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF
  875. 04/24 19:37:11 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  876. 04/24 19:37:11 [MISC] [620] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE986760 )
  877. 04/24 19:37:11 [MISC] [620] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Datacenter-CHI ClientSiteName:Oracle-PHX
  878. 04/24 19:37:11 [MISC] [620] DsGetDcName function returns 0 (client PID=964): Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF
  879. 04/24 19:45:19 [MISC] [656] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: DS IP
  880. 04/24 19:45:19 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  881. 04/24 19:45:19 [MISC] [656] NetpDcGetName: DOMAIN.COM. cache not for closest site and it is too old. 1066938
  882. 04/24 19:45:19 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DE986760
  883. 04/24 19:45:19 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  884. 04/24 19:45:19 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DE898EC0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  885. 04/24 19:45:19 [MISC] [656] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  886. 04/24 19:45:19 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  887. 04/24 19:45:19 [MISC] [656] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: DS IP
  888. 04/24 19:45:19 [MISC] [656] DsGetDcName function called: client PID=4, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  889. 04/24 19:45:19 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  890. 04/24 19:45:19 [MISC] [656] NetpDcGetName: DOMAIN.COM cache not for closest site and it is too old. 1399406
  891. 04/24 19:45:19 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DE9579C0
  892. 04/24 19:45:19 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  893. 04/24 19:45:19 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DE98EC40 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  894. 04/24 19:45:19 [MISC] [656] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  895. 04/24 19:45:19 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  896. 04/24 19:45:19 [MISC] [656] DsGetDcName function returns 0 (client PID=4): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  897. 04/24 19:45:19 [MISC] [656] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: DS IP
  898. 04/24 19:45:19 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  899. 04/24 19:45:19 [MISC] [656] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE898EC0 )
  900. 04/24 19:45:19 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  901. 04/24 19:45:19 [MISC] [656] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: DS IP
  902. 04/24 19:45:19 [MISC] [656] DsGetDcName function called: client PID=2444, Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  903. 04/24 19:45:19 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  904. 04/24 19:45:19 [MISC] [656] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE898EC0 )
  905. 04/24 19:45:19 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  906. 04/24 19:45:19 [MISC] [656] DsGetDcName function returns 0 (client PID=2444): Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  907. 04/24 19:51:19 [MISC] [1984] DsGetDcName function called: client PID=5080, Dom:DOMAIN.COM Acct:(null) Flags:
  908. 04/24 19:51:19 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  909. 04/24 19:51:19 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE898EC0 )
  910. 04/24 19:51:19 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  911. 04/24 19:51:19 [MISC] [1984] DsGetDcName function returns 0 (client PID=5080): Dom:DOMAIN.COM Acct:(null) Flags:
  912. 04/24 19:51:23 [MISC] [1984] DsGetDcName function called: client PID=4584, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  913. 04/24 19:51:23 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  914. 04/24 19:51:23 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  915. 04/24 19:51:23 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DE89D230 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  916. 04/24 19:51:23 [MISC] [1984] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  917. 04/24 19:51:23 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DE898EC0
  918. 04/24 19:51:23 [MISC] [1984] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  919. 04/24 19:51:23 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  920. 04/24 19:51:23 [MISC] [1984] DsGetDcName function returns 0 (client PID=4584): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  921. 04/24 19:51:41 [SESSION] [612] NETLOGON_CONTROL_TC_VERIFY function received.
  922. 04/24 19:51:41 [SESSION] [612] DOMAIN: NlpEnsureSessionAuthenticated: Try to find a better DC for this operation. 0x8
  923. 04/24 19:51:41 [SESSION] [612] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  924. 04/24 19:51:41 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  925. 04/24 19:51:41 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  926. 04/24 19:51:41 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DE9705B0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  927. 04/24 19:51:41 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  928. 04/24 19:51:41 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DE89D230
  929. 04/24 19:51:41 [MISC] [612] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  930. 04/24 19:51:41 [SESSION] [612] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  931. 04/24 19:51:41 [PERF] [612] NlSetServerClientSession: Connection changing (00000169DE8E8608): "CH03ADC003.DOMAIN.COM"
  932. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  933. 04/24 19:51:41 [PERF] [612] NlAllocateClientSession: New Perf Instance (00000169DE8E8608): "ORAWADC001.DOMAIN.COM"
  934. ClientSession: 00000169DE937210
  935. 04/24 19:51:41 [SESSION] [612] DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  936. 04/24 19:51:41 [SESSION] [612] DOMAIN: NlSessionSetup: Try Session setup
  937. 04/24 19:51:41 [CRITICAL] [612] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  938. 04/24 19:51:41 [CRITICAL] [612] [0] ProcessID is 572
  939. 04/24 19:51:41 [CRITICAL] [612] [0] System Time is: 4/24/2019 23:51:41:363
  940. 04/24 19:51:41 [CRITICAL] [612] [0] Generating component is 2
  941. 04/24 19:51:41 [CRITICAL] [612] [0] Status is 5
  942. 04/24 19:51:41 [CRITICAL] [612] [0] Detection location is 501
  943. 04/24 19:51:41 [CRITICAL] [612] [0] Flags is 0
  944. 04/24 19:51:41 [CRITICAL] [612] [0] NumberOfParameters is 4
  945. 04/24 19:51:41 [CRITICAL] [612] Unicode string: ncacn_ip_tcp
  946. 04/24 19:51:41 [CRITICAL] [612] Unicode string: TRORAWADC001.DOMAIN.COM
  947. 04/24 19:51:41 [CRITICAL] [612] Long val: 305419896
  948. 04/24 19:51:41 [CRITICAL] [612] Long val: 5
  949. 04/24 19:51:41 [CRITICAL] [612] [1] ProcessID is 572
  950. 04/24 19:51:41 [CRITICAL] [612] [1] System Time is: 4/24/2019 23:51:41:363
  951. 04/24 19:51:41 [CRITICAL] [612] [1] Generating component is 2
  952. 04/24 19:51:41 [CRITICAL] [612] [1] Status is 5
  953. 04/24 19:51:41 [CRITICAL] [612] [1] Detection location is 1750
  954. 04/24 19:51:41 [CRITICAL] [612] [1] Flags is 0
  955. 04/24 19:51:41 [CRITICAL] [612] [1] NumberOfParameters is 1
  956. 04/24 19:51:41 [CRITICAL] [612] Long val: 5
  957. 04/24 19:51:41 [CRITICAL] [612] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  958. 04/24 19:51:41 [CRITICAL] [612] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  959. 04/24 19:51:41 [CRITICAL] [612] [0] ProcessID is 572
  960. 04/24 19:51:41 [CRITICAL] [612] [0] System Time is: 4/24/2019 23:51:41:363
  961. 04/24 19:51:41 [CRITICAL] [612] [0] Generating component is 2
  962. 04/24 19:51:41 [CRITICAL] [612] [0] Status is 5
  963. 04/24 19:51:41 [CRITICAL] [612] [0] Detection location is 501
  964. 04/24 19:51:41 [CRITICAL] [612] [0] Flags is 0
  965. 04/24 19:51:41 [CRITICAL] [612] [0] NumberOfParameters is 4
  966. 04/24 19:51:41 [CRITICAL] [612] Unicode string: ncacn_ip_tcp
  967. 04/24 19:51:41 [CRITICAL] [612] Unicode string: TRORAWADC001.DOMAIN.COM
  968. 04/24 19:51:41 [CRITICAL] [612] Long val: 305419896
  969. 04/24 19:51:41 [CRITICAL] [612] Long val: 5
  970. 04/24 19:51:41 [CRITICAL] [612] [1] ProcessID is 572
  971. 04/24 19:51:41 [CRITICAL] [612] [1] System Time is: 4/24/2019 23:51:41:363
  972. 04/24 19:51:41 [CRITICAL] [612] [1] Generating component is 2
  973. 04/24 19:51:41 [CRITICAL] [612] [1] Status is 5
  974. 04/24 19:51:41 [CRITICAL] [612] [1] Detection location is 1750
  975. 04/24 19:51:41 [CRITICAL] [612] [1] Flags is 0
  976. 04/24 19:51:41 [CRITICAL] [612] [1] NumberOfParameters is 1
  977. 04/24 19:51:41 [CRITICAL] [612] Long val: 5
  978. 04/24 19:51:41 [CRITICAL] [612] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  979. 04/24 19:51:41 [MISC] [612] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  980. 04/24 19:51:41 [MISC] [612] Didn't log event since it was already logged.
  981. 04/24 19:51:41 [SESSION] [612] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  982. 04/24 19:51:41 [SESSION] [612] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  983. 04/24 19:51:41 [SESSION] [612] DOMAIN: NlSessionSetup: Session setup Failed
  984. 04/24 19:51:41 [CRITICAL] [612] DOMAIN: NlGetTrustedSideInfo: (null): failed C0000022
  985. 04/24 19:52:01 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  986. 04/24 19:52:01 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  987. 04/24 19:52:01 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE9705B0 )
  988. 04/24 19:52:01 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  989. 04/24 19:52:01 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  990. 04/24 19:52:09 [SESSION] [1984] NETLOGON_CONTROL_REDISCOVER function received.
  991. 04/24 19:52:09 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  992. 04/24 19:52:09 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  993. 04/24 19:52:09 [MISC] [1984] NlPingDcNameWithContext: Sent 1/1 ldap pings to trorawadc001
  994. 04/24 19:52:09 [MAILSLOT] [1984] NlPingDcNameWithContext: Sent 'Sam Logon' message to trorawadc001[00] on NULL.
  995. 04/24 19:52:09 [CRITICAL] [1984] NlBrowserSendDatagram: No transports available
  996. 04/24 19:52:09 [CRITICAL] [1984] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  997. 04/24 19:52:09 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DE898EC0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  998. 04/24 19:52:09 [MISC] [1984] NlPingDcNameWithContext: trorawadc001 responded over IP.
  999. 04/24 19:52:09 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DE9705B0
  1000. 04/24 19:52:09 [MISC] [1984] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for trorawadc001
  1001. 04/24 19:52:09 [SESSION] [1984] DOMAIN: NetrLogonControl: Successful response from DC trorawadc001
  1002. 04/24 19:52:09 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1003. 04/24 19:52:09 [PERF] [1984] NlSetServerClientSession: Not changing connection (00000169DE8E8608): "ORAWADC001.DOMAIN.COM"
  1004. ClientSession: 00000169DE937210DOMAIN: NlSessionSetup: Try Session setup
  1005. 04/24 19:52:09 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1006. 04/24 19:52:09 [CRITICAL] [1984] [0] ProcessID is 572
  1007. 04/24 19:52:09 [CRITICAL] [1984] [0] System Time is: 4/24/2019 23:52:9:597
  1008. 04/24 19:52:09 [CRITICAL] [1984] [0] Generating component is 2
  1009. 04/24 19:52:09 [CRITICAL] [1984] [0] Status is 5
  1010. 04/24 19:52:09 [CRITICAL] [1984] [0] Detection location is 501
  1011. 04/24 19:52:09 [CRITICAL] [1984] [0] Flags is 0
  1012. 04/24 19:52:09 [CRITICAL] [1984] [0] NumberOfParameters is 4
  1013. 04/24 19:52:09 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  1014. 04/24 19:52:09 [CRITICAL] [1984] Unicode string: TRORAWADC001.DOMAIN.COM
  1015. 04/24 19:52:09 [CRITICAL] [1984] Long val: 305419896
  1016. 04/24 19:52:09 [CRITICAL] [1984] Long val: 5
  1017. 04/24 19:52:09 [CRITICAL] [1984] [1] ProcessID is 572
  1018. 04/24 19:52:09 [CRITICAL] [1984] [1] System Time is: 4/24/2019 23:52:9:597
  1019. 04/24 19:52:09 [CRITICAL] [1984] [1] Generating component is 2
  1020. 04/24 19:52:09 [CRITICAL] [1984] [1] Status is 5
  1021. 04/24 19:52:09 [CRITICAL] [1984] [1] Detection location is 1750
  1022. 04/24 19:52:09 [CRITICAL] [1984] [1] Flags is 0
  1023. 04/24 19:52:09 [CRITICAL] [1984] [1] NumberOfParameters is 1
  1024. 04/24 19:52:09 [CRITICAL] [1984] Long val: 5
  1025. 04/24 19:52:09 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1026. 04/24 19:52:09 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1027. 04/24 19:52:09 [CRITICAL] [1984] [0] ProcessID is 572
  1028. 04/24 19:52:09 [CRITICAL] [1984] [0] System Time is: 4/24/2019 23:52:9:597
  1029. 04/24 19:52:09 [CRITICAL] [1984] [0] Generating component is 2
  1030. 04/24 19:52:09 [CRITICAL] [1984] [0] Status is 5
  1031. 04/24 19:52:09 [CRITICAL] [1984] [0] Detection location is 501
  1032. 04/24 19:52:09 [CRITICAL] [1984] [0] Flags is 0
  1033. 04/24 19:52:09 [CRITICAL] [1984] [0] NumberOfParameters is 4
  1034. 04/24 19:52:09 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  1035. 04/24 19:52:09 [CRITICAL] [1984] Unicode string: TRORAWADC001.DOMAIN.COM
  1036. 04/24 19:52:09 [CRITICAL] [1984] Long val: 305419896
  1037. 04/24 19:52:09 [CRITICAL] [1984] Long val: 5
  1038. 04/24 19:52:09 [CRITICAL] [1984] [1] ProcessID is 572
  1039. 04/24 19:52:09 [CRITICAL] [1984] [1] System Time is: 4/24/2019 23:52:9:597
  1040. 04/24 19:52:09 [CRITICAL] [1984] [1] Generating component is 2
  1041. 04/24 19:52:09 [CRITICAL] [1984] [1] Status is 5
  1042. 04/24 19:52:09 [CRITICAL] [1984] [1] Detection location is 1750
  1043. 04/24 19:52:09 [CRITICAL] [1984] [1] Flags is 0
  1044. 04/24 19:52:09 [CRITICAL] [1984] [1] NumberOfParameters is 1
  1045. 04/24 19:52:09 [CRITICAL] [1984] Long val: 5
  1046. 04/24 19:52:09 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1047. 04/24 19:52:09 [MISC] [1984] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  1048. 04/24 19:52:09 [MISC] [1984] Didn't log event since it was already logged.
  1049. 04/24 19:52:09 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  1050. 04/24 19:52:09 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  1051. 04/24 19:52:09 [SESSION] [1984] DOMAIN: NlSessionSetup: Session setup Failed
  1052. 04/24 19:52:09 [CRITICAL] [1984] DOMAIN: NetrLogonControl: Discovery failed c0000022
  1053. 04/24 19:52:17 [SESSION] [656] NETLOGON_CONTROL_REDISCOVER function received.
  1054. 04/24 19:52:17 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1055. 04/24 19:52:17 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  1056. 04/24 19:52:17 [MISC] [656] NlPingDcNameWithContext: Sent 1/1 ldap pings to trch03adc004
  1057. 04/24 19:52:17 [MAILSLOT] [656] NlPingDcNameWithContext: Sent 'Sam Logon' message to trch03adc004[00] on NULL.
  1058. 04/24 19:52:17 [CRITICAL] [656] NlBrowserSendDatagram: No transports available
  1059. 04/24 19:52:17 [CRITICAL] [656] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1060. 04/24 19:52:17 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DE9705B0 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1061. 04/24 19:52:17 [MISC] [656] NlPingDcNameWithContext: trch03adc004 responded over IP.
  1062. 04/24 19:52:17 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DE898EC0
  1063. 04/24 19:52:17 [MISC] [656] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for trch03adc004
  1064. 04/24 19:52:17 [SESSION] [656] DOMAIN: NetrLogonControl: Successful response from DC trch03adc004
  1065. 04/24 19:52:17 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1066. 04/24 19:52:17 [PERF] [656] NlSetServerClientSession: Connection changing (00000169DE8E8608): "ORAWADC001.DOMAIN.COM"
  1067. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1068. 04/24 19:52:17 [PERF] [656] NlAllocateClientSession: New Perf Instance (00000169DE8E8608): "CH03ADC004.DOMAIN.COM"
  1069. ClientSession: 00000169DE937210
  1070. 04/24 19:52:17 [SESSION] [656] DOMAIN: NlSessionSetup: Try Session setup
  1071. 04/24 19:52:17 [CRITICAL] [656] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1072. 04/24 19:52:17 [CRITICAL] [656] [0] ProcessID is 572
  1073. 04/24 19:52:17 [CRITICAL] [656] [0] System Time is: 4/24/2019 23:52:17:394
  1074. 04/24 19:52:17 [CRITICAL] [656] [0] Generating component is 2
  1075. 04/24 19:52:17 [CRITICAL] [656] [0] Status is 5
  1076. 04/24 19:52:17 [CRITICAL] [656] [0] Detection location is 501
  1077. 04/24 19:52:17 [CRITICAL] [656] [0] Flags is 0
  1078. 04/24 19:52:17 [CRITICAL] [656] [0] NumberOfParameters is 4
  1079. 04/24 19:52:17 [CRITICAL] [656] Unicode string: ncacn_ip_tcp
  1080. 04/24 19:52:17 [CRITICAL] [656] Unicode string: TRCH03ADC004.DOMAIN.COM
  1081. 04/24 19:52:17 [CRITICAL] [656] Long val: 305419896
  1082. 04/24 19:52:17 [CRITICAL] [656] Long val: 5
  1083. 04/24 19:52:17 [CRITICAL] [656] [1] ProcessID is 572
  1084. 04/24 19:52:17 [CRITICAL] [656] [1] System Time is: 4/24/2019 23:52:17:394
  1085. 04/24 19:52:17 [CRITICAL] [656] [1] Generating component is 2
  1086. 04/24 19:52:17 [CRITICAL] [656] [1] Status is 5
  1087. 04/24 19:52:17 [CRITICAL] [656] [1] Detection location is 1750
  1088. 04/24 19:52:17 [CRITICAL] [656] [1] Flags is 0
  1089. 04/24 19:52:17 [CRITICAL] [656] [1] NumberOfParameters is 1
  1090. 04/24 19:52:17 [CRITICAL] [656] Long val: 5
  1091. 04/24 19:52:17 [CRITICAL] [656] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1092. 04/24 19:52:17 [CRITICAL] [656] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1093. 04/24 19:52:17 [CRITICAL] [656] [0] ProcessID is 572
  1094. 04/24 19:52:17 [CRITICAL] [656] [0] System Time is: 4/24/2019 23:52:17:519
  1095. 04/24 19:52:17 [CRITICAL] [656] [0] Generating component is 2
  1096. 04/24 19:52:17 [CRITICAL] [656] [0] Status is 5
  1097. 04/24 19:52:17 [CRITICAL] [656] [0] Detection location is 501
  1098. 04/24 19:52:17 [CRITICAL] [656] [0] Flags is 0
  1099. 04/24 19:52:17 [CRITICAL] [656] [0] NumberOfParameters is 4
  1100. 04/24 19:52:17 [CRITICAL] [656] Unicode string: ncacn_ip_tcp
  1101. 04/24 19:52:17 [CRITICAL] [656] Unicode string: TRCH03ADC004.DOMAIN.COM
  1102. 04/24 19:52:17 [CRITICAL] [656] Long val: 305419896
  1103. 04/24 19:52:17 [CRITICAL] [656] Long val: 5
  1104. 04/24 19:52:17 [CRITICAL] [656] [1] ProcessID is 572
  1105. 04/24 19:52:17 [CRITICAL] [656] [1] System Time is: 4/24/2019 23:52:17:519
  1106. 04/24 19:52:17 [CRITICAL] [656] [1] Generating component is 2
  1107. 04/24 19:52:17 [CRITICAL] [656] [1] Status is 5
  1108. 04/24 19:52:17 [CRITICAL] [656] [1] Detection location is 1750
  1109. 04/24 19:52:17 [CRITICAL] [656] [1] Flags is 0
  1110. 04/24 19:52:17 [CRITICAL] [656] [1] NumberOfParameters is 1
  1111. 04/24 19:52:17 [CRITICAL] [656] Long val: 5
  1112. 04/24 19:52:17 [CRITICAL] [656] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1113. 04/24 19:52:17 [MISC] [656] Eventlog: 3210 (1) "DOMAIN" "CH03ADC004.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  1114. 04/24 19:52:17 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  1115. 04/24 19:52:17 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Unbind from server CH03ADC004.DOMAIN.COM (TCP) 0.
  1116. 04/24 19:52:17 [SESSION] [656] DOMAIN: NlSessionSetup: Session setup Failed
  1117. 04/24 19:52:17 [CRITICAL] [656] DOMAIN: NetrLogonControl: Discovery failed c0000022
  1118. 04/24 19:52:19 [SESSION] [656] NETLOGON_CONTROL_REDISCOVER function received.
  1119. 04/24 19:52:19 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1120. 04/24 19:52:19 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  1121. 04/24 19:52:19 [MISC] [656] NlPingDcNameWithContext: Sent 1/1 ldap pings to trch03adc003
  1122. 04/24 19:52:19 [MAILSLOT] [656] NlPingDcNameWithContext: Sent 'Sam Logon' message to trch03adc003[00] on NULL.
  1123. 04/24 19:52:19 [CRITICAL] [656] NlBrowserSendDatagram: No transports available
  1124. 04/24 19:52:19 [CRITICAL] [656] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1125. 04/24 19:52:19 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DE898EC0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1126. 04/24 19:52:19 [MISC] [656] NlPingDcNameWithContext: trch03adc003 responded over IP.
  1127. 04/24 19:52:19 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DE9705B0
  1128. 04/24 19:52:19 [MISC] [656] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for trch03adc003
  1129. 04/24 19:52:19 [SESSION] [656] DOMAIN: NetrLogonControl: Successful response from DC trch03adc003
  1130. 04/24 19:52:19 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1131. 04/24 19:52:19 [PERF] [656] NlSetServerClientSession: Connection changing (00000169DE8E8608): "CH03ADC004.DOMAIN.COM"
  1132. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1133. 04/24 19:52:19 [PERF] [656] NlAllocateClientSession: New Perf Instance (00000169DE8E8608): "CH03ADC003.DOMAIN.COM"
  1134. ClientSession: 00000169DE937210
  1135. 04/24 19:52:19 [SESSION] [656] DOMAIN: NlSessionSetup: Try Session setup
  1136. 04/24 19:52:19 [SESSION] [656] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  1137. 04/24 19:52:19 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1138. 04/24 19:52:20 [DOMAIN] [656] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  1139. 04/24 19:52:20 [LOGON] [656] NlSetForestTrustList: New trusted domain list:
  1140. 04/24 19:52:20 [LOGON] [656] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  1141. 04/24 19:52:20 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  1142. 04/24 19:52:20 [LOGON] [656] Dom Sid: <DOMAIN SID>
  1143. 04/24 19:52:20 [LOGON] [656] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  1144. 04/24 19:52:20 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  1145. 04/24 19:52:20 [LOGON] [656] Dom Sid: <DOMAIN SID>
  1146. 04/24 19:52:20 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1147. 04/24 19:52:20 [SESSION] [656] DOMAIN: NlSessionSetup: Session setup Succeeded
  1148. 04/24 19:52:38 [SESSION] [656] NETLOGON_CONTROL_REDISCOVER function received.
  1149. 04/24 19:52:38 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1150. 04/24 19:52:38 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  1151. 04/24 19:52:38 [MISC] [656] NlPingDcNameWithContext: Sent 1/1 ldap pings to 11adc003
  1152. 04/24 19:52:38 [MAILSLOT] [656] NlPingDcNameWithContext: Sent 'Sam Logon' message to 11adc003[00] on NULL.
  1153. 04/24 19:52:38 [CRITICAL] [656] NlBrowserSendDatagram: No transports available
  1154. 04/24 19:52:38 [CRITICAL] [656] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1155. 04/24 19:52:38 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DE9705B0 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  1156. 04/24 19:52:38 [MISC] [656] NlPingDcNameWithContext: 11adc003 responded over IP.
  1157. 04/24 19:52:38 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DE898EC0
  1158. 04/24 19:52:38 [MISC] [656] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for 11adc003
  1159. 04/24 19:52:38 [SESSION] [656] DOMAIN: NetrLogonControl: Successful response from DC 11adc003
  1160. 04/24 19:52:38 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1161. 04/24 19:52:38 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Unbind from server CH03ADC003.DOMAIN.COM (TCP) 0.
  1162. 04/24 19:52:38 [PERF] [656] NlSetServerClientSession: Connection changing (00000169DE8E8608): "CH03ADC003.DOMAIN.COM"
  1163. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1164. 04/24 19:52:38 [PERF] [656] NlAllocateClientSession: New Perf Instance (00000169DE8E8608): "\\11ADC003.DOMAIN.COM"
  1165. ClientSession: 00000169DE937210
  1166. 04/24 19:52:38 [SESSION] [656] DOMAIN: NlSessionSetup: Try Session setup
  1167. 04/24 19:52:38 [SESSION] [656] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  1168. 04/24 19:52:38 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1169. 04/24 19:52:39 [DOMAIN] [656] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  1170. 04/24 19:52:39 [LOGON] [656] NlSetForestTrustList: New trusted domain list:
  1171. 04/24 19:52:39 [LOGON] [656] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  1172. 04/24 19:52:39 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  1173. 04/24 19:52:39 [LOGON] [656] Dom Sid: <DOMAIN SID>
  1174. 04/24 19:52:39 [LOGON] [656] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  1175. 04/24 19:52:39 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  1176. 04/24 19:52:39 [LOGON] [656] Dom Sid: <DOMAIN SID>
  1177. 04/24 19:52:39 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1178. 04/24 19:52:39 [SESSION] [656] DOMAIN: NlSessionSetup: Session setup Succeeded
  1179. 04/24 19:52:40 [SESSION] [656] NETLOGON_CONTROL_REDISCOVER function received.
  1180. 04/24 19:52:40 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1181. 04/24 19:52:40 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.14
  1182. 04/24 19:52:40 [MISC] [656] NlPingDcNameWithContext: Sent 1/1 ldap pings to 11adc004
  1183. 04/24 19:52:40 [MAILSLOT] [656] NlPingDcNameWithContext: Sent 'Sam Logon' message to 11adc004[00] on NULL.
  1184. 04/24 19:52:40 [CRITICAL] [656] NlBrowserSendDatagram: No transports available
  1185. 04/24 19:52:40 [CRITICAL] [656] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1186. 04/24 19:52:40 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DE898EC0 -> DC:11ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1187. 04/24 19:52:40 [MISC] [656] NlPingDcNameWithContext: 11adc004 responded over IP.
  1188. 04/24 19:52:40 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DE9705B0
  1189. 04/24 19:52:40 [MISC] [656] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for 11adc004
  1190. 04/24 19:52:40 [SESSION] [656] DOMAIN: NetrLogonControl: Successful response from DC 11adc004
  1191. 04/24 19:52:40 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1192. 04/24 19:52:40 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Unbind from server \\11ADC003.DOMAIN.COM (TCP) 0.
  1193. 04/24 19:52:40 [PERF] [656] NlSetServerClientSession: Connection changing (00000169DE8E8608): "\\11ADC003.DOMAIN.COM"
  1194. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1195. 04/24 19:52:40 [PERF] [656] NlAllocateClientSession: New Perf Instance (00000169DE8E8608): "\\11ADC004.DOMAIN.COM"
  1196. ClientSession: 00000169DE937210
  1197. 04/24 19:52:40 [SESSION] [656] DOMAIN: NlSessionSetup: Try Session setup
  1198. 04/24 19:52:41 [SESSION] [656] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  1199. 04/24 19:52:41 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1200. 04/24 19:52:41 [DOMAIN] [656] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  1201. 04/24 19:52:41 [LOGON] [656] NlSetForestTrustList: New trusted domain list:
  1202. 04/24 19:52:41 [LOGON] [656] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  1203. 04/24 19:52:41 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  1204. 04/24 19:52:41 [LOGON] [656] Dom Sid: <DOMAIN SID>
  1205. 04/24 19:52:41 [LOGON] [656] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  1206. 04/24 19:52:41 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  1207. 04/24 19:52:41 [LOGON] [656] Dom Sid: <DOMAIN SID>
  1208. 04/24 19:52:41 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1209. 04/24 19:52:41 [SESSION] [656] DOMAIN: NlSessionSetup: Session setup Succeeded
  1210. 04/24 19:54:31 [SESSION] [1984] NETLOGON_CONTROL_TC_QUERY function received.
  1211. 04/24 19:55:30 [SESSION] [656] NETLOGON_CONTROL_CHANGE_PASSWORD function received.
  1212. 04/24 19:55:30 [SESSION] [656] DOMAIN: NlChangePassword: Doing it.
  1213. 04/24 19:55:30 [SESSION] [656] DOMAIN: NlChangePassword: Successful response from DC \\11ADC004.DOMAIN.COM
  1214. 04/24 19:55:30 [SESSION] [656] DOMAIN: NlChangePassword: Flag password changed in LsaSecret
  1215. 04/24 19:55:31 [SESSION] [656] DOMAIN: NlChangePassword: Flag password updated on DC
  1216. 04/24 19:55:31 [MISC] [656] Eventlog: 5823 (4) "\\11ADC004.DOMAIN.COM"
  1217. 04/24 19:55:37 [SESSION] [1984] NETLOGON_CONTROL_REDISCOVER function received.
  1218. 04/24 19:55:37 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1219. 04/24 19:55:37 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  1220. 04/24 19:55:37 [MISC] [1984] NlPingDcNameWithContext: Sent 1/1 ldap pings to trch03adc004
  1221. 04/24 19:55:37 [MAILSLOT] [1984] NlPingDcNameWithContext: Sent 'Sam Logon' message to trch03adc004[00] on NULL.
  1222. 04/24 19:55:37 [CRITICAL] [1984] NlBrowserSendDatagram: No transports available
  1223. 04/24 19:55:37 [CRITICAL] [1984] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1224. 04/24 19:55:37 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DF9E2300 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1225. 04/24 19:55:37 [MISC] [1984] NlPingDcNameWithContext: trch03adc004 responded over IP.
  1226. 04/24 19:55:37 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DE898EC0
  1227. 04/24 19:55:37 [MISC] [1984] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for trch03adc004
  1228. 04/24 19:55:37 [SESSION] [1984] DOMAIN: NetrLogonControl: Successful response from DC trch03adc004
  1229. 04/24 19:55:37 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1230. 04/24 19:55:37 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Unbind from server \\11ADC004.DOMAIN.COM (TCP) 0.
  1231. 04/24 19:55:37 [PERF] [1984] NlSetServerClientSession: Connection changing (00000169DE8E8608): "\\11ADC004.DOMAIN.COM"
  1232. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1233. 04/24 19:55:37 [PERF] [1984] NlAllocateClientSession: New Perf Instance (00000169DFA03B98): "CH03ADC004.DOMAIN.COM"
  1234. ClientSession: 00000169DE937210
  1235. 04/24 19:55:37 [SESSION] [1984] DOMAIN: NlSessionSetup: Try Session setup
  1236. 04/24 19:55:37 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1237. 04/24 19:55:37 [CRITICAL] [1984] [0] ProcessID is 572
  1238. 04/24 19:55:37 [CRITICAL] [1984] [0] System Time is: 4/24/2019 23:55:37:847
  1239. 04/24 19:55:37 [CRITICAL] [1984] [0] Generating component is 2
  1240. 04/24 19:55:37 [CRITICAL] [1984] [0] Status is 5
  1241. 04/24 19:55:37 [CRITICAL] [1984] [0] Detection location is 501
  1242. 04/24 19:55:37 [CRITICAL] [1984] [0] Flags is 0
  1243. 04/24 19:55:37 [CRITICAL] [1984] [0] NumberOfParameters is 4
  1244. 04/24 19:55:37 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  1245. 04/24 19:55:37 [CRITICAL] [1984] Unicode string: TRCH03ADC004.DOMAIN.COM
  1246. 04/24 19:55:37 [CRITICAL] [1984] Long val: 305419896
  1247. 04/24 19:55:37 [CRITICAL] [1984] Long val: 5
  1248. 04/24 19:55:37 [CRITICAL] [1984] [1] ProcessID is 572
  1249. 04/24 19:55:37 [CRITICAL] [1984] [1] System Time is: 4/24/2019 23:55:37:847
  1250. 04/24 19:55:37 [CRITICAL] [1984] [1] Generating component is 2
  1251. 04/24 19:55:37 [CRITICAL] [1984] [1] Status is 5
  1252. 04/24 19:55:37 [CRITICAL] [1984] [1] Detection location is 1750
  1253. 04/24 19:55:37 [CRITICAL] [1984] [1] Flags is 0
  1254. 04/24 19:55:37 [CRITICAL] [1984] [1] NumberOfParameters is 1
  1255. 04/24 19:55:37 [CRITICAL] [1984] Long val: 5
  1256. 04/24 19:55:37 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1257. 04/24 19:55:37 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1258. 04/24 19:55:37 [CRITICAL] [1984] [0] ProcessID is 572
  1259. 04/24 19:55:37 [CRITICAL] [1984] [0] System Time is: 4/24/2019 23:55:37:972
  1260. 04/24 19:55:37 [CRITICAL] [1984] [0] Generating component is 2
  1261. 04/24 19:55:37 [CRITICAL] [1984] [0] Status is 5
  1262. 04/24 19:55:37 [CRITICAL] [1984] [0] Detection location is 501
  1263. 04/24 19:55:37 [CRITICAL] [1984] [0] Flags is 0
  1264. 04/24 19:55:37 [CRITICAL] [1984] [0] NumberOfParameters is 4
  1265. 04/24 19:55:37 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  1266. 04/24 19:55:37 [CRITICAL] [1984] Unicode string: TRCH03ADC004.DOMAIN.COM
  1267. 04/24 19:55:37 [CRITICAL] [1984] Long val: 305419896
  1268. 04/24 19:55:37 [CRITICAL] [1984] Long val: 5
  1269. 04/24 19:55:37 [CRITICAL] [1984] [1] ProcessID is 572
  1270. 04/24 19:55:37 [CRITICAL] [1984] [1] System Time is: 4/24/2019 23:55:37:972
  1271. 04/24 19:55:37 [CRITICAL] [1984] [1] Generating component is 2
  1272. 04/24 19:55:37 [CRITICAL] [1984] [1] Status is 5
  1273. 04/24 19:55:37 [CRITICAL] [1984] [1] Detection location is 1750
  1274. 04/24 19:55:37 [CRITICAL] [1984] [1] Flags is 0
  1275. 04/24 19:55:37 [CRITICAL] [1984] [1] NumberOfParameters is 1
  1276. 04/24 19:55:37 [CRITICAL] [1984] Long val: 5
  1277. 04/24 19:55:37 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1278. 04/24 19:55:37 [MISC] [1984] Eventlog: 3210 (1) "DOMAIN" "CH03ADC004.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  1279. 04/24 19:55:37 [MISC] [1984] Didn't log event since it was already logged.
  1280. 04/24 19:55:37 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  1281. 04/24 19:55:37 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Unbind from server CH03ADC004.DOMAIN.COM (TCP) 0.
  1282. 04/24 19:55:37 [SESSION] [1984] DOMAIN: NlSessionSetup: Session setup Failed
  1283. 04/24 19:55:37 [CRITICAL] [1984] DOMAIN: NetrLogonControl: Discovery failed c0000022
  1284. 04/24 19:55:40 [SESSION] [1984] NETLOGON_CONTROL_REDISCOVER function received.
  1285. 04/24 19:55:40 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1286. 04/24 19:55:40 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  1287. 04/24 19:55:40 [MISC] [1984] NlPingDcNameWithContext: Sent 1/1 ldap pings to trch03adc004
  1288. 04/24 19:55:40 [MAILSLOT] [1984] NlPingDcNameWithContext: Sent 'Sam Logon' message to trch03adc004[00] on NULL.
  1289. 04/24 19:55:40 [CRITICAL] [1984] NlBrowserSendDatagram: No transports available
  1290. 04/24 19:55:40 [CRITICAL] [1984] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1291. 04/24 19:55:40 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DF7C4490 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1292. 04/24 19:55:40 [MISC] [1984] NlPingDcNameWithContext: trch03adc004 responded over IP.
  1293. 04/24 19:55:40 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DF9E2300
  1294. 04/24 19:55:40 [MISC] [1984] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for trch03adc004
  1295. 04/24 19:55:40 [SESSION] [1984] DOMAIN: NetrLogonControl: Successful response from DC trch03adc004
  1296. 04/24 19:55:40 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1297. 04/24 19:55:40 [PERF] [1984] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "CH03ADC004.DOMAIN.COM"
  1298. ClientSession: 00000169DE937210DOMAIN: NlSessionSetup: Try Session setup
  1299. 04/24 19:55:40 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1300. 04/24 19:55:40 [CRITICAL] [1984] [0] ProcessID is 572
  1301. 04/24 19:55:40 [CRITICAL] [1984] [0] System Time is: 4/24/2019 23:55:40:613
  1302. 04/24 19:55:40 [CRITICAL] [1984] [0] Generating component is 2
  1303. 04/24 19:55:40 [CRITICAL] [1984] [0] Status is 5
  1304. 04/24 19:55:40 [CRITICAL] [1984] [0] Detection location is 501
  1305. 04/24 19:55:40 [CRITICAL] [1984] [0] Flags is 0
  1306. 04/24 19:55:40 [CRITICAL] [1984] [0] NumberOfParameters is 4
  1307. 04/24 19:55:40 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  1308. 04/24 19:55:40 [CRITICAL] [1984] Unicode string: TRCH03ADC004.DOMAIN.COM
  1309. 04/24 19:55:40 [CRITICAL] [1984] Long val: 305419896
  1310. 04/24 19:55:40 [CRITICAL] [1984] Long val: 5
  1311. 04/24 19:55:40 [CRITICAL] [1984] [1] ProcessID is 572
  1312. 04/24 19:55:40 [CRITICAL] [1984] [1] System Time is: 4/24/2019 23:55:40:613
  1313. 04/24 19:55:40 [CRITICAL] [1984] [1] Generating component is 2
  1314. 04/24 19:55:40 [CRITICAL] [1984] [1] Status is 5
  1315. 04/24 19:55:40 [CRITICAL] [1984] [1] Detection location is 1750
  1316. 04/24 19:55:40 [CRITICAL] [1984] [1] Flags is 0
  1317. 04/24 19:55:40 [CRITICAL] [1984] [1] NumberOfParameters is 1
  1318. 04/24 19:55:40 [CRITICAL] [1984] Long val: 5
  1319. 04/24 19:55:40 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1320. 04/24 19:55:40 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1321. 04/24 19:55:40 [CRITICAL] [1984] [0] ProcessID is 572
  1322. 04/24 19:55:40 [CRITICAL] [1984] [0] System Time is: 4/24/2019 23:55:40:738
  1323. 04/24 19:55:40 [CRITICAL] [1984] [0] Generating component is 2
  1324. 04/24 19:55:40 [CRITICAL] [1984] [0] Status is 5
  1325. 04/24 19:55:40 [CRITICAL] [1984] [0] Detection location is 501
  1326. 04/24 19:55:40 [CRITICAL] [1984] [0] Flags is 0
  1327. 04/24 19:55:40 [CRITICAL] [1984] [0] NumberOfParameters is 4
  1328. 04/24 19:55:40 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  1329. 04/24 19:55:40 [CRITICAL] [1984] Unicode string: TRCH03ADC004.DOMAIN.COM
  1330. 04/24 19:55:40 [CRITICAL] [1984] Long val: 305419896
  1331. 04/24 19:55:40 [CRITICAL] [1984] Long val: 5
  1332. 04/24 19:55:40 [CRITICAL] [1984] [1] ProcessID is 572
  1333. 04/24 19:55:40 [CRITICAL] [1984] [1] System Time is: 4/24/2019 23:55:40:738
  1334. 04/24 19:55:40 [CRITICAL] [1984] [1] Generating component is 2
  1335. 04/24 19:55:40 [CRITICAL] [1984] [1] Status is 5
  1336. 04/24 19:55:40 [CRITICAL] [1984] [1] Detection location is 1750
  1337. 04/24 19:55:40 [CRITICAL] [1984] [1] Flags is 0
  1338. 04/24 19:55:40 [CRITICAL] [1984] [1] NumberOfParameters is 1
  1339. 04/24 19:55:40 [CRITICAL] [1984] Long val: 5
  1340. 04/24 19:55:40 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1341. 04/24 19:55:40 [MISC] [1984] Eventlog: 3210 (1) "DOMAIN" "CH03ADC004.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  1342. 04/24 19:55:40 [MISC] [1984] Didn't log event since it was already logged.
  1343. 04/24 19:55:40 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  1344. 04/24 19:55:40 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Unbind from server CH03ADC004.DOMAIN.COM (TCP) 0.
  1345. 04/24 19:55:40 [SESSION] [1984] DOMAIN: NlSessionSetup: Session setup Failed
  1346. 04/24 19:55:40 [CRITICAL] [1984] DOMAIN: NetrLogonControl: Discovery failed c0000022
  1347. 04/24 20:02:00 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  1348. 04/24 20:02:00 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1349. 04/24 20:02:00 [MISC] [1984] NetpDcGetName: DOMAIN.COM. cache not for closest site and it is too old. 2400078
  1350. 04/24 20:02:00 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DE96EFC0
  1351. 04/24 20:02:00 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  1352. 04/24 20:02:00 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DE898EC0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1353. 04/24 20:02:00 [MISC] [1984] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  1354. 04/24 20:02:00 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1355. 04/24 20:02:00 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  1356. 04/24 20:07:01 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1357. 04/24 20:07:01 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1358. 04/24 20:07:01 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DF7C4490 )
  1359. 04/24 20:07:01 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Datacenter-CHI ClientSiteName:Oracle-PHX
  1360. 04/24 20:07:01 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1361. 04/24 20:10:35 [MISC] [620] DsGetDcName function called: client PID=3376, Dom:DOMAIN.COM Acct:(null) Flags: WRITABLE LDAPONLY RET_DNS
  1362. 04/24 20:10:35 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1363. 04/24 20:10:35 [MISC] [620] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE898EC0 )
  1364. 04/24 20:10:35 [MISC] [620] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1365. 04/24 20:10:35 [MISC] [620] DsGetDcName function returns 0 (client PID=3376): Dom:DOMAIN.COM Acct:(null) Flags: WRITABLE LDAPONLY RET_DNS
  1366. 04/24 20:10:35 [MISC] [620] DsGetDcName function called: client PID=3376, Dom:DOMAIN.COM Acct:(null) Flags: WRITABLE LDAPONLY RET_DNS
  1367. 04/24 20:10:35 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1368. 04/24 20:10:35 [MISC] [620] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE898EC0 )
  1369. 04/24 20:10:35 [MISC] [620] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1370. 04/24 20:10:35 [MISC] [620] DsGetDcName function returns 0 (client PID=3376): Dom:DOMAIN.COM Acct:(null) Flags: WRITABLE LDAPONLY RET_DNS
  1371. 04/24 20:10:35 [MISC] [620] DsGetDcName function called: client PID=3376, Dom:TRORAWADC001.DOMAIN.COM Acct:(null) Flags: WRITABLE LDAPONLY RET_DNS
  1372. 04/24 20:10:35 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1373. 04/24 20:10:35 [CRITICAL] [620] NetpDcGetNameIp: TRORAWADC001.DOMAIN.COM: No data returned from DnsQuery.
  1374. 04/24 20:10:35 [MISC] [620] NetpDcGetName: NetpDcGetNameIp for TRORAWADC001.DOMAIN.COM returned 1355
  1375. 04/24 20:10:35 [CRITICAL] [620] NetpDcGetName: TRORAWADC001.DOMAIN.COM: IP and Netbios are both done.
  1376. 04/24 20:10:35 [MISC] [620] DsGetDcName function returns 1355 (client PID=3376): Dom:TRORAWADC001.DOMAIN.COM Acct:(null) Flags: WRITABLE LDAPONLY RET_DNS
  1377. 04/24 20:10:35 [SITE] [620] DsrGetSiteName: Site name 'Oracle-PHX' is old. Getting a new one from DC.
  1378. 04/24 20:10:35 [SESSION] [620] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  1379. 04/24 20:10:35 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1380. 04/24 20:10:35 [MAILSLOT] [620] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  1381. 04/24 20:10:35 [MISC] [620] NetpDcAllocateCacheEntry: new entry 0x00000169DE986760 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1382. 04/24 20:10:35 [MISC] [620] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  1383. 04/24 20:10:35 [MISC] [620] NetpDcDerefCacheEntry: destroying entry 0x00000169DF7C4490
  1384. 04/24 20:10:35 [MISC] [620] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  1385. 04/24 20:10:35 [PERF] [620] NlSetServerClientSession: Connection changing (00000169DFA03B98): "CH03ADC004.DOMAIN.COM"
  1386. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1387. 04/24 20:10:35 [PERF] [620] NlAllocateClientSession: New Perf Instance (00000169DFA06098): "ORAWADC001.DOMAIN.COM"
  1388. ClientSession: 00000169DE937210
  1389. 04/24 20:10:35 [SESSION] [620] DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  1390. 04/24 20:10:35 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1391. 04/24 20:10:35 [MAILSLOT] [620] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  1392. 04/24 20:10:35 [MISC] [620] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  1393. 04/24 20:10:35 [MISC] [620] NetpDcAllocateCacheEntry: new entry 0x00000169DE986A40 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1394. 04/24 20:10:35 [MISC] [620] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  1395. 04/24 20:10:35 [PERF] [620] NlSetServerClientSession: Not changing connection (00000169DFA06098): "ORAWADC001.DOMAIN.COM"
  1396. ClientSession: 00000169DE937210NetpDcDerefCacheEntry: destroying entry 0x00000169DE986A40
  1397. 04/24 20:10:44 [SESSION] [620] NETLOGON_CONTROL_REDISCOVER function received.
  1398. 04/24 20:10:44 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1399. 04/24 20:10:44 [MAILSLOT] [620] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  1400. 04/24 20:10:44 [MISC] [620] NlPingDcNameWithContext: Sent 1/1 ldap pings to trch03adc004
  1401. 04/24 20:10:44 [MAILSLOT] [620] NlPingDcNameWithContext: Sent 'Sam Logon' message to trch03adc004[00] on NULL.
  1402. 04/24 20:10:44 [CRITICAL] [620] NlBrowserSendDatagram: No transports available
  1403. 04/24 20:10:44 [CRITICAL] [620] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1404. 04/24 20:10:44 [MISC] [620] NetpDcAllocateCacheEntry: new entry 0x00000169DF86B360 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1405. 04/24 20:10:44 [MISC] [620] NlPingDcNameWithContext: trch03adc004 responded over IP.
  1406. 04/24 20:10:44 [MISC] [620] NetpDcDerefCacheEntry: destroying entry 0x00000169DE986760
  1407. 04/24 20:10:44 [MISC] [620] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for trch03adc004
  1408. 04/24 20:10:44 [SESSION] [620] DOMAIN: NetrLogonControl: Successful response from DC trch03adc004
  1409. 04/24 20:10:44 [SESSION] [620] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1410. 04/24 20:10:44 [PERF] [620] NlSetServerClientSession: Connection changing (00000169DFA06098): "ORAWADC001.DOMAIN.COM"
  1411. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1412. 04/24 20:10:44 [PERF] [620] NlAllocateClientSession: New Perf Instance (00000169DFA03798): "CH03ADC004.DOMAIN.COM"
  1413. ClientSession: 00000169DE937210
  1414. 04/24 20:10:44 [SESSION] [620] DOMAIN: NlSessionSetup: Try Session setup
  1415. 04/24 20:10:45 [CRITICAL] [620] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1416. 04/24 20:10:45 [CRITICAL] [620] [0] ProcessID is 572
  1417. 04/24 20:10:45 [CRITICAL] [620] [0] System Time is: 4/25/2019 0:10:45:35
  1418. 04/24 20:10:45 [CRITICAL] [620] [0] Generating component is 2
  1419. 04/24 20:10:45 [CRITICAL] [620] [0] Status is 5
  1420. 04/24 20:10:45 [CRITICAL] [620] [0] Detection location is 501
  1421. 04/24 20:10:45 [CRITICAL] [620] [0] Flags is 0
  1422. 04/24 20:10:45 [CRITICAL] [620] [0] NumberOfParameters is 4
  1423. 04/24 20:10:45 [CRITICAL] [620] Unicode string: ncacn_ip_tcp
  1424. 04/24 20:10:45 [CRITICAL] [620] Unicode string: TRCH03ADC004.DOMAIN.COM
  1425. 04/24 20:10:45 [CRITICAL] [620] Long val: 305419896
  1426. 04/24 20:10:45 [CRITICAL] [620] Long val: 5
  1427. 04/24 20:10:45 [CRITICAL] [620] [1] ProcessID is 572
  1428. 04/24 20:10:45 [CRITICAL] [620] [1] System Time is: 4/25/2019 0:10:45:35
  1429. 04/24 20:10:45 [CRITICAL] [620] [1] Generating component is 2
  1430. 04/24 20:10:45 [CRITICAL] [620] [1] Status is 5
  1431. 04/24 20:10:45 [CRITICAL] [620] [1] Detection location is 1750
  1432. 04/24 20:10:45 [CRITICAL] [620] [1] Flags is 0
  1433. 04/24 20:10:45 [CRITICAL] [620] [1] NumberOfParameters is 1
  1434. 04/24 20:10:45 [CRITICAL] [620] Long val: 5
  1435. 04/24 20:10:45 [CRITICAL] [620] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1436. 04/24 20:10:45 [CRITICAL] [620] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1437. 04/24 20:10:45 [CRITICAL] [620] [0] ProcessID is 572
  1438. 04/24 20:10:45 [CRITICAL] [620] [0] System Time is: 4/25/2019 0:10:45:160
  1439. 04/24 20:10:45 [CRITICAL] [620] [0] Generating component is 2
  1440. 04/24 20:10:45 [CRITICAL] [620] [0] Status is 5
  1441. 04/24 20:10:45 [CRITICAL] [620] [0] Detection location is 501
  1442. 04/24 20:10:45 [CRITICAL] [620] [0] Flags is 0
  1443. 04/24 20:10:45 [CRITICAL] [620] [0] NumberOfParameters is 4
  1444. 04/24 20:10:45 [CRITICAL] [620] Unicode string: ncacn_ip_tcp
  1445. 04/24 20:10:45 [CRITICAL] [620] Unicode string: TRCH03ADC004.DOMAIN.COM
  1446. 04/24 20:10:45 [CRITICAL] [620] Long val: 305419896
  1447. 04/24 20:10:45 [CRITICAL] [620] Long val: 5
  1448. 04/24 20:10:45 [CRITICAL] [620] [1] ProcessID is 572
  1449. 04/24 20:10:45 [CRITICAL] [620] [1] System Time is: 4/25/2019 0:10:45:160
  1450. 04/24 20:10:45 [CRITICAL] [620] [1] Generating component is 2
  1451. 04/24 20:10:45 [CRITICAL] [620] [1] Status is 5
  1452. 04/24 20:10:45 [CRITICAL] [620] [1] Detection location is 1750
  1453. 04/24 20:10:45 [CRITICAL] [620] [1] Flags is 0
  1454. 04/24 20:10:45 [CRITICAL] [620] [1] NumberOfParameters is 1
  1455. 04/24 20:10:45 [CRITICAL] [620] Long val: 5
  1456. 04/24 20:10:45 [CRITICAL] [620] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1457. 04/24 20:10:45 [MISC] [620] Eventlog: 3210 (1) "DOMAIN" "CH03ADC004.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  1458. 04/24 20:10:45 [MISC] [620] Didn't log event since it was already logged.
  1459. 04/24 20:10:45 [SESSION] [620] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  1460. 04/24 20:10:45 [SESSION] [620] DOMAIN: NlSetStatusClientSession: Unbind from server CH03ADC004.DOMAIN.COM (TCP) 0.
  1461. 04/24 20:10:45 [SESSION] [620] DOMAIN: NlSessionSetup: Session setup Failed
  1462. 04/24 20:10:45 [CRITICAL] [620] DOMAIN: NetrLogonControl: Discovery failed c0000022
  1463. 04/24 20:10:48 [SESSION] [656] NETLOGON_CONTROL_REDISCOVER function received.
  1464. 04/24 20:10:48 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1465. 04/24 20:10:48 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  1466. 04/24 20:10:48 [MISC] [656] NlPingDcNameWithContext: Sent 1/1 ldap pings to trch03adc004
  1467. 04/24 20:10:48 [MAILSLOT] [656] NlPingDcNameWithContext: Sent 'Sam Logon' message to trch03adc004[00] on NULL.
  1468. 04/24 20:10:48 [CRITICAL] [656] NlBrowserSendDatagram: No transports available
  1469. 04/24 20:10:48 [CRITICAL] [656] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1470. 04/24 20:10:48 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DF86B660 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1471. 04/24 20:10:48 [MISC] [656] NlPingDcNameWithContext: trch03adc004 responded over IP.
  1472. 04/24 20:10:48 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86B360
  1473. 04/24 20:10:48 [MISC] [656] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for trch03adc004
  1474. 04/24 20:10:48 [SESSION] [656] DOMAIN: NetrLogonControl: Successful response from DC trch03adc004
  1475. 04/24 20:10:48 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1476. 04/24 20:10:48 [PERF] [656] NlSetServerClientSession: Not changing connection (00000169DFA03798): "CH03ADC004.DOMAIN.COM"
  1477. ClientSession: 00000169DE937210DOMAIN: NlSessionSetup: Try Session setup
  1478. 04/24 20:10:48 [CRITICAL] [656] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1479. 04/24 20:10:48 [CRITICAL] [656] [0] ProcessID is 572
  1480. 04/24 20:10:48 [CRITICAL] [656] [0] System Time is: 4/25/2019 0:10:48:691
  1481. 04/24 20:10:48 [CRITICAL] [656] [0] Generating component is 2
  1482. 04/24 20:10:48 [CRITICAL] [656] [0] Status is 5
  1483. 04/24 20:10:48 [CRITICAL] [656] [0] Detection location is 501
  1484. 04/24 20:10:48 [CRITICAL] [656] [0] Flags is 0
  1485. 04/24 20:10:48 [CRITICAL] [656] [0] NumberOfParameters is 4
  1486. 04/24 20:10:48 [CRITICAL] [656] Unicode string: ncacn_ip_tcp
  1487. 04/24 20:10:48 [CRITICAL] [656] Unicode string: TRCH03ADC004.DOMAIN.COM
  1488. 04/24 20:10:48 [CRITICAL] [656] Long val: 305419896
  1489. 04/24 20:10:48 [CRITICAL] [656] Long val: 5
  1490. 04/24 20:10:48 [CRITICAL] [656] [1] ProcessID is 572
  1491. 04/24 20:10:48 [CRITICAL] [656] [1] System Time is: 4/25/2019 0:10:48:691
  1492. 04/24 20:10:48 [CRITICAL] [656] [1] Generating component is 2
  1493. 04/24 20:10:48 [CRITICAL] [656] [1] Status is 5
  1494. 04/24 20:10:48 [CRITICAL] [656] [1] Detection location is 1750
  1495. 04/24 20:10:48 [CRITICAL] [656] [1] Flags is 0
  1496. 04/24 20:10:48 [CRITICAL] [656] [1] NumberOfParameters is 1
  1497. 04/24 20:10:48 [CRITICAL] [656] Long val: 5
  1498. 04/24 20:10:48 [CRITICAL] [656] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1499. 04/24 20:10:48 [CRITICAL] [656] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1500. 04/24 20:10:48 [CRITICAL] [656] [0] ProcessID is 572
  1501. 04/24 20:10:48 [CRITICAL] [656] [0] System Time is: 4/25/2019 0:10:48:816
  1502. 04/24 20:10:48 [CRITICAL] [656] [0] Generating component is 2
  1503. 04/24 20:10:48 [CRITICAL] [656] [0] Status is 5
  1504. 04/24 20:10:48 [CRITICAL] [656] [0] Detection location is 501
  1505. 04/24 20:10:48 [CRITICAL] [656] [0] Flags is 0
  1506. 04/24 20:10:48 [CRITICAL] [656] [0] NumberOfParameters is 4
  1507. 04/24 20:10:48 [CRITICAL] [656] Unicode string: ncacn_ip_tcp
  1508. 04/24 20:10:48 [CRITICAL] [656] Unicode string: TRCH03ADC004.DOMAIN.COM
  1509. 04/24 20:10:48 [CRITICAL] [656] Long val: 305419896
  1510. 04/24 20:10:48 [CRITICAL] [656] Long val: 5
  1511. 04/24 20:10:48 [CRITICAL] [656] [1] ProcessID is 572
  1512. 04/24 20:10:48 [CRITICAL] [656] [1] System Time is: 4/25/2019 0:10:48:816
  1513. 04/24 20:10:48 [CRITICAL] [656] [1] Generating component is 2
  1514. 04/24 20:10:48 [CRITICAL] [656] [1] Status is 5
  1515. 04/24 20:10:48 [CRITICAL] [656] [1] Detection location is 1750
  1516. 04/24 20:10:48 [CRITICAL] [656] [1] Flags is 0
  1517. 04/24 20:10:48 [CRITICAL] [656] [1] NumberOfParameters is 1
  1518. 04/24 20:10:48 [CRITICAL] [656] Long val: 5
  1519. 04/24 20:10:48 [CRITICAL] [656] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1520. 04/24 20:10:48 [MISC] [656] Eventlog: 3210 (1) "DOMAIN" "CH03ADC004.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  1521. 04/24 20:10:48 [MISC] [656] Didn't log event since it was already logged.
  1522. 04/24 20:10:48 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  1523. 04/24 20:10:48 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Unbind from server CH03ADC004.DOMAIN.COM (TCP) 0.
  1524. 04/24 20:10:48 [SESSION] [656] DOMAIN: NlSessionSetup: Session setup Failed
  1525. 04/24 20:10:48 [CRITICAL] [656] DOMAIN: NetrLogonControl: Discovery failed c0000022
  1526. 04/24 20:10:56 [SESSION] [656] NETLOGON_CONTROL_REDISCOVER function received.
  1527. 04/24 20:10:56 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1528. 04/24 20:10:56 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  1529. 04/24 20:10:56 [MISC] [656] NlPingDcNameWithContext: Sent 1/1 ldap pings to trch03adc003
  1530. 04/24 20:10:56 [MAILSLOT] [656] NlPingDcNameWithContext: Sent 'Sam Logon' message to trch03adc003[00] on NULL.
  1531. 04/24 20:10:56 [CRITICAL] [656] NlBrowserSendDatagram: No transports available
  1532. 04/24 20:10:56 [CRITICAL] [656] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1533. 04/24 20:10:56 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DF86B360 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1534. 04/24 20:10:56 [MISC] [656] NlPingDcNameWithContext: trch03adc003 responded over IP.
  1535. 04/24 20:10:56 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86B660
  1536. 04/24 20:10:56 [MISC] [656] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for trch03adc003
  1537. 04/24 20:10:56 [SESSION] [656] DOMAIN: NetrLogonControl: Successful response from DC trch03adc003
  1538. 04/24 20:10:56 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1539. 04/24 20:10:56 [PERF] [656] NlSetServerClientSession: Connection changing (00000169DFA03798): "CH03ADC004.DOMAIN.COM"
  1540. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1541. 04/24 20:10:56 [PERF] [656] NlAllocateClientSession: New Perf Instance (00000169DFA05598): "CH03ADC003.DOMAIN.COM"
  1542. ClientSession: 00000169DE937210
  1543. 04/24 20:10:56 [SESSION] [656] DOMAIN: NlSessionSetup: Try Session setup
  1544. 04/24 20:10:56 [CRITICAL] [656] NlPrintRpcDebug: Couldn't get EEInfo for I_NetServerAuthenticate3: 1761 (may be legitimate for 0xc0000022)
  1545. 04/24 20:10:56 [SESSION] [656] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  1546. 04/24 20:10:56 [CRITICAL] [656] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerAuthenticate 0xc0000022
  1547. 04/24 20:10:56 [CRITICAL] [656] DOMAIN: NlSessionSetup: new password is bad, try old one
  1548. 04/24 20:10:56 [SESSION] [656] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  1549. 04/24 20:10:56 [CRITICAL] [656] DOMAIN: NlSessionSetup: old password succeeded
  1550. 04/24 20:10:56 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1551. 04/24 20:10:56 [DOMAIN] [656] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  1552. 04/24 20:10:56 [LOGON] [656] NlSetForestTrustList: New trusted domain list:
  1553. 04/24 20:10:56 [LOGON] [656] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  1554. 04/24 20:10:56 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  1555. 04/24 20:10:56 [LOGON] [656] Dom Sid: <DOMAIN SID>
  1556. 04/24 20:10:56 [LOGON] [656] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  1557. 04/24 20:10:56 [LOGON] [656] Dom Guid: <DOMAIN GUID>
  1558. 04/24 20:10:56 [LOGON] [656] Dom Sid: <DOMAIN SID>
  1559. 04/24 20:10:56 [SESSION] [656] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1560. 04/24 20:10:56 [SESSION] [656] Scheduling password change immediately
  1561. 04/24 20:10:56 [SESSION] [656] DOMAIN: NlSessionSetup: Session setup Succeeded
  1562. 04/24 20:10:56 [SESSION] [1684] DOMAIN: NlChangePassword: Doing it.
  1563. 04/24 20:10:57 [SESSION] [1684] DOMAIN: NlChangePassword: Successful response from DC CH03ADC003.DOMAIN.COM
  1564. 04/24 20:10:57 [SESSION] [1684] DOMAIN: NlChangePassword: Password already updated in secret
  1565. 04/24 20:10:57 [SESSION] [1684] DOMAIN: NlChangePassword: Flag password updated on DC
  1566. 04/24 20:10:57 [MISC] [1684] Eventlog: 5823 (4) "CH03ADC003.DOMAIN.COM"
  1567. 04/24 20:10:57 [MISC] [1684] NlWksScavenger: Can be called again in 30 days (0x9a7ec800)
  1568. 04/24 20:11:06 [SESSION] [1984] NETLOGON_CONTROL_REDISCOVER function received.
  1569. 04/24 20:11:06 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1570. 04/24 20:11:06 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  1571. 04/24 20:11:06 [MISC] [1984] NlPingDcNameWithContext: Sent 1/1 ldap pings to 11adc003
  1572. 04/24 20:11:06 [MAILSLOT] [1984] NlPingDcNameWithContext: Sent 'Sam Logon' message to 11adc003[00] on NULL.
  1573. 04/24 20:11:06 [CRITICAL] [1984] NlBrowserSendDatagram: No transports available
  1574. 04/24 20:11:06 [CRITICAL] [1984] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1575. 04/24 20:11:06 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DF86B660 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  1576. 04/24 20:11:06 [MISC] [1984] NlPingDcNameWithContext: 11adc003 responded over IP.
  1577. 04/24 20:11:06 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86B360
  1578. 04/24 20:11:06 [MISC] [1984] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for 11adc003
  1579. 04/24 20:11:06 [SESSION] [1984] DOMAIN: NetrLogonControl: Successful response from DC 11adc003
  1580. 04/24 20:11:06 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1581. 04/24 20:11:06 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Unbind from server CH03ADC003.DOMAIN.COM (TCP) 0.
  1582. 04/24 20:11:06 [PERF] [1984] NlSetServerClientSession: Connection changing (00000169DFA05598): "CH03ADC003.DOMAIN.COM"
  1583. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1584. 04/24 20:11:06 [PERF] [1984] NlAllocateClientSession: New Perf Instance (00000169DFA02D98): "\\11ADC003.DOMAIN.COM"
  1585. ClientSession: 00000169DE937210
  1586. 04/24 20:11:06 [SESSION] [1984] DOMAIN: NlSessionSetup: Try Session setup
  1587. 04/24 20:11:06 [CRITICAL] [1984] NlPrintRpcDebug: Couldn't get EEInfo for I_NetServerAuthenticate3: 1761 (may be legitimate for 0xc0000022)
  1588. 04/24 20:11:06 [SESSION] [1984] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  1589. 04/24 20:11:06 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerAuthenticate 0xc0000022
  1590. 04/24 20:11:06 [CRITICAL] [1984] DOMAIN: NlSessionSetup: new password is bad, try old one
  1591. 04/24 20:11:06 [SESSION] [1984] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  1592. 04/24 20:11:06 [CRITICAL] [1984] DOMAIN: NlSessionSetup: old password succeeded
  1593. 04/24 20:11:06 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1594. 04/24 20:11:07 [DOMAIN] [1984] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  1595. 04/24 20:11:07 [LOGON] [1984] NlSetForestTrustList: New trusted domain list:
  1596. 04/24 20:11:07 [LOGON] [1984] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  1597. 04/24 20:11:07 [LOGON] [1984] Dom Guid: <DOMAIN GUID>
  1598. 04/24 20:11:07 [LOGON] [1984] Dom Sid: <DOMAIN SID>
  1599. 04/24 20:11:07 [LOGON] [1984] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  1600. 04/24 20:11:07 [LOGON] [1984] Dom Guid: <DOMAIN GUID>
  1601. 04/24 20:11:07 [LOGON] [1984] Dom Sid: <DOMAIN SID>
  1602. 04/24 20:11:07 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1603. 04/24 20:11:07 [SESSION] [1984] Scheduling password change immediately
  1604. 04/24 20:11:07 [SESSION] [1984] DOMAIN: NlSessionSetup: Session setup Succeeded
  1605. 04/24 20:11:07 [SESSION] [1684] DOMAIN: NlChangePassword: Doing it.
  1606. 04/24 20:11:07 [SESSION] [1684] DOMAIN: NlChangePassword: Successful response from DC \\11ADC003.DOMAIN.COM
  1607. 04/24 20:11:07 [SESSION] [1684] DOMAIN: NlChangePassword: Password already updated in secret
  1608. 04/24 20:11:07 [SESSION] [1684] DOMAIN: NlChangePassword: Flag password updated on DC
  1609. 04/24 20:11:07 [MISC] [1684] Eventlog: 5823 (4) "\\11ADC003.DOMAIN.COM"
  1610. 04/24 20:11:07 [MISC] [1684] NlWksScavenger: Can be called again in 30 days (0x9a7ec800)
  1611. 04/24 20:11:08 [SESSION] [1984] NETLOGON_CONTROL_REDISCOVER function received.
  1612. 04/24 20:11:08 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1613. 04/24 20:11:08 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.14
  1614. 04/24 20:11:08 [MISC] [1984] NlPingDcNameWithContext: Sent 1/1 ldap pings to 11adc004
  1615. 04/24 20:11:08 [MAILSLOT] [1984] NlPingDcNameWithContext: Sent 'Sam Logon' message to 11adc004[00] on NULL.
  1616. 04/24 20:11:08 [CRITICAL] [1984] NlBrowserSendDatagram: No transports available
  1617. 04/24 20:11:08 [CRITICAL] [1984] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1618. 04/24 20:11:08 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DF86B360 -> DC:11ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1619. 04/24 20:11:08 [MISC] [1984] NlPingDcNameWithContext: 11adc004 responded over IP.
  1620. 04/24 20:11:08 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86B660
  1621. 04/24 20:11:08 [MISC] [1984] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for 11adc004
  1622. 04/24 20:11:08 [SESSION] [1984] DOMAIN: NetrLogonControl: Successful response from DC 11adc004
  1623. 04/24 20:11:08 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1624. 04/24 20:11:08 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Unbind from server \\11ADC003.DOMAIN.COM (TCP) 0.
  1625. 04/24 20:11:08 [PERF] [1984] NlSetServerClientSession: Connection changing (00000169DFA02D98): "\\11ADC003.DOMAIN.COM"
  1626. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1627. 04/24 20:11:08 [PERF] [1984] NlAllocateClientSession: New Perf Instance (00000169DFA02F98): "\\11ADC004.DOMAIN.COM"
  1628. ClientSession: 00000169DE937210
  1629. 04/24 20:11:08 [SESSION] [1984] DOMAIN: NlSessionSetup: Try Session setup
  1630. 04/24 20:11:09 [CRITICAL] [1984] NlPrintRpcDebug: Couldn't get EEInfo for I_NetServerAuthenticate3: 1761 (may be legitimate for 0xc0000022)
  1631. 04/24 20:11:09 [SESSION] [1984] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  1632. 04/24 20:11:09 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerAuthenticate 0xc0000022
  1633. 04/24 20:11:09 [CRITICAL] [1984] DOMAIN: NlSessionSetup: new password is bad, try old one
  1634. 04/24 20:11:09 [SESSION] [1984] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  1635. 04/24 20:11:09 [CRITICAL] [1984] DOMAIN: NlSessionSetup: old password succeeded
  1636. 04/24 20:11:09 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1637. 04/24 20:11:09 [DOMAIN] [1984] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  1638. 04/24 20:11:09 [LOGON] [1984] NlSetForestTrustList: New trusted domain list:
  1639. 04/24 20:11:09 [LOGON] [1984] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  1640. 04/24 20:11:09 [LOGON] [1984] Dom Guid: <DOMAIN GUID>
  1641. 04/24 20:11:09 [LOGON] [1984] Dom Sid: <DOMAIN SID>
  1642. 04/24 20:11:09 [LOGON] [1984] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  1643. 04/24 20:11:09 [LOGON] [1984] Dom Guid: <DOMAIN GUID>
  1644. 04/24 20:11:09 [LOGON] [1984] Dom Sid: <DOMAIN SID>
  1645. 04/24 20:11:09 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  1646. 04/24 20:11:09 [SESSION] [1984] Scheduling password change immediately
  1647. 04/24 20:11:09 [SESSION] [1984] DOMAIN: NlSessionSetup: Session setup Succeeded
  1648. 04/24 20:11:09 [SESSION] [1684] DOMAIN: NlChangePassword: Doing it.
  1649. 04/24 20:11:09 [SESSION] [1684] DOMAIN: NlChangePassword: Successful response from DC \\11ADC004.DOMAIN.COM
  1650. 04/24 20:11:09 [SESSION] [1684] DOMAIN: NlChangePassword: Password already updated in secret
  1651. 04/24 20:11:09 [SESSION] [1684] DOMAIN: NlChangePassword: Flag password updated on DC
  1652. 04/24 20:11:09 [MISC] [1684] Eventlog: 5823 (4) "\\11ADC004.DOMAIN.COM"
  1653. 04/24 20:11:09 [MISC] [1684] Didn't log event since it was already logged.
  1654. 04/24 20:11:09 [MISC] [1684] NlWksScavenger: Can be called again in 30 days (0x9a7ec800)
  1655. 04/24 20:12:48 [CRITICAL] [620] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  1656. 04/24 20:13:17 [SESSION] [620] NETLOGON_CONTROL_REDISCOVER function received.
  1657. 04/24 20:13:17 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1658. 04/24 20:13:17 [MAILSLOT] [620] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  1659. 04/24 20:13:17 [MISC] [620] NlPingDcNameWithContext: Sent 1/1 ldap pings to trch03adc004
  1660. 04/24 20:13:17 [MAILSLOT] [620] NlPingDcNameWithContext: Sent 'Sam Logon' message to trch03adc004[00] on NULL.
  1661. 04/24 20:13:17 [CRITICAL] [620] NlBrowserSendDatagram: No transports available
  1662. 04/24 20:13:17 [CRITICAL] [620] NlPingDcNameWithContext: cannot write netlogon mailslot: 0xc00000be
  1663. 04/24 20:13:17 [MISC] [620] NetpDcAllocateCacheEntry: new entry 0x00000169DF86B660 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f17c
  1664. 04/24 20:13:17 [MISC] [620] NlPingDcNameWithContext: trch03adc004 responded over IP.
  1665. 04/24 20:13:17 [MISC] [620] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86B360
  1666. 04/24 20:13:17 [MISC] [620] DOMAIN: NlPingDcName: DOMAIN: DOMAIN.COM: Caching pinged DC info for trch03adc004
  1667. 04/24 20:13:17 [SESSION] [620] DOMAIN: NetrLogonControl: Successful response from DC trch03adc004
  1668. 04/24 20:13:17 [SESSION] [620] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1669. 04/24 20:13:17 [SESSION] [620] DOMAIN: NlSetStatusClientSession: Unbind from server \\11ADC004.DOMAIN.COM (TCP) 0.
  1670. 04/24 20:13:17 [PERF] [620] NlSetServerClientSession: Connection changing (00000169DFA02F98): "\\11ADC004.DOMAIN.COM"
  1671. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1672. 04/24 20:13:17 [PERF] [620] NlAllocateClientSession: New Perf Instance (00000169DFA04798): "CH03ADC004.DOMAIN.COM"
  1673. ClientSession: 00000169DE937210
  1674. 04/24 20:13:17 [SESSION] [620] DOMAIN: NlSessionSetup: Try Session setup
  1675. 04/24 20:13:17 [CRITICAL] [620] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1676. 04/24 20:13:17 [CRITICAL] [620] [0] ProcessID is 572
  1677. 04/24 20:13:17 [CRITICAL] [620] [0] System Time is: 4/25/2019 0:13:17:556
  1678. 04/24 20:13:17 [CRITICAL] [620] [0] Generating component is 2
  1679. 04/24 20:13:17 [CRITICAL] [620] [0] Status is 5
  1680. 04/24 20:13:17 [CRITICAL] [620] [0] Detection location is 501
  1681. 04/24 20:13:17 [CRITICAL] [620] [0] Flags is 0
  1682. 04/24 20:13:17 [CRITICAL] [620] [0] NumberOfParameters is 4
  1683. 04/24 20:13:17 [CRITICAL] [620] Unicode string: ncacn_ip_tcp
  1684. 04/24 20:13:17 [CRITICAL] [620] Unicode string: TRCH03ADC004.DOMAIN.COM
  1685. 04/24 20:13:17 [CRITICAL] [620] Long val: 305419896
  1686. 04/24 20:13:17 [CRITICAL] [620] Long val: 5
  1687. 04/24 20:13:17 [CRITICAL] [620] [1] ProcessID is 572
  1688. 04/24 20:13:17 [CRITICAL] [620] [1] System Time is: 4/25/2019 0:13:17:556
  1689. 04/24 20:13:17 [CRITICAL] [620] [1] Generating component is 2
  1690. 04/24 20:13:17 [CRITICAL] [620] [1] Status is 5
  1691. 04/24 20:13:17 [CRITICAL] [620] [1] Detection location is 1750
  1692. 04/24 20:13:17 [CRITICAL] [620] [1] Flags is 0
  1693. 04/24 20:13:17 [CRITICAL] [620] [1] NumberOfParameters is 1
  1694. 04/24 20:13:17 [CRITICAL] [620] Long val: 5
  1695. 04/24 20:13:17 [CRITICAL] [620] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1696. 04/24 20:13:17 [CRITICAL] [620] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1697. 04/24 20:13:17 [CRITICAL] [620] [0] ProcessID is 572
  1698. 04/24 20:13:17 [CRITICAL] [620] [0] System Time is: 4/25/2019 0:13:17:681
  1699. 04/24 20:13:17 [CRITICAL] [620] [0] Generating component is 2
  1700. 04/24 20:13:17 [CRITICAL] [620] [0] Status is 5
  1701. 04/24 20:13:17 [CRITICAL] [620] [0] Detection location is 501
  1702. 04/24 20:13:17 [CRITICAL] [620] [0] Flags is 0
  1703. 04/24 20:13:17 [CRITICAL] [620] [0] NumberOfParameters is 4
  1704. 04/24 20:13:17 [CRITICAL] [620] Unicode string: ncacn_ip_tcp
  1705. 04/24 20:13:17 [CRITICAL] [620] Unicode string: TRCH03ADC004.DOMAIN.COM
  1706. 04/24 20:13:17 [CRITICAL] [620] Long val: 305419896
  1707. 04/24 20:13:17 [CRITICAL] [620] Long val: 5
  1708. 04/24 20:13:17 [CRITICAL] [620] [1] ProcessID is 572
  1709. 04/24 20:13:17 [CRITICAL] [620] [1] System Time is: 4/25/2019 0:13:17:681
  1710. 04/24 20:13:17 [CRITICAL] [620] [1] Generating component is 2
  1711. 04/24 20:13:17 [CRITICAL] [620] [1] Status is 5
  1712. 04/24 20:13:17 [CRITICAL] [620] [1] Detection location is 1750
  1713. 04/24 20:13:17 [CRITICAL] [620] [1] Flags is 0
  1714. 04/24 20:13:17 [CRITICAL] [620] [1] NumberOfParameters is 1
  1715. 04/24 20:13:17 [CRITICAL] [620] Long val: 5
  1716. 04/24 20:13:17 [CRITICAL] [620] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1717. 04/24 20:13:17 [MISC] [620] Eventlog: 3210 (1) "DOMAIN" "CH03ADC004.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  1718. 04/24 20:13:17 [MISC] [620] Didn't log event since it was already logged.
  1719. 04/24 20:13:17 [SESSION] [620] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  1720. 04/24 20:13:17 [SESSION] [620] DOMAIN: NlSetStatusClientSession: Unbind from server CH03ADC004.DOMAIN.COM (TCP) 0.
  1721. 04/24 20:13:17 [SESSION] [620] DOMAIN: NlSessionSetup: Session setup Failed
  1722. 04/24 20:13:17 [CRITICAL] [620] DOMAIN: NetrLogonControl: Discovery failed c0000022
  1723. 04/24 20:15:20 [MISC] [656] DsGetDcName function called: client PID=4, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  1724. 04/24 20:15:20 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1725. 04/24 20:15:20 [MISC] [656] NetpDcGetName: DOMAIN.COM cache is too old. 1801110
  1726. 04/24 20:15:20 [MAILSLOT] [656] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  1727. 04/24 20:15:20 [MISC] [656] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  1728. 04/24 20:15:20 [MISC] [656] NetpDcAllocateCacheEntry: new entry 0x00000169DE90E300 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1729. 04/24 20:15:20 [MISC] [656] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  1730. 04/24 20:15:20 [MISC] [656] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE90E300 )
  1731. 04/24 20:15:20 [MISC] [656] NetpDcDerefCacheEntry: destroying entry 0x00000169DE98EC40
  1732. 04/24 20:15:20 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1733. 04/24 20:15:20 [MISC] [656] DsGetDcName function returns 0 (client PID=4): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  1734. 04/24 20:22:01 [MISC] [1984] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1735. 04/24 20:22:01 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1736. 04/24 20:22:01 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DF86B660 )
  1737. 04/24 20:22:01 [MISC] [1984] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Datacenter-CHI ClientSiteName:Oracle-PHX
  1738. 04/24 20:22:01 [MISC] [1984] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1739. 04/24 20:22:05 [MISC] [1984] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  1740. 04/24 20:22:05 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1741. 04/24 20:22:05 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  1742. 04/24 20:22:05 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DE8D3C00 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  1743. 04/24 20:22:05 [MISC] [1984] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  1744. 04/24 20:22:05 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DF798720
  1745. 04/24 20:22:05 [MISC] [1984] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  1746. 04/24 20:22:05 [MISC] [1984] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  1747. 04/24 20:33:06 [MISC] [612] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  1748. 04/24 20:33:06 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1749. 04/24 20:33:06 [MISC] [612] NetpDcGetName: DOMAIN.COM. cache not for closest site and it is too old. 1189437
  1750. 04/24 20:33:06 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86B660
  1751. 04/24 20:33:06 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  1752. 04/24 20:33:06 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DF86FB00 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1753. 04/24 20:33:06 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  1754. 04/24 20:33:06 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1755. 04/24 20:33:06 [MISC] [612] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  1756. 04/24 20:37:02 [MISC] [656] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1757. 04/24 20:37:02 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1758. 04/24 20:37:02 [MISC] [656] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DF86FB00 )
  1759. 04/24 20:37:02 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1760. 04/24 20:37:02 [MISC] [656] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1761. 04/24 20:41:56 [MISC] [656] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  1762. 04/24 20:41:56 [MISC] [656] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1763. 04/24 20:41:56 [MISC] [656] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DF86FB00 )
  1764. 04/24 20:41:56 [MISC] [656] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1765. 04/24 20:41:56 [MISC] [656] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  1766. 04/24 20:42:03 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  1767. 04/24 20:42:03 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1768. 04/24 20:42:03 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE898EC0 )
  1769. 04/24 20:42:03 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1770. 04/24 20:42:03 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  1771. 04/24 20:43:38 [SESSION] [612] NETLOGON_CONTROL_TC_VERIFY function received.
  1772. 04/24 20:43:38 [SESSION] [612] DOMAIN: NlSessionSetup: Try Session setup
  1773. 04/24 20:43:38 [SESSION] [612] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  1774. 04/24 20:43:38 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1775. 04/24 20:43:38 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  1776. 04/24 20:43:38 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DF798720 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1777. 04/24 20:43:38 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  1778. 04/24 20:43:38 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86FB00
  1779. 04/24 20:43:38 [MISC] [612] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  1780. 04/24 20:43:38 [PERF] [612] NlSetServerClientSession: Connection changing (00000169DFA04798): "CH03ADC004.DOMAIN.COM"
  1781. ClientSession: 00000169DE937210NlSetServerClientSession: Delete successful.
  1782. 04/24 20:43:38 [PERF] [612] NlAllocateClientSession: New Perf Instance (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  1783. ClientSession: 00000169DE937210
  1784. 04/24 20:43:38 [SESSION] [612] DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  1785. 04/24 20:43:38 [CRITICAL] [612] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1786. 04/24 20:43:38 [CRITICAL] [612] [0] ProcessID is 572
  1787. 04/24 20:43:38 [CRITICAL] [612] [0] System Time is: 4/25/2019 0:43:38:806
  1788. 04/24 20:43:38 [CRITICAL] [612] [0] Generating component is 2
  1789. 04/24 20:43:38 [CRITICAL] [612] [0] Status is 5
  1790. 04/24 20:43:38 [CRITICAL] [612] [0] Detection location is 501
  1791. 04/24 20:43:38 [CRITICAL] [612] [0] Flags is 0
  1792. 04/24 20:43:38 [CRITICAL] [612] [0] NumberOfParameters is 4
  1793. 04/24 20:43:38 [CRITICAL] [612] Unicode string: ncacn_ip_tcp
  1794. 04/24 20:43:38 [CRITICAL] [612] Unicode string: TRORAWADC001.DOMAIN.COM
  1795. 04/24 20:43:38 [CRITICAL] [612] Long val: 305419896
  1796. 04/24 20:43:38 [CRITICAL] [612] Long val: 5
  1797. 04/24 20:43:38 [CRITICAL] [612] [1] ProcessID is 572
  1798. 04/24 20:43:38 [CRITICAL] [612] [1] System Time is: 4/25/2019 0:43:38:806
  1799. 04/24 20:43:38 [CRITICAL] [612] [1] Generating component is 2
  1800. 04/24 20:43:38 [CRITICAL] [612] [1] Status is 5
  1801. 04/24 20:43:38 [CRITICAL] [612] [1] Detection location is 1750
  1802. 04/24 20:43:38 [CRITICAL] [612] [1] Flags is 0
  1803. 04/24 20:43:38 [CRITICAL] [612] [1] NumberOfParameters is 1
  1804. 04/24 20:43:38 [CRITICAL] [612] Long val: 5
  1805. 04/24 20:43:38 [CRITICAL] [612] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1806. 04/24 20:43:38 [CRITICAL] [612] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1807. 04/24 20:43:38 [CRITICAL] [612] [0] ProcessID is 572
  1808. 04/24 20:43:38 [CRITICAL] [612] [0] System Time is: 4/25/2019 0:43:38:806
  1809. 04/24 20:43:38 [CRITICAL] [612] [0] Generating component is 2
  1810. 04/24 20:43:38 [CRITICAL] [612] [0] Status is 5
  1811. 04/24 20:43:38 [CRITICAL] [612] [0] Detection location is 501
  1812. 04/24 20:43:38 [CRITICAL] [612] [0] Flags is 0
  1813. 04/24 20:43:38 [CRITICAL] [612] [0] NumberOfParameters is 4
  1814. 04/24 20:43:38 [CRITICAL] [612] Unicode string: ncacn_ip_tcp
  1815. 04/24 20:43:38 [CRITICAL] [612] Unicode string: TRORAWADC001.DOMAIN.COM
  1816. 04/24 20:43:38 [CRITICAL] [612] Long val: 305419896
  1817. 04/24 20:43:38 [CRITICAL] [612] Long val: 5
  1818. 04/24 20:43:38 [CRITICAL] [612] [1] ProcessID is 572
  1819. 04/24 20:43:38 [CRITICAL] [612] [1] System Time is: 4/25/2019 0:43:38:806
  1820. 04/24 20:43:38 [CRITICAL] [612] [1] Generating component is 2
  1821. 04/24 20:43:38 [CRITICAL] [612] [1] Status is 5
  1822. 04/24 20:43:38 [CRITICAL] [612] [1] Detection location is 1750
  1823. 04/24 20:43:38 [CRITICAL] [612] [1] Flags is 0
  1824. 04/24 20:43:38 [CRITICAL] [612] [1] NumberOfParameters is 1
  1825. 04/24 20:43:38 [CRITICAL] [612] Long val: 5
  1826. 04/24 20:43:38 [CRITICAL] [612] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1827. 04/24 20:43:38 [MISC] [612] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  1828. 04/24 20:43:38 [MISC] [612] Didn't log event since it was already logged.
  1829. 04/24 20:43:38 [SESSION] [612] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  1830. 04/24 20:43:38 [SESSION] [612] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  1831. 04/24 20:43:38 [SESSION] [612] DOMAIN: NlSessionSetup: Session setup Failed
  1832. 04/24 20:43:38 [CRITICAL] [612] DOMAIN: NlGetTrustedSideInfo: (null): failed C0000022
  1833. 04/24 20:52:02 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1834. 04/24 20:52:02 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1835. 04/24 20:52:02 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DF798720 )
  1836. 04/24 20:52:02 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1837. 04/24 20:52:02 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1838. 04/24 21:02:15 [MISC] [612] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  1839. 04/24 21:02:15 [MISC] [620] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  1840. 04/24 21:02:15 [SESSION] [620] DOMAIN: NlSessionSetup: Try Session setup
  1841. 04/24 21:02:15 [SESSION] [620] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  1842. 04/24 21:02:15 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1843. 04/24 21:02:15 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1844. 04/24 21:02:15 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DF798720 )
  1845. 04/24 21:02:15 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1846. 04/24 21:02:15 [MISC] [612] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  1847. 04/24 21:02:15 [MAILSLOT] [620] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  1848. 04/24 21:02:15 [MISC] [1984] DsGetDcName function called: client PID=-1, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  1849. 04/24 21:02:15 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1850. 04/24 21:02:15 [MISC] [1984] NetpDcGetName: DOMAIN.COM cache is too old. 4616438
  1851. 04/24 21:02:15 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  1852. 04/24 21:02:15 [MISC] [1984] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  1853. 04/24 21:02:16 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DF9E85A0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1854. 04/24 21:02:16 [MISC] [620] NetpDcAllocateCacheEntry: new entry 0x00000169DE987900 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1855. 04/24 21:02:16 [MISC] [1984] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  1856. 04/24 21:02:16 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DF9E85A0 )
  1857. 04/24 21:02:16 [MISC] [620] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  1858. 04/24 21:02:16 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DE90E300
  1859. 04/24 21:02:16 [MISC] [620] NetpDcDerefCacheEntry: destroying entry 0x00000169DF798720
  1860. 04/24 21:02:16 [MISC] [620] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  1861. 04/24 21:02:16 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1862. 04/24 21:02:16 [MISC] [1984] DsGetDcName function returns 0 (client PID=-1): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  1863. 04/24 21:02:16 [PERF] [620] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  1864. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  1865. 04/24 21:02:16 [CRITICAL] [620] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1866. 04/24 21:02:16 [CRITICAL] [620] [0] ProcessID is 572
  1867. 04/24 21:02:16 [CRITICAL] [620] [0] System Time is: 4/25/2019 1:2:16:41
  1868. 04/24 21:02:16 [CRITICAL] [620] [0] Generating component is 2
  1869. 04/24 21:02:16 [CRITICAL] [620] [0] Status is 5
  1870. 04/24 21:02:16 [CRITICAL] [620] [0] Detection location is 501
  1871. 04/24 21:02:16 [CRITICAL] [620] [0] Flags is 0
  1872. 04/24 21:02:16 [CRITICAL] [620] [0] NumberOfParameters is 4
  1873. 04/24 21:02:16 [CRITICAL] [620] Unicode string: ncacn_ip_tcp
  1874. 04/24 21:02:16 [CRITICAL] [620] Unicode string: TRORAWADC001.DOMAIN.COM
  1875. 04/24 21:02:16 [CRITICAL] [620] Long val: 305419896
  1876. 04/24 21:02:16 [CRITICAL] [620] Long val: 5
  1877. 04/24 21:02:16 [CRITICAL] [620] [1] ProcessID is 572
  1878. 04/24 21:02:16 [CRITICAL] [620] [1] System Time is: 4/25/2019 1:2:16:41
  1879. 04/24 21:02:16 [CRITICAL] [620] [1] Generating component is 2
  1880. 04/24 21:02:16 [CRITICAL] [620] [1] Status is 5
  1881. 04/24 21:02:16 [CRITICAL] [620] [1] Detection location is 1750
  1882. 04/24 21:02:16 [CRITICAL] [620] [1] Flags is 0
  1883. 04/24 21:02:16 [CRITICAL] [620] [1] NumberOfParameters is 1
  1884. 04/24 21:02:16 [CRITICAL] [620] Long val: 5
  1885. 04/24 21:02:16 [CRITICAL] [620] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1886. 04/24 21:02:16 [CRITICAL] [620] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc002001c
  1887. 04/24 21:02:16 [CRITICAL] [620] [0] ProcessID is 572
  1888. 04/24 21:02:16 [CRITICAL] [620] [0] System Time is: 4/25/2019 1:2:16:41
  1889. 04/24 21:02:16 [CRITICAL] [620] [0] Generating component is 2
  1890. 04/24 21:02:16 [CRITICAL] [620] [0] Status is 1727
  1891. 04/24 21:02:16 [CRITICAL] [620] [0] Detection location is 501
  1892. 04/24 21:02:16 [CRITICAL] [620] [0] Flags is 0
  1893. 04/24 21:02:16 [CRITICAL] [620] [0] NumberOfParameters is 4
  1894. 04/24 21:02:16 [CRITICAL] [620] Unicode string: ncacn_ip_tcp
  1895. 04/24 21:02:16 [CRITICAL] [620] Unicode string: TRORAWADC001.DOMAIN.COM
  1896. 04/24 21:02:16 [CRITICAL] [620] Long val: 305419896
  1897. 04/24 21:02:16 [CRITICAL] [620] Long val: 1727
  1898. 04/24 21:02:16 [CRITICAL] [620] [1] ProcessID is 572
  1899. 04/24 21:02:16 [CRITICAL] [620] [1] System Time is: 4/25/2019 1:2:16:41
  1900. 04/24 21:02:16 [CRITICAL] [620] [1] Generating component is 2
  1901. 04/24 21:02:16 [CRITICAL] [620] [1] Status is 1727
  1902. 04/24 21:02:16 [CRITICAL] [620] [1] Detection location is 1468
  1903. 04/24 21:02:16 [CRITICAL] [620] [1] Flags is 0
  1904. 04/24 21:02:16 [CRITICAL] [620] [1] NumberOfParameters is 0
  1905. 04/24 21:02:16 [CRITICAL] [620] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc002001c
  1906. 04/24 21:02:16 [MISC] [620] Eventlog: 5719 (1) "DOMAIN" 0xc002001c f415fb9e ddfabda4 10bc5fbd 48513d55 ........._..U=QH
  1907. 04/24 21:02:16 [SESSION] [620] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  1908. 04/24 21:02:16 [SESSION] [620] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  1909. 04/24 21:02:16 [SESSION] [620] DOMAIN: NlSessionSetup: Session setup Failed
  1910. 04/24 21:02:16 [MISC] [620] DsrEnumerateDomainTrusts: returns: 0
  1911. 04/24 21:02:16 [MISC] [620] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  1912. 04/24 21:02:16 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1913. 04/24 21:02:16 [MISC] [620] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE987900 )
  1914. 04/24 21:02:16 [MISC] [620] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1915. 04/24 21:02:16 [MISC] [620] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  1916. 04/24 21:02:16 [MISC] [620] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  1917. 04/24 21:02:16 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1918. 04/24 21:02:16 [MISC] [620] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE987900 )
  1919. 04/24 21:02:16 [MISC] [620] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1920. 04/24 21:02:16 [MISC] [620] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  1921. 04/24 21:02:16 [SITE] [1984] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  1922. 04/24 21:02:16 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  1923. 04/24 21:02:16 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1924. 04/24 21:02:16 [MISC] [1984] NetpDcGetName: DOMAIN.COM cache is too old. 3615672
  1925. 04/24 21:02:16 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  1926. 04/24 21:02:16 [MISC] [1984] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  1927. 04/24 21:02:16 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1AC00 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1928. 04/24 21:02:16 [MISC] [1984] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  1929. 04/24 21:02:16 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1AC00 )
  1930. 04/24 21:02:16 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DE898EC0
  1931. 04/24 21:02:16 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1932. 04/24 21:02:16 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  1933. 04/24 21:07:02 [MISC] [3916] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1934. 04/24 21:07:02 [MISC] [3916] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1935. 04/24 21:07:02 [MISC] [3916] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE987900 )
  1936. 04/24 21:07:02 [MISC] [3916] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1937. 04/24 21:07:02 [MISC] [3916] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  1938. 04/24 21:18:05 [MISC] [3916] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  1939. 04/24 21:18:05 [MISC] [1984] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  1940. 04/24 21:18:05 [MISC] [3916] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1941. 04/24 21:18:05 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1942. 04/24 21:18:05 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE987900 )
  1943. 04/24 21:18:05 [MISC] [3916] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE987900 )
  1944. 04/24 21:18:05 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1945. 04/24 21:18:05 [MISC] [3916] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1946. 04/24 21:18:05 [MISC] [1984] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  1947. 04/24 21:18:05 [MISC] [3916] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  1948. 04/24 21:18:05 [SITE] [620] DsrGetSiteName: Site name 'Oracle-PHX' is old. Getting a new one from DC.
  1949. 04/24 21:18:05 [SESSION] [620] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  1950. 04/24 21:18:05 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1951. 04/24 21:18:05 [MAILSLOT] [620] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  1952. 04/24 21:18:05 [MISC] [620] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19DA0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1953. 04/24 21:18:05 [MISC] [620] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  1954. 04/24 21:18:05 [MISC] [620] NetpDcDerefCacheEntry: destroying entry 0x00000169DE987900
  1955. 04/24 21:18:05 [MISC] [620] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  1956. 04/24 21:18:05 [PERF] [620] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  1957. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  1958. 04/24 21:18:05 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1959. 04/24 21:18:05 [MAILSLOT] [620] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  1960. 04/24 21:18:05 [MISC] [620] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  1961. 04/24 21:18:05 [MISC] [620] NetpDcAllocateCacheEntry: new entry 0x00000169DFA18F40 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  1962. 04/24 21:18:05 [MISC] [620] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  1963. 04/24 21:18:05 [PERF] [620] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  1964. ClientSession: 00000169DE937210NetpDcDerefCacheEntry: destroying entry 0x00000169DFA18F40
  1965. 04/24 21:18:05 [MISC] [620] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  1966. 04/24 21:18:05 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1967. 04/24 21:18:05 [MISC] [620] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1AC00 )
  1968. 04/24 21:18:05 [MISC] [620] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1969. 04/24 21:18:05 [MISC] [620] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  1970. 04/24 21:18:05 [MISC] [620] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  1971. 04/24 21:18:05 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  1972. 04/24 21:18:05 [MISC] [620] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  1973. 04/24 21:18:05 [MISC] [620] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  1974. 04/24 21:18:05 [MISC] [620] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  1975. 04/24 21:18:06 [SESSION] [3916] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  1976. 04/24 21:18:06 [SESSION] [3916] DOMAIN: NlSessionSetup: Try Session setup
  1977. 04/24 21:18:06 [CRITICAL] [3916] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1978. 04/24 21:18:06 [CRITICAL] [3916] [0] ProcessID is 572
  1979. 04/24 21:18:06 [CRITICAL] [3916] [0] System Time is: 4/25/2019 1:18:6:166
  1980. 04/24 21:18:06 [CRITICAL] [3916] [0] Generating component is 2
  1981. 04/24 21:18:06 [CRITICAL] [3916] [0] Status is 5
  1982. 04/24 21:18:06 [CRITICAL] [3916] [0] Detection location is 501
  1983. 04/24 21:18:06 [CRITICAL] [3916] [0] Flags is 0
  1984. 04/24 21:18:06 [CRITICAL] [3916] [0] NumberOfParameters is 4
  1985. 04/24 21:18:06 [CRITICAL] [3916] Unicode string: ncacn_ip_tcp
  1986. 04/24 21:18:06 [CRITICAL] [3916] Unicode string: TRORAWADC001.DOMAIN.COM
  1987. 04/24 21:18:06 [CRITICAL] [3916] Long val: 305419896
  1988. 04/24 21:18:06 [CRITICAL] [3916] Long val: 5
  1989. 04/24 21:18:06 [CRITICAL] [3916] [1] ProcessID is 572
  1990. 04/24 21:18:06 [CRITICAL] [3916] [1] System Time is: 4/25/2019 1:18:6:166
  1991. 04/24 21:18:06 [CRITICAL] [3916] [1] Generating component is 2
  1992. 04/24 21:18:06 [CRITICAL] [3916] [1] Status is 5
  1993. 04/24 21:18:06 [CRITICAL] [3916] [1] Detection location is 1750
  1994. 04/24 21:18:06 [CRITICAL] [3916] [1] Flags is 0
  1995. 04/24 21:18:06 [CRITICAL] [3916] [1] NumberOfParameters is 1
  1996. 04/24 21:18:06 [CRITICAL] [3916] Long val: 5
  1997. 04/24 21:18:06 [CRITICAL] [3916] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  1998. 04/24 21:18:06 [CRITICAL] [3916] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  1999. 04/24 21:18:06 [CRITICAL] [3916] [0] ProcessID is 572
  2000. 04/24 21:18:06 [CRITICAL] [3916] [0] System Time is: 4/25/2019 1:18:6:166
  2001. 04/24 21:18:06 [CRITICAL] [3916] [0] Generating component is 2
  2002. 04/24 21:18:06 [CRITICAL] [3916] [0] Status is 5
  2003. 04/24 21:18:06 [CRITICAL] [3916] [0] Detection location is 501
  2004. 04/24 21:18:06 [CRITICAL] [3916] [0] Flags is 0
  2005. 04/24 21:18:06 [CRITICAL] [3916] [0] NumberOfParameters is 4
  2006. 04/24 21:18:06 [CRITICAL] [3916] Unicode string: ncacn_ip_tcp
  2007. 04/24 21:18:06 [CRITICAL] [3916] Unicode string: TRORAWADC001.DOMAIN.COM
  2008. 04/24 21:18:06 [CRITICAL] [3916] Long val: 305419896
  2009. 04/24 21:18:06 [CRITICAL] [3916] Long val: 5
  2010. 04/24 21:18:06 [CRITICAL] [3916] [1] ProcessID is 572
  2011. 04/24 21:18:06 [CRITICAL] [3916] [1] System Time is: 4/25/2019 1:18:6:166
  2012. 04/24 21:18:06 [CRITICAL] [3916] [1] Generating component is 2
  2013. 04/24 21:18:06 [CRITICAL] [3916] [1] Status is 5
  2014. 04/24 21:18:06 [CRITICAL] [3916] [1] Detection location is 1750
  2015. 04/24 21:18:06 [CRITICAL] [3916] [1] Flags is 0
  2016. 04/24 21:18:06 [CRITICAL] [3916] [1] NumberOfParameters is 1
  2017. 04/24 21:18:06 [CRITICAL] [3916] Long val: 5
  2018. 04/24 21:18:06 [CRITICAL] [3916] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2019. 04/24 21:18:06 [MISC] [3916] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  2020. 04/24 21:18:06 [MISC] [3916] Didn't log event since it was already logged.
  2021. 04/24 21:18:06 [SESSION] [3916] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  2022. 04/24 21:18:06 [SESSION] [3916] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  2023. 04/24 21:18:06 [SESSION] [3916] DOMAIN: NlSessionSetup: Session setup Failed
  2024. 04/24 21:18:06 [CRITICAL] [3916] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2025. 04/24 21:18:06 [SESSION] [3916] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2026. 04/24 21:18:06 [CRITICAL] [3916] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2027. 04/24 21:18:06 [SESSION] [620] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2028. 04/24 21:18:06 [CRITICAL] [620] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2029. 04/24 21:18:06 [SESSION] [620] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2030. 04/24 21:18:06 [CRITICAL] [620] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2031. 04/24 21:18:06 [SESSION] [620] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2032. 04/24 21:18:06 [CRITICAL] [620] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2033. 04/24 21:18:06 [SESSION] [620] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2034. 04/24 21:18:06 [CRITICAL] [620] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2035. 04/24 21:22:02 [MISC] [1984] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2036. 04/24 21:22:02 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2037. 04/24 21:22:02 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2038. 04/24 21:22:02 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2039. 04/24 21:22:02 [MISC] [1984] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2040. 04/24 21:22:05 [MISC] [1984] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2041. 04/24 21:22:05 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2042. 04/24 21:22:05 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  2043. 04/24 21:22:05 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19220 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  2044. 04/24 21:22:05 [MISC] [1984] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2045. 04/24 21:22:05 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DE8D3C00
  2046. 04/24 21:22:05 [MISC] [1984] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  2047. 04/24 21:22:05 [MISC] [1984] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2048. 04/24 21:37:02 [MISC] [1984] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2049. 04/24 21:37:02 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2050. 04/24 21:37:02 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2051. 04/24 21:37:02 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2052. 04/24 21:37:02 [MISC] [1984] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2053. 04/24 21:52:02 [MISC] [4800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2054. 04/24 21:52:02 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2055. 04/24 21:52:02 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2056. 04/24 21:52:02 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2057. 04/24 21:52:02 [MISC] [4800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2058. 04/24 22:07:02 [MISC] [4800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2059. 04/24 22:07:02 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2060. 04/24 22:07:02 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2061. 04/24 22:07:02 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2062. 04/24 22:07:02 [MISC] [4800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2063. 04/24 22:22:02 [MISC] [1984] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2064. 04/24 22:22:02 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2065. 04/24 22:22:02 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2066. 04/24 22:22:02 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2067. 04/24 22:22:02 [MISC] [1984] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2068. 04/24 22:22:05 [MISC] [1984] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2069. 04/24 22:22:05 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2070. 04/24 22:22:05 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  2071. 04/24 22:22:06 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19500 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  2072. 04/24 22:22:06 [MISC] [1984] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2073. 04/24 22:22:06 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19220
  2074. 04/24 22:22:06 [MISC] [1984] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  2075. 04/24 22:22:06 [MISC] [1984] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2076. 04/24 22:37:02 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2077. 04/24 22:37:02 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2078. 04/24 22:37:02 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2079. 04/24 22:37:02 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2080. 04/24 22:37:02 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2081. 04/24 22:47:16 [MISC] [4800] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2082. 04/24 22:47:16 [MISC] [1984] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  2083. 04/24 22:47:16 [SESSION] [1984] DOMAIN: NlSessionSetup: Try Session setup
  2084. 04/24 22:47:16 [SESSION] [1984] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  2085. 04/24 22:47:16 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2086. 04/24 22:47:16 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2087. 04/24 22:47:16 [MISC] [4800] NetpDcGetName: DOMAIN.COM. cache is too old. 5351297
  2088. 04/24 22:47:16 [MAILSLOT] [4800] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2089. 04/24 22:47:16 [MISC] [4800] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2090. 04/24 22:47:16 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2091. 04/24 22:47:16 [MISC] [4800] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A080 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2092. 04/24 22:47:16 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A360 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2093. 04/24 22:47:16 [MISC] [4800] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2094. 04/24 22:47:16 [MISC] [1984] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2095. 04/24 22:47:16 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  2096. 04/24 22:47:16 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19DA0
  2097. 04/24 22:47:16 [MISC] [1984] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  2098. 04/24 22:47:16 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2099. 04/24 22:47:16 [MISC] [4800] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2100. 04/24 22:47:16 [PERF] [1984] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  2101. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  2102. 04/24 22:47:16 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A360
  2103. 04/24 22:47:16 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2104. 04/24 22:47:16 [CRITICAL] [1984] [0] ProcessID is 572
  2105. 04/24 22:47:16 [CRITICAL] [1984] [0] System Time is: 4/25/2019 2:47:16:931
  2106. 04/24 22:47:16 [CRITICAL] [1984] [0] Generating component is 2
  2107. 04/24 22:47:16 [CRITICAL] [1984] [0] Status is 5
  2108. 04/24 22:47:16 [CRITICAL] [1984] [0] Detection location is 501
  2109. 04/24 22:47:16 [CRITICAL] [1984] [0] Flags is 0
  2110. 04/24 22:47:16 [CRITICAL] [1984] [0] NumberOfParameters is 4
  2111. 04/24 22:47:16 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  2112. 04/24 22:47:16 [CRITICAL] [1984] Unicode string: TRORAWADC001.DOMAIN.COM
  2113. 04/24 22:47:16 [CRITICAL] [1984] Long val: 305419896
  2114. 04/24 22:47:16 [CRITICAL] [1984] Long val: 5
  2115. 04/24 22:47:16 [CRITICAL] [1984] [1] ProcessID is 572
  2116. 04/24 22:47:16 [CRITICAL] [1984] [1] System Time is: 4/25/2019 2:47:16:931
  2117. 04/24 22:47:16 [CRITICAL] [1984] [1] Generating component is 2
  2118. 04/24 22:47:16 [CRITICAL] [1984] [1] Status is 5
  2119. 04/24 22:47:16 [CRITICAL] [1984] [1] Detection location is 1750
  2120. 04/24 22:47:16 [CRITICAL] [1984] [1] Flags is 0
  2121. 04/24 22:47:16 [CRITICAL] [1984] [1] NumberOfParameters is 1
  2122. 04/24 22:47:16 [CRITICAL] [1984] Long val: 5
  2123. 04/24 22:47:16 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2124. 04/24 22:47:16 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2125. 04/24 22:47:16 [CRITICAL] [1984] [0] ProcessID is 572
  2126. 04/24 22:47:16 [CRITICAL] [1984] [0] System Time is: 4/25/2019 2:47:16:931
  2127. 04/24 22:47:16 [CRITICAL] [1984] [0] Generating component is 2
  2128. 04/24 22:47:16 [CRITICAL] [1984] [0] Status is 5
  2129. 04/24 22:47:16 [CRITICAL] [1984] [0] Detection location is 501
  2130. 04/24 22:47:16 [CRITICAL] [1984] [0] Flags is 0
  2131. 04/24 22:47:16 [CRITICAL] [1984] [0] NumberOfParameters is 4
  2132. 04/24 22:47:16 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  2133. 04/24 22:47:16 [CRITICAL] [1984] Unicode string: TRORAWADC001.DOMAIN.COM
  2134. 04/24 22:47:16 [CRITICAL] [1984] Long val: 305419896
  2135. 04/24 22:47:16 [CRITICAL] [1984] Long val: 5
  2136. 04/24 22:47:16 [CRITICAL] [1984] [1] ProcessID is 572
  2137. 04/24 22:47:16 [CRITICAL] [1984] [1] System Time is: 4/25/2019 2:47:16:931
  2138. 04/24 22:47:16 [CRITICAL] [1984] [1] Generating component is 2
  2139. 04/24 22:47:16 [CRITICAL] [1984] [1] Status is 5
  2140. 04/24 22:47:16 [CRITICAL] [1984] [1] Detection location is 1750
  2141. 04/24 22:47:16 [CRITICAL] [1984] [1] Flags is 0
  2142. 04/24 22:47:16 [CRITICAL] [1984] [1] NumberOfParameters is 1
  2143. 04/24 22:47:16 [CRITICAL] [1984] Long val: 5
  2144. 04/24 22:47:16 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2145. 04/24 22:47:16 [MISC] [1984] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  2146. 04/24 22:47:16 [MISC] [1984] Didn't log event since it was already logged.
  2147. 04/24 22:47:16 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  2148. 04/24 22:47:16 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  2149. 04/24 22:47:16 [SESSION] [1984] DOMAIN: NlSessionSetup: Session setup Failed
  2150. 04/24 22:47:16 [MISC] [1984] DsrEnumerateDomainTrusts: returns: 0
  2151. 04/24 22:47:16 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  2152. 04/24 22:47:16 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2153. 04/24 22:47:16 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  2154. 04/24 22:47:16 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2155. 04/24 22:47:16 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  2156. 04/24 22:47:16 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2157. 04/24 22:47:16 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2158. 04/24 22:47:16 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  2159. 04/24 22:47:16 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2160. 04/24 22:47:16 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2161. 04/24 22:47:17 [SITE] [1984] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  2162. 04/24 22:47:17 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2163. 04/24 22:47:17 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2164. 04/24 22:47:17 [MISC] [1984] NetpDcGetName: DOMAIN.COM cache is too old. 9916562
  2165. 04/24 22:47:17 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  2166. 04/24 22:47:17 [MISC] [1984] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2167. 04/24 22:47:17 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DFA18F40 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2168. 04/24 22:47:17 [MISC] [1984] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2169. 04/24 22:47:17 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  2170. 04/24 22:47:17 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1AC00
  2171. 04/24 22:47:17 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2172. 04/24 22:47:17 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2173. 04/24 22:52:02 [MISC] [4800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2174. 04/24 22:52:02 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2175. 04/24 22:52:02 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  2176. 04/24 22:52:02 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2177. 04/24 22:52:02 [MISC] [4800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2178. 04/24 23:06:06 [MISC] [612] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2179. 04/24 23:06:06 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2180. 04/24 23:06:06 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2181. 04/24 23:06:06 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2182. 04/24 23:06:06 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  2183. 04/24 23:06:06 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  2184. 04/24 23:06:06 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2185. 04/24 23:06:06 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2186. 04/24 23:06:06 [MISC] [612] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2187. 04/24 23:06:06 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2188. 04/24 23:06:07 [SITE] [4800] DsrGetSiteName: Site name 'Oracle-PHX' is old. Getting a new one from DC.
  2189. 04/24 23:06:07 [SESSION] [4800] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  2190. 04/24 23:06:07 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2191. 04/24 23:06:07 [MAILSLOT] [4800] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2192. 04/24 23:06:07 [MISC] [4800] NetpDcAllocateCacheEntry: new entry 0x00000169DFA197E0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2193. 04/24 23:06:07 [MISC] [4800] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2194. 04/24 23:06:07 [MISC] [4800] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A080
  2195. 04/24 23:06:07 [MISC] [4800] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  2196. 04/24 23:06:07 [PERF] [4800] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  2197. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  2198. 04/24 23:06:07 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2199. 04/24 23:06:07 [MAILSLOT] [4800] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2200. 04/24 23:06:07 [MISC] [4800] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2201. 04/24 23:06:07 [MISC] [4800] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19DA0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2202. 04/24 23:06:07 [MISC] [4800] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2203. 04/24 23:06:07 [PERF] [4800] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  2204. ClientSession: 00000169DE937210NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19DA0
  2205. 04/24 23:06:07 [MISC] [4800] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2206. 04/24 23:06:07 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2207. 04/24 23:06:07 [MISC] [4800] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  2208. 04/24 23:06:07 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2209. 04/24 23:06:07 [MISC] [4800] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2210. 04/24 23:06:07 [MISC] [4800] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  2211. 04/24 23:06:07 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2212. 04/24 23:06:07 [MISC] [4800] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  2213. 04/24 23:06:07 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2214. 04/24 23:06:07 [MISC] [4800] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  2215. 04/24 23:06:07 [SESSION] [1984] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2216. 04/24 23:06:07 [SESSION] [1984] DOMAIN: NlSessionSetup: Try Session setup
  2217. 04/24 23:06:07 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2218. 04/24 23:06:07 [CRITICAL] [1984] [0] ProcessID is 572
  2219. 04/24 23:06:07 [CRITICAL] [1984] [0] System Time is: 4/25/2019 3:6:7:712
  2220. 04/24 23:06:07 [CRITICAL] [1984] [0] Generating component is 2
  2221. 04/24 23:06:07 [CRITICAL] [1984] [0] Status is 5
  2222. 04/24 23:06:07 [CRITICAL] [1984] [0] Detection location is 501
  2223. 04/24 23:06:07 [CRITICAL] [1984] [0] Flags is 0
  2224. 04/24 23:06:07 [CRITICAL] [1984] [0] NumberOfParameters is 4
  2225. 04/24 23:06:07 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  2226. 04/24 23:06:07 [CRITICAL] [1984] Unicode string: TRORAWADC001.DOMAIN.COM
  2227. 04/24 23:06:07 [CRITICAL] [1984] Long val: 305419896
  2228. 04/24 23:06:07 [CRITICAL] [1984] Long val: 5
  2229. 04/24 23:06:07 [CRITICAL] [1984] [1] ProcessID is 572
  2230. 04/24 23:06:07 [CRITICAL] [1984] [1] System Time is: 4/25/2019 3:6:7:712
  2231. 04/24 23:06:07 [CRITICAL] [1984] [1] Generating component is 2
  2232. 04/24 23:06:07 [CRITICAL] [1984] [1] Status is 5
  2233. 04/24 23:06:07 [CRITICAL] [1984] [1] Detection location is 1750
  2234. 04/24 23:06:07 [CRITICAL] [1984] [1] Flags is 0
  2235. 04/24 23:06:07 [CRITICAL] [1984] [1] NumberOfParameters is 1
  2236. 04/24 23:06:07 [CRITICAL] [1984] Long val: 5
  2237. 04/24 23:06:07 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2238. 04/24 23:06:07 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2239. 04/24 23:06:07 [CRITICAL] [1984] [0] ProcessID is 572
  2240. 04/24 23:06:07 [CRITICAL] [1984] [0] System Time is: 4/25/2019 3:6:7:728
  2241. 04/24 23:06:07 [CRITICAL] [1984] [0] Generating component is 2
  2242. 04/24 23:06:07 [CRITICAL] [1984] [0] Status is 5
  2243. 04/24 23:06:07 [CRITICAL] [1984] [0] Detection location is 501
  2244. 04/24 23:06:07 [CRITICAL] [1984] [0] Flags is 0
  2245. 04/24 23:06:07 [CRITICAL] [1984] [0] NumberOfParameters is 4
  2246. 04/24 23:06:07 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  2247. 04/24 23:06:07 [CRITICAL] [1984] Unicode string: TRORAWADC001.DOMAIN.COM
  2248. 04/24 23:06:07 [CRITICAL] [1984] Long val: 305419896
  2249. 04/24 23:06:07 [CRITICAL] [1984] Long val: 5
  2250. 04/24 23:06:07 [CRITICAL] [1984] [1] ProcessID is 572
  2251. 04/24 23:06:07 [CRITICAL] [1984] [1] System Time is: 4/25/2019 3:6:7:728
  2252. 04/24 23:06:07 [CRITICAL] [1984] [1] Generating component is 2
  2253. 04/24 23:06:07 [CRITICAL] [1984] [1] Status is 5
  2254. 04/24 23:06:07 [CRITICAL] [1984] [1] Detection location is 1750
  2255. 04/24 23:06:07 [CRITICAL] [1984] [1] Flags is 0
  2256. 04/24 23:06:07 [CRITICAL] [1984] [1] NumberOfParameters is 1
  2257. 04/24 23:06:07 [CRITICAL] [1984] Long val: 5
  2258. 04/24 23:06:07 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2259. 04/24 23:06:07 [MISC] [1984] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  2260. 04/24 23:06:07 [MISC] [1984] Didn't log event since it was already logged.
  2261. 04/24 23:06:07 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  2262. 04/24 23:06:07 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  2263. 04/24 23:06:07 [SESSION] [1984] DOMAIN: NlSessionSetup: Session setup Failed
  2264. 04/24 23:06:07 [CRITICAL] [1984] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2265. 04/24 23:06:07 [SESSION] [1984] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2266. 04/24 23:06:07 [CRITICAL] [1984] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2267. 04/24 23:06:07 [SESSION] [4800] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2268. 04/24 23:06:07 [CRITICAL] [4800] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2269. 04/24 23:06:07 [SESSION] [4800] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2270. 04/24 23:06:07 [CRITICAL] [4800] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2271. 04/24 23:06:07 [SESSION] [4800] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2272. 04/24 23:06:07 [CRITICAL] [4800] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2273. 04/24 23:06:07 [SESSION] [1984] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2274. 04/24 23:06:07 [CRITICAL] [1984] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2275. 04/24 23:07:02 [MISC] [4800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2276. 04/24 23:07:02 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2277. 04/24 23:07:02 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  2278. 04/24 23:07:02 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2279. 04/24 23:07:02 [MISC] [4800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2280. 04/24 23:22:02 [MISC] [1984] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2281. 04/24 23:22:02 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2282. 04/24 23:22:02 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  2283. 04/24 23:22:02 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2284. 04/24 23:22:02 [MISC] [1984] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2285. 04/24 23:22:06 [MISC] [612] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2286. 04/24 23:22:06 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2287. 04/24 23:22:06 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  2288. 04/24 23:22:06 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19DA0 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  2289. 04/24 23:22:06 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2290. 04/24 23:22:06 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19500
  2291. 04/24 23:22:06 [MISC] [612] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  2292. 04/24 23:22:06 [MISC] [612] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2293. 04/24 23:37:02 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2294. 04/24 23:37:02 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2295. 04/24 23:37:02 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  2296. 04/24 23:37:02 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2297. 04/24 23:37:02 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2298. 04/24 23:52:02 [MISC] [4800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2299. 04/24 23:52:02 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2300. 04/24 23:52:02 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  2301. 04/24 23:52:02 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2302. 04/24 23:52:02 [MISC] [4800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2303. 04/25 00:07:02 [MISC] [5076] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2304. 04/25 00:07:02 [MISC] [5076] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2305. 04/25 00:07:02 [MISC] [5076] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  2306. 04/25 00:07:02 [MISC] [5076] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2307. 04/25 00:07:02 [MISC] [5076] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2308. 04/25 00:22:02 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2309. 04/25 00:22:02 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2310. 04/25 00:22:02 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  2311. 04/25 00:22:02 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2312. 04/25 00:22:02 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2313. 04/25 00:22:06 [MISC] [612] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2314. 04/25 00:22:06 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2315. 04/25 00:22:06 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  2316. 04/25 00:22:06 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A080 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  2317. 04/25 00:22:06 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2318. 04/25 00:22:06 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19DA0
  2319. 04/25 00:22:06 [MISC] [612] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  2320. 04/25 00:22:06 [MISC] [612] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2321. 04/25 00:33:06 [MISC] [4800] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2322. 04/25 00:33:06 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2323. 04/25 00:33:06 [MISC] [4800] NetpDcGetName: DOMAIN.COM. cache is too old. 5219704
  2324. 04/25 00:33:06 [MAILSLOT] [4800] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2325. 04/25 00:33:06 [MISC] [4800] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2326. 04/25 00:33:07 [MISC] [4800] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19DA0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2327. 04/25 00:33:07 [MISC] [4800] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2328. 04/25 00:33:07 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2329. 04/25 00:33:07 [MISC] [4800] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA197E0
  2330. 04/25 00:33:07 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2331. 04/25 00:33:07 [MISC] [4800] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2332. 04/25 00:37:02 [MISC] [4800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2333. 04/25 00:37:02 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2334. 04/25 00:37:02 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2335. 04/25 00:37:02 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2336. 04/25 00:37:02 [MISC] [4800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2337. 04/25 00:37:17 [MISC] [612] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2338. 04/25 00:37:17 [MISC] [1984] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  2339. 04/25 00:37:17 [SESSION] [1984] DOMAIN: NlSessionSetup: Try Session setup
  2340. 04/25 00:37:17 [SESSION] [1984] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  2341. 04/25 00:37:17 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2342. 04/25 00:37:17 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2343. 04/25 00:37:17 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2344. 04/25 00:37:17 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2345. 04/25 00:37:17 [MISC] [612] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2346. 04/25 00:37:17 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2347. 04/25 00:37:17 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19220 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2348. 04/25 00:37:17 [MISC] [1984] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2349. 04/25 00:37:17 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19DA0
  2350. 04/25 00:37:17 [MISC] [1984] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  2351. 04/25 00:37:17 [PERF] [1984] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  2352. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  2353. 04/25 00:37:17 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2354. 04/25 00:37:17 [CRITICAL] [1984] [0] ProcessID is 572
  2355. 04/25 00:37:17 [CRITICAL] [1984] [0] System Time is: 4/25/2019 4:37:17:790
  2356. 04/25 00:37:17 [CRITICAL] [1984] [0] Generating component is 2
  2357. 04/25 00:37:17 [CRITICAL] [1984] [0] Status is 5
  2358. 04/25 00:37:17 [CRITICAL] [1984] [0] Detection location is 501
  2359. 04/25 00:37:17 [CRITICAL] [1984] [0] Flags is 0
  2360. 04/25 00:37:17 [CRITICAL] [1984] [0] NumberOfParameters is 4
  2361. 04/25 00:37:17 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  2362. 04/25 00:37:17 [CRITICAL] [1984] Unicode string: TRORAWADC001.DOMAIN.COM
  2363. 04/25 00:37:17 [CRITICAL] [1984] Long val: 305419896
  2364. 04/25 00:37:17 [CRITICAL] [1984] Long val: 5
  2365. 04/25 00:37:17 [CRITICAL] [1984] [1] ProcessID is 572
  2366. 04/25 00:37:17 [CRITICAL] [1984] [1] System Time is: 4/25/2019 4:37:17:790
  2367. 04/25 00:37:17 [CRITICAL] [1984] [1] Generating component is 2
  2368. 04/25 00:37:17 [CRITICAL] [1984] [1] Status is 5
  2369. 04/25 00:37:17 [CRITICAL] [1984] [1] Detection location is 1750
  2370. 04/25 00:37:17 [CRITICAL] [1984] [1] Flags is 0
  2371. 04/25 00:37:17 [CRITICAL] [1984] [1] NumberOfParameters is 1
  2372. 04/25 00:37:17 [CRITICAL] [1984] Long val: 5
  2373. 04/25 00:37:17 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2374. 04/25 00:37:17 [CRITICAL] [1984] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2375. 04/25 00:37:17 [CRITICAL] [1984] [0] ProcessID is 572
  2376. 04/25 00:37:17 [CRITICAL] [1984] [0] System Time is: 4/25/2019 4:37:17:790
  2377. 04/25 00:37:17 [CRITICAL] [1984] [0] Generating component is 2
  2378. 04/25 00:37:17 [CRITICAL] [1984] [0] Status is 5
  2379. 04/25 00:37:17 [CRITICAL] [1984] [0] Detection location is 501
  2380. 04/25 00:37:17 [CRITICAL] [1984] [0] Flags is 0
  2381. 04/25 00:37:17 [CRITICAL] [1984] [0] NumberOfParameters is 4
  2382. 04/25 00:37:17 [CRITICAL] [1984] Unicode string: ncacn_ip_tcp
  2383. 04/25 00:37:17 [CRITICAL] [1984] Unicode string: TRORAWADC001.DOMAIN.COM
  2384. 04/25 00:37:17 [CRITICAL] [1984] Long val: 305419896
  2385. 04/25 00:37:17 [CRITICAL] [1984] Long val: 5
  2386. 04/25 00:37:17 [CRITICAL] [1984] [1] ProcessID is 572
  2387. 04/25 00:37:17 [CRITICAL] [1984] [1] System Time is: 4/25/2019 4:37:17:790
  2388. 04/25 00:37:17 [CRITICAL] [1984] [1] Generating component is 2
  2389. 04/25 00:37:17 [CRITICAL] [1984] [1] Status is 5
  2390. 04/25 00:37:17 [CRITICAL] [1984] [1] Detection location is 1750
  2391. 04/25 00:37:17 [CRITICAL] [1984] [1] Flags is 0
  2392. 04/25 00:37:17 [CRITICAL] [1984] [1] NumberOfParameters is 1
  2393. 04/25 00:37:17 [CRITICAL] [1984] Long val: 5
  2394. 04/25 00:37:17 [CRITICAL] [1984] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2395. 04/25 00:37:17 [MISC] [1984] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  2396. 04/25 00:37:17 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  2397. 04/25 00:37:17 [SESSION] [1984] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  2398. 04/25 00:37:17 [SESSION] [1984] DOMAIN: NlSessionSetup: Session setup Failed
  2399. 04/25 00:37:17 [MISC] [1984] DsrEnumerateDomainTrusts: returns: 0
  2400. 04/25 00:37:17 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  2401. 04/25 00:37:17 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2402. 04/25 00:37:17 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  2403. 04/25 00:37:17 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2404. 04/25 00:37:17 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  2405. 04/25 00:37:17 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2406. 04/25 00:37:17 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2407. 04/25 00:37:17 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  2408. 04/25 00:37:17 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2409. 04/25 00:37:17 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2410. 04/25 00:37:18 [SITE] [1984] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  2411. 04/25 00:37:18 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2412. 04/25 00:37:18 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2413. 04/25 00:37:18 [MISC] [1984] NetpDcGetName: DOMAIN.COM cache is too old. 16517422
  2414. 04/25 00:37:18 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  2415. 04/25 00:37:18 [MISC] [1984] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2416. 04/25 00:37:18 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A920 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2417. 04/25 00:37:18 [MISC] [1984] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2418. 04/25 00:37:18 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  2419. 04/25 00:37:18 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA18F40
  2420. 04/25 00:37:18 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2421. 04/25 00:37:18 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2422. 04/25 00:41:08 [MISC] [1984] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2423. 04/25 00:41:08 [MISC] [4800] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2424. 04/25 00:41:08 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2425. 04/25 00:41:08 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2426. 04/25 00:41:08 [MISC] [1984] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  2427. 04/25 00:41:08 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  2428. 04/25 00:41:08 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2429. 04/25 00:41:08 [MISC] [1984] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2430. 04/25 00:41:08 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2431. 04/25 00:41:08 [MISC] [4800] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2432. 04/25 00:41:08 [SITE] [612] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  2433. 04/25 00:41:08 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2434. 04/25 00:41:08 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2435. 04/25 00:41:08 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  2436. 04/25 00:41:08 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2437. 04/25 00:41:08 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2438. 04/25 00:41:08 [MISC] [612] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  2439. 04/25 00:41:08 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2440. 04/25 00:41:08 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  2441. 04/25 00:41:08 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2442. 04/25 00:41:08 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  2443. 04/25 00:41:09 [SESSION] [4800] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2444. 04/25 00:41:09 [SESSION] [4800] DOMAIN: NlSessionSetup: Try Session setup
  2445. 04/25 00:41:09 [SESSION] [4800] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  2446. 04/25 00:41:09 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2447. 04/25 00:41:09 [MAILSLOT] [4800] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2448. 04/25 00:41:09 [MISC] [4800] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A360 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2449. 04/25 00:41:09 [MISC] [4800] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2450. 04/25 00:41:09 [MISC] [4800] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19220
  2451. 04/25 00:41:09 [MISC] [4800] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  2452. 04/25 00:41:09 [PERF] [4800] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  2453. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  2454. 04/25 00:41:09 [CRITICAL] [4800] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2455. 04/25 00:41:09 [CRITICAL] [4800] [0] ProcessID is 572
  2456. 04/25 00:41:09 [CRITICAL] [4800] [0] System Time is: 4/25/2019 4:41:9:134
  2457. 04/25 00:41:09 [CRITICAL] [4800] [0] Generating component is 2
  2458. 04/25 00:41:09 [CRITICAL] [4800] [0] Status is 5
  2459. 04/25 00:41:09 [CRITICAL] [4800] [0] Detection location is 501
  2460. 04/25 00:41:09 [CRITICAL] [4800] [0] Flags is 0
  2461. 04/25 00:41:09 [CRITICAL] [4800] [0] NumberOfParameters is 4
  2462. 04/25 00:41:09 [CRITICAL] [4800] Unicode string: ncacn_ip_tcp
  2463. 04/25 00:41:09 [CRITICAL] [4800] Unicode string: TRORAWADC001.DOMAIN.COM
  2464. 04/25 00:41:09 [CRITICAL] [4800] Long val: 305419896
  2465. 04/25 00:41:09 [CRITICAL] [4800] Long val: 5
  2466. 04/25 00:41:09 [CRITICAL] [4800] [1] ProcessID is 572
  2467. 04/25 00:41:09 [CRITICAL] [4800] [1] System Time is: 4/25/2019 4:41:9:134
  2468. 04/25 00:41:09 [CRITICAL] [4800] [1] Generating component is 2
  2469. 04/25 00:41:09 [CRITICAL] [4800] [1] Status is 5
  2470. 04/25 00:41:09 [CRITICAL] [4800] [1] Detection location is 1750
  2471. 04/25 00:41:09 [CRITICAL] [4800] [1] Flags is 0
  2472. 04/25 00:41:09 [CRITICAL] [4800] [1] NumberOfParameters is 1
  2473. 04/25 00:41:09 [CRITICAL] [4800] Long val: 5
  2474. 04/25 00:41:09 [CRITICAL] [4800] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2475. 04/25 00:41:09 [CRITICAL] [4800] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2476. 04/25 00:41:09 [CRITICAL] [4800] [0] ProcessID is 572
  2477. 04/25 00:41:09 [CRITICAL] [4800] [0] System Time is: 4/25/2019 4:41:9:134
  2478. 04/25 00:41:09 [CRITICAL] [4800] [0] Generating component is 2
  2479. 04/25 00:41:09 [CRITICAL] [4800] [0] Status is 5
  2480. 04/25 00:41:09 [CRITICAL] [4800] [0] Detection location is 501
  2481. 04/25 00:41:09 [CRITICAL] [4800] [0] Flags is 0
  2482. 04/25 00:41:09 [CRITICAL] [4800] [0] NumberOfParameters is 4
  2483. 04/25 00:41:09 [CRITICAL] [4800] Unicode string: ncacn_ip_tcp
  2484. 04/25 00:41:09 [CRITICAL] [4800] Unicode string: TRORAWADC001.DOMAIN.COM
  2485. 04/25 00:41:09 [CRITICAL] [4800] Long val: 305419896
  2486. 04/25 00:41:09 [CRITICAL] [4800] Long val: 5
  2487. 04/25 00:41:09 [CRITICAL] [4800] [1] ProcessID is 572
  2488. 04/25 00:41:09 [CRITICAL] [4800] [1] System Time is: 4/25/2019 4:41:9:134
  2489. 04/25 00:41:09 [CRITICAL] [4800] [1] Generating component is 2
  2490. 04/25 00:41:09 [CRITICAL] [4800] [1] Status is 5
  2491. 04/25 00:41:09 [CRITICAL] [4800] [1] Detection location is 1750
  2492. 04/25 00:41:09 [CRITICAL] [4800] [1] Flags is 0
  2493. 04/25 00:41:09 [CRITICAL] [4800] [1] NumberOfParameters is 1
  2494. 04/25 00:41:09 [CRITICAL] [4800] Long val: 5
  2495. 04/25 00:41:09 [CRITICAL] [4800] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2496. 04/25 00:41:09 [MISC] [4800] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  2497. 04/25 00:41:09 [MISC] [4800] Didn't log event since it was already logged.
  2498. 04/25 00:41:09 [SESSION] [4800] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  2499. 04/25 00:41:09 [SESSION] [4800] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  2500. 04/25 00:41:09 [SESSION] [4800] DOMAIN: NlSessionSetup: Session setup Failed
  2501. 04/25 00:41:09 [CRITICAL] [4800] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2502. 04/25 00:41:09 [SESSION] [4800] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2503. 04/25 00:41:09 [CRITICAL] [4800] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2504. 04/25 00:41:09 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2505. 04/25 00:41:09 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2506. 04/25 00:41:09 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2507. 04/25 00:41:09 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2508. 04/25 00:41:09 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2509. 04/25 00:41:09 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2510. 04/25 00:41:09 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2511. 04/25 00:41:09 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2512. 04/25 00:52:02 [MISC] [1984] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2513. 04/25 00:52:02 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2514. 04/25 00:52:02 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2515. 04/25 00:52:02 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2516. 04/25 00:52:02 [MISC] [1984] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2517. 04/25 01:07:02 [MISC] [4800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2518. 04/25 01:07:02 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2519. 04/25 01:07:02 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2520. 04/25 01:07:02 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2521. 04/25 01:07:02 [MISC] [4800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2522. 04/25 01:07:55 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  2523. 04/25 01:07:55 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2524. 04/25 01:07:55 [MISC] [612] NetpDcGetName: DOMAIN.COM. cache is too old. 18355156
  2525. 04/25 01:07:55 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2526. 04/25 01:07:55 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2527. 04/25 01:07:55 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A640 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2528. 04/25 01:07:55 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2529. 04/25 01:07:55 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A640 )
  2530. 04/25 01:07:55 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A920
  2531. 04/25 01:07:55 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2532. 04/25 01:07:55 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  2533. 04/25 01:07:55 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  2534. 04/25 01:07:55 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2535. 04/25 01:07:55 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A640 )
  2536. 04/25 01:07:55 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2537. 04/25 01:07:55 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  2538. 04/25 01:08:45 [MISC] [604] In control handler (Opcode: 4)
  2539. 04/25 01:22:02 [MISC] [1984] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2540. 04/25 01:22:02 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2541. 04/25 01:22:02 [MISC] [1984] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2542. 04/25 01:22:02 [MISC] [1984] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2543. 04/25 01:22:02 [MISC] [1984] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2544. 04/25 01:22:07 [MISC] [1984] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2545. 04/25 01:22:07 [MISC] [1984] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2546. 04/25 01:22:07 [MAILSLOT] [1984] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  2547. 04/25 01:22:07 [MISC] [1984] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A920 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  2548. 04/25 01:22:07 [MISC] [1984] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2549. 04/25 01:22:07 [MISC] [1984] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A080
  2550. 04/25 01:22:07 [MISC] [1984] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  2551. 04/25 01:22:07 [MISC] [1984] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2552. 04/25 01:37:02 [MISC] [3760] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2553. 04/25 01:37:02 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2554. 04/25 01:37:02 [MISC] [3760] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2555. 04/25 01:37:02 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2556. 04/25 01:37:02 [MISC] [3760] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2557. 04/25 01:52:02 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2558. 04/25 01:52:02 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2559. 04/25 01:52:02 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2560. 04/25 01:52:02 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2561. 04/25 01:52:02 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2562. 04/25 02:06:03 [MISC] [604] In control handler (Opcode: 4)
  2563. 04/25 02:07:02 [MISC] [4800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2564. 04/25 02:07:02 [MISC] [4800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2565. 04/25 02:07:02 [MISC] [4800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2566. 04/25 02:07:02 [MISC] [4800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2567. 04/25 02:07:02 [MISC] [4800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2568. 04/25 02:22:03 [MISC] [3760] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2569. 04/25 02:22:03 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2570. 04/25 02:22:03 [MISC] [3760] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2571. 04/25 02:22:03 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2572. 04/25 02:22:03 [MISC] [3760] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2573. 04/25 02:22:07 [MISC] [3760] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2574. 04/25 02:22:07 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2575. 04/25 02:22:07 [MAILSLOT] [3760] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  2576. 04/25 02:22:07 [MISC] [3760] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19500 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  2577. 04/25 02:22:07 [MISC] [3760] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2578. 04/25 02:22:07 [MISC] [3760] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A920
  2579. 04/25 02:22:07 [MISC] [3760] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  2580. 04/25 02:22:07 [MISC] [3760] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2581. 04/25 02:27:09 [MISC] [2752] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2582. 04/25 02:27:09 [MISC] [3760] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2583. 04/25 02:27:09 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2584. 04/25 02:27:09 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2585. 04/25 02:27:09 [MISC] [3760] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2586. 04/25 02:27:09 [MISC] [2752] NetpDcGetName: DOMAIN.COM. cache is too old. 6360562
  2587. 04/25 02:27:09 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2588. 04/25 02:27:09 [MISC] [3760] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2589. 04/25 02:27:09 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2590. 04/25 02:27:09 [MISC] [2752] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2591. 04/25 02:27:09 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19220 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2592. 04/25 02:27:09 [MISC] [2752] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2593. 04/25 02:27:09 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  2594. 04/25 02:27:09 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A360
  2595. 04/25 02:27:09 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2596. 04/25 02:27:09 [MISC] [2752] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2597. 04/25 02:27:10 [SITE] [612] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  2598. 04/25 02:27:10 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2599. 04/25 02:27:10 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2600. 04/25 02:27:10 [MISC] [612] NetpDcGetName: DOMAIN.COM cache is too old. 23109328
  2601. 04/25 02:27:10 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  2602. 04/25 02:27:10 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2603. 04/25 02:27:10 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19DA0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2604. 04/25 02:27:10 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2605. 04/25 02:27:10 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2606. 04/25 02:27:10 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A640
  2607. 04/25 02:27:10 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2608. 04/25 02:27:10 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2609. 04/25 02:27:10 [MISC] [612] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  2610. 04/25 02:27:10 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2611. 04/25 02:27:10 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  2612. 04/25 02:27:10 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2613. 04/25 02:27:10 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  2614. 04/25 02:27:10 [SESSION] [2752] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2615. 04/25 02:27:10 [SESSION] [2752] DOMAIN: NlSessionSetup: Try Session setup
  2616. 04/25 02:27:10 [SESSION] [2752] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  2617. 04/25 02:27:10 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2618. 04/25 02:27:10 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2619. 04/25 02:27:10 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A080 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2620. 04/25 02:27:10 [MISC] [2752] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2621. 04/25 02:27:10 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19220
  2622. 04/25 02:27:10 [MISC] [2752] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  2623. 04/25 02:27:10 [PERF] [2752] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  2624. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  2625. 04/25 02:27:10 [CRITICAL] [2752] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2626. 04/25 02:27:10 [CRITICAL] [2752] [0] ProcessID is 572
  2627. 04/25 02:27:10 [CRITICAL] [2752] [0] System Time is: 4/25/2019 6:27:10:665
  2628. 04/25 02:27:10 [CRITICAL] [2752] [0] Generating component is 2
  2629. 04/25 02:27:10 [CRITICAL] [2752] [0] Status is 5
  2630. 04/25 02:27:10 [CRITICAL] [2752] [0] Detection location is 501
  2631. 04/25 02:27:10 [CRITICAL] [2752] [0] Flags is 0
  2632. 04/25 02:27:10 [CRITICAL] [2752] [0] NumberOfParameters is 4
  2633. 04/25 02:27:10 [CRITICAL] [2752] Unicode string: ncacn_ip_tcp
  2634. 04/25 02:27:10 [CRITICAL] [2752] Unicode string: TRORAWADC001.DOMAIN.COM
  2635. 04/25 02:27:10 [CRITICAL] [2752] Long val: 305419896
  2636. 04/25 02:27:10 [CRITICAL] [2752] Long val: 5
  2637. 04/25 02:27:10 [CRITICAL] [2752] [1] ProcessID is 572
  2638. 04/25 02:27:10 [CRITICAL] [2752] [1] System Time is: 4/25/2019 6:27:10:665
  2639. 04/25 02:27:10 [CRITICAL] [2752] [1] Generating component is 2
  2640. 04/25 02:27:10 [CRITICAL] [2752] [1] Status is 5
  2641. 04/25 02:27:10 [CRITICAL] [2752] [1] Detection location is 1750
  2642. 04/25 02:27:10 [CRITICAL] [2752] [1] Flags is 0
  2643. 04/25 02:27:10 [CRITICAL] [2752] [1] NumberOfParameters is 1
  2644. 04/25 02:27:10 [CRITICAL] [2752] Long val: 5
  2645. 04/25 02:27:10 [CRITICAL] [2752] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2646. 04/25 02:27:10 [CRITICAL] [2752] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2647. 04/25 02:27:10 [CRITICAL] [2752] [0] ProcessID is 572
  2648. 04/25 02:27:10 [CRITICAL] [2752] [0] System Time is: 4/25/2019 6:27:10:665
  2649. 04/25 02:27:10 [CRITICAL] [2752] [0] Generating component is 2
  2650. 04/25 02:27:10 [CRITICAL] [2752] [0] Status is 5
  2651. 04/25 02:27:10 [CRITICAL] [2752] [0] Detection location is 501
  2652. 04/25 02:27:10 [CRITICAL] [2752] [0] Flags is 0
  2653. 04/25 02:27:10 [CRITICAL] [2752] [0] NumberOfParameters is 4
  2654. 04/25 02:27:10 [CRITICAL] [2752] Unicode string: ncacn_ip_tcp
  2655. 04/25 02:27:10 [CRITICAL] [2752] Unicode string: TRORAWADC001.DOMAIN.COM
  2656. 04/25 02:27:10 [CRITICAL] [2752] Long val: 305419896
  2657. 04/25 02:27:10 [CRITICAL] [2752] Long val: 5
  2658. 04/25 02:27:10 [CRITICAL] [2752] [1] ProcessID is 572
  2659. 04/25 02:27:10 [CRITICAL] [2752] [1] System Time is: 4/25/2019 6:27:10:665
  2660. 04/25 02:27:10 [CRITICAL] [2752] [1] Generating component is 2
  2661. 04/25 02:27:10 [CRITICAL] [2752] [1] Status is 5
  2662. 04/25 02:27:10 [CRITICAL] [2752] [1] Detection location is 1750
  2663. 04/25 02:27:10 [CRITICAL] [2752] [1] Flags is 0
  2664. 04/25 02:27:10 [CRITICAL] [2752] [1] NumberOfParameters is 1
  2665. 04/25 02:27:10 [CRITICAL] [2752] Long val: 5
  2666. 04/25 02:27:10 [CRITICAL] [2752] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2667. 04/25 02:27:10 [MISC] [2752] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  2668. 04/25 02:27:10 [MISC] [2752] Didn't log event since it was already logged.
  2669. 04/25 02:27:10 [SESSION] [2752] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  2670. 04/25 02:27:10 [SESSION] [2752] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  2671. 04/25 02:27:10 [SESSION] [2752] DOMAIN: NlSessionSetup: Session setup Failed
  2672. 04/25 02:27:10 [CRITICAL] [2752] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2673. 04/25 02:27:10 [SESSION] [2752] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2674. 04/25 02:27:10 [CRITICAL] [2752] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2675. 04/25 02:27:10 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2676. 04/25 02:27:10 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2677. 04/25 02:27:10 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2678. 04/25 02:27:10 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2679. 04/25 02:27:10 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2680. 04/25 02:27:10 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2681. 04/25 02:27:10 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2682. 04/25 02:27:10 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2683. 04/25 02:32:18 [MISC] [612] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2684. 04/25 02:32:18 [MISC] [3760] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  2685. 04/25 02:32:18 [SESSION] [3760] DOMAIN: NlSessionSetup: Try Session setup
  2686. 04/25 02:32:18 [SESSION] [3760] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  2687. 04/25 02:32:18 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2688. 04/25 02:32:18 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2689. 04/25 02:32:18 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  2690. 04/25 02:32:18 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2691. 04/25 02:32:18 [MISC] [612] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2692. 04/25 02:32:18 [MAILSLOT] [3760] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2693. 04/25 02:32:18 [MISC] [3760] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A360 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2694. 04/25 02:32:18 [MISC] [3760] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2695. 04/25 02:32:18 [MISC] [3760] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A080
  2696. 04/25 02:32:18 [MISC] [3760] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  2697. 04/25 02:32:18 [PERF] [3760] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  2698. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  2699. 04/25 02:32:18 [CRITICAL] [3760] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2700. 04/25 02:32:18 [CRITICAL] [3760] [0] ProcessID is 572
  2701. 04/25 02:32:18 [CRITICAL] [3760] [0] System Time is: 4/25/2019 6:32:18:650
  2702. 04/25 02:32:18 [CRITICAL] [3760] [0] Generating component is 2
  2703. 04/25 02:32:18 [CRITICAL] [3760] [0] Status is 5
  2704. 04/25 02:32:18 [CRITICAL] [3760] [0] Detection location is 501
  2705. 04/25 02:32:18 [CRITICAL] [3760] [0] Flags is 0
  2706. 04/25 02:32:18 [CRITICAL] [3760] [0] NumberOfParameters is 4
  2707. 04/25 02:32:18 [CRITICAL] [3760] Unicode string: ncacn_ip_tcp
  2708. 04/25 02:32:18 [CRITICAL] [3760] Unicode string: TRORAWADC001.DOMAIN.COM
  2709. 04/25 02:32:18 [CRITICAL] [3760] Long val: 305419896
  2710. 04/25 02:32:18 [CRITICAL] [3760] Long val: 5
  2711. 04/25 02:32:18 [CRITICAL] [3760] [1] ProcessID is 572
  2712. 04/25 02:32:18 [CRITICAL] [3760] [1] System Time is: 4/25/2019 6:32:18:650
  2713. 04/25 02:32:18 [CRITICAL] [3760] [1] Generating component is 2
  2714. 04/25 02:32:18 [CRITICAL] [3760] [1] Status is 5
  2715. 04/25 02:32:18 [CRITICAL] [3760] [1] Detection location is 1750
  2716. 04/25 02:32:18 [CRITICAL] [3760] [1] Flags is 0
  2717. 04/25 02:32:18 [CRITICAL] [3760] [1] NumberOfParameters is 1
  2718. 04/25 02:32:18 [CRITICAL] [3760] Long val: 5
  2719. 04/25 02:32:18 [CRITICAL] [3760] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2720. 04/25 02:32:18 [CRITICAL] [3760] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2721. 04/25 02:32:18 [CRITICAL] [3760] [0] ProcessID is 572
  2722. 04/25 02:32:18 [CRITICAL] [3760] [0] System Time is: 4/25/2019 6:32:18:650
  2723. 04/25 02:32:18 [CRITICAL] [3760] [0] Generating component is 2
  2724. 04/25 02:32:18 [CRITICAL] [3760] [0] Status is 5
  2725. 04/25 02:32:18 [CRITICAL] [3760] [0] Detection location is 501
  2726. 04/25 02:32:18 [CRITICAL] [3760] [0] Flags is 0
  2727. 04/25 02:32:18 [CRITICAL] [3760] [0] NumberOfParameters is 4
  2728. 04/25 02:32:18 [CRITICAL] [3760] Unicode string: ncacn_ip_tcp
  2729. 04/25 02:32:18 [CRITICAL] [3760] Unicode string: TRORAWADC001.DOMAIN.COM
  2730. 04/25 02:32:18 [CRITICAL] [3760] Long val: 305419896
  2731. 04/25 02:32:18 [CRITICAL] [3760] Long val: 5
  2732. 04/25 02:32:18 [CRITICAL] [3760] [1] ProcessID is 572
  2733. 04/25 02:32:18 [CRITICAL] [3760] [1] System Time is: 4/25/2019 6:32:18:650
  2734. 04/25 02:32:18 [CRITICAL] [3760] [1] Generating component is 2
  2735. 04/25 02:32:18 [CRITICAL] [3760] [1] Status is 5
  2736. 04/25 02:32:18 [CRITICAL] [3760] [1] Detection location is 1750
  2737. 04/25 02:32:18 [CRITICAL] [3760] [1] Flags is 0
  2738. 04/25 02:32:18 [CRITICAL] [3760] [1] NumberOfParameters is 1
  2739. 04/25 02:32:18 [CRITICAL] [3760] Long val: 5
  2740. 04/25 02:32:18 [CRITICAL] [3760] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2741. 04/25 02:32:18 [MISC] [3760] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  2742. 04/25 02:32:18 [MISC] [3760] Didn't log event since it was already logged.
  2743. 04/25 02:32:18 [SESSION] [3760] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  2744. 04/25 02:32:18 [SESSION] [3760] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  2745. 04/25 02:32:18 [SESSION] [3760] DOMAIN: NlSessionSetup: Session setup Failed
  2746. 04/25 02:32:18 [MISC] [3760] DsrEnumerateDomainTrusts: returns: 0
  2747. 04/25 02:32:18 [MISC] [3760] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  2748. 04/25 02:32:18 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2749. 04/25 02:32:18 [MISC] [3760] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2750. 04/25 02:32:18 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2751. 04/25 02:32:18 [MISC] [3760] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  2752. 04/25 02:32:18 [MISC] [3760] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2753. 04/25 02:32:18 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2754. 04/25 02:32:18 [MISC] [3760] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2755. 04/25 02:32:18 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2756. 04/25 02:32:18 [MISC] [3760] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2757. 04/25 02:32:18 [SITE] [3760] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  2758. 04/25 02:32:18 [MISC] [3760] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2759. 04/25 02:32:18 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2760. 04/25 02:32:18 [MISC] [3760] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2761. 04/25 02:32:18 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2762. 04/25 02:32:18 [MISC] [3760] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2763. 04/25 02:37:03 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2764. 04/25 02:37:03 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2765. 04/25 02:37:03 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2766. 04/25 02:37:03 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2767. 04/25 02:37:03 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2768. 04/25 02:52:03 [MISC] [3760] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2769. 04/25 02:52:03 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2770. 04/25 02:52:03 [MISC] [3760] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2771. 04/25 02:52:03 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2772. 04/25 02:52:03 [MISC] [3760] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2773. 04/25 03:07:03 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2774. 04/25 03:07:03 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2775. 04/25 03:07:03 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2776. 04/25 03:07:03 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2777. 04/25 03:07:03 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2778. 04/25 03:22:03 [MISC] [3760] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2779. 04/25 03:22:03 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2780. 04/25 03:22:03 [MISC] [3760] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  2781. 04/25 03:22:03 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2782. 04/25 03:22:03 [MISC] [3760] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2783. 04/25 03:22:07 [MISC] [3760] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2784. 04/25 03:22:07 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2785. 04/25 03:22:07 [MAILSLOT] [3760] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  2786. 04/25 03:22:08 [MISC] [3760] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A080 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  2787. 04/25 03:22:08 [MISC] [3760] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2788. 04/25 03:22:08 [MISC] [3760] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19500
  2789. 04/25 03:22:08 [MISC] [3760] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  2790. 04/25 03:22:08 [MISC] [3760] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  2791. 04/25 03:22:11 [MISC] [3760] DsGetDcName function called: client PID=2912, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  2792. 04/25 03:22:11 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2793. 04/25 03:22:11 [MISC] [3760] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  2794. 04/25 03:22:11 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2795. 04/25 03:22:11 [MISC] [3760] DsGetDcName function returns 0 (client PID=2912): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  2796. 04/25 03:22:11 [MISC] [3760] DsGetDcName function called: client PID=2912, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2797. 04/25 03:22:11 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2798. 04/25 03:22:11 [MISC] [3760] NetpDcGetName: DOMAIN.COM cache is too old. 26410734
  2799. 04/25 03:22:11 [MAILSLOT] [3760] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  2800. 04/25 03:22:11 [MISC] [3760] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2801. 04/25 03:22:11 [MISC] [3760] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A640 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2802. 04/25 03:22:11 [MISC] [3760] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2803. 04/25 03:22:11 [MISC] [3760] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A640 )
  2804. 04/25 03:22:11 [MISC] [3760] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19DA0
  2805. 04/25 03:22:11 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2806. 04/25 03:22:11 [MISC] [3760] DsGetDcName function returns 0 (client PID=2912): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2807. 04/25 03:22:11 [MISC] [3760] DsGetDcName function called: client PID=2912, Dom: Acct:(null) Flags: RET_DNS
  2808. 04/25 03:22:11 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2809. 04/25 03:22:11 [MISC] [3760] NetpDcGetName: cache is too old. 28796891
  2810. 04/25 03:22:11 [MAILSLOT] [3760] NetpDcPingListIp: : Sent UDP ping to 10.1.2.12
  2811. 04/25 03:22:11 [MISC] [3760] NlPingDcNameWithContext: Sent 1/1 ldap pings to 11ADC002.
  2812. 04/25 03:22:11 [MISC] [3760] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A920 -> DC:11ADC002 DnsDomName: Flags:0x1f1fc
  2813. 04/25 03:22:11 [MISC] [3760] NlPingDcNameWithContext: 11ADC002. responded over IP.
  2814. 04/25 03:22:11 [MISC] [3760] NetpDcGetName: using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  2815. 04/25 03:22:11 [MISC] [3760] NetpDcDerefCacheEntry: destroying entry 0x00000169DE960FC0
  2816. 04/25 03:22:11 [MISC] [3760] DsGetDcName: results as follows: DCName:\\11ADC002. DCAddress:\\10.1.2.12 DCAddrType:0x1 DomainName: DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  2817. 04/25 03:22:11 [MISC] [3760] DsGetDcName function returns 0 (client PID=2912): Dom: Acct:(null) Flags: RET_DNS
  2818. 04/25 03:22:11 [MISC] [3760] DsGetDcName function called: client PID=2912, Dom:(null) Acct:(null) Flags: DSP
  2819. 04/25 03:22:11 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2820. 04/25 03:22:11 [MISC] [3760] NetpDcGetName: DOMAIN.COM. cache is too old. 2992984
  2821. 04/25 03:22:11 [MAILSLOT] [3760] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2822. 04/25 03:22:11 [MISC] [3760] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2823. 04/25 03:22:11 [MISC] [3760] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1AC00 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2824. 04/25 03:22:11 [MISC] [3760] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2825. 04/25 03:22:11 [MISC] [3760] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1AC00 )
  2826. 04/25 03:22:11 [MISC] [3760] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A360
  2827. 04/25 03:22:11 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2828. 04/25 03:22:11 [MISC] [3760] DsGetDcName function returns 0 (client PID=2912): Dom:(null) Acct:(null) Flags: DSP
  2829. 04/25 03:22:11 [MISC] [3760] DsGetDcName function called: client PID=2912, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  2830. 04/25 03:22:11 [MISC] [3760] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2831. 04/25 03:22:11 [MISC] [3760] NetpDcGetName: DOMAIN.COM cache is too old. 27412250
  2832. 04/25 03:22:11 [MAILSLOT] [3760] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  2833. 04/25 03:22:11 [MISC] [3760] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2834. 04/25 03:22:11 [MISC] [3760] NetpDcAllocateCacheEntry: new entry 0x00000169DFA18F40 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2835. 04/25 03:22:11 [MISC] [3760] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2836. 04/25 03:22:11 [MISC] [3760] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  2837. 04/25 03:22:11 [MISC] [3760] NetpDcDerefCacheEntry: destroying entry 0x00000169DF9E85A0
  2838. 04/25 03:22:11 [MISC] [3760] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2839. 04/25 03:22:11 [MISC] [3760] DsGetDcName function returns 0 (client PID=2912): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  2840. 04/25 03:22:11 [MISC] [612] DsGetDcName function called: client PID=2912, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  2841. 04/25 03:22:11 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2842. 04/25 03:22:11 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A640 )
  2843. 04/25 03:22:11 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2844. 04/25 03:22:11 [MISC] [612] DsGetDcName function returns 0 (client PID=2912): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  2845. 04/25 03:22:11 [MISC] [612] DsGetDcName function called: client PID=2912, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  2846. 04/25 03:22:11 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2847. 04/25 03:22:11 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A640 )
  2848. 04/25 03:22:11 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2849. 04/25 03:22:11 [MISC] [612] DsGetDcName function returns 0 (client PID=2912): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  2850. 04/25 03:22:11 [MISC] [2752] DsGetDcName function called: client PID=2912, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2851. 04/25 03:22:11 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2852. 04/25 03:22:11 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A640 )
  2853. 04/25 03:22:11 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2854. 04/25 03:22:11 [MISC] [2752] DsGetDcName function returns 0 (client PID=2912): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2855. 04/25 03:37:03 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2856. 04/25 03:37:03 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2857. 04/25 03:37:03 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1AC00 )
  2858. 04/25 03:37:03 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2859. 04/25 03:37:03 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2860. 04/25 03:52:03 [MISC] [3696] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2861. 04/25 03:52:03 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2862. 04/25 03:52:03 [MISC] [3696] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1AC00 )
  2863. 04/25 03:52:03 [MISC] [3696] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2864. 04/25 03:52:03 [MISC] [3696] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2865. 04/25 03:58:11 [MISC] [3696] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2866. 04/25 03:58:11 [MISC] [2752] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2867. 04/25 03:58:11 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2868. 04/25 03:58:11 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2869. 04/25 03:58:11 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1AC00 )
  2870. 04/25 03:58:11 [MISC] [3696] NetpDcGetName: DOMAIN.COM. cache is too old. 5152546
  2871. 04/25 03:58:11 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2872. 04/25 03:58:11 [MISC] [2752] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  2873. 04/25 03:58:11 [MAILSLOT] [3696] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2874. 04/25 03:58:11 [MISC] [3696] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2875. 04/25 03:58:11 [MISC] [3696] NetpDcAllocateCacheEntry: new entry 0x00000169DFA197E0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2876. 04/25 03:58:11 [MISC] [3696] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2877. 04/25 03:58:11 [MISC] [3696] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  2878. 04/25 03:58:11 [MISC] [3696] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1AC00
  2879. 04/25 03:58:11 [MISC] [3696] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2880. 04/25 03:58:11 [MISC] [3696] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2881. 04/25 03:58:11 [SITE] [612] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  2882. 04/25 03:58:11 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2883. 04/25 03:58:11 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2884. 04/25 03:58:11 [MISC] [612] NetpDcGetName: DOMAIN.COM cache is too old. 28570844
  2885. 04/25 03:58:11 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  2886. 04/25 03:58:11 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  2887. 04/25 03:58:11 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1AC00 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2888. 04/25 03:58:11 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  2889. 04/25 03:58:11 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1AC00 )
  2890. 04/25 03:58:11 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A640
  2891. 04/25 03:58:11 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2892. 04/25 03:58:11 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  2893. 04/25 03:58:11 [MISC] [612] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  2894. 04/25 03:58:11 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2895. 04/25 03:58:11 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  2896. 04/25 03:58:11 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2897. 04/25 03:58:11 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  2898. 04/25 03:58:12 [SESSION] [3696] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2899. 04/25 03:58:12 [SESSION] [3696] DOMAIN: NlSessionSetup: Try Session setup
  2900. 04/25 03:58:12 [SESSION] [3696] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  2901. 04/25 03:58:12 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2902. 04/25 03:58:12 [MAILSLOT] [3696] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2903. 04/25 03:58:12 [MISC] [3696] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A640 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2904. 04/25 03:58:12 [MISC] [3696] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2905. 04/25 03:58:12 [MISC] [3696] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA197E0
  2906. 04/25 03:58:12 [MISC] [3696] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  2907. 04/25 03:58:12 [PERF] [3696] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  2908. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  2909. 04/25 03:58:12 [CRITICAL] [3696] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2910. 04/25 03:58:12 [CRITICAL] [3696] [0] ProcessID is 572
  2911. 04/25 03:58:12 [CRITICAL] [3696] [0] System Time is: 4/25/2019 7:58:12:165
  2912. 04/25 03:58:12 [CRITICAL] [3696] [0] Generating component is 2
  2913. 04/25 03:58:12 [CRITICAL] [3696] [0] Status is 5
  2914. 04/25 03:58:12 [CRITICAL] [3696] [0] Detection location is 501
  2915. 04/25 03:58:12 [CRITICAL] [3696] [0] Flags is 0
  2916. 04/25 03:58:12 [CRITICAL] [3696] [0] NumberOfParameters is 4
  2917. 04/25 03:58:12 [CRITICAL] [3696] Unicode string: ncacn_ip_tcp
  2918. 04/25 03:58:12 [CRITICAL] [3696] Unicode string: TRORAWADC001.DOMAIN.COM
  2919. 04/25 03:58:12 [CRITICAL] [3696] Long val: 305419896
  2920. 04/25 03:58:12 [CRITICAL] [3696] Long val: 5
  2921. 04/25 03:58:12 [CRITICAL] [3696] [1] ProcessID is 572
  2922. 04/25 03:58:12 [CRITICAL] [3696] [1] System Time is: 4/25/2019 7:58:12:165
  2923. 04/25 03:58:12 [CRITICAL] [3696] [1] Generating component is 2
  2924. 04/25 03:58:12 [CRITICAL] [3696] [1] Status is 5
  2925. 04/25 03:58:12 [CRITICAL] [3696] [1] Detection location is 1750
  2926. 04/25 03:58:12 [CRITICAL] [3696] [1] Flags is 0
  2927. 04/25 03:58:12 [CRITICAL] [3696] [1] NumberOfParameters is 1
  2928. 04/25 03:58:12 [CRITICAL] [3696] Long val: 5
  2929. 04/25 03:58:12 [CRITICAL] [3696] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2930. 04/25 03:58:12 [CRITICAL] [3696] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2931. 04/25 03:58:12 [CRITICAL] [3696] [0] ProcessID is 572
  2932. 04/25 03:58:12 [CRITICAL] [3696] [0] System Time is: 4/25/2019 7:58:12:165
  2933. 04/25 03:58:12 [CRITICAL] [3696] [0] Generating component is 2
  2934. 04/25 03:58:12 [CRITICAL] [3696] [0] Status is 5
  2935. 04/25 03:58:12 [CRITICAL] [3696] [0] Detection location is 501
  2936. 04/25 03:58:12 [CRITICAL] [3696] [0] Flags is 0
  2937. 04/25 03:58:12 [CRITICAL] [3696] [0] NumberOfParameters is 4
  2938. 04/25 03:58:12 [CRITICAL] [3696] Unicode string: ncacn_ip_tcp
  2939. 04/25 03:58:12 [CRITICAL] [3696] Unicode string: TRORAWADC001.DOMAIN.COM
  2940. 04/25 03:58:12 [CRITICAL] [3696] Long val: 305419896
  2941. 04/25 03:58:12 [CRITICAL] [3696] Long val: 5
  2942. 04/25 03:58:12 [CRITICAL] [3696] [1] ProcessID is 572
  2943. 04/25 03:58:12 [CRITICAL] [3696] [1] System Time is: 4/25/2019 7:58:12:165
  2944. 04/25 03:58:12 [CRITICAL] [3696] [1] Generating component is 2
  2945. 04/25 03:58:12 [CRITICAL] [3696] [1] Status is 5
  2946. 04/25 03:58:12 [CRITICAL] [3696] [1] Detection location is 1750
  2947. 04/25 03:58:12 [CRITICAL] [3696] [1] Flags is 0
  2948. 04/25 03:58:12 [CRITICAL] [3696] [1] NumberOfParameters is 1
  2949. 04/25 03:58:12 [CRITICAL] [3696] Long val: 5
  2950. 04/25 03:58:12 [CRITICAL] [3696] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  2951. 04/25 03:58:12 [MISC] [3696] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  2952. 04/25 03:58:12 [MISC] [3696] Didn't log event since it was already logged.
  2953. 04/25 03:58:12 [SESSION] [3696] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  2954. 04/25 03:58:12 [SESSION] [3696] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  2955. 04/25 03:58:12 [SESSION] [3696] DOMAIN: NlSessionSetup: Session setup Failed
  2956. 04/25 03:58:12 [CRITICAL] [3696] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2957. 04/25 03:58:12 [SESSION] [3696] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2958. 04/25 03:58:12 [CRITICAL] [3696] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2959. 04/25 03:58:12 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2960. 04/25 03:58:12 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2961. 04/25 03:58:12 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2962. 04/25 03:58:12 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2963. 04/25 03:58:12 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2964. 04/25 03:58:12 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2965. 04/25 03:58:12 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  2966. 04/25 03:58:12 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  2967. 04/25 04:07:03 [MISC] [3696] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2968. 04/25 04:07:03 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2969. 04/25 04:07:03 [MISC] [3696] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A640 )
  2970. 04/25 04:07:03 [MISC] [3696] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2971. 04/25 04:07:03 [MISC] [3696] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  2972. 04/25 04:12:19 [MISC] [3696] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2973. 04/25 04:12:19 [MISC] [2752] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  2974. 04/25 04:12:19 [SESSION] [2752] DOMAIN: NlSessionSetup: Try Session setup
  2975. 04/25 04:12:19 [SESSION] [2752] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  2976. 04/25 04:12:19 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2977. 04/25 04:12:19 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  2978. 04/25 04:12:19 [MISC] [3696] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A640 )
  2979. 04/25 04:12:19 [MISC] [3696] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  2980. 04/25 04:12:19 [MISC] [3696] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  2981. 04/25 04:12:19 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  2982. 04/25 04:12:19 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19220 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  2983. 04/25 04:12:19 [MISC] [2752] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  2984. 04/25 04:12:19 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A640
  2985. 04/25 04:12:19 [MISC] [2752] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  2986. 04/25 04:12:19 [PERF] [2752] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  2987. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  2988. 04/25 04:12:19 [CRITICAL] [2752] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  2989. 04/25 04:12:19 [CRITICAL] [2752] [0] ProcessID is 572
  2990. 04/25 04:12:19 [CRITICAL] [2752] [0] System Time is: 4/25/2019 8:12:19:415
  2991. 04/25 04:12:19 [CRITICAL] [2752] [0] Generating component is 2
  2992. 04/25 04:12:19 [CRITICAL] [2752] [0] Status is 5
  2993. 04/25 04:12:19 [CRITICAL] [2752] [0] Detection location is 501
  2994. 04/25 04:12:19 [CRITICAL] [2752] [0] Flags is 0
  2995. 04/25 04:12:19 [CRITICAL] [2752] [0] NumberOfParameters is 4
  2996. 04/25 04:12:19 [CRITICAL] [2752] Unicode string: ncacn_ip_tcp
  2997. 04/25 04:12:19 [CRITICAL] [2752] Unicode string: TRORAWADC001.DOMAIN.COM
  2998. 04/25 04:12:19 [CRITICAL] [2752] Long val: 305419896
  2999. 04/25 04:12:19 [CRITICAL] [2752] Long val: 5
  3000. 04/25 04:12:19 [CRITICAL] [2752] [1] ProcessID is 572
  3001. 04/25 04:12:19 [CRITICAL] [2752] [1] System Time is: 4/25/2019 8:12:19:415
  3002. 04/25 04:12:19 [CRITICAL] [2752] [1] Generating component is 2
  3003. 04/25 04:12:19 [CRITICAL] [2752] [1] Status is 5
  3004. 04/25 04:12:19 [CRITICAL] [2752] [1] Detection location is 1750
  3005. 04/25 04:12:19 [CRITICAL] [2752] [1] Flags is 0
  3006. 04/25 04:12:19 [CRITICAL] [2752] [1] NumberOfParameters is 1
  3007. 04/25 04:12:19 [CRITICAL] [2752] Long val: 5
  3008. 04/25 04:12:19 [CRITICAL] [2752] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3009. 04/25 04:12:19 [CRITICAL] [2752] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3010. 04/25 04:12:19 [CRITICAL] [2752] [0] ProcessID is 572
  3011. 04/25 04:12:19 [CRITICAL] [2752] [0] System Time is: 4/25/2019 8:12:19:415
  3012. 04/25 04:12:19 [CRITICAL] [2752] [0] Generating component is 2
  3013. 04/25 04:12:19 [CRITICAL] [2752] [0] Status is 5
  3014. 04/25 04:12:19 [CRITICAL] [2752] [0] Detection location is 501
  3015. 04/25 04:12:19 [CRITICAL] [2752] [0] Flags is 0
  3016. 04/25 04:12:19 [CRITICAL] [2752] [0] NumberOfParameters is 4
  3017. 04/25 04:12:19 [CRITICAL] [2752] Unicode string: ncacn_ip_tcp
  3018. 04/25 04:12:19 [CRITICAL] [2752] Unicode string: TRORAWADC001.DOMAIN.COM
  3019. 04/25 04:12:19 [CRITICAL] [2752] Long val: 305419896
  3020. 04/25 04:12:19 [CRITICAL] [2752] Long val: 5
  3021. 04/25 04:12:19 [CRITICAL] [2752] [1] ProcessID is 572
  3022. 04/25 04:12:19 [CRITICAL] [2752] [1] System Time is: 4/25/2019 8:12:19:415
  3023. 04/25 04:12:19 [CRITICAL] [2752] [1] Generating component is 2
  3024. 04/25 04:12:19 [CRITICAL] [2752] [1] Status is 5
  3025. 04/25 04:12:19 [CRITICAL] [2752] [1] Detection location is 1750
  3026. 04/25 04:12:19 [CRITICAL] [2752] [1] Flags is 0
  3027. 04/25 04:12:19 [CRITICAL] [2752] [1] NumberOfParameters is 1
  3028. 04/25 04:12:19 [CRITICAL] [2752] Long val: 5
  3029. 04/25 04:12:19 [CRITICAL] [2752] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3030. 04/25 04:12:19 [MISC] [2752] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  3031. 04/25 04:12:19 [MISC] [2752] Didn't log event since it was already logged.
  3032. 04/25 04:12:19 [SESSION] [2752] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  3033. 04/25 04:12:19 [SESSION] [2752] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  3034. 04/25 04:12:19 [SESSION] [2752] DOMAIN: NlSessionSetup: Session setup Failed
  3035. 04/25 04:12:19 [MISC] [2752] DsrEnumerateDomainTrusts: returns: 0
  3036. 04/25 04:12:19 [MISC] [2752] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3037. 04/25 04:12:19 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3038. 04/25 04:12:19 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  3039. 04/25 04:12:19 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3040. 04/25 04:12:19 [MISC] [2752] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3041. 04/25 04:12:19 [MISC] [2752] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3042. 04/25 04:12:19 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3043. 04/25 04:12:19 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  3044. 04/25 04:12:19 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3045. 04/25 04:12:19 [MISC] [2752] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3046. 04/25 04:12:19 [SITE] [2752] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  3047. 04/25 04:12:19 [MISC] [2752] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3048. 04/25 04:12:19 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3049. 04/25 04:12:19 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1AC00 )
  3050. 04/25 04:12:19 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3051. 04/25 04:12:19 [MISC] [2752] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3052. 04/25 04:21:49 [MISC] [612] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3053. 04/25 04:21:49 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3054. 04/25 04:21:49 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  3055. 04/25 04:21:49 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3056. 04/25 04:21:49 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3057. 04/25 04:22:03 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3058. 04/25 04:22:03 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3059. 04/25 04:22:03 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  3060. 04/25 04:22:03 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3061. 04/25 04:22:03 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3062. 04/25 04:22:08 [MISC] [612] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3063. 04/25 04:22:08 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3064. 04/25 04:22:08 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  3065. 04/25 04:22:08 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19DA0 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  3066. 04/25 04:22:08 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3067. 04/25 04:22:08 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A080
  3068. 04/25 04:22:08 [MISC] [612] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  3069. 04/25 04:22:08 [MISC] [612] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3070. 04/25 04:33:06 [MISC] [3696] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3071. 04/25 04:33:06 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3072. 04/25 04:33:06 [MISC] [3696] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  3073. 04/25 04:33:06 [MISC] [3696] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3074. 04/25 04:33:06 [MISC] [3696] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3075. 04/25 04:37:03 [MISC] [3696] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3076. 04/25 04:37:03 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3077. 04/25 04:37:03 [MISC] [3696] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  3078. 04/25 04:37:03 [MISC] [3696] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3079. 04/25 04:37:03 [MISC] [3696] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3080. 04/25 04:50:00 [MISC] [612] DsGetDcName function called: client PID=1732, Dom:(null) Acct:(null) Flags: DS
  3081. 04/25 04:50:00 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3082. 04/25 04:50:00 [MISC] [612] NetpDcGetName: DOMAIN.COM. cache is too old. 2261063
  3083. 04/25 04:50:00 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3084. 04/25 04:50:00 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3085. 04/25 04:50:00 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A080 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3086. 04/25 04:50:00 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3087. 04/25 04:50:00 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3088. 04/25 04:50:00 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19220
  3089. 04/25 04:50:00 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3090. 04/25 04:50:00 [MISC] [612] DsGetDcName function returns 0 (client PID=1732): Dom:(null) Acct:(null) Flags: DS
  3091. 04/25 04:50:00 [MISC] [612] DsGetDcName function called: client PID=1732, Dom: Acct:(null) Flags: DS
  3092. 04/25 04:50:00 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3093. 04/25 04:50:00 [MISC] [612] NetpDcGetName: cache is too old. 34065969
  3094. 04/25 04:50:00 [MAILSLOT] [612] NetpDcPingListIp: : Sent UDP ping to 10.1.2.12
  3095. 04/25 04:50:00 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to 11ADC002.
  3096. 04/25 04:50:00 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19220 -> DC:11ADC002 DnsDomName: Flags:0x1f1fc
  3097. 04/25 04:50:00 [MISC] [612] NlPingDcNameWithContext: 11ADC002. responded over IP.
  3098. 04/25 04:50:00 [MISC] [612] NetpDcGetName: using cached information ( NlDcCacheEntry = 0x00000169DFA19220 )
  3099. 04/25 04:50:00 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A920
  3100. 04/25 04:50:00 [MISC] [612] DsGetDcName: results as follows: DCName:\\11ADC002. DCAddress:\\10.1.2.12 DCAddrType:0x1 DomainName: DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  3101. 04/25 04:50:00 [MISC] [612] DsGetDcName function returns 0 (client PID=1732): Dom: Acct:(null) Flags: DS
  3102. 04/25 04:52:03 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3103. 04/25 04:52:03 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3104. 04/25 04:52:03 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3105. 04/25 04:52:03 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3106. 04/25 04:52:03 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3107. 04/25 04:52:03 [MISC] [2752] DsGetDcName function called: client PID=4, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3108. 04/25 04:52:03 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3109. 04/25 04:52:03 [MISC] [2752] NetpDcGetName: DOMAIN.COM cache is too old. 32804063
  3110. 04/25 04:52:03 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3111. 04/25 04:52:03 [MISC] [2752] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3112. 04/25 04:52:03 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A360 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3113. 04/25 04:52:03 [MISC] [2752] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3114. 04/25 04:52:03 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3115. 04/25 04:52:03 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA18F40
  3116. 04/25 04:52:03 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3117. 04/25 04:52:03 [MISC] [2752] DsGetDcName function returns 0 (client PID=4): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3118. 04/25 05:07:03 [MISC] [3696] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3119. 04/25 05:07:03 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3120. 04/25 05:07:03 [MISC] [3696] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3121. 04/25 05:07:03 [MISC] [3696] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3122. 04/25 05:07:03 [MISC] [3696] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3123. 04/25 05:22:03 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3124. 04/25 05:22:03 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3125. 04/25 05:22:03 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3126. 04/25 05:22:03 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3127. 04/25 05:22:03 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3128. 04/25 05:22:08 [MISC] [3696] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3129. 04/25 05:22:08 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3130. 04/25 05:22:08 [MAILSLOT] [3696] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  3131. 04/25 05:22:08 [MISC] [3696] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19AC0 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  3132. 04/25 05:22:08 [MISC] [3696] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3133. 04/25 05:22:08 [MISC] [3696] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19DA0
  3134. 04/25 05:22:08 [MISC] [3696] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  3135. 04/25 05:22:08 [MISC] [3696] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3136. 04/25 05:22:08 [MISC] [3696] DsGetDcName function called: client PID=2444, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3137. 04/25 05:22:08 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3138. 04/25 05:22:08 [MISC] [3696] NetpDcGetName: DOMAIN.COM cache is too old. 34609438
  3139. 04/25 05:22:08 [MAILSLOT] [3696] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3140. 04/25 05:22:08 [MISC] [3696] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3141. 04/25 05:22:09 [MISC] [3696] NetpDcAllocateCacheEntry: new entry 0x00000169DFA18F40 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3142. 04/25 05:22:09 [MISC] [3696] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3143. 04/25 05:22:09 [MISC] [3696] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  3144. 04/25 05:22:09 [MISC] [3696] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A360
  3145. 04/25 05:22:09 [MISC] [3696] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3146. 04/25 05:22:09 [MISC] [3696] DsGetDcName function returns 0 (client PID=2444): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3147. 04/25 05:29:12 [MISC] [2752] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3148. 04/25 05:29:12 [MISC] [3696] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3149. 04/25 05:29:12 [MISC] [3696] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3150. 04/25 05:29:12 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3151. 04/25 05:29:12 [MISC] [3696] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3152. 04/25 05:29:12 [MISC] [3696] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3153. 04/25 05:29:12 [MISC] [2752] NetpDcGetName: DOMAIN.COM. cache is too old. 4613297
  3154. 04/25 05:29:12 [MISC] [3696] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3155. 04/25 05:29:12 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3156. 04/25 05:29:12 [MISC] [2752] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3157. 04/25 05:29:12 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A360 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3158. 04/25 05:29:12 [MISC] [2752] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3159. 04/25 05:29:12 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3160. 04/25 05:29:12 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A080
  3161. 04/25 05:29:12 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3162. 04/25 05:29:12 [MISC] [2752] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3163. 04/25 05:29:13 [SITE] [612] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  3164. 04/25 05:29:13 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3165. 04/25 05:29:13 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3166. 04/25 05:29:13 [MISC] [612] NetpDcGetName: DOMAIN.COM cache is too old. 34032359
  3167. 04/25 05:29:13 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3168. 04/25 05:29:13 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3169. 04/25 05:29:13 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A640 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3170. 04/25 05:29:13 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3171. 04/25 05:29:13 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A640 )
  3172. 04/25 05:29:13 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1AC00
  3173. 04/25 05:29:13 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3174. 04/25 05:29:13 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3175. 04/25 05:29:13 [MISC] [612] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3176. 04/25 05:29:13 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3177. 04/25 05:29:13 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3178. 04/25 05:29:13 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3179. 04/25 05:29:13 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3180. 04/25 05:29:13 [SESSION] [2752] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3181. 04/25 05:29:13 [SESSION] [2752] DOMAIN: NlSessionSetup: Try Session setup
  3182. 04/25 05:29:13 [SESSION] [2752] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  3183. 04/25 05:29:13 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3184. 04/25 05:29:13 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3185. 04/25 05:29:13 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19500 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3186. 04/25 05:29:13 [MISC] [2752] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3187. 04/25 05:29:13 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A360
  3188. 04/25 05:29:13 [MISC] [2752] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  3189. 04/25 05:29:13 [PERF] [2752] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  3190. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  3191. 04/25 05:29:13 [CRITICAL] [2752] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3192. 04/25 05:29:13 [CRITICAL] [2752] [0] ProcessID is 572
  3193. 04/25 05:29:13 [CRITICAL] [2752] [0] System Time is: 4/25/2019 9:29:13:681
  3194. 04/25 05:29:13 [CRITICAL] [2752] [0] Generating component is 2
  3195. 04/25 05:29:13 [CRITICAL] [2752] [0] Status is 5
  3196. 04/25 05:29:13 [CRITICAL] [2752] [0] Detection location is 501
  3197. 04/25 05:29:13 [CRITICAL] [2752] [0] Flags is 0
  3198. 04/25 05:29:13 [CRITICAL] [2752] [0] NumberOfParameters is 4
  3199. 04/25 05:29:13 [CRITICAL] [2752] Unicode string: ncacn_ip_tcp
  3200. 04/25 05:29:13 [CRITICAL] [2752] Unicode string: TRORAWADC001.DOMAIN.COM
  3201. 04/25 05:29:13 [CRITICAL] [2752] Long val: 305419896
  3202. 04/25 05:29:13 [CRITICAL] [2752] Long val: 5
  3203. 04/25 05:29:13 [CRITICAL] [2752] [1] ProcessID is 572
  3204. 04/25 05:29:13 [CRITICAL] [2752] [1] System Time is: 4/25/2019 9:29:13:681
  3205. 04/25 05:29:13 [CRITICAL] [2752] [1] Generating component is 2
  3206. 04/25 05:29:13 [CRITICAL] [2752] [1] Status is 5
  3207. 04/25 05:29:13 [CRITICAL] [2752] [1] Detection location is 1750
  3208. 04/25 05:29:13 [CRITICAL] [2752] [1] Flags is 0
  3209. 04/25 05:29:13 [CRITICAL] [2752] [1] NumberOfParameters is 1
  3210. 04/25 05:29:13 [CRITICAL] [2752] Long val: 5
  3211. 04/25 05:29:13 [CRITICAL] [2752] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3212. 04/25 05:29:13 [CRITICAL] [2752] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3213. 04/25 05:29:13 [CRITICAL] [2752] [0] ProcessID is 572
  3214. 04/25 05:29:13 [CRITICAL] [2752] [0] System Time is: 4/25/2019 9:29:13:681
  3215. 04/25 05:29:13 [CRITICAL] [2752] [0] Generating component is 2
  3216. 04/25 05:29:13 [CRITICAL] [2752] [0] Status is 5
  3217. 04/25 05:29:13 [CRITICAL] [2752] [0] Detection location is 501
  3218. 04/25 05:29:13 [CRITICAL] [2752] [0] Flags is 0
  3219. 04/25 05:29:13 [CRITICAL] [2752] [0] NumberOfParameters is 4
  3220. 04/25 05:29:13 [CRITICAL] [2752] Unicode string: ncacn_ip_tcp
  3221. 04/25 05:29:13 [CRITICAL] [2752] Unicode string: TRORAWADC001.DOMAIN.COM
  3222. 04/25 05:29:13 [CRITICAL] [2752] Long val: 305419896
  3223. 04/25 05:29:13 [CRITICAL] [2752] Long val: 5
  3224. 04/25 05:29:13 [CRITICAL] [2752] [1] ProcessID is 572
  3225. 04/25 05:29:13 [CRITICAL] [2752] [1] System Time is: 4/25/2019 9:29:13:681
  3226. 04/25 05:29:13 [CRITICAL] [2752] [1] Generating component is 2
  3227. 04/25 05:29:13 [CRITICAL] [2752] [1] Status is 5
  3228. 04/25 05:29:13 [CRITICAL] [2752] [1] Detection location is 1750
  3229. 04/25 05:29:13 [CRITICAL] [2752] [1] Flags is 0
  3230. 04/25 05:29:13 [CRITICAL] [2752] [1] NumberOfParameters is 1
  3231. 04/25 05:29:13 [CRITICAL] [2752] Long val: 5
  3232. 04/25 05:29:13 [CRITICAL] [2752] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3233. 04/25 05:29:13 [MISC] [2752] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  3234. 04/25 05:29:13 [SESSION] [2752] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  3235. 04/25 05:29:13 [SESSION] [2752] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  3236. 04/25 05:29:13 [SESSION] [2752] DOMAIN: NlSessionSetup: Session setup Failed
  3237. 04/25 05:29:13 [CRITICAL] [2752] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3238. 04/25 05:29:13 [SESSION] [2752] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3239. 04/25 05:29:13 [CRITICAL] [2752] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3240. 04/25 05:29:13 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3241. 04/25 05:29:13 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3242. 04/25 05:29:13 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3243. 04/25 05:29:13 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3244. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3245. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3246. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3247. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3248. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3249. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3250. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3251. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3252. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3253. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3254. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3255. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3256. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3257. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3258. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3259. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3260. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3261. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3262. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3263. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3264. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  3265. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc0000022
  3266. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3267. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3268. 04/25 05:29:14 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3269. 04/25 05:29:14 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3270. 04/25 05:37:03 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3271. 04/25 05:37:03 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3272. 04/25 05:37:03 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19500 )
  3273. 04/25 05:37:03 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3274. 04/25 05:37:03 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3275. 04/25 05:52:03 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3276. 04/25 05:52:03 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3277. 04/25 05:52:03 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19500 )
  3278. 04/25 05:52:03 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3279. 04/25 05:52:03 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3280. 04/25 06:00:20 [MISC] [2752] DsGetDcName function called: client PID=-1, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3281. 04/25 06:00:20 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3282. 04/25 06:00:20 [MISC] [2752] NetpDcGetName: DOMAIN.COM cache is too old. 36900516
  3283. 04/25 06:00:20 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3284. 04/25 06:00:20 [MISC] [2752] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3285. 04/25 06:00:20 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19DA0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3286. 04/25 06:00:20 [MISC] [2752] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3287. 04/25 06:00:20 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  3288. 04/25 06:00:20 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA18F40
  3289. 04/25 06:00:20 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3290. 04/25 06:00:20 [MISC] [2752] DsGetDcName function returns 0 (client PID=-1): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3291. 04/25 06:07:03 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3292. 04/25 06:07:03 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3293. 04/25 06:07:03 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19500 )
  3294. 04/25 06:07:03 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3295. 04/25 06:07:03 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3296. 04/25 06:07:20 [MISC] [612] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3297. 04/25 06:07:20 [MISC] [2752] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  3298. 04/25 06:07:20 [SESSION] [2752] DOMAIN: NlSessionSetup: Try Session setup
  3299. 04/25 06:07:20 [SESSION] [2752] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  3300. 04/25 06:07:20 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3301. 04/25 06:07:20 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3302. 04/25 06:07:20 [MISC] [612] NetpDcGetName: DOMAIN.COM. cache is too old. 2286375
  3303. 04/25 06:07:20 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3304. 04/25 06:07:20 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3305. 04/25 06:07:20 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3306. 04/25 06:07:20 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A080 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3307. 04/25 06:07:20 [MISC] [2752] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3308. 04/25 06:07:20 [MISC] [2752] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  3309. 04/25 06:07:20 [PERF] [2752] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  3310. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  3311. 04/25 06:07:20 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A920 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3312. 04/25 06:07:20 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3313. 04/25 06:07:20 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19500
  3314. 04/25 06:07:20 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  3315. 04/25 06:07:20 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A080
  3316. 04/25 06:07:20 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3317. 04/25 06:07:20 [MISC] [612] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3318. 04/25 06:07:20 [CRITICAL] [2752] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3319. 04/25 06:07:20 [CRITICAL] [2752] [0] ProcessID is 572
  3320. 04/25 06:07:20 [CRITICAL] [2752] [0] System Time is: 4/25/2019 10:7:20:166
  3321. 04/25 06:07:20 [CRITICAL] [2752] [0] Generating component is 2
  3322. 04/25 06:07:20 [CRITICAL] [2752] [0] Status is 5
  3323. 04/25 06:07:20 [CRITICAL] [2752] [0] Detection location is 501
  3324. 04/25 06:07:20 [CRITICAL] [2752] [0] Flags is 0
  3325. 04/25 06:07:20 [CRITICAL] [2752] [0] NumberOfParameters is 4
  3326. 04/25 06:07:20 [CRITICAL] [2752] Unicode string: ncacn_ip_tcp
  3327. 04/25 06:07:20 [CRITICAL] [2752] Unicode string: TRORAWADC001.DOMAIN.COM
  3328. 04/25 06:07:20 [CRITICAL] [2752] Long val: 305419896
  3329. 04/25 06:07:20 [CRITICAL] [2752] Long val: 5
  3330. 04/25 06:07:20 [CRITICAL] [2752] [1] ProcessID is 572
  3331. 04/25 06:07:20 [CRITICAL] [2752] [1] System Time is: 4/25/2019 10:7:20:166
  3332. 04/25 06:07:20 [CRITICAL] [2752] [1] Generating component is 2
  3333. 04/25 06:07:20 [CRITICAL] [2752] [1] Status is 5
  3334. 04/25 06:07:20 [CRITICAL] [2752] [1] Detection location is 1750
  3335. 04/25 06:07:20 [CRITICAL] [2752] [1] Flags is 0
  3336. 04/25 06:07:20 [CRITICAL] [2752] [1] NumberOfParameters is 1
  3337. 04/25 06:07:20 [CRITICAL] [2752] Long val: 5
  3338. 04/25 06:07:20 [CRITICAL] [2752] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3339. 04/25 06:07:20 [CRITICAL] [2752] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3340. 04/25 06:07:20 [CRITICAL] [2752] [0] ProcessID is 572
  3341. 04/25 06:07:20 [CRITICAL] [2752] [0] System Time is: 4/25/2019 10:7:20:166
  3342. 04/25 06:07:20 [CRITICAL] [2752] [0] Generating component is 2
  3343. 04/25 06:07:20 [CRITICAL] [2752] [0] Status is 5
  3344. 04/25 06:07:20 [CRITICAL] [2752] [0] Detection location is 501
  3345. 04/25 06:07:20 [CRITICAL] [2752] [0] Flags is 0
  3346. 04/25 06:07:20 [CRITICAL] [2752] [0] NumberOfParameters is 4
  3347. 04/25 06:07:20 [CRITICAL] [2752] Unicode string: ncacn_ip_tcp
  3348. 04/25 06:07:20 [CRITICAL] [2752] Unicode string: TRORAWADC001.DOMAIN.COM
  3349. 04/25 06:07:20 [CRITICAL] [2752] Long val: 305419896
  3350. 04/25 06:07:20 [CRITICAL] [2752] Long val: 5
  3351. 04/25 06:07:20 [CRITICAL] [2752] [1] ProcessID is 572
  3352. 04/25 06:07:20 [CRITICAL] [2752] [1] System Time is: 4/25/2019 10:7:20:166
  3353. 04/25 06:07:20 [CRITICAL] [2752] [1] Generating component is 2
  3354. 04/25 06:07:20 [CRITICAL] [2752] [1] Status is 5
  3355. 04/25 06:07:20 [CRITICAL] [2752] [1] Detection location is 1750
  3356. 04/25 06:07:20 [CRITICAL] [2752] [1] Flags is 0
  3357. 04/25 06:07:20 [CRITICAL] [2752] [1] NumberOfParameters is 1
  3358. 04/25 06:07:20 [CRITICAL] [2752] Long val: 5
  3359. 04/25 06:07:20 [CRITICAL] [2752] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3360. 04/25 06:07:20 [MISC] [2752] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  3361. 04/25 06:07:20 [MISC] [2752] Didn't log event since it was already logged.
  3362. 04/25 06:07:20 [SESSION] [2752] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  3363. 04/25 06:07:20 [SESSION] [2752] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  3364. 04/25 06:07:20 [SESSION] [2752] DOMAIN: NlSessionSetup: Session setup Failed
  3365. 04/25 06:07:20 [MISC] [2752] DsrEnumerateDomainTrusts: returns: 0
  3366. 04/25 06:07:20 [MISC] [2752] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3367. 04/25 06:07:20 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3368. 04/25 06:07:20 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  3369. 04/25 06:07:20 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3370. 04/25 06:07:20 [MISC] [2752] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3371. 04/25 06:07:20 [MISC] [2800] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3372. 04/25 06:07:20 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3373. 04/25 06:07:20 [MISC] [2800] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  3374. 04/25 06:07:20 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3375. 04/25 06:07:20 [MISC] [2800] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3376. 04/25 06:07:20 [SITE] [2800] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  3377. 04/25 06:07:20 [MISC] [2800] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3378. 04/25 06:07:20 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3379. 04/25 06:07:20 [MISC] [2800] NetpDcGetName: DOMAIN.COM cache is too old. 36319812
  3380. 04/25 06:07:20 [MAILSLOT] [2800] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3381. 04/25 06:07:20 [MISC] [2800] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3382. 04/25 06:07:20 [MISC] [2800] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A080 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3383. 04/25 06:07:20 [MISC] [2800] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3384. 04/25 06:07:20 [MISC] [2800] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3385. 04/25 06:07:20 [MISC] [2800] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A640
  3386. 04/25 06:07:20 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3387. 04/25 06:07:20 [MISC] [2800] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3388. 04/25 06:22:03 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3389. 04/25 06:22:03 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3390. 04/25 06:22:03 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  3391. 04/25 06:22:03 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3392. 04/25 06:22:03 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3393. 04/25 06:22:09 [MISC] [612] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3394. 04/25 06:22:09 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3395. 04/25 06:22:09 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  3396. 04/25 06:22:09 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A360 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  3397. 04/25 06:22:09 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3398. 04/25 06:22:09 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19AC0
  3399. 04/25 06:22:09 [MISC] [612] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  3400. 04/25 06:22:09 [MISC] [612] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3401. 04/25 06:37:04 [MISC] [2800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3402. 04/25 06:37:04 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3403. 04/25 06:37:04 [MISC] [2800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  3404. 04/25 06:37:04 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3405. 04/25 06:37:04 [MISC] [2800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3406. 04/25 06:52:04 [MISC] [2800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3407. 04/25 06:52:04 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3408. 04/25 06:52:04 [MISC] [2800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  3409. 04/25 06:52:04 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3410. 04/25 06:52:04 [MISC] [2800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3411. 04/25 07:07:04 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3412. 04/25 07:07:04 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3413. 04/25 07:07:04 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A920 )
  3414. 04/25 07:07:04 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3415. 04/25 07:07:04 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3416. 04/25 07:22:01 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  3417. 04/25 07:22:01 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3418. 04/25 07:22:01 [MISC] [612] NetpDcGetName: DOMAIN.COM. cache is too old. 6767703
  3419. 04/25 07:22:01 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3420. 04/25 07:22:01 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3421. 04/25 07:22:01 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA18F40 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3422. 04/25 07:22:01 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3423. 04/25 07:22:01 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  3424. 04/25 07:22:01 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A920
  3425. 04/25 07:22:01 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3426. 04/25 07:22:01 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  3427. 04/25 07:22:01 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3428. 04/25 07:22:01 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3429. 04/25 07:22:01 [MISC] [612] NetpDcGetName: DOMAIN.COM cache is too old. 41802000
  3430. 04/25 07:22:01 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3431. 04/25 07:22:01 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3432. 04/25 07:22:01 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA197E0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3433. 04/25 07:22:01 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3434. 04/25 07:22:01 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  3435. 04/25 07:22:01 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19DA0
  3436. 04/25 07:22:01 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3437. 04/25 07:22:01 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3438. 04/25 07:22:04 [MISC] [2800] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3439. 04/25 07:22:04 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3440. 04/25 07:22:04 [MISC] [2800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  3441. 04/25 07:22:04 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3442. 04/25 07:22:04 [MISC] [2800] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3443. 04/25 07:22:09 [MISC] [2800] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3444. 04/25 07:22:09 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3445. 04/25 07:22:09 [MAILSLOT] [2800] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  3446. 04/25 07:22:09 [MISC] [2800] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A920 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  3447. 04/25 07:22:09 [MISC] [2800] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3448. 04/25 07:22:09 [MISC] [2800] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A360
  3449. 04/25 07:22:09 [MISC] [2800] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  3450. 04/25 07:22:09 [MISC] [2800] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3451. 04/25 07:25:14 [MISC] [612] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3452. 04/25 07:25:14 [MISC] [2752] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3453. 04/25 07:25:14 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3454. 04/25 07:25:14 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3455. 04/25 07:25:14 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  3456. 04/25 07:25:14 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  3457. 04/25 07:25:14 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3458. 04/25 07:25:14 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3459. 04/25 07:25:14 [MISC] [2752] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3460. 04/25 07:25:14 [MISC] [612] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3461. 04/25 07:25:15 [SITE] [2800] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  3462. 04/25 07:25:15 [MISC] [2800] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3463. 04/25 07:25:15 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3464. 04/25 07:25:15 [MISC] [2800] NetpDcGetName: DOMAIN.COM cache is too old. 40994453
  3465. 04/25 07:25:15 [MAILSLOT] [2800] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3466. 04/25 07:25:15 [MISC] [2800] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3467. 04/25 07:25:15 [MISC] [2800] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19500 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3468. 04/25 07:25:15 [MISC] [2800] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3469. 04/25 07:25:15 [MISC] [2800] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19500 )
  3470. 04/25 07:25:15 [MISC] [2800] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A080
  3471. 04/25 07:25:15 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3472. 04/25 07:25:15 [MISC] [2800] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3473. 04/25 07:25:15 [MISC] [2800] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3474. 04/25 07:25:15 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3475. 04/25 07:25:15 [MISC] [2800] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  3476. 04/25 07:25:15 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3477. 04/25 07:25:15 [MISC] [2800] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3478. 04/25 07:25:15 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3479. 04/25 07:25:15 [SESSION] [612] DOMAIN: NlSessionSetup: Try Session setup
  3480. 04/25 07:25:15 [SESSION] [612] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  3481. 04/25 07:25:15 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3482. 04/25 07:25:15 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3483. 04/25 07:25:15 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19AC0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3484. 04/25 07:25:15 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3485. 04/25 07:25:15 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA18F40
  3486. 04/25 07:25:15 [MISC] [612] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  3487. 04/25 07:25:15 [PERF] [612] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  3488. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  3489. 04/25 07:25:15 [CRITICAL] [612] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3490. 04/25 07:25:15 [CRITICAL] [612] [0] ProcessID is 572
  3491. 04/25 07:25:15 [CRITICAL] [612] [0] System Time is: 4/25/2019 11:25:15:775
  3492. 04/25 07:25:15 [CRITICAL] [612] [0] Generating component is 2
  3493. 04/25 07:25:15 [CRITICAL] [612] [0] Status is 5
  3494. 04/25 07:25:15 [CRITICAL] [612] [0] Detection location is 501
  3495. 04/25 07:25:15 [CRITICAL] [612] [0] Flags is 0
  3496. 04/25 07:25:15 [CRITICAL] [612] [0] NumberOfParameters is 4
  3497. 04/25 07:25:15 [CRITICAL] [612] Unicode string: ncacn_ip_tcp
  3498. 04/25 07:25:15 [CRITICAL] [612] Unicode string: TRORAWADC001.DOMAIN.COM
  3499. 04/25 07:25:15 [CRITICAL] [612] Long val: 305419896
  3500. 04/25 07:25:15 [CRITICAL] [612] Long val: 5
  3501. 04/25 07:25:15 [CRITICAL] [612] [1] ProcessID is 572
  3502. 04/25 07:25:15 [CRITICAL] [612] [1] System Time is: 4/25/2019 11:25:15:775
  3503. 04/25 07:25:15 [CRITICAL] [612] [1] Generating component is 2
  3504. 04/25 07:25:15 [CRITICAL] [612] [1] Status is 5
  3505. 04/25 07:25:15 [CRITICAL] [612] [1] Detection location is 1750
  3506. 04/25 07:25:15 [CRITICAL] [612] [1] Flags is 0
  3507. 04/25 07:25:15 [CRITICAL] [612] [1] NumberOfParameters is 1
  3508. 04/25 07:25:15 [CRITICAL] [612] Long val: 5
  3509. 04/25 07:25:15 [CRITICAL] [612] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3510. 04/25 07:25:15 [CRITICAL] [612] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3511. 04/25 07:25:15 [CRITICAL] [612] [0] ProcessID is 572
  3512. 04/25 07:25:15 [CRITICAL] [612] [0] System Time is: 4/25/2019 11:25:15:775
  3513. 04/25 07:25:15 [CRITICAL] [612] [0] Generating component is 2
  3514. 04/25 07:25:15 [CRITICAL] [612] [0] Status is 5
  3515. 04/25 07:25:15 [CRITICAL] [612] [0] Detection location is 501
  3516. 04/25 07:25:15 [CRITICAL] [612] [0] Flags is 0
  3517. 04/25 07:25:15 [CRITICAL] [612] [0] NumberOfParameters is 4
  3518. 04/25 07:25:15 [CRITICAL] [612] Unicode string: ncacn_ip_tcp
  3519. 04/25 07:25:15 [CRITICAL] [612] Unicode string: TRORAWADC001.DOMAIN.COM
  3520. 04/25 07:25:15 [CRITICAL] [612] Long val: 305419896
  3521. 04/25 07:25:15 [CRITICAL] [612] Long val: 5
  3522. 04/25 07:25:15 [CRITICAL] [612] [1] ProcessID is 572
  3523. 04/25 07:25:15 [CRITICAL] [612] [1] System Time is: 4/25/2019 11:25:15:775
  3524. 04/25 07:25:15 [CRITICAL] [612] [1] Generating component is 2
  3525. 04/25 07:25:15 [CRITICAL] [612] [1] Status is 5
  3526. 04/25 07:25:15 [CRITICAL] [612] [1] Detection location is 1750
  3527. 04/25 07:25:15 [CRITICAL] [612] [1] Flags is 0
  3528. 04/25 07:25:15 [CRITICAL] [612] [1] NumberOfParameters is 1
  3529. 04/25 07:25:15 [CRITICAL] [612] Long val: 5
  3530. 04/25 07:25:15 [CRITICAL] [612] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3531. 04/25 07:25:15 [MISC] [612] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  3532. 04/25 07:25:15 [MISC] [612] Didn't log event since it was already logged.
  3533. 04/25 07:25:15 [SESSION] [612] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  3534. 04/25 07:25:15 [SESSION] [612] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  3535. 04/25 07:25:15 [SESSION] [612] DOMAIN: NlSessionSetup: Session setup Failed
  3536. 04/25 07:25:15 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3537. 04/25 07:25:15 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3538. 04/25 07:25:15 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3539. 04/25 07:25:15 [SESSION] [2752] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3540. 04/25 07:25:15 [CRITICAL] [2752] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3541. 04/25 07:25:15 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3542. 04/25 07:25:15 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3543. 04/25 07:25:16 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3544. 04/25 07:25:16 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3545. 04/25 07:25:16 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3546. 04/25 07:25:16 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3547. 04/25 07:37:04 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3548. 04/25 07:37:04 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3549. 04/25 07:37:04 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  3550. 04/25 07:37:04 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3551. 04/25 07:37:04 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3552. 04/25 07:37:20 [MISC] [2752] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3553. 04/25 07:37:20 [MISC] [2800] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  3554. 04/25 07:37:20 [SESSION] [2800] DOMAIN: NlSessionSetup: Try Session setup
  3555. 04/25 07:37:20 [SESSION] [2800] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  3556. 04/25 07:37:20 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3557. 04/25 07:37:20 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3558. 04/25 07:37:20 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  3559. 04/25 07:37:20 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3560. 04/25 07:37:20 [MISC] [2752] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3561. 04/25 07:37:20 [MAILSLOT] [2800] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3562. 04/25 07:37:21 [MISC] [2800] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19DA0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3563. 04/25 07:37:21 [MISC] [2800] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3564. 04/25 07:37:21 [MISC] [2800] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19AC0
  3565. 04/25 07:37:21 [MISC] [2800] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  3566. 04/25 07:37:21 [PERF] [2800] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  3567. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  3568. 04/25 07:37:21 [CRITICAL] [2800] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3569. 04/25 07:37:21 [CRITICAL] [2800] [0] ProcessID is 572
  3570. 04/25 07:37:21 [CRITICAL] [2800] [0] System Time is: 4/25/2019 11:37:21:25
  3571. 04/25 07:37:21 [CRITICAL] [2800] [0] Generating component is 2
  3572. 04/25 07:37:21 [CRITICAL] [2800] [0] Status is 5
  3573. 04/25 07:37:21 [CRITICAL] [2800] [0] Detection location is 501
  3574. 04/25 07:37:21 [CRITICAL] [2800] [0] Flags is 0
  3575. 04/25 07:37:21 [CRITICAL] [2800] [0] NumberOfParameters is 4
  3576. 04/25 07:37:21 [CRITICAL] [2800] Unicode string: ncacn_ip_tcp
  3577. 04/25 07:37:21 [CRITICAL] [2800] Unicode string: TRORAWADC001.DOMAIN.COM
  3578. 04/25 07:37:21 [CRITICAL] [2800] Long val: 305419896
  3579. 04/25 07:37:21 [CRITICAL] [2800] Long val: 5
  3580. 04/25 07:37:21 [CRITICAL] [2800] [1] ProcessID is 572
  3581. 04/25 07:37:21 [CRITICAL] [2800] [1] System Time is: 4/25/2019 11:37:21:25
  3582. 04/25 07:37:21 [CRITICAL] [2800] [1] Generating component is 2
  3583. 04/25 07:37:21 [CRITICAL] [2800] [1] Status is 5
  3584. 04/25 07:37:21 [CRITICAL] [2800] [1] Detection location is 1750
  3585. 04/25 07:37:21 [CRITICAL] [2800] [1] Flags is 0
  3586. 04/25 07:37:21 [CRITICAL] [2800] [1] NumberOfParameters is 1
  3587. 04/25 07:37:21 [CRITICAL] [2800] Long val: 5
  3588. 04/25 07:37:21 [CRITICAL] [2800] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3589. 04/25 07:37:21 [CRITICAL] [2800] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3590. 04/25 07:37:21 [CRITICAL] [2800] [0] ProcessID is 572
  3591. 04/25 07:37:21 [CRITICAL] [2800] [0] System Time is: 4/25/2019 11:37:21:25
  3592. 04/25 07:37:21 [CRITICAL] [2800] [0] Generating component is 2
  3593. 04/25 07:37:21 [CRITICAL] [2800] [0] Status is 5
  3594. 04/25 07:37:21 [CRITICAL] [2800] [0] Detection location is 501
  3595. 04/25 07:37:21 [CRITICAL] [2800] [0] Flags is 0
  3596. 04/25 07:37:21 [CRITICAL] [2800] [0] NumberOfParameters is 4
  3597. 04/25 07:37:21 [CRITICAL] [2800] Unicode string: ncacn_ip_tcp
  3598. 04/25 07:37:21 [CRITICAL] [2800] Unicode string: TRORAWADC001.DOMAIN.COM
  3599. 04/25 07:37:21 [CRITICAL] [2800] Long val: 305419896
  3600. 04/25 07:37:21 [CRITICAL] [2800] Long val: 5
  3601. 04/25 07:37:21 [CRITICAL] [2800] [1] ProcessID is 572
  3602. 04/25 07:37:21 [CRITICAL] [2800] [1] System Time is: 4/25/2019 11:37:21:25
  3603. 04/25 07:37:21 [CRITICAL] [2800] [1] Generating component is 2
  3604. 04/25 07:37:21 [CRITICAL] [2800] [1] Status is 5
  3605. 04/25 07:37:21 [CRITICAL] [2800] [1] Detection location is 1750
  3606. 04/25 07:37:21 [CRITICAL] [2800] [1] Flags is 0
  3607. 04/25 07:37:21 [CRITICAL] [2800] [1] NumberOfParameters is 1
  3608. 04/25 07:37:21 [CRITICAL] [2800] Long val: 5
  3609. 04/25 07:37:21 [CRITICAL] [2800] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3610. 04/25 07:37:21 [MISC] [2800] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  3611. 04/25 07:37:21 [MISC] [2800] Didn't log event since it was already logged.
  3612. 04/25 07:37:21 [SESSION] [2800] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  3613. 04/25 07:37:21 [SESSION] [2800] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  3614. 04/25 07:37:21 [SESSION] [2800] DOMAIN: NlSessionSetup: Session setup Failed
  3615. 04/25 07:37:21 [MISC] [2800] DsrEnumerateDomainTrusts: returns: 0
  3616. 04/25 07:37:21 [MISC] [2800] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3617. 04/25 07:37:21 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3618. 04/25 07:37:21 [MISC] [2800] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  3619. 04/25 07:37:21 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3620. 04/25 07:37:21 [MISC] [2800] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3621. 04/25 07:37:21 [MISC] [2800] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3622. 04/25 07:37:21 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3623. 04/25 07:37:21 [MISC] [2800] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  3624. 04/25 07:37:21 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3625. 04/25 07:37:21 [MISC] [2800] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3626. 04/25 07:37:21 [SITE] [2800] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  3627. 04/25 07:37:21 [MISC] [2800] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3628. 04/25 07:37:21 [MISC] [2800] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3629. 04/25 07:37:21 [MISC] [2800] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19500 )
  3630. 04/25 07:37:21 [MISC] [2800] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3631. 04/25 07:37:21 [MISC] [2800] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3632. 04/25 07:49:07 [MISC] [2752] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: DS IP
  3633. 04/25 07:49:07 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3634. 04/25 07:49:07 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  3635. 04/25 07:49:07 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3636. 04/25 07:49:07 [MISC] [2752] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: DS IP
  3637. 04/25 07:52:04 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3638. 04/25 07:52:04 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3639. 04/25 07:52:04 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  3640. 04/25 07:52:04 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3641. 04/25 07:52:04 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3642. 04/25 08:07:04 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3643. 04/25 08:07:04 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3644. 04/25 08:07:04 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  3645. 04/25 08:07:04 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3646. 04/25 08:07:04 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3647. 04/25 08:22:04 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3648. 04/25 08:22:04 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3649. 04/25 08:22:04 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  3650. 04/25 08:22:04 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3651. 04/25 08:22:04 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3652. 04/25 08:22:09 [MISC] [2752] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3653. 04/25 08:22:09 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3654. 04/25 08:22:09 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  3655. 04/25 08:22:10 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1AC00 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  3656. 04/25 08:22:10 [MISC] [2752] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3657. 04/25 08:22:10 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A920
  3658. 04/25 08:22:10 [MISC] [2752] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  3659. 04/25 08:22:10 [MISC] [2752] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3660. 04/25 08:33:06 [MISC] [612] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3661. 04/25 08:33:06 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3662. 04/25 08:33:06 [MISC] [612] NetpDcGetName: DOMAIN.COM. cache is too old. 3345921
  3663. 04/25 08:33:06 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3664. 04/25 08:33:06 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3665. 04/25 08:33:07 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A360 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3666. 04/25 08:33:07 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3667. 04/25 08:33:07 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3668. 04/25 08:33:07 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19DA0
  3669. 04/25 08:33:07 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3670. 04/25 08:33:07 [MISC] [612] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3671. 04/25 08:33:07 [MISC] [2752] DsGetDcName function called: client PID=-1, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3672. 04/25 08:33:07 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3673. 04/25 08:33:07 [MISC] [2752] NetpDcGetName: DOMAIN.COM cache is too old, need to redo discovery. 46067578
  3674. 04/25 08:33:07 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA197E0
  3675. 04/25 08:33:07 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3676. 04/25 08:33:07 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A640 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3677. 04/25 08:33:07 [MISC] [2752] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  3678. 04/25 08:33:07 [MISC] [2752] LoadBalanceDebug (Flags: IP KDC DNS RET_DNS ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  3679. 04/25 08:33:07 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3680. 04/25 08:33:07 [MISC] [2752] DsGetDcName function returns 0 (client PID=-1): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  3681. 04/25 08:37:04 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3682. 04/25 08:37:04 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3683. 04/25 08:37:04 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3684. 04/25 08:37:04 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3685. 04/25 08:37:04 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3686. 04/25 08:52:04 [MISC] [776] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3687. 04/25 08:52:04 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3688. 04/25 08:52:04 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3689. 04/25 08:52:04 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3690. 04/25 08:52:04 [MISC] [776] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3691. 04/25 09:07:04 [MISC] [776] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3692. 04/25 09:07:04 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3693. 04/25 09:07:04 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3694. 04/25 09:07:04 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3695. 04/25 09:07:04 [MISC] [776] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3696. 04/25 09:07:16 [MISC] [2752] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3697. 04/25 09:07:16 [MISC] [776] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3698. 04/25 09:07:16 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3699. 04/25 09:07:16 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3700. 04/25 09:07:16 [MISC] [776] NetpDcGetName: DOMAIN.COM. cache is too old. 5395328
  3701. 04/25 09:07:16 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3702. 04/25 09:07:16 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3703. 04/25 09:07:16 [MISC] [2752] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3704. 04/25 09:07:16 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3705. 04/25 09:07:16 [MISC] [776] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3706. 04/25 09:07:16 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA18F40 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3707. 04/25 09:07:16 [MISC] [776] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3708. 04/25 09:07:16 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  3709. 04/25 09:07:16 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A360
  3710. 04/25 09:07:16 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3711. 04/25 09:07:16 [MISC] [776] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3712. 04/25 09:07:16 [SITE] [612] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  3713. 04/25 09:07:16 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3714. 04/25 09:07:16 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3715. 04/25 09:07:16 [MISC] [612] NetpDcGetName: DOMAIN.COM cache is too old, need to redo discovery. 47115984
  3716. 04/25 09:07:16 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19500
  3717. 04/25 09:07:16 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3718. 04/25 09:07:16 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DFA197E0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3719. 04/25 09:07:16 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  3720. 04/25 09:07:16 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3721. 04/25 09:07:16 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3722. 04/25 09:07:17 [MISC] [612] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3723. 04/25 09:07:17 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3724. 04/25 09:07:17 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA18F40 )
  3725. 04/25 09:07:17 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3726. 04/25 09:07:17 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3727. 04/25 09:07:17 [SESSION] [776] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3728. 04/25 09:07:17 [SESSION] [776] DOMAIN: NlSessionSetup: Try Session setup
  3729. 04/25 09:07:17 [SESSION] [776] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  3730. 04/25 09:07:17 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3731. 04/25 09:07:17 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3732. 04/25 09:07:17 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A080 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3733. 04/25 09:07:17 [MISC] [776] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3734. 04/25 09:07:17 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA18F40
  3735. 04/25 09:07:17 [MISC] [776] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  3736. 04/25 09:07:17 [PERF] [776] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  3737. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  3738. 04/25 09:07:17 [CRITICAL] [776] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3739. 04/25 09:07:17 [CRITICAL] [776] [0] ProcessID is 572
  3740. 04/25 09:07:17 [CRITICAL] [776] [0] System Time is: 4/25/2019 13:7:17:337
  3741. 04/25 09:07:17 [CRITICAL] [776] [0] Generating component is 2
  3742. 04/25 09:07:17 [CRITICAL] [776] [0] Status is 5
  3743. 04/25 09:07:17 [CRITICAL] [776] [0] Detection location is 501
  3744. 04/25 09:07:17 [CRITICAL] [776] [0] Flags is 0
  3745. 04/25 09:07:17 [CRITICAL] [776] [0] NumberOfParameters is 4
  3746. 04/25 09:07:17 [CRITICAL] [776] Unicode string: ncacn_ip_tcp
  3747. 04/25 09:07:17 [CRITICAL] [776] Unicode string: TRORAWADC001.DOMAIN.COM
  3748. 04/25 09:07:17 [CRITICAL] [776] Long val: 305419896
  3749. 04/25 09:07:17 [CRITICAL] [776] Long val: 5
  3750. 04/25 09:07:17 [CRITICAL] [776] [1] ProcessID is 572
  3751. 04/25 09:07:17 [CRITICAL] [776] [1] System Time is: 4/25/2019 13:7:17:337
  3752. 04/25 09:07:17 [CRITICAL] [776] [1] Generating component is 2
  3753. 04/25 09:07:17 [CRITICAL] [776] [1] Status is 5
  3754. 04/25 09:07:17 [CRITICAL] [776] [1] Detection location is 1750
  3755. 04/25 09:07:17 [CRITICAL] [776] [1] Flags is 0
  3756. 04/25 09:07:17 [CRITICAL] [776] [1] NumberOfParameters is 1
  3757. 04/25 09:07:17 [CRITICAL] [776] Long val: 5
  3758. 04/25 09:07:17 [CRITICAL] [776] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3759. 04/25 09:07:17 [CRITICAL] [776] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3760. 04/25 09:07:17 [CRITICAL] [776] [0] ProcessID is 572
  3761. 04/25 09:07:17 [CRITICAL] [776] [0] System Time is: 4/25/2019 13:7:17:337
  3762. 04/25 09:07:17 [CRITICAL] [776] [0] Generating component is 2
  3763. 04/25 09:07:17 [CRITICAL] [776] [0] Status is 5
  3764. 04/25 09:07:17 [CRITICAL] [776] [0] Detection location is 501
  3765. 04/25 09:07:17 [CRITICAL] [776] [0] Flags is 0
  3766. 04/25 09:07:17 [CRITICAL] [776] [0] NumberOfParameters is 4
  3767. 04/25 09:07:17 [CRITICAL] [776] Unicode string: ncacn_ip_tcp
  3768. 04/25 09:07:17 [CRITICAL] [776] Unicode string: TRORAWADC001.DOMAIN.COM
  3769. 04/25 09:07:17 [CRITICAL] [776] Long val: 305419896
  3770. 04/25 09:07:17 [CRITICAL] [776] Long val: 5
  3771. 04/25 09:07:17 [CRITICAL] [776] [1] ProcessID is 572
  3772. 04/25 09:07:17 [CRITICAL] [776] [1] System Time is: 4/25/2019 13:7:17:337
  3773. 04/25 09:07:17 [CRITICAL] [776] [1] Generating component is 2
  3774. 04/25 09:07:17 [CRITICAL] [776] [1] Status is 5
  3775. 04/25 09:07:17 [CRITICAL] [776] [1] Detection location is 1750
  3776. 04/25 09:07:17 [CRITICAL] [776] [1] Flags is 0
  3777. 04/25 09:07:17 [CRITICAL] [776] [1] NumberOfParameters is 1
  3778. 04/25 09:07:17 [CRITICAL] [776] Long val: 5
  3779. 04/25 09:07:17 [CRITICAL] [776] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3780. 04/25 09:07:17 [MISC] [776] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  3781. 04/25 09:07:17 [MISC] [776] Didn't log event since it was already logged.
  3782. 04/25 09:07:17 [SESSION] [776] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  3783. 04/25 09:07:17 [SESSION] [776] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  3784. 04/25 09:07:17 [SESSION] [776] DOMAIN: NlSessionSetup: Session setup Failed
  3785. 04/25 09:07:17 [CRITICAL] [776] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3786. 04/25 09:07:17 [SESSION] [776] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3787. 04/25 09:07:17 [CRITICAL] [776] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3788. 04/25 09:07:17 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3789. 04/25 09:07:17 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3790. 04/25 09:07:17 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3791. 04/25 09:07:17 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3792. 04/25 09:07:17 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3793. 04/25 09:07:17 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3794. 04/25 09:07:17 [SESSION] [612] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3795. 04/25 09:07:17 [CRITICAL] [612] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  3796. 04/25 09:07:21 [MISC] [776] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3797. 04/25 09:07:21 [MISC] [2752] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  3798. 04/25 09:07:21 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3799. 04/25 09:07:21 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3800. 04/25 09:07:21 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3801. 04/25 09:07:21 [MISC] [776] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3802. 04/25 09:07:21 [MISC] [2752] DsrEnumerateDomainTrusts: returns: 0
  3803. 04/25 09:07:21 [MISC] [2752] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3804. 04/25 09:07:21 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3805. 04/25 09:07:21 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3806. 04/25 09:07:21 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3807. 04/25 09:07:21 [MISC] [2752] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3808. 04/25 09:07:21 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3809. 04/25 09:07:21 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3810. 04/25 09:07:21 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3811. 04/25 09:07:21 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3812. 04/25 09:07:21 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3813. 04/25 09:07:21 [SITE] [612] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  3814. 04/25 09:07:21 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3815. 04/25 09:07:21 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3816. 04/25 09:07:21 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  3817. 04/25 09:07:21 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3818. 04/25 09:07:21 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3819. 04/25 09:22:04 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3820. 04/25 09:22:04 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3821. 04/25 09:22:04 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3822. 04/25 09:22:04 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3823. 04/25 09:22:04 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3824. 04/25 09:22:10 [MISC] [776] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3825. 04/25 09:22:10 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3826. 04/25 09:22:10 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  3827. 04/25 09:22:10 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A360 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  3828. 04/25 09:22:10 [MISC] [776] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3829. 04/25 09:22:10 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1AC00
  3830. 04/25 09:22:10 [MISC] [776] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  3831. 04/25 09:22:10 [MISC] [776] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3832. 04/25 09:37:04 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3833. 04/25 09:37:04 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3834. 04/25 09:37:04 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3835. 04/25 09:37:04 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3836. 04/25 09:37:04 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3837. 04/25 09:52:04 [MISC] [776] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3838. 04/25 09:52:04 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3839. 04/25 09:52:04 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3840. 04/25 09:52:04 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3841. 04/25 09:52:04 [MISC] [776] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3842. 04/25 10:07:04 [MISC] [776] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3843. 04/25 10:07:04 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3844. 04/25 10:07:04 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3845. 04/25 10:07:04 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3846. 04/25 10:07:04 [MISC] [776] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3847. 04/25 10:22:04 [MISC] [776] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3848. 04/25 10:22:04 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3849. 04/25 10:22:04 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3850. 04/25 10:22:04 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3851. 04/25 10:22:04 [MISC] [776] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3852. 04/25 10:22:10 [MISC] [776] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3853. 04/25 10:22:10 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3854. 04/25 10:22:10 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  3855. 04/25 10:22:10 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A920 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  3856. 04/25 10:22:10 [MISC] [776] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3857. 04/25 10:22:10 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A360
  3858. 04/25 10:22:10 [MISC] [776] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Oracle-PHX
  3859. 04/25 10:22:10 [MISC] [776] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  3860. 04/25 10:37:04 [MISC] [776] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3861. 04/25 10:37:04 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3862. 04/25 10:37:04 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3863. 04/25 10:37:04 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3864. 04/25 10:37:04 [MISC] [776] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3865. 04/25 10:52:04 [MISC] [776] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3866. 04/25 10:52:04 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3867. 04/25 10:52:04 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  3868. 04/25 10:52:04 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3869. 04/25 10:52:04 [MISC] [776] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  3870. 04/25 11:02:22 [MISC] [2752] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3871. 04/25 11:02:22 [MISC] [776] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  3872. 04/25 11:02:22 [SESSION] [776] DOMAIN: NlSessionSetup: Try Session setup
  3873. 04/25 11:02:22 [SESSION] [776] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  3874. 04/25 11:02:22 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3875. 04/25 11:02:22 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3876. 04/25 11:02:22 [MISC] [2752] NetpDcGetName: DOMAIN.COM. cache is too old. 6904969
  3877. 04/25 11:02:22 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3878. 04/25 11:02:22 [MISC] [2752] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3879. 04/25 11:02:22 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3880. 04/25 11:02:22 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1AC00 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3881. 04/25 11:02:22 [MISC] [2752] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3882. 04/25 11:02:22 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1AC00 )
  3883. 04/25 11:02:22 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A080
  3884. 04/25 11:02:22 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3885. 04/25 11:02:22 [MISC] [2752] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3886. 04/25 11:02:22 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A360 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3887. 04/25 11:02:22 [MISC] [776] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3888. 04/25 11:02:22 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1AC00
  3889. 04/25 11:02:22 [MISC] [776] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  3890. 04/25 11:02:22 [PERF] [776] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  3891. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  3892. 04/25 11:02:22 [CRITICAL] [776] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3893. 04/25 11:02:22 [CRITICAL] [776] [0] ProcessID is 572
  3894. 04/25 11:02:22 [CRITICAL] [776] [0] System Time is: 4/25/2019 15:2:22:431
  3895. 04/25 11:02:22 [CRITICAL] [776] [0] Generating component is 2
  3896. 04/25 11:02:22 [CRITICAL] [776] [0] Status is 5
  3897. 04/25 11:02:22 [CRITICAL] [776] [0] Detection location is 501
  3898. 04/25 11:02:22 [CRITICAL] [776] [0] Flags is 0
  3899. 04/25 11:02:22 [CRITICAL] [776] [0] NumberOfParameters is 4
  3900. 04/25 11:02:22 [CRITICAL] [776] Unicode string: ncacn_ip_tcp
  3901. 04/25 11:02:22 [CRITICAL] [776] Unicode string: TRORAWADC001.DOMAIN.COM
  3902. 04/25 11:02:22 [CRITICAL] [776] Long val: 305419896
  3903. 04/25 11:02:22 [CRITICAL] [776] Long val: 5
  3904. 04/25 11:02:22 [CRITICAL] [776] [1] ProcessID is 572
  3905. 04/25 11:02:22 [CRITICAL] [776] [1] System Time is: 4/25/2019 15:2:22:431
  3906. 04/25 11:02:22 [CRITICAL] [776] [1] Generating component is 2
  3907. 04/25 11:02:22 [CRITICAL] [776] [1] Status is 5
  3908. 04/25 11:02:22 [CRITICAL] [776] [1] Detection location is 1750
  3909. 04/25 11:02:22 [CRITICAL] [776] [1] Flags is 0
  3910. 04/25 11:02:22 [CRITICAL] [776] [1] NumberOfParameters is 1
  3911. 04/25 11:02:22 [CRITICAL] [776] Long val: 5
  3912. 04/25 11:02:22 [CRITICAL] [776] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3913. 04/25 11:02:22 [CRITICAL] [776] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3914. 04/25 11:02:22 [CRITICAL] [776] [0] ProcessID is 572
  3915. 04/25 11:02:22 [CRITICAL] [776] [0] System Time is: 4/25/2019 15:2:22:431
  3916. 04/25 11:02:22 [CRITICAL] [776] [0] Generating component is 2
  3917. 04/25 11:02:22 [CRITICAL] [776] [0] Status is 5
  3918. 04/25 11:02:22 [CRITICAL] [776] [0] Detection location is 501
  3919. 04/25 11:02:22 [CRITICAL] [776] [0] Flags is 0
  3920. 04/25 11:02:22 [CRITICAL] [776] [0] NumberOfParameters is 4
  3921. 04/25 11:02:22 [CRITICAL] [776] Unicode string: ncacn_ip_tcp
  3922. 04/25 11:02:22 [CRITICAL] [776] Unicode string: TRORAWADC001.DOMAIN.COM
  3923. 04/25 11:02:22 [CRITICAL] [776] Long val: 305419896
  3924. 04/25 11:02:22 [CRITICAL] [776] Long val: 5
  3925. 04/25 11:02:22 [CRITICAL] [776] [1] ProcessID is 572
  3926. 04/25 11:02:22 [CRITICAL] [776] [1] System Time is: 4/25/2019 15:2:22:431
  3927. 04/25 11:02:22 [CRITICAL] [776] [1] Generating component is 2
  3928. 04/25 11:02:22 [CRITICAL] [776] [1] Status is 5
  3929. 04/25 11:02:22 [CRITICAL] [776] [1] Detection location is 1750
  3930. 04/25 11:02:22 [CRITICAL] [776] [1] Flags is 0
  3931. 04/25 11:02:22 [CRITICAL] [776] [1] NumberOfParameters is 1
  3932. 04/25 11:02:22 [CRITICAL] [776] Long val: 5
  3933. 04/25 11:02:22 [CRITICAL] [776] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  3934. 04/25 11:02:22 [MISC] [776] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  3935. 04/25 11:02:22 [SESSION] [776] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  3936. 04/25 11:02:22 [SESSION] [776] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  3937. 04/25 11:02:22 [SESSION] [776] DOMAIN: NlSessionSetup: Session setup Failed
  3938. 04/25 11:02:22 [MISC] [776] DsrEnumerateDomainTrusts: returns: 0
  3939. 04/25 11:02:22 [MISC] [776] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3940. 04/25 11:02:22 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3941. 04/25 11:02:22 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3942. 04/25 11:02:22 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3943. 04/25 11:02:22 [MISC] [776] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  3944. 04/25 11:02:22 [MISC] [776] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3945. 04/25 11:02:22 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3946. 04/25 11:02:22 [MISC] [776] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3947. 04/25 11:02:22 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3948. 04/25 11:02:22 [MISC] [776] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3949. 04/25 11:02:22 [SITE] [776] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  3950. 04/25 11:02:22 [MISC] [776] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3951. 04/25 11:02:22 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3952. 04/25 11:02:22 [MISC] [776] NetpDcGetName: DOMAIN.COM cache is too old. 6905953
  3953. 04/25 11:02:22 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  3954. 04/25 11:02:22 [MISC] [776] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  3955. 04/25 11:02:22 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19AC0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3956. 04/25 11:02:22 [MISC] [776] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  3957. 04/25 11:02:22 [MISC] [776] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  3958. 04/25 11:02:22 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA197E0
  3959. 04/25 11:02:22 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3960. 04/25 11:02:22 [MISC] [776] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3961. 04/25 11:06:17 [MISC] [2752] DsGetDcName function called: client PID=572, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3962. 04/25 11:06:17 [MISC] [612] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3963. 04/25 11:06:17 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3964. 04/25 11:06:17 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3965. 04/25 11:06:17 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3966. 04/25 11:06:17 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3967. 04/25 11:06:17 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3968. 04/25 11:06:17 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3969. 04/25 11:06:17 [MISC] [612] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: DS BACKGROUND RET_DNS
  3970. 04/25 11:06:17 [MISC] [2752] DsGetDcName function returns 0 (client PID=572): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  3971. 04/25 11:06:18 [SITE] [2752] DsrGetSiteName: Returning site name 'Oracle-PHX' from local cache.
  3972. 04/25 11:06:18 [MISC] [2752] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3973. 04/25 11:06:18 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3974. 04/25 11:06:18 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  3975. 04/25 11:06:18 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3976. 04/25 11:06:18 [MISC] [2752] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  3977. 04/25 11:06:18 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3978. 04/25 11:06:18 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3979. 04/25 11:06:18 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A360 )
  3980. 04/25 11:06:18 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  3981. 04/25 11:06:18 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  3982. 04/25 11:06:18 [SESSION] [776] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  3983. 04/25 11:06:18 [SESSION] [776] DOMAIN: NlSessionSetup: Try Session setup
  3984. 04/25 11:06:18 [SESSION] [776] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  3985. 04/25 11:06:18 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  3986. 04/25 11:06:18 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  3987. 04/25 11:06:18 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19DA0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  3988. 04/25 11:06:18 [MISC] [776] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  3989. 04/25 11:06:18 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A360
  3990. 04/25 11:06:18 [MISC] [776] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  3991. 04/25 11:06:18 [PERF] [776] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  3992. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  3993. 04/25 11:06:18 [CRITICAL] [776] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  3994. 04/25 11:06:18 [CRITICAL] [776] [0] ProcessID is 572
  3995. 04/25 11:06:18 [CRITICAL] [776] [0] System Time is: 4/25/2019 15:6:18:744
  3996. 04/25 11:06:18 [CRITICAL] [776] [0] Generating component is 2
  3997. 04/25 11:06:18 [CRITICAL] [776] [0] Status is 5
  3998. 04/25 11:06:18 [CRITICAL] [776] [0] Detection location is 501
  3999. 04/25 11:06:18 [CRITICAL] [776] [0] Flags is 0
  4000. 04/25 11:06:18 [CRITICAL] [776] [0] NumberOfParameters is 4
  4001. 04/25 11:06:18 [CRITICAL] [776] Unicode string: ncacn_ip_tcp
  4002. 04/25 11:06:18 [CRITICAL] [776] Unicode string: TRORAWADC001.DOMAIN.COM
  4003. 04/25 11:06:18 [CRITICAL] [776] Long val: 305419896
  4004. 04/25 11:06:18 [CRITICAL] [776] Long val: 5
  4005. 04/25 11:06:18 [CRITICAL] [776] [1] ProcessID is 572
  4006. 04/25 11:06:18 [CRITICAL] [776] [1] System Time is: 4/25/2019 15:6:18:744
  4007. 04/25 11:06:18 [CRITICAL] [776] [1] Generating component is 2
  4008. 04/25 11:06:18 [CRITICAL] [776] [1] Status is 5
  4009. 04/25 11:06:18 [CRITICAL] [776] [1] Detection location is 1750
  4010. 04/25 11:06:18 [CRITICAL] [776] [1] Flags is 0
  4011. 04/25 11:06:18 [CRITICAL] [776] [1] NumberOfParameters is 1
  4012. 04/25 11:06:18 [CRITICAL] [776] Long val: 5
  4013. 04/25 11:06:18 [CRITICAL] [776] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  4014. 04/25 11:06:18 [CRITICAL] [776] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  4015. 04/25 11:06:18 [CRITICAL] [776] [0] ProcessID is 572
  4016. 04/25 11:06:18 [CRITICAL] [776] [0] System Time is: 4/25/2019 15:6:18:744
  4017. 04/25 11:06:18 [CRITICAL] [776] [0] Generating component is 2
  4018. 04/25 11:06:18 [CRITICAL] [776] [0] Status is 5
  4019. 04/25 11:06:18 [CRITICAL] [776] [0] Detection location is 501
  4020. 04/25 11:06:18 [CRITICAL] [776] [0] Flags is 0
  4021. 04/25 11:06:18 [CRITICAL] [776] [0] NumberOfParameters is 4
  4022. 04/25 11:06:18 [CRITICAL] [776] Unicode string: ncacn_ip_tcp
  4023. 04/25 11:06:18 [CRITICAL] [776] Unicode string: TRORAWADC001.DOMAIN.COM
  4024. 04/25 11:06:18 [CRITICAL] [776] Long val: 305419896
  4025. 04/25 11:06:18 [CRITICAL] [776] Long val: 5
  4026. 04/25 11:06:18 [CRITICAL] [776] [1] ProcessID is 572
  4027. 04/25 11:06:18 [CRITICAL] [776] [1] System Time is: 4/25/2019 15:6:18:744
  4028. 04/25 11:06:18 [CRITICAL] [776] [1] Generating component is 2
  4029. 04/25 11:06:18 [CRITICAL] [776] [1] Status is 5
  4030. 04/25 11:06:18 [CRITICAL] [776] [1] Detection location is 1750
  4031. 04/25 11:06:18 [CRITICAL] [776] [1] Flags is 0
  4032. 04/25 11:06:18 [CRITICAL] [776] [1] NumberOfParameters is 1
  4033. 04/25 11:06:18 [CRITICAL] [776] Long val: 5
  4034. 04/25 11:06:18 [CRITICAL] [776] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  4035. 04/25 11:06:18 [MISC] [776] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  4036. 04/25 11:06:18 [MISC] [776] Didn't log event since it was already logged.
  4037. 04/25 11:06:18 [SESSION] [776] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  4038. 04/25 11:06:18 [SESSION] [776] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  4039. 04/25 11:06:18 [SESSION] [776] DOMAIN: NlSessionSetup: Session setup Failed
  4040. 04/25 11:06:18 [CRITICAL] [776] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  4041. 04/25 11:06:18 [SESSION] [776] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  4042. 04/25 11:06:18 [CRITICAL] [776] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  4043. 04/25 11:06:18 [SESSION] [2752] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  4044. 04/25 11:06:18 [CRITICAL] [2752] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  4045. 04/25 11:06:18 [SESSION] [2752] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  4046. 04/25 11:06:18 [CRITICAL] [2752] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  4047. 04/25 11:06:19 [SESSION] [776] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  4048. 04/25 11:06:19 [CRITICAL] [776] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  4049. 04/25 11:06:19 [SESSION] [776] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  4050. 04/25 11:06:19 [CRITICAL] [776] I_NetLogonGetAuthData failed: (null) DOMAIN.COM (Flags 0x1): 0xc0000022
  4051. 04/25 11:07:05 [MISC] [776] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4052. 04/25 11:07:05 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4053. 04/25 11:07:05 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19DA0 )
  4054. 04/25 11:07:05 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4055. 04/25 11:07:05 [MISC] [776] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4056. 04/25 11:17:38 [MISC] [776] DsGetDcName function called: client PID=1128, Dom:DOMAIN Acct:(null) Flags: IP KDC
  4057. 04/25 11:17:38 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4058. 04/25 11:17:38 [MISC] [776] NetpDcGetName: DOMAIN.COM. cache is too old. 9871719
  4059. 04/25 11:17:38 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  4060. 04/25 11:17:38 [MISC] [776] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  4061. 04/25 11:17:39 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA1A080 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4062. 04/25 11:17:39 [MISC] [776] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  4063. 04/25 11:17:39 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  4064. 04/25 11:17:39 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A640
  4065. 04/25 11:17:39 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001 DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN DnsForestName: Flags:0x8001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4066. 04/25 11:17:39 [MISC] [776] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN Acct:(null) Flags: IP KDC
  4067. 04/25 11:17:39 [MISC] [776] DsGetDcName function called: client PID=1128, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4068. 04/25 11:17:39 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4069. 04/25 11:17:39 [MISC] [776] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA1A080 )
  4070. 04/25 11:17:39 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4071. 04/25 11:17:39 [MISC] [776] DsGetDcName function returns 0 (client PID=1128): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4072. 04/25 11:17:45 [MISC] [2752] DsGetDcName function called: client PID=2492, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4073. 04/25 11:17:45 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4074. 04/25 11:17:45 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  4075. 04/25 11:17:45 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DFA19500 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4076. 04/25 11:17:45 [MISC] [2752] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  4077. 04/25 11:17:45 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19DA0
  4078. 04/25 11:17:45 [MISC] [2752] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4079. 04/25 11:17:45 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4080. 04/25 11:17:45 [MISC] [2752] DsGetDcName function returns 0 (client PID=2492): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4081. 04/25 11:17:49 [SESSION] [776] NETLOGON_CONTROL_TC_VERIFY function received.
  4082. 04/25 11:17:49 [SESSION] [776] DOMAIN: NlSessionSetup: Try Session setup
  4083. 04/25 11:17:49 [SESSION] [776] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  4084. 04/25 11:17:49 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4085. 04/25 11:17:49 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.5.10.13
  4086. 04/25 11:17:49 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA197E0 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4087. 04/25 11:17:49 [MISC] [776] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  4088. 04/25 11:17:49 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19500
  4089. 04/25 11:17:49 [MISC] [776] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=ORAWADC001, SrvCount=1, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4090. 04/25 11:17:49 [PERF] [776] NlSetServerClientSession: Not changing connection (00000169DFA03B98): "ORAWADC001.DOMAIN.COM"
  4091. ClientSession: 00000169DE937210DOMAIN: NlDiscoverDc: Found DC ORAWADC001.DOMAIN.COM
  4092. 04/25 11:17:49 [CRITICAL] [776] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  4093. 04/25 11:17:49 [CRITICAL] [776] [0] ProcessID is 572
  4094. 04/25 11:17:49 [CRITICAL] [776] [0] System Time is: 4/25/2019 15:17:49:634
  4095. 04/25 11:17:49 [CRITICAL] [776] [0] Generating component is 2
  4096. 04/25 11:17:49 [CRITICAL] [776] [0] Status is 5
  4097. 04/25 11:17:49 [CRITICAL] [776] [0] Detection location is 501
  4098. 04/25 11:17:49 [CRITICAL] [776] [0] Flags is 0
  4099. 04/25 11:17:49 [CRITICAL] [776] [0] NumberOfParameters is 4
  4100. 04/25 11:17:49 [CRITICAL] [776] Unicode string: ncacn_ip_tcp
  4101. 04/25 11:17:49 [CRITICAL] [776] Unicode string: TRORAWADC001.DOMAIN.COM
  4102. 04/25 11:17:49 [CRITICAL] [776] Long val: 305419896
  4103. 04/25 11:17:49 [CRITICAL] [776] Long val: 5
  4104. 04/25 11:17:49 [CRITICAL] [776] [1] ProcessID is 572
  4105. 04/25 11:17:49 [CRITICAL] [776] [1] System Time is: 4/25/2019 15:17:49:634
  4106. 04/25 11:17:49 [CRITICAL] [776] [1] Generating component is 2
  4107. 04/25 11:17:49 [CRITICAL] [776] [1] Status is 5
  4108. 04/25 11:17:49 [CRITICAL] [776] [1] Detection location is 1750
  4109. 04/25 11:17:49 [CRITICAL] [776] [1] Flags is 0
  4110. 04/25 11:17:49 [CRITICAL] [776] [1] NumberOfParameters is 1
  4111. 04/25 11:17:49 [CRITICAL] [776] Long val: 5
  4112. 04/25 11:17:49 [CRITICAL] [776] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  4113. 04/25 11:17:49 [CRITICAL] [776] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  4114. 04/25 11:17:49 [CRITICAL] [776] [0] ProcessID is 572
  4115. 04/25 11:17:49 [CRITICAL] [776] [0] System Time is: 4/25/2019 15:17:49:634
  4116. 04/25 11:17:49 [CRITICAL] [776] [0] Generating component is 2
  4117. 04/25 11:17:49 [CRITICAL] [776] [0] Status is 5
  4118. 04/25 11:17:49 [CRITICAL] [776] [0] Detection location is 501
  4119. 04/25 11:17:49 [CRITICAL] [776] [0] Flags is 0
  4120. 04/25 11:17:49 [CRITICAL] [776] [0] NumberOfParameters is 4
  4121. 04/25 11:17:49 [CRITICAL] [776] Unicode string: ncacn_ip_tcp
  4122. 04/25 11:17:49 [CRITICAL] [776] Unicode string: TRORAWADC001.DOMAIN.COM
  4123. 04/25 11:17:49 [CRITICAL] [776] Long val: 305419896
  4124. 04/25 11:17:49 [CRITICAL] [776] Long val: 5
  4125. 04/25 11:17:49 [CRITICAL] [776] [1] ProcessID is 572
  4126. 04/25 11:17:49 [CRITICAL] [776] [1] System Time is: 4/25/2019 15:17:49:634
  4127. 04/25 11:17:49 [CRITICAL] [776] [1] Generating component is 2
  4128. 04/25 11:17:49 [CRITICAL] [776] [1] Status is 5
  4129. 04/25 11:17:49 [CRITICAL] [776] [1] Detection location is 1750
  4130. 04/25 11:17:49 [CRITICAL] [776] [1] Flags is 0
  4131. 04/25 11:17:49 [CRITICAL] [776] [1] NumberOfParameters is 1
  4132. 04/25 11:17:49 [CRITICAL] [776] Long val: 5
  4133. 04/25 11:17:49 [CRITICAL] [776] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  4134. 04/25 11:17:49 [MISC] [776] Eventlog: 3210 (1) "DOMAIN" "ORAWADC001.DOMAIN.COM" 2f8270f1 5bc8d5e7 34c3e164 6665df64 .p./...[d..4d.ef
  4135. 04/25 11:17:49 [MISC] [776] Didn't log event since it was already logged.
  4136. 04/25 11:17:49 [SESSION] [776] DOMAIN: NlSetStatusClientSession: Set connection status to c0000022
  4137. 04/25 11:17:49 [SESSION] [776] DOMAIN: NlSetStatusClientSession: Unbind from server ORAWADC001.DOMAIN.COM (TCP) 0.
  4138. 04/25 11:17:49 [SESSION] [776] DOMAIN: NlSessionSetup: Session setup Failed
  4139. 04/25 11:17:49 [CRITICAL] [776] DOMAIN: NlGetTrustedSideInfo: (null): failed C0000022
  4140. 04/25 11:18:10 [MISC] [612] DsGetDcName function called: client PID=4992, Dom:DOMAIN.COM Acct:(null) Flags:
  4141. 04/25 11:18:10 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4142. 04/25 11:18:10 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4143. 04/25 11:18:10 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4144. 04/25 11:18:10 [MISC] [612] DsGetDcName function returns 0 (client PID=4992): Dom:DOMAIN.COM Acct:(null) Flags:
  4145. 04/25 11:19:20 [MISC] [612] DsGetDcName function called: client PID=5064, Dom:DOMAIN.COM Acct:(null) Flags:
  4146. 04/25 11:19:20 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4147. 04/25 11:19:20 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4148. 04/25 11:19:20 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4149. 04/25 11:19:20 [MISC] [612] DsGetDcName function returns 0 (client PID=5064): Dom:DOMAIN.COM Acct:(null) Flags:
  4150. 04/25 11:19:21 [MISC] [612] DsGetDcName function called: client PID=2764, Dom:DOMAIN.COM Acct:(null) Flags:
  4151. 04/25 11:19:21 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4152. 04/25 11:19:21 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4153. 04/25 11:19:21 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4154. 04/25 11:19:21 [MISC] [612] DsGetDcName function returns 0 (client PID=2764): Dom:DOMAIN.COM Acct:(null) Flags:
  4155. 04/25 11:20:36 [MISC] [776] DsGetDcName function called: client PID=688, Dom:DOMAIN.COM Acct:(null) Flags:
  4156. 04/25 11:20:36 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4157. 04/25 11:20:36 [MISC] [776] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4158. 04/25 11:20:36 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4159. 04/25 11:20:36 [MISC] [776] DsGetDcName function returns 0 (client PID=688): Dom:DOMAIN.COM Acct:(null) Flags:
  4160. 04/25 11:20:37 [MISC] [612] DsGetDcName function called: client PID=2396, Dom:DOMAIN.COM Acct:(null) Flags:
  4161. 04/25 11:20:37 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4162. 04/25 11:20:37 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4163. 04/25 11:20:37 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4164. 04/25 11:20:37 [MISC] [612] DsGetDcName function returns 0 (client PID=2396): Dom:DOMAIN.COM Acct:(null) Flags:
  4165. 04/25 11:22:05 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4166. 04/25 11:22:05 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4167. 04/25 11:22:05 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4168. 04/25 11:22:05 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4169. 04/25 11:22:05 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4170. 04/25 11:22:11 [MISC] [776] DsGetDcName function called: client PID=2444, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  4171. 04/25 11:22:11 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4172. 04/25 11:22:11 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  4173. 04/25 11:22:11 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DFA6B460 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  4174. 04/25 11:22:11 [MISC] [776] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  4175. 04/25 11:22:11 [SITE] [776] Setting site name to 'Datacenter-CHI'
  4176. 04/25 11:22:11 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A920
  4177. 04/25 11:22:11 [CRITICAL] [1684] NlMainLoop: Registry changed
  4178. 04/25 11:22:11 [MISC] [776] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Datacenter-CHI
  4179. 04/25 11:22:11 [MISC] [776] DsGetDcName function returns 0 (client PID=2444): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  4180. 04/25 11:22:11 [MISC] [612] DsGetDcName function called: client PID=2500, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4181. 04/25 11:22:11 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4182. 04/25 11:22:11 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  4183. 04/25 11:22:11 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4184. 04/25 11:22:11 [MISC] [612] DsGetDcName function returns 0 (client PID=2500): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4185. 04/25 11:22:11 [MISC] [612] DsGetDcName function called: client PID=2500, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4186. 04/25 11:22:11 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4187. 04/25 11:22:11 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  4188. 04/25 11:22:11 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4189. 04/25 11:22:11 [MISC] [612] DsGetDcName function returns 0 (client PID=2500): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4190. 04/25 11:22:11 [MISC] [612] DsGetDcName function called: client PID=2500, Dom: Acct:(null) Flags: RET_DNS
  4191. 04/25 11:22:11 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4192. 04/25 11:22:11 [MISC] [612] NetpDcGetName: cache is too old, need to redo discovery. 57596781
  4193. 04/25 11:22:11 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA19220
  4194. 04/25 11:22:11 [MAILSLOT] [612] NetpDcPingListIp: : Sent UDP ping to 10.6.2.12
  4195. 04/25 11:22:11 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DE8D3C00 -> DC:TRCH03ADC002 DnsDomName: Flags:0x1f1fc
  4196. 04/25 11:22:11 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for returned 0
  4197. 04/25 11:22:11 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC002. DCAddress:\\10.6.2.12 DCAddrType:0x1 DomainName: DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4198. 04/25 11:22:11 [MISC] [612] DsGetDcName function returns 0 (client PID=2500): Dom: Acct:(null) Flags: RET_DNS
  4199. 04/25 11:22:11 [MISC] [612] DsGetDcName function called: client PID=2500, Dom:(null) Acct:(null) Flags: DSP
  4200. 04/25 11:22:11 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4201. 04/25 11:22:11 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4202. 04/25 11:22:11 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4203. 04/25 11:22:11 [MISC] [612] DsGetDcName function returns 0 (client PID=2500): Dom:(null) Acct:(null) Flags: DSP
  4204. 04/25 11:22:11 [MISC] [776] DsGetDcName function called: client PID=2500, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4205. 04/25 11:22:11 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4206. 04/25 11:22:11 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  4207. 04/25 11:22:11 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4208. 04/25 11:22:11 [MISC] [776] DsGetDcName function returns 0 (client PID=2500): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4209. 04/25 11:22:11 [MISC] [776] DsGetDcName function called: client PID=2500, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4210. 04/25 11:22:11 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4211. 04/25 11:22:11 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  4212. 04/25 11:22:11 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4213. 04/25 11:22:11 [MISC] [776] DsGetDcName function returns 0 (client PID=2500): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4214. 04/25 11:22:11 [MISC] [776] DsGetDcName function called: client PID=2500, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4215. 04/25 11:22:11 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4216. 04/25 11:22:11 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  4217. 04/25 11:22:11 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4218. 04/25 11:22:11 [MISC] [776] DsGetDcName function returns 0 (client PID=2500): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4219. 04/25 11:22:11 [MISC] [776] DsGetDcName function called: client PID=2500, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4220. 04/25 11:22:11 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4221. 04/25 11:22:11 [MISC] [776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  4222. 04/25 11:22:11 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4223. 04/25 11:22:11 [MISC] [776] DsGetDcName function returns 0 (client PID=2500): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4224. 04/25 11:22:11 [MISC] [776] DsGetDcName function called: client PID=2500, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4225. 04/25 11:22:11 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4226. 04/25 11:22:11 [MISC] [776] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA19AC0 )
  4227. 04/25 11:22:11 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4228. 04/25 11:22:11 [MISC] [776] DsGetDcName function returns 0 (client PID=2500): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4229. 04/25 11:22:13 [INIT] [1684] Group Policy is not defined for Netlogon
  4230. 04/25 11:22:13 [INIT] [1684] Following are the effective values after parsing
  4231. 04/25 11:22:13 [INIT] [1684] SiteName (0) = Datacenter-CHI
  4232. 04/25 11:24:17 [MISC] [2752] DsGetDcName function called: client PID=2428, Dom:DOMAIN.COM Acct:(null) Flags:
  4233. 04/25 11:24:17 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4234. 04/25 11:24:17 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4235. 04/25 11:24:17 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4236. 04/25 11:24:17 [MISC] [2752] DsGetDcName function returns 0 (client PID=2428): Dom:DOMAIN.COM Acct:(null) Flags:
  4237. 04/25 11:25:45 [MISC] [2752] DsGetDcName function called: client PID=2964, Dom:DOMAIN.COM Acct:(null) Flags:
  4238. 04/25 11:25:45 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4239. 04/25 11:25:45 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4240. 04/25 11:25:45 [MISC] [2752] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4241. 04/25 11:25:45 [MISC] [2752] DsGetDcName function returns 0 (client PID=2964): Dom:DOMAIN.COM Acct:(null) Flags:
  4242. 04/25 11:25:47 [MISC] [776] DsGetDcName function called: client PID=2892, Dom:DOMAIN.COM Acct:(null) Flags:
  4243. 04/25 11:25:47 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4244. 04/25 11:25:47 [MISC] [776] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DFA197E0 )
  4245. 04/25 11:25:47 [MISC] [776] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Oracle-PHX ClientSiteName:Oracle-PHX
  4246. 04/25 11:25:47 [MISC] [776] DsGetDcName function returns 0 (client PID=2892): Dom:DOMAIN.COM Acct:(null) Flags:
  4247. 04/25 11:25:49 [MISC] [2752] DsGetDcName function called: client PID=100, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4248. 04/25 11:25:49 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4249. 04/25 11:25:49 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  4250. 04/25 11:25:49 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DE8E32A0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4251. 04/25 11:25:49 [MISC] [2752] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  4252. 04/25 11:25:49 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA197E0
  4253. 04/25 11:25:49 [MISC] [2752] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=CH03ADC003, SrvCount=2, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4254. 04/25 11:25:49 [MISC] [2752] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4255. 04/25 11:25:49 [MISC] [2752] DsGetDcName function returns 0 (client PID=100): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4256. 04/25 11:25:54 [MISC] [2752] DsGetDcName function called: client PID=336, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4257. 04/25 11:25:54 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4258. 04/25 11:25:54 [MAILSLOT] [2752] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  4259. 04/25 11:25:54 [MISC] [2752] NetpDcAllocateCacheEntry: new entry 0x00000169DF86EE90 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4260. 04/25 11:25:54 [MISC] [2752] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  4261. 04/25 11:25:54 [MISC] [2752] NetpDcDerefCacheEntry: destroying entry 0x00000169DE8E32A0
  4262. 04/25 11:25:54 [MISC] [2752] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=CH03ADC003, SrvCount=2, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4263. 04/25 11:25:54 [MISC] [2752] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4264. 04/25 11:25:54 [MISC] [2752] DsGetDcName function returns 0 (client PID=336): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4265. 04/25 11:37:05 [MISC] [2752] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4266. 04/25 11:37:05 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4267. 04/25 11:37:05 [MISC] [2752] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DF86EE90 )
  4268. 04/25 11:37:05 [MISC] [2752] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4269. 04/25 11:37:05 [MISC] [2752] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4270. 04/25 11:51:30 [MISC] [776] DsGetDcName function called: client PID=2016, Dom:DOMAIN.COM Acct:(null) Flags:
  4271. 04/25 11:51:30 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4272. 04/25 11:51:30 [MISC] [776] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DF86EE90 )
  4273. 04/25 11:51:30 [MISC] [776] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4274. 04/25 11:51:30 [MISC] [776] DsGetDcName function returns 0 (client PID=2016): Dom:DOMAIN.COM Acct:(null) Flags:
  4275. 04/25 11:51:34 [MISC] [776] DsGetDcName function called: client PID=2468, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4276. 04/25 11:51:34 [MISC] [776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4277. 04/25 11:51:34 [MAILSLOT] [776] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.14
  4278. 04/25 11:51:34 [MISC] [776] NetpDcAllocateCacheEntry: new entry 0x00000169DE960FC0 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4279. 04/25 11:51:34 [MISC] [776] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  4280. 04/25 11:51:34 [MISC] [776] NetpDcDerefCacheEntry: destroying entry 0x00000169DF86EE90
  4281. 04/25 11:51:34 [MISC] [776] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=CH03ADC004, SrvCount=2, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4282. 04/25 11:51:34 [MISC] [776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4283. 04/25 11:51:34 [MISC] [776] DsGetDcName function returns 0 (client PID=2468): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4284. 04/25 11:52:05 [MISC] [612] DsGetDcName function called: client PID=384, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4285. 04/25 11:52:05 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4286. 04/25 11:52:05 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x00000169DE960FC0 )
  4287. 04/25 11:52:05 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4288. 04/25 11:52:05 [MISC] [612] DsGetDcName function returns 0 (client PID=384): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4289. 04/25 11:52:05 [MISC] [612] DsGetDcName function called: client PID=4, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4290. 04/25 11:52:05 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4291. 04/25 11:52:05 [MISC] [612] NetpDcGetName: DOMAIN.COM cache is too old. 11938344
  4292. 04/25 11:52:05 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  4293. 04/25 11:52:05 [MISC] [612] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRORAWADC001.DOMAIN.COM
  4294. 04/25 11:52:05 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x00000169DE98EC40 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  4295. 04/25 11:52:05 [MISC] [612] NlPingDcNameWithContext: TRORAWADC001.DOMAIN.COM responded over IP.
  4296. 04/25 11:52:05 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE98EC40 )
  4297. 04/25 11:52:05 [MISC] [612] NetpDcDerefCacheEntry: destroying entry 0x00000169DFA1A080
  4298. 04/25 11:52:05 [MISC] [612] DsGetDcName: results as follows: DCName:ORAWADC001.DOMAIN.COM DCAddress:\\10.5.10.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f17c DcSiteName:Oracle-PHX ClientSiteName:Datacenter-CHI
  4299. 04/25 11:52:05 [MISC] [612] DsGetDcName function returns 0 (client PID=4): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4300. 04/25 11:53:58 [MISC] [612] DsGetDcName function called: client PID=3720, Dom:DOMAIN.COM Acct:(null) Flags:
  4301. 04/25 11:53:58 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4302. 04/25 11:53:58 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE960FC0 )
  4303. 04/25 11:53:58 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4304. 04/25 11:53:58 [MISC] [612] DsGetDcName function returns 0 (client PID=3720): Dom:DOMAIN.COM Acct:(null) Flags:
  4305. 04/25 11:54:00 [MISC] [2752] DsGetDcName function called: client PID=3008, Dom:DOMAIN.COM Acct:(null) Flags:
  4306. 04/25 11:54:00 [MISC] [2752] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4307. 04/25 11:54:00 [MISC] [2752] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x00000169DE960FC0 )
  4308. 04/25 11:54:00 [MISC] [2752] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4309. 04/25 11:54:00 [MISC] [2752] DsGetDcName function returns 0 (client PID=3008): Dom:DOMAIN.COM Acct:(null) Flags:
  4310. 04/25 11:54:30 [INIT] [1664] Group Policy is not defined for Netlogon
  4311. 04/25 11:54:30 [INIT] [1664] Following are the effective values after parsing
  4312. 04/25 11:54:30 [INIT] [1664] Sysvol = C:\Windows\SYSVOL\SYSVOL
  4313. 04/25 11:54:30 [INIT] [1664] Scripts = (null)
  4314. 04/25 11:54:30 [INIT] [1664] RpcDacl = (null)
  4315. 04/25 11:54:30 [INIT] [1664] RemoteAccessCheckDacl = (null)
  4316. 04/25 11:54:30 [INIT] [1664] SiteName (0) = Datacenter-CHI
  4317. 04/25 11:54:30 [INIT] [1664] Pulse = 300 (0x12c)
  4318. 04/25 11:54:30 [INIT] [1664] Randomize = 1 (0x1)
  4319. 04/25 11:54:30 [INIT] [1664] PulseMaximum = 7200 (0x1c20)
  4320. 04/25 11:54:30 [INIT] [1664] PulseConcurrency = 10 (0xa)
  4321. 04/25 11:54:30 [INIT] [1664] PulseTimeout1 = 10 (0xa)
  4322. 04/25 11:54:30 [INIT] [1664] PulseTimeout2 = 300 (0x12c)
  4323. 04/25 11:54:30 [INIT] [1664] MaximumMailslotMessages = 500 (0x1f4)
  4324. 04/25 11:54:30 [INIT] [1664] MailslotMessageTimeout = 10 (0xa)
  4325. 04/25 11:54:30 [INIT] [1664] MailslotDuplicateTimeout = 2 (0x2)
  4326. 04/25 11:54:30 [INIT] [1664] ExpectedDialupDelay = 0 (0x0)
  4327. 04/25 11:54:30 [INIT] [1664] ScavengeInterval = 900 (0x384)
  4328. 04/25 11:54:30 [INIT] [1664] EventLogPeriodicity = 1800 (0x708)
  4329. 04/25 11:54:30 [INIT] [1664] WarningEventThreshold = 0 (0x0)
  4330. 04/25 11:54:30 [INIT] [1664] MaximumPasswordAge = 30 (0x1e)
  4331. 04/25 11:54:30 [INIT] [1664] LdapSrvPriority = 0 (0x0)
  4332. 04/25 11:54:30 [INIT] [1664] LdapSrvWeight = 100 (0x64)
  4333. 04/25 11:54:30 [INIT] [1664] LdapSrvPort = 389 (0x185)
  4334. 04/25 11:54:30 [INIT] [1664] LdapGcSrvPort = 3268 (0xcc4)
  4335. 04/25 11:54:30 [INIT] [1664] KdcSrvPort = 88 (0x58)
  4336. 04/25 11:54:30 [INIT] [1664] KerbIsDoneWithJoinDomainEntry = 0 (0x0)
  4337. 04/25 11:54:30 [INIT] [1664] DcLocatorIsDoneWithJoinDomainEntry = 0 (0x0)
  4338. 04/25 11:54:30 [INIT] [1664] DnsTtl = 600 (0x258)
  4339. 04/25 11:54:30 [INIT] [1664] DnsRefreshInterval = 3600 (0xe10)
  4340. 04/25 11:54:30 [INIT] [1664] CloseSiteTimeout = 900 (0x384)
  4341. 04/25 11:54:30 [INIT] [1664] SiteNameTimeout = 300 (0x12c)
  4342. 04/25 11:54:30 [INIT] [1664] DuplicateEventlogTimeout = 14400 (0x3840)
  4343. 04/25 11:54:30 [INIT] [1664] MaxConcurrentApi = 0 (0x0)
  4344. 04/25 11:54:30 [INIT] [1664] NegativeCachePeriod = 45 (0x2d)
  4345. 04/25 11:54:30 [INIT] [1664] BackgroundRetryInitialPeriod = 600 (0x258)
  4346. 04/25 11:54:30 [INIT] [1664] BackgroundRetryMaximumPeriod = 3600 (0xe10)
  4347. 04/25 11:54:30 [INIT] [1664] BackgroundRetryQuitTime = 0 (0x0)
  4348. 04/25 11:54:30 [INIT] [1664] BackgroundSuccessfulRefreshPeriod = 4294967295 (0xffffffff)
  4349. 04/25 11:54:30 [INIT] [1664] NonBackgroundSuccessfulRefreshPeriod = 1800 (0x708)
  4350. 04/25 11:54:30 [INIT] [1664] DnsFailedDeregisterTimeout = 172800 (0x2a300)
  4351. 04/25 11:54:30 [INIT] [1664] MaxLdapServersPinged = 55 (0x37)
  4352. 04/25 11:54:30 [INIT] [1664] PingUrgencyMode = 0 (0x0)
  4353. 04/25 11:54:30 [INIT] [1664] SiteCoverageRefreshInterval = 3600 (0xe10)
  4354. 04/25 11:54:30 [INIT] [1664] FtInfoUpdateInterval = 86400 (0x15180)
  4355. 04/25 11:54:30 [INIT] [1664] DBFlag = 545325055 (0x2080ffff)
  4356. 04/25 11:54:30 [INIT] [1664] MaximumLogFileSize = 20000000 (0x1312d00)
  4357. 04/25 11:54:30 [INIT] [1664] AddressTypeReturned = 1 (0x1)
  4358. 04/25 11:54:30 [INIT] [1664] ForceRediscoveryInterval = 43200 (0xa8c0)
  4359. 04/25 11:54:30 [INIT] [1664] RestrictNTLMInDomain = 0 (0x0)
  4360. 04/25 11:54:30 [INIT] [1664] AuditNTLMInDomain = 0 (0x0)
  4361. 04/25 11:54:30 [INIT] [1664] NextClosestSiteFilter = 2 (0x2)
  4362. 04/25 11:54:30 [INIT] [1664] NextClosestSiteRefreshInterval = 10800 (0x2a30)
  4363. 04/25 11:54:30 [INIT] [1664] CompoundIdEnabled = 1 (0x1)
  4364. 04/25 11:54:30 [INIT] [1664] CompoundIdDisabled = 0 (0x0)
  4365. 04/25 11:54:30 [INIT] [1664] AddressLookupOnPingBehavior = 2 (0x2)
  4366. 04/25 11:54:30 [INIT] [1664] DnsHostNameInLocatorPing = 1 (0x1)
  4367. 04/25 11:54:30 [INIT] [1664] JoinDCPingThreadTimeout = 60 (0x3c)
  4368. 04/25 11:54:30 [INIT] [1664] RefusePasswordChange = FALSE
  4369. 04/25 11:54:30 [INIT] [1664] AvoidSamRepl = TRUE
  4370. 04/25 11:54:30 [INIT] [1664] AvoidLsaRepl = TRUE
  4371. 04/25 11:54:30 [INIT] [1664] SignSecureChannel = TRUE
  4372. 04/25 11:54:30 [INIT] [1664] SealSecureChannel = TRUE
  4373. 04/25 11:54:30 [INIT] [1664] RequireSignOrSeal = TRUE
  4374. 04/25 11:54:30 [INIT] [1664] RequireStrongKey = TRUE
  4375. 04/25 11:54:30 [INIT] [1664] SysVolReady = TRUE
  4376. 04/25 11:54:30 [INIT] [1664] UseDynamicDns = TRUE
  4377. 04/25 11:54:30 [INIT] [1664] RegisterDnsARecords = TRUE
  4378. 04/25 11:54:30 [INIT] [1664] AvoidPdcOnWan = FALSE
  4379. 04/25 11:54:30 [INIT] [1664] AutoSiteCoverage = TRUE
  4380. 04/25 11:54:30 [INIT] [1664] AvoidDnsDeregOnShutdown = TRUE
  4381. 04/25 11:54:30 [INIT] [1664] DnsUpdateOnAllAdapters = FALSE
  4382. 04/25 11:54:30 [INIT] [1664] Nt4Emulator = FALSE
  4383. 04/25 11:54:30 [INIT] [1664] EnableChainSetClientAttributes = TRUE
  4384. 04/25 11:54:30 [INIT] [1664] DCLocatorReplyEnabled = TRUE
  4385. 04/25 11:54:30 [INIT] [1664] DisablePasswordChange = FALSE
  4386. 04/25 11:54:30 [INIT] [1664] NeutralizeNt4Emulator = FALSE
  4387. 04/25 11:54:30 [INIT] [1664] AllowSingleLabelDnsDomain = FALSE
  4388. 04/25 11:54:30 [INIT] [1664] AllowDnsSuffixSearch = TRUE
  4389. 04/25 11:54:30 [INIT] [1664] AllowExclusiveSysvolShareAccess = FALSE
  4390. 04/25 11:54:30 [INIT] [1664] AllowExclusiveScriptsShareAccess = FALSE
  4391. 04/25 11:54:30 [INIT] [1664] AvoidLocatorAccountLookup = FALSE
  4392. 04/25 11:54:30 [INIT] [1664] NeverPing = FALSE
  4393. 04/25 11:54:30 [INIT] [1664] RegisterSiteSpecificDnsRecordsOnly = FALSE
  4394. 04/25 11:54:30 [INIT] [1664] TryNextClosestSite = FALSE
  4395. 04/25 11:54:30 [INIT] [1664] AllowNT4Crypto = FALSE
  4396. 04/25 11:54:30 [INIT] [1664] IgnoreIncomingMailslotMessages = FALSE
  4397. 04/25 11:54:30 [INIT] [1664] RejectMd5Servers = FALSE
  4398. 04/25 11:54:30 [INIT] [1664] RejectMd5Clients = FALSE
  4399. 04/25 11:54:30 [INIT] [1664] AvoidFallbackNetbiosDiscovery = TRUE
  4400. 04/25 11:54:30 [INIT] [1664] Command line parsed successfully ...
  4401. 04/25 11:54:30 [INIT] [1664] Netlogon.dll has been unloaded (recover from it).
  4402. 04/25 11:54:30 [PERF] [1664] NlInit: New NlPcGlobalTotalInstance (000002B616428CA8): "_Total"
  4403. 04/25 11:54:30 [INIT] [1664] NlRegisterNQMNotifications: PowerSettingRegisterNotification returned 0x0
  4404. 04/25 11:54:30 [MISC] [652] NlNQMPowerStateChangeCallback: not running in network-low-power state
  4405. 04/25 11:54:30 [SITE] [1664] Enter NlSiteInitializationWrapper
  4406. 04/25 11:54:30 [SITE] [652] NlSiteInitializeCallback: Calling NlSiteInitialize
  4407. 04/25 11:54:30 [SITE] [652] Setting site name to 'Datacenter-CHI'
  4408. 04/25 11:54:30 [SITE] [652] NlSiteInitializeCallback: NlSiteInitialize returned with status:0
  4409. 04/25 11:54:30 [SITE] [1664] NlSiteInitializationWrapper: Exit with status:0
  4410. 04/25 11:54:30 [SESSION] [1664] Winsock Addrs: 10.5.10.14 (1)
  4411. 04/25 11:54:30 [SESSION] [1664] V6 Winsock Addrs: fe80::cd4f:3c8d:b1b5:a156%3 (1)
  4412. 04/25 11:54:30 [DNS] [1664] Set DnsForestName to:
  4413. 04/25 11:54:30 [DOMAIN] [1664] DOMAIN: Adding new domain
  4414. 04/25 11:54:30 [DOMAIN] [1664] Setting our computer name to TRORAWDFS001 TRORAWDFS001.DOMAIN.COM
  4415. 04/25 11:54:30 [DOMAIN] [1664] Setting Netbios domain name to DOMAIN
  4416. 04/25 11:54:30 [DOMAIN] [1664] Setting DNS domain name to DOMAIN.COM.
  4417. 04/25 11:54:30 [DOMAIN] [1664] Setting Domain GUID to <DOMAIN GUID>
  4418. 04/25 11:54:30 [MISC] [1680] NlpInitializeTrace succeeded 0
  4419. 04/25 11:54:30 [CRITICAL] [1664] C:\Windows\system32\config\netlogon.ftj: Unable to open. 2
  4420. 04/25 11:54:30 [INIT] [1664] Getting cached trusted domain list from binary file.
  4421. 04/25 11:54:30 [LOGON] [1664] NlSetForestTrustList: New trusted domain list:
  4422. 04/25 11:54:30 [LOGON] [1664] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  4423. 04/25 11:54:30 [LOGON] [1664] Dom Guid: <DOMAIN GUID>
  4424. 04/25 11:54:30 [LOGON] [1664] Dom Sid: <DOMAIN SID>
  4425. 04/25 11:54:30 [LOGON] [1664] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  4426. 04/25 11:54:30 [LOGON] [1664] Dom Guid: <DOMAIN GUID>
  4427. 04/25 11:54:30 [LOGON] [1664] Dom Sid: <DOMAIN SID>
  4428. 04/25 11:54:30 [INIT] [1664] Starting RPC server.
  4429. 04/25 11:54:31 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4430. 04/25 11:54:31 [SESSION] [1664] DOMAIN: NlSessionSetup: Try Session setup
  4431. 04/25 11:54:31 [SESSION] [1664] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  4432. 04/25 11:54:31 [MISC] [1664] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4433. 04/25 11:54:31 [CRITICAL] [1664] NlCacheJoinDomainControllerInfo: Failed to open JoinDomain breadcrumb in registry; assuming
  4434. 04/25 11:54:31 [CRITICAL] [1664] NlCacheJoinDomainControllerInfo: therefore that this is not a post-join scenario.
  4435. 04/25 11:54:31 [CRITICAL] [1664] NetpDcGetName: NlCacheJoinDomainControllerInfo returned success
  4436. 04/25 11:54:31 [MISC] [612] DsGetDcName function called: client PID=300, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4437. 04/25 11:54:31 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4438. 04/25 11:54:31 [MAILSLOT] [1664] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  4439. 04/25 11:54:31 [MAILSLOT] [652] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.5.10.13
  4440. 04/25 11:54:31 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  4441. 04/25 11:54:31 [MISC] [604] DsGetDcName function called: client PID=4, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4442. 04/25 11:54:31 [MISC] [604] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4443. 04/25 11:54:31 [MAILSLOT] [604] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  4444. 04/25 11:54:31 [MISC] [1664] NetpDcAllocateCacheEntry: new entry 0x000002B6164E6BC0 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4445. 04/25 11:54:31 [MISC] [1664] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  4446. 04/25 11:54:31 [PERF] [1664] NlAllocateClientSession: New Perf Instance (000002B6164C01C8): "CH03ADC004.DOMAIN.COM"
  4447. ClientSession: 000002B6164C3A70
  4448. 04/25 11:54:31 [SESSION] [1664] DOMAIN: NlDiscoverDc: Found DC CH03ADC004.DOMAIN.COM
  4449. 04/25 11:54:31 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x000002B6164CC660 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4450. 04/25 11:54:31 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  4451. 04/25 11:54:31 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4452. 04/25 11:54:31 [MISC] [612] DsGetDcName function returns 0 (client PID=300): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4453. 04/25 11:54:31 [MISC] [652] NetpDcAllocateCacheEntry: new entry 0x000002B6164D4290 -> DC:TRORAWADC001 DnsDomName:DOMAIN.COM Flags:0x1f17c
  4454. 04/25 11:54:31 [MISC] [652] NetpDcGetNameIp: DOMAIN.COM Trying to find a DC in a closer site: Datacenter-CHI
  4455. 04/25 11:54:31 [MAILSLOT] [652] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  4456. 04/25 11:54:31 [MISC] [1704] DsGetDcName function called: client PID=1052, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4457. 04/25 11:54:31 [MISC] [1704] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4458. 04/25 11:54:31 [MAILSLOT] [1704] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  4459. 04/25 11:54:31 [MISC] [604] NetpDcAllocateCacheEntry: new entry 0x000002B6164D5C20 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4460. 04/25 11:54:31 [MISC] [604] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  4461. 04/25 11:54:31 [MISC] [604] NetpDcDerefCacheEntry: destroying entry 0x000002B6164CC660
  4462. 04/25 11:54:31 [MISC] [604] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4463. 04/25 11:54:31 [MISC] [604] DsGetDcName function returns 0 (client PID=4): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4464. 04/25 11:54:31 [MISC] [652] NetpDcAllocateCacheEntry: new entry 0x000002B6164CC660 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4465. 04/25 11:54:31 [MISC] [652] NetpDcDerefCacheEntry: destroying entry 0x000002B6164D4290
  4466. 04/25 11:54:31 [MISC] [652] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  4467. 04/25 11:54:31 [MISC] [652] NetpDcDerefCacheEntry: destroying entry 0x000002B6164CC660
  4468. 04/25 11:54:31 [MISC] [1876] DsGetDcName function called: client PID=568, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4469. 04/25 11:54:31 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4470. 04/25 11:54:31 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B6164E6BC0 )
  4471. 04/25 11:54:31 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4472. 04/25 11:54:31 [MISC] [1876] DsGetDcName function returns 0 (client PID=568): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4473. 04/25 11:54:31 [MISC] [1704] NetpDcAllocateCacheEntry: new entry 0x000002B6164EC610 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4474. 04/25 11:54:31 [MISC] [1704] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  4475. 04/25 11:54:31 [MISC] [1704] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4476. 04/25 11:54:31 [MISC] [1704] DsGetDcName function returns 0 (client PID=1052): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4477. 04/25 11:54:31 [CRITICAL] [1664] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc0000022
  4478. 04/25 11:54:31 [CRITICAL] [1664] [0] ProcessID is 568
  4479. 04/25 11:54:31 [CRITICAL] [1664] [0] System Time is: 4/25/2019 15:54:31:303
  4480. 04/25 11:54:31 [CRITICAL] [1664] [0] Generating component is 2
  4481. 04/25 11:54:31 [CRITICAL] [1664] [0] Status is 5
  4482. 04/25 11:54:31 [CRITICAL] [1664] [0] Detection location is 501
  4483. 04/25 11:54:31 [CRITICAL] [1664] [0] Flags is 0
  4484. 04/25 11:54:31 [CRITICAL] [1664] [0] NumberOfParameters is 4
  4485. 04/25 11:54:31 [CRITICAL] [1664] Unicode string: ncacn_ip_tcp
  4486. 04/25 11:54:31 [CRITICAL] [1664] Unicode string: TRCH03ADC004.DOMAIN.COM
  4487. 04/25 11:54:31 [CRITICAL] [1664] Long val: 305419896
  4488. 04/25 11:54:31 [CRITICAL] [1664] Long val: 5
  4489. 04/25 11:54:31 [CRITICAL] [1664] [1] ProcessID is 568
  4490. 04/25 11:54:31 [CRITICAL] [1664] [1] System Time is: 4/25/2019 15:54:31:303
  4491. 04/25 11:54:31 [CRITICAL] [1664] [1] Generating component is 2
  4492. 04/25 11:54:31 [CRITICAL] [1664] [1] Status is 5
  4493. 04/25 11:54:31 [CRITICAL] [1664] [1] Detection location is 1750
  4494. 04/25 11:54:31 [CRITICAL] [1664] [1] Flags is 0
  4495. 04/25 11:54:31 [CRITICAL] [1664] [1] NumberOfParameters is 1
  4496. 04/25 11:54:31 [CRITICAL] [1664] Long val: 5
  4497. 04/25 11:54:31 [CRITICAL] [1664] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc0000022
  4498. 04/25 11:54:31 [CRITICAL] [1664] NlPrintRpcDebug: Dumping extended error for I_NetServerReqChallenge with 0xc002001c
  4499. 04/25 11:54:31 [CRITICAL] [1664] [0] ProcessID is 568
  4500. 04/25 11:54:31 [CRITICAL] [1664] [0] System Time is: 4/25/2019 15:54:31:490
  4501. 04/25 11:54:31 [CRITICAL] [1664] [0] Generating component is 2
  4502. 04/25 11:54:31 [CRITICAL] [1664] [0] Status is 1727
  4503. 04/25 11:54:31 [CRITICAL] [1664] [0] Detection location is 501
  4504. 04/25 11:54:31 [CRITICAL] [1664] [0] Flags is 0
  4505. 04/25 11:54:31 [CRITICAL] [1664] [0] NumberOfParameters is 4
  4506. 04/25 11:54:31 [CRITICAL] [1664] Unicode string: ncacn_ip_tcp
  4507. 04/25 11:54:31 [CRITICAL] [1664] Unicode string: TRCH03ADC004.DOMAIN.COM
  4508. 04/25 11:54:31 [CRITICAL] [1664] Long val: 305419896
  4509. 04/25 11:54:31 [CRITICAL] [1664] Long val: 1727
  4510. 04/25 11:54:31 [CRITICAL] [1664] [1] ProcessID is 568
  4511. 04/25 11:54:31 [CRITICAL] [1664] [1] System Time is: 4/25/2019 15:54:31:490
  4512. 04/25 11:54:31 [CRITICAL] [1664] [1] Generating component is 2
  4513. 04/25 11:54:31 [CRITICAL] [1664] [1] Status is 1727
  4514. 04/25 11:54:31 [CRITICAL] [1664] [1] Detection location is 1468
  4515. 04/25 11:54:31 [CRITICAL] [1664] [1] Flags is 0
  4516. 04/25 11:54:31 [CRITICAL] [1664] [1] NumberOfParameters is 0
  4517. 04/25 11:54:31 [CRITICAL] [1664] DOMAIN: NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0xc002001c
  4518. 04/25 11:54:31 [MISC] [1664] Eventlog: 5719 (1) "DOMAIN" 0xc002001c f415fb9e ddfabda4 10bc5fbd 48513d55 ........._..U=QH
  4519. 04/25 11:54:31 [SESSION] [1664] DOMAIN: NlSetStatusClientSession: Set connection status to c000005e
  4520. 04/25 11:54:31 [SESSION] [1664] DOMAIN: NlSetStatusClientSession: Unbind from server CH03ADC004.DOMAIN.COM (TCP) 0.
  4521. 04/25 11:54:31 [SESSION] [1664] DOMAIN: NlSessionSetup: Session setup Failed
  4522. 04/25 11:54:31 [INIT] [1664] Started successfully
  4523. 04/25 11:54:31 [MISC] [1876] DsGetDcName function called: client PID=568, Dom:DOMAIN Acct:(null) Flags: FORCE DS RET_DNS
  4524. 04/25 11:54:31 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4525. 04/25 11:54:31 [MISC] [1664] DsGetDcName function called: client PID=-1, Dom:(null) Acct:(null) Flags: RET_DNS
  4526. 04/25 11:54:31 [MISC] [1664] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4527. 04/25 11:54:31 [MISC] [1664] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B6164E6BC0 )
  4528. 04/25 11:54:31 [MISC] [1664] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4529. 04/25 11:54:31 [MISC] [1664] DsGetDcName function returns 0 (client PID=-1): Dom:(null) Acct:(null) Flags: RET_DNS
  4530. 04/25 11:54:31 [MISC] [612] DsGetDcName function called: client PID=1052, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  4531. 04/25 11:54:31 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4532. 04/25 11:54:31 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B6164E6BC0 )
  4533. 04/25 11:54:31 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4534. 04/25 11:54:31 [MISC] [612] DsGetDcName function returns 0 (client PID=1052): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE RET_DNS
  4535. 04/25 11:54:31 [MAILSLOT] [1876] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  4536. 04/25 11:54:31 [MISC] [1876] NetpDcAllocateCacheEntry: new entry 0x000002B61650C240 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4537. 04/25 11:54:31 [MISC] [1876] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  4538. 04/25 11:54:31 [MISC] [1876] NetpDcDerefCacheEntry: destroying entry 0x000002B6164E6BC0
  4539. 04/25 11:54:31 [MISC] [1876] LoadBalanceDebug (Flags: FORCE DS IP NETBIOS RET_DNS ): DC=CH03ADC003, SrvCount=2, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4540. 04/25 11:54:31 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4541. 04/25 11:54:31 [MISC] [1876] DsGetDcName function returns 0 (client PID=568): Dom:DOMAIN Acct:(null) Flags: FORCE DS RET_DNS
  4542. 04/25 11:54:31 [MISC] [1876] DsGetDcName function called: client PID=300, Dom:(null) Acct:(null) Flags: DS
  4543. 04/25 11:54:31 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4544. 04/25 11:54:31 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4545. 04/25 11:54:31 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4546. 04/25 11:54:31 [MISC] [1876] DsGetDcName function returns 0 (client PID=300): Dom:(null) Acct:(null) Flags: DS
  4547. 04/25 11:54:32 [MSA] [1664] GetAccountObject: attempting to find DN for TRORAWDFS001
  4548. 04/25 11:54:32 [MISC] [612] DsGetDcName function called: client PID=568, Dom:DomainDnsZones.DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4549. 04/25 11:54:32 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4550. 04/25 11:54:32 [MAILSLOT] [612] NetpDcPingListIp: DomainDnsZones.DOMAIN.COM: Sent UDP ping to 10.6.2.13
  4551. 04/25 11:54:32 [MISC] [1876] DsGetDcName function called: client PID=300, Dom:(null) Acct:(null) Flags: DS GC RET_DNS
  4552. 04/25 11:54:32 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4553. 04/25 11:54:32 [MAILSLOT] [1876] NetpDcPingListIp: .: Sent UDP ping to 10.6.2.11
  4554. 04/25 11:54:32 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x000002B6165073A0 -> DC:TRCH03ADC003 DnsDomName:DomainDnsZones.DOMAIN.COM Flags:0x588
  4555. 04/25 11:54:32 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DomainDnsZones.DOMAIN.COM returned 0
  4556. 04/25 11:54:32 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DomainDnsZones.DOMAIN.COM DnsForestName: Flags:0xe0000588 DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4557. 04/25 11:54:32 [MISC] [612] DsGetDcName function returns 0 (client PID=568): Dom:DomainDnsZones.DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4558. 04/25 11:54:32 [MISC] [1876] NetpDcAllocateCacheEntry: new entry 0x000002B616507850 -> DC:TRCH03ADC001 DnsDomName: Flags:0x1f1fc
  4559. 04/25 11:54:32 [MISC] [1876] NetpDcGetName: NetpDcGetNameIp for . returned 0
  4560. 04/25 11:54:32 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC001. DCAddress:\\10.6.2.11 DCAddrType:0x1 DomainName: DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4561. 04/25 11:54:32 [MISC] [1876] DsGetDcName function returns 0 (client PID=300): Dom:(null) Acct:(null) Flags: DS GC RET_DNS
  4562. 04/25 11:54:32 [ERROR] [652] NlpGenerateIumBoundMachineAuthCert: Provisioning interface not responding; treating as if IUM weren't available: 1722
  4563. 04/25 11:54:32 [MISC] [652] NlpStoreKeyInDS: IUM Provisioning interface not up.
  4564. 04/25 11:54:32 [ERROR] [652] NlpStoreKeyInDS: No machine bound certificate could be created: 1722
  4565. 04/25 11:54:32 [ERROR] [652] NlProvisionMachineAuthKey: Unable to store auth key in DS: 1722
  4566. 04/25 11:54:32 [MISC] [1876] DsGetDcName function called: client PID=300, Dom: Acct:(null) Flags: IP KDC
  4567. 04/25 11:54:32 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4568. 04/25 11:54:32 [MISC] [1664] NlWksScavenger: Can be called again in 29 days (0x985e1a9c)
  4569. 04/25 11:54:32 [MAILSLOT] [1876] NetpDcPingListIp: : Sent UDP ping to 10.6.2.12
  4570. 04/25 11:54:32 [MISC] [1876] NetpDcAllocateCacheEntry: new entry 0x000002B6173A5490 -> DC:TRCH03ADC002 DnsDomName: Flags:0x1f1fc
  4571. 04/25 11:54:32 [MISC] [1876] NetpDcGetName: NetpDcGetNameIp for returned 0
  4572. 04/25 11:54:32 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC002. DCAddress:\\10.6.2.12 DCAddrType:0x1 DomainName: DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4573. 04/25 11:54:32 [MISC] [1876] DsGetDcName function returns 0 (client PID=300): Dom: Acct:(null) Flags: IP KDC
  4574. 04/25 11:54:33 [MISC] [604] DsGetDcName function called: client PID=568, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  4575. 04/25 11:54:33 [MISC] [604] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4576. 04/25 11:54:33 [MISC] [604] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4577. 04/25 11:54:33 [MISC] [604] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4578. 04/25 11:54:33 [MISC] [604] DsGetDcName function returns 0 (client PID=568): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  4579. 04/25 11:54:33 [MISC] [1876] DsGetDcName function called: client PID=568, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  4580. 04/25 11:54:33 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4581. 04/25 11:54:33 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4582. 04/25 11:54:33 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4583. 04/25 11:54:33 [MISC] [1876] DsGetDcName function returns 0 (client PID=568): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  4584. 04/25 11:54:33 [MISC] [604] DsGetDcName function called: client PID=300, Dom:DOMAIN.COM Acct:(null) Flags: DS DNS RET_DNS
  4585. 04/25 11:54:33 [MISC] [604] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4586. 04/25 11:54:33 [MISC] [604] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4587. 04/25 11:54:33 [MISC] [604] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4588. 04/25 11:54:33 [MISC] [604] DsGetDcName function returns 0 (client PID=300): Dom:DOMAIN.COM Acct:(null) Flags: DS DNS RET_DNS
  4589. 04/25 11:54:33 [MISC] [652] DsGetDcName function called: client PID=1052, Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  4590. 04/25 11:54:33 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4591. 04/25 11:54:33 [MISC] [652] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4592. 04/25 11:54:33 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4593. 04/25 11:54:33 [MISC] [652] DsGetDcName function returns 0 (client PID=1052): Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  4594. 04/25 11:54:33 [MISC] [652] DsGetDcName function called: client PID=2360, Dom:(null) Acct:(null) Flags: DS RET_DNS
  4595. 04/25 11:54:33 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4596. 04/25 11:54:33 [MISC] [652] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4597. 04/25 11:54:33 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4598. 04/25 11:54:33 [MISC] [652] DsGetDcName function returns 0 (client PID=2360): Dom:(null) Acct:(null) Flags: DS RET_DNS
  4599. 04/25 11:54:33 [MISC] [612] DsGetDcName function called: client PID=1052, Dom:DOMAIN Acct:(null) Flags: DS WRITABLE NETBIOS RET_DNS
  4600. 04/25 11:54:33 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4601. 04/25 11:54:33 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4602. 04/25 11:54:33 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4603. 04/25 11:54:33 [MISC] [612] DsGetDcName function returns 0 (client PID=1052): Dom:DOMAIN Acct:(null) Flags: DS WRITABLE NETBIOS RET_DNS
  4604. 04/25 11:54:33 [INIT] [1664] Group Policy is not defined for Netlogon
  4605. 04/25 11:54:33 [INIT] [1664] Following are the effective values after parsing
  4606. 04/25 11:54:33 [SITE] [652] DsrGetSiteName: Returning site name 'Datacenter-CHI' from local cache.
  4607. 04/25 11:54:34 [MISC] [652] DsGetDcName function called: client PID=1052, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4608. 04/25 11:54:34 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4609. 04/25 11:54:34 [MISC] [652] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B6164EC610 )
  4610. 04/25 11:54:34 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4611. 04/25 11:54:34 [MISC] [652] DsGetDcName function returns 0 (client PID=1052): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4612. 04/25 11:54:35 [MISC] [612] DsGetDcName function called: client PID=2360, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  4613. 04/25 11:54:35 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4614. 04/25 11:54:35 [MAILSLOT] [612] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  4615. 04/25 11:54:35 [MISC] [1876] DsGetDcName function called: client PID=300, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  4616. 04/25 11:54:35 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4617. 04/25 11:54:35 [MISC] [1876] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4618. 04/25 11:54:35 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4619. 04/25 11:54:35 [MISC] [1876] DsGetDcName function returns 0 (client PID=300): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  4620. 04/25 11:54:35 [MISC] [612] NetpDcAllocateCacheEntry: new entry 0x000002B616505F20 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  4621. 04/25 11:54:35 [MISC] [612] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  4622. 04/25 11:54:35 [MISC] [612] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Datacenter-CHI
  4623. 04/25 11:54:35 [MISC] [612] DsGetDcName function returns 0 (client PID=2360): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  4624. 04/25 11:54:36 [MISC] [612] DsGetDcName function called: client PID=300, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  4625. 04/25 11:54:36 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4626. 04/25 11:54:36 [MISC] [612] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4627. 04/25 11:54:36 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4628. 04/25 11:54:36 [MISC] [612] DsGetDcName function returns 0 (client PID=300): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  4629. 04/25 11:54:40 [SITE] [612] DsrGetSiteName: Returning site name 'Datacenter-CHI' from local cache.
  4630. 04/25 11:54:40 [MISC] [1876] DsGetDcName function called: client PID=968, Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF BACKGROUND
  4631. 04/25 11:54:40 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4632. 04/25 11:54:40 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4633. 04/25 11:54:40 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4634. 04/25 11:54:40 [MISC] [1876] DsGetDcName function returns 0 (client PID=968): Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF BACKGROUND
  4635. 04/25 11:54:41 [SESSION] [1876] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4636. 04/25 11:54:41 [CRITICAL] [1876] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc000005e
  4637. 04/25 11:54:41 [SESSION] [1876] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4638. 04/25 11:54:41 [CRITICAL] [1876] I_NetLogonGetAuthData failed: (null) DOMAIN (Flags 0x1): 0xc000005e
  4639. 04/25 11:54:41 [SITE] [1876] DsrGetSiteName: Returning site name 'Datacenter-CHI' from local cache.
  4640. 04/25 11:54:41 [MISC] [612] DsGetDcName function called: client PID=968, Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF BACKGROUND
  4641. 04/25 11:54:41 [MISC] [612] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4642. 04/25 11:54:41 [MISC] [612] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4643. 04/25 11:54:41 [MISC] [612] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4644. 04/25 11:54:41 [MISC] [612] DsGetDcName function returns 0 (client PID=968): Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF BACKGROUND
  4645. 04/25 11:54:43 [MISC] [1876] DsGetDcName function called: client PID=300, Dom:trociphxvcn.oraclevcn.com Acct:(null) Flags: FORCE DNS
  4646. 04/25 11:54:43 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4647. 04/25 11:54:47 [MISC] [652] DsGetDcName function called: client PID=2716, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4648. 04/25 11:54:47 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4649. 04/25 11:54:47 [MISC] [652] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B6164EC610 )
  4650. 04/25 11:54:47 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4651. 04/25 11:54:47 [MISC] [652] DsGetDcName function returns 0 (client PID=2716): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4652. 04/25 11:54:47 [MISC] [652] DsGetDcName function called: client PID=2716, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4653. 04/25 11:54:47 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4654. 04/25 11:54:47 [MISC] [652] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B6164EC610 )
  4655. 04/25 11:54:47 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4656. 04/25 11:54:47 [MISC] [652] DsGetDcName function returns 0 (client PID=2716): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4657. 04/25 11:54:47 [MISC] [652] DsGetDcName function called: client PID=2716, Dom: Acct:(null) Flags: RET_DNS
  4658. 04/25 11:54:47 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4659. 04/25 11:54:47 [MAILSLOT] [652] NetpDcPingListIp: : Sent UDP ping to 10.6.2.11
  4660. 04/25 11:54:47 [MISC] [652] NetpDcAllocateCacheEntry: new entry 0x000002B6175DC190 -> DC:TRCH03ADC001 DnsDomName: Flags:0x1f1fc
  4661. 04/25 11:54:47 [MISC] [652] NetpDcGetName: NetpDcGetNameIp for returned 0
  4662. 04/25 11:54:47 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC001. DCAddress:\\10.6.2.11 DCAddrType:0x1 DomainName: DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4663. 04/25 11:54:47 [MISC] [652] DsGetDcName function returns 0 (client PID=2716): Dom: Acct:(null) Flags: RET_DNS
  4664. 04/25 11:54:47 [MISC] [652] DsGetDcName function called: client PID=2716, Dom:(null) Acct:(null) Flags: DSP
  4665. 04/25 11:54:47 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4666. 04/25 11:54:47 [MISC] [652] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61650C240 )
  4667. 04/25 11:54:47 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4668. 04/25 11:54:47 [MISC] [652] DsGetDcName function returns 0 (client PID=2716): Dom:(null) Acct:(null) Flags: DSP
  4669. 04/25 11:54:48 [MISC] [652] DsGetDcName function called: client PID=2716, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4670. 04/25 11:54:48 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4671. 04/25 11:54:48 [MISC] [652] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B6164EC610 )
  4672. 04/25 11:54:48 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4673. 04/25 11:54:48 [MISC] [652] DsGetDcName function returns 0 (client PID=2716): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4674. 04/25 11:54:55 [CRITICAL] [1876] NetpDcGetDcNext: _ldap._tcp.Datacenter-CHI._sites.dc._msdcs.trociphxvcn.oraclevcn.com.: Cannot Query DNS. 9002 0x232a
  4675. 04/25 11:54:55 [CRITICAL] [1876] NetpDcGetNameIp: trociphxvcn.oraclevcn.com: No data returned from DnsQuery.
  4676. 04/25 11:54:55 [MISC] [1876] NetpDcGetName: NetpDcGetNameIp for trociphxvcn.oraclevcn.com returned 1355
  4677. 04/25 11:54:55 [CRITICAL] [1876] NetpDcGetName: trociphxvcn.oraclevcn.com: IP and Netbios are both done.
  4678. 04/25 11:54:55 [MISC] [1876] DsGetDcName function returns 1355 (client PID=300): Dom:trociphxvcn.oraclevcn.com Acct:(null) Flags: FORCE DNS
  4679. 04/25 11:56:01 [SESSION] [1876] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  4680. 04/25 11:56:01 [SESSION] [1876] DOMAIN: NlSessionSetup: Try Session setup
  4681. 04/25 11:56:01 [SESSION] [1876] DOMAIN: NlDiscoverDc: Start Synchronous Discovery
  4682. 04/25 11:56:01 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4683. 04/25 11:56:01 [MAILSLOT] [1876] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  4684. 04/25 11:56:01 [MISC] [1876] NetpDcAllocateCacheEntry: new entry 0x000002B616463BE0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4685. 04/25 11:56:01 [MISC] [1876] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  4686. 04/25 11:56:01 [MISC] [1876] NetpDcDerefCacheEntry: destroying entry 0x000002B61650C240
  4687. 04/25 11:56:01 [MISC] [1876] LoadBalanceDebug (Flags: FORCE DSP AVOIDSELF ): DC=CH03ADC003, SrvCount=2, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4688. 04/25 11:56:01 [PERF] [1876] NlSetServerClientSession: Connection changing (000002B6164C01C8): "CH03ADC004.DOMAIN.COM"
  4689. ClientSession: 000002B6164C3A70NlSetServerClientSession: Delete successful.
  4690. 04/25 11:56:01 [PERF] [1876] NlAllocateClientSession: New Perf Instance (000002B6164BDFC8): "CH03ADC003.DOMAIN.COM"
  4691. ClientSession: 000002B6164C3A70
  4692. 04/25 11:56:01 [SESSION] [1876] DOMAIN: NlDiscoverDc: Found DC CH03ADC003.DOMAIN.COM
  4693. 04/25 11:56:01 [SESSION] [1876] DOMAIN: NlSessionSetup: Negotiated flags with server are 0x612fffff
  4694. 04/25 11:56:01 [SESSION] [1876] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  4695. 04/25 11:56:01 [DOMAIN] [1876] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  4696. 04/25 11:56:01 [LOGON] [1876] NlSetForestTrustList: New trusted domain list:
  4697. 04/25 11:56:01 [LOGON] [1876] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  4698. 04/25 11:56:01 [LOGON] [1876] Dom Guid: <DOMAIN GUID>
  4699. 04/25 11:56:01 [LOGON] [1876] Dom Sid: <DOMAIN SID>
  4700. 04/25 11:56:01 [LOGON] [1876] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  4701. 04/25 11:56:01 [LOGON] [1876] Dom Guid: <DOMAIN GUID>
  4702. 04/25 11:56:01 [LOGON] [1876] Dom Sid: <DOMAIN SID>
  4703. 04/25 11:56:01 [SESSION] [1876] DOMAIN: NlSetStatusClientSession: Set connection status to 0
  4704. 04/25 11:56:01 [SESSION] [1876] DOMAIN: NlSessionSetup: Session setup Succeeded
  4705. 04/25 11:56:02 [SESSION] [1876] I_NetLogonGetAuthData called: (null) DOMAIN.COM (Flags 0x1)
  4706. 04/25 11:59:46 [SESSION] [1664] DOMAIN: NlTimeoutApiClientSession: Unbind from server CH03ADC003.DOMAIN.COM (TCP) 0.
  4707. 04/25 12:04:10 [MISC] [596] In control handler (Opcode: 4)
  4708. 04/25 12:05:18 [MISC] [596] In control handler (Opcode: 4)
  4709. 04/25 12:05:27 [SESSION] [620] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4710. 04/25 12:05:27 [SESSION] [620] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4711. 04/25 12:07:26 [MISC] [596] In control handler (Opcode: 4)
  4712. 04/25 12:09:32 [MISC] [620] DsGetDcName function called: client PID=300, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4713. 04/25 12:09:32 [MISC] [620] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4714. 04/25 12:09:32 [MISC] [620] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4715. 04/25 12:09:32 [MISC] [620] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4716. 04/25 12:09:32 [MISC] [620] DsGetDcName function returns 0 (client PID=300): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4717. 04/25 12:09:41 [SITE] [1876] DsrGetSiteName: Site name 'Datacenter-CHI' is old. Getting a new one from DC.
  4718. 04/25 12:09:41 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4719. 04/25 12:09:41 [MAILSLOT] [1876] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  4720. 04/25 12:09:41 [MISC] [1876] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRCH03ADC003.DOMAIN.COM
  4721. 04/25 12:09:42 [MISC] [1876] NetpDcAllocateCacheEntry: new entry 0x000002B6164B5A40 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4722. 04/25 12:09:42 [MISC] [1876] NlPingDcNameWithContext: TRCH03ADC003.DOMAIN.COM responded over IP.
  4723. 04/25 12:09:42 [PERF] [1876] NlSetServerClientSession: Not changing connection (000002B6164BDFC8): "CH03ADC003.DOMAIN.COM"
  4724. ClientSession: 000002B6164C3A70NetpDcDerefCacheEntry: destroying entry 0x000002B6164B5A40
  4725. 04/25 12:09:42 [MISC] [1876] DsGetDcName function called: client PID=968, Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF
  4726. 04/25 12:09:42 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4727. 04/25 12:09:42 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4728. 04/25 12:09:42 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4729. 04/25 12:09:42 [MISC] [1876] DsGetDcName function returns 0 (client PID=968): Dom:(null) Acct:(null) Flags: IP TIMESERV AVOIDSELF
  4730. 04/25 12:17:32 [MISC] [596] In control handler (Opcode: 4)
  4731. 04/25 12:21:10 [MISC] [1876] DsGetDcName function called: client PID=2360, Dom:(null) Acct:(null) Flags: DS IP
  4732. 04/25 12:21:10 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4733. 04/25 12:21:10 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4734. 04/25 12:21:10 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4735. 04/25 12:21:10 [MISC] [1876] DsGetDcName function returns 0 (client PID=2360): Dom:(null) Acct:(null) Flags: DS IP
  4736. 04/25 12:21:10 [MISC] [1876] DsGetDcName function called: client PID=2360, Dom:(null) Acct:(null) Flags: DS IP
  4737. 04/25 12:21:10 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4738. 04/25 12:21:10 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4739. 04/25 12:21:10 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4740. 04/25 12:21:10 [MISC] [1876] DsGetDcName function returns 0 (client PID=2360): Dom:(null) Acct:(null) Flags: DS IP
  4741. 04/25 12:21:11 [MISC] [1876] DsGetDcName function called: client PID=2360, Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  4742. 04/25 12:21:11 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4743. 04/25 12:21:11 [MISC] [1876] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4744. 04/25 12:21:11 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4745. 04/25 12:21:11 [MISC] [1876] DsGetDcName function returns 0 (client PID=2360): Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  4746. 04/25 12:24:33 [MISC] [652] DsGetDcName function called: client PID=300, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4747. 04/25 12:24:33 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4748. 04/25 12:24:33 [MISC] [652] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4749. 04/25 12:24:33 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4750. 04/25 12:24:33 [MISC] [652] DsGetDcName function returns 0 (client PID=300): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4751. 04/25 12:39:33 [MISC] [1876] DsGetDcName function called: client PID=300, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4752. 04/25 12:39:33 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4753. 04/25 12:39:33 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4754. 04/25 12:39:33 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4755. 04/25 12:39:33 [MISC] [1876] DsGetDcName function returns 0 (client PID=300): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4756. 04/25 12:51:43 [MISC] [652] DsGetDcName function called: client PID=1052, Dom:DOMAIN Acct:(null) Flags: IP KDC
  4757. 04/25 12:51:43 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4758. 04/25 12:51:43 [MISC] [652] NetpDcGetName: DOMAIN.COM. cache is too old. 3431391
  4759. 04/25 12:51:43 [MAILSLOT] [652] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  4760. 04/25 12:51:43 [MISC] [652] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRCH03ADC003.DOMAIN.COM
  4761. 04/25 12:51:43 [MISC] [652] NetpDcAllocateCacheEntry: new entry 0x000002B616428150 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4762. 04/25 12:51:43 [MISC] [652] NlPingDcNameWithContext: TRCH03ADC003.DOMAIN.COM responded over IP.
  4763. 04/25 12:51:43 [MISC] [652] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616428150 )
  4764. 04/25 12:51:43 [MISC] [652] NetpDcDerefCacheEntry: destroying entry 0x000002B6164D5C20
  4765. 04/25 12:51:43 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC003 DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN DnsForestName: Flags:0x8001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4766. 04/25 12:51:43 [MISC] [652] DsGetDcName function returns 0 (client PID=1052): Dom:DOMAIN Acct:(null) Flags: IP KDC
  4767. 04/25 12:51:43 [MISC] [652] DsGetDcName function called: client PID=1052, Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4768. 04/25 12:51:43 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4769. 04/25 12:51:43 [MISC] [652] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B616428150 )
  4770. 04/25 12:51:43 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4771. 04/25 12:51:43 [MISC] [652] DsGetDcName function returns 0 (client PID=1052): Dom:DOMAIN.COM Acct:(null) Flags: IP KDC
  4772. 04/25 12:51:44 [MISC] [652] DsGetDcName function called: client PID=1052, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4773. 04/25 12:51:44 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4774. 04/25 12:51:44 [MISC] [652] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B6164EC610 )
  4775. 04/25 12:51:44 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4776. 04/25 12:51:44 [MISC] [652] DsGetDcName function returns 0 (client PID=1052): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4777. 04/25 12:51:45 [MISC] [652] DsGetDcName function called: client PID=568, Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  4778. 04/25 12:51:45 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4779. 04/25 12:51:45 [MISC] [652] NetpDcGetName: DOMAIN.COM. cache is too old. 3343766
  4780. 04/25 12:51:45 [MAILSLOT] [652] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.13
  4781. 04/25 12:51:45 [MISC] [652] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRCH03ADC003.DOMAIN.COM
  4782. 04/25 12:51:46 [MISC] [652] NetpDcAllocateCacheEntry: new entry 0x000002B6175FA5A0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4783. 04/25 12:51:46 [MISC] [652] NlPingDcNameWithContext: TRCH03ADC003.DOMAIN.COM responded over IP.
  4784. 04/25 12:51:46 [MISC] [652] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B6175FA5A0 )
  4785. 04/25 12:51:46 [MISC] [652] NetpDcDerefCacheEntry: destroying entry 0x000002B616463BE0
  4786. 04/25 12:51:46 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4787. 04/25 12:51:46 [MISC] [652] DsGetDcName function returns 0 (client PID=568): Dom:DOMAIN Acct:(null) Flags: DS NETBIOS RET_DNS
  4788. 04/25 12:51:46 [MISC] [3776] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  4789. 04/25 12:51:46 [MISC] [3776] DOMAIN: DsrEnumerateDomainTrusts: Domain List collected from CH03ADC003.DOMAIN.COM
  4790. 04/25 12:51:46 [DOMAIN] [3776] Setting LSA NetbiosDomain: DOMAIN DnsDomain: DOMAIN.COM. DnsTree: . DomainGuid:<DOMAIN GUID>
  4791. 04/25 12:51:46 [LOGON] [3776] NlSetForestTrustList: New trusted domain list:
  4792. 04/25 12:51:46 [LOGON] [3776] 0: ROOTDOMAIN (NT 5) (Forest Tree Root) (Direct Outbound) (Direct Inbound) ( Attr: 0x20 )
  4793. 04/25 12:51:46 [LOGON] [3776] Dom Guid: <DOMAIN GUID>
  4794. 04/25 12:51:46 [LOGON] [3776] Dom Sid: <DOMAIN SID>
  4795. 04/25 12:51:46 [LOGON] [3776] 1: DOMAIN DOMAIN.COM (NT 5) (Forest: 0) (Primary Domain) (Native)
  4796. 04/25 12:51:46 [LOGON] [3776] Dom Guid: <DOMAIN GUID>
  4797. 04/25 12:51:46 [LOGON] [3776] Dom Sid: <DOMAIN SID>
  4798. 04/25 12:51:46 [MISC] [3776] DsrEnumerateDomainTrusts: returns: 0
  4799. 04/25 12:51:46 [MISC] [3776] DsGetDcName function called: client PID=1052, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4800. 04/25 12:51:46 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4801. 04/25 12:51:46 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B6175FA5A0 )
  4802. 04/25 12:51:46 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4803. 04/25 12:51:46 [MISC] [3776] DsGetDcName function returns 0 (client PID=1052): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4804. 04/25 12:51:47 [MISC] [3776] DsGetDcName function called: client PID=1052, Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  4805. 04/25 12:51:47 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4806. 04/25 12:51:47 [MISC] [3776] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B6175FA5A0 )
  4807. 04/25 12:51:47 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4808. 04/25 12:51:47 [MISC] [3776] DsGetDcName function returns 0 (client PID=1052): Dom:DOMAIN.COM Acct:(null) Flags: DS RET_DNS
  4809. 04/25 12:51:47 [SITE] [3776] DsrGetSiteName: Returning site name 'Datacenter-CHI' from local cache.
  4810. 04/25 12:51:47 [MISC] [3776] DsGetDcName function called: client PID=1052, Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4811. 04/25 12:51:47 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4812. 04/25 12:51:47 [MISC] [3776] NetpDcGetName: DOMAIN.COM cache is too old. 3435671
  4813. 04/25 12:51:47 [MAILSLOT] [3776] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.14
  4814. 04/25 12:51:47 [MISC] [3776] NlPingDcNameWithContext: Sent 1/1 ldap pings to TRCH03ADC004.DOMAIN.COM
  4815. 04/25 12:51:47 [MISC] [3776] NetpDcAllocateCacheEntry: new entry 0x000002B616463BE0 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4816. 04/25 12:51:47 [MISC] [3776] NlPingDcNameWithContext: TRCH03ADC004.DOMAIN.COM responded over IP.
  4817. 04/25 12:51:47 [MISC] [3776] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4818. 04/25 12:51:47 [MISC] [3776] NetpDcDerefCacheEntry: destroying entry 0x000002B6164EC610
  4819. 04/25 12:51:47 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4820. 04/25 12:51:47 [MISC] [3776] DsGetDcName function returns 0 (client PID=1052): Dom:DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4821. 04/25 12:51:48 [MISC] [3776] DsGetDcName function called: client PID=1052, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4822. 04/25 12:51:48 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4823. 04/25 12:51:48 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4824. 04/25 12:51:48 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4825. 04/25 12:51:48 [MISC] [3776] DsGetDcName function returns 0 (client PID=1052): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4826. 04/25 12:51:49 [MISC] [1876] DsGetDcName function called: client PID=1052, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4827. 04/25 12:51:49 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4828. 04/25 12:51:49 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4829. 04/25 12:51:49 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4830. 04/25 12:51:49 [MISC] [1876] DsGetDcName function returns 0 (client PID=1052): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4831. 04/25 12:51:50 [MISC] [612] DsrEnumerateDomainTrusts: Called, Flags = 0x1
  4832. 04/25 12:51:50 [MISC] [612] DsrEnumerateDomainTrusts: returns: 0
  4833. 04/25 12:51:54 [CRITICAL] [612] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  4834. 04/25 12:51:55 [MISC] [1876] DsGetDcName function called: client PID=300, Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  4835. 04/25 12:51:55 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4836. 04/25 12:51:55 [MISC] [1876] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B6175FA5A0 )
  4837. 04/25 12:51:55 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4838. 04/25 12:51:55 [MISC] [1876] DsGetDcName function returns 0 (client PID=300): Dom:DOMAIN.COM Acct:(null) Flags: DS IP
  4839. 04/25 12:51:59 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4840. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4841. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4842. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4843. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4844. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4845. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4846. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4847. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4848. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4849. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4850. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4851. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4852. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4853. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4854. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4855. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4856. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4857. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4858. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4859. 04/25 12:52:00 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4860. 04/25 12:52:01 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4861. 04/25 12:52:01 [SESSION] [3776] I_NetLogonGetAuthData called: (null) DOMAIN (Flags 0x1)
  4862. 04/25 12:52:04 [CRITICAL] [3776] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  4863. 04/25 12:52:17 [CRITICAL] [1876] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  4864. 04/25 12:52:32 [MISC] [1876] DsGetDcName function called: client PID=4952, Dom:DOMAIN.talcotresolution.com Acct:(null) Flags:
  4865. 04/25 12:52:32 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4866. 04/25 12:52:32 [CRITICAL] [1876] NetpDcGetNameIp: DOMAIN.talcotresolution.com: No data returned from DnsQuery.
  4867. 04/25 12:52:32 [MISC] [1876] NetpDcGetName: NetpDcGetNameIp for DOMAIN.talcotresolution.com returned 1355
  4868. 04/25 12:52:32 [CRITICAL] [1876] NetpDcGetName: DOMAIN.talcotresolution.com: IP and Netbios are both done.
  4869. 04/25 12:52:32 [MISC] [1876] DsGetDcName function returns 1355 (client PID=4952): Dom:DOMAIN.talcotresolution.com Acct:(null) Flags:
  4870. 04/25 12:52:37 [MISC] [1876] DsGetDcName function called: client PID=4348, Dom:DOMAIN.COM Acct:(null) Flags:
  4871. 04/25 12:52:37 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4872. 04/25 12:52:37 [MISC] [1876] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B6175FA5A0 )
  4873. 04/25 12:52:37 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4874. 04/25 12:52:37 [MISC] [1876] DsGetDcName function returns 0 (client PID=4348): Dom:DOMAIN.COM Acct:(null) Flags:
  4875. 04/25 12:52:41 [MISC] [1876] DsGetDcName function called: client PID=444, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4876. 04/25 12:52:41 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4877. 04/25 12:52:41 [MAILSLOT] [1876] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  4878. 04/25 12:52:41 [MISC] [1876] NetpDcAllocateCacheEntry: new entry 0x000002B61764B660 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4879. 04/25 12:52:41 [MISC] [1876] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  4880. 04/25 12:52:41 [MISC] [1876] NetpDcDerefCacheEntry: destroying entry 0x000002B6175FA5A0
  4881. 04/25 12:52:41 [MISC] [1876] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=CH03ADC003, SrvCount=2, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4882. 04/25 12:52:41 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4883. 04/25 12:52:41 [MISC] [1876] DsGetDcName function returns 0 (client PID=444): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4884. 04/25 12:52:49 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:(null) Acct:(null) Flags: FORCE DS
  4885. 04/25 12:52:49 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4886. 04/25 12:52:49 [MAILSLOT] [3776] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.6.2.14
  4887. 04/25 12:52:50 [MISC] [3776] NetpDcAllocateCacheEntry: new entry 0x000002B61764A4C0 -> DC:TRCH03ADC004 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4888. 04/25 12:52:50 [MISC] [3776] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  4889. 04/25 12:52:50 [MISC] [3776] NetpDcDerefCacheEntry: destroying entry 0x000002B61764B660
  4890. 04/25 12:52:50 [MISC] [3776] LoadBalanceDebug (Flags: FORCE DS ): DC=CH03ADC004, SrvCount=2, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4891. 04/25 12:52:50 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4892. 04/25 12:52:50 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:(null) Acct:(null) Flags: FORCE DS
  4893. 04/25 12:52:50 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4894. 04/25 12:52:50 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4895. 04/25 12:52:50 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61764A4C0 )
  4896. 04/25 12:52:50 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4897. 04/25 12:52:50 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4898. 04/25 12:52:50 [MISC] [1876] DsGetDcName function called: client PID=4980, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4899. 04/25 12:52:50 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4900. 04/25 12:52:50 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61764A4C0 )
  4901. 04/25 12:52:50 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4902. 04/25 12:52:50 [MISC] [1876] DsGetDcName function returns 0 (client PID=4980): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4903. 04/25 12:52:50 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4904. 04/25 12:52:50 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4905. 04/25 12:52:50 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4906. 04/25 12:52:50 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4907. 04/25 12:52:50 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:(null) Acct:(null) Flags: LDAPONLY RET_DNS
  4908. 04/25 12:52:51 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:DOMAIN Acct:(null) Flags: LDAPONLY RET_DNS
  4909. 04/25 12:52:51 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4910. 04/25 12:52:51 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4911. 04/25 12:52:51 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4912. 04/25 12:52:51 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:DOMAIN Acct:(null) Flags: LDAPONLY RET_DNS
  4913. 04/25 12:52:53 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4914. 04/25 12:52:53 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4915. 04/25 12:52:53 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61764A4C0 )
  4916. 04/25 12:52:53 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4917. 04/25 12:52:53 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4918. 04/25 12:52:53 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4919. 04/25 12:52:53 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4920. 04/25 12:52:53 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61764A4C0 )
  4921. 04/25 12:52:53 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4922. 04/25 12:52:53 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4923. 04/25 12:52:53 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:DOMAIN Acct:(null) Flags: LDAPONLY RET_DNS
  4924. 04/25 12:52:53 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4925. 04/25 12:52:53 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4926. 04/25 12:52:53 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4927. 04/25 12:52:53 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:DOMAIN Acct:(null) Flags: LDAPONLY RET_DNS
  4928. 04/25 12:52:53 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:DOMAIN Acct:(null) Flags: LDAPONLY RET_DNS
  4929. 04/25 12:52:53 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4930. 04/25 12:52:53 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4931. 04/25 12:52:53 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4932. 04/25 12:52:53 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:DOMAIN Acct:(null) Flags: LDAPONLY RET_DNS
  4933. 04/25 12:52:54 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4934. 04/25 12:52:54 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4935. 04/25 12:52:54 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61764A4C0 )
  4936. 04/25 12:52:54 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4937. 04/25 12:52:54 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4938. 04/25 12:52:54 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4939. 04/25 12:52:54 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4940. 04/25 12:52:54 [MISC] [3776] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61764A4C0 )
  4941. 04/25 12:52:54 [MISC] [3776] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4942. 04/25 12:52:54 [MISC] [3776] DsGetDcName function returns 0 (client PID=4980): Dom:DOMAIN Acct:(null) Flags: DS RET_DNS
  4943. 04/25 12:52:54 [MISC] [3776] DsGetDcName function called: client PID=4980, Dom:TRCH03ADC004.DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4944. 04/25 12:52:54 [MISC] [3776] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4945. 04/25 12:52:54 [CRITICAL] [3776] NetpDcGetNameIp: TRCH03ADC004.DOMAIN.COM: No data returned from DnsQuery.
  4946. 04/25 12:52:54 [MISC] [3776] NetpDcGetName: NetpDcGetNameIp for TRCH03ADC004.DOMAIN.COM returned 1355
  4947. 04/25 12:52:54 [CRITICAL] [3776] NetpDcGetName: TRCH03ADC004.DOMAIN.COM: IP and Netbios are both done.
  4948. 04/25 12:52:54 [MISC] [3776] DsGetDcName function returns 1355 (client PID=4980): Dom:TRCH03ADC004.DOMAIN.COM Acct:(null) Flags: LDAPONLY RET_DNS
  4949. 04/25 12:52:54 [SITE] [3776] DsrGetSiteName: Returning site name 'Datacenter-CHI' from local cache.
  4950. 04/25 12:53:50 [CRITICAL] [1876] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  4951. 04/25 12:54:33 [MISC] [652] DsGetDcName function called: client PID=300, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4952. 04/25 12:54:33 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4953. 04/25 12:54:33 [MISC] [652] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61764A4C0 )
  4954. 04/25 12:54:33 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4955. 04/25 12:54:33 [MISC] [652] DsGetDcName function returns 0 (client PID=300): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4956. 04/25 12:54:36 [MISC] [652] DsGetDcName function called: client PID=2360, Dom:(null) Acct:(null) Flags: FORCE DS PDC
  4957. 04/25 12:54:36 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4958. 04/25 12:54:36 [MAILSLOT] [652] NetpDcPingListIp: DOMAIN.COM.: Sent UDP ping to 10.1.2.13
  4959. 04/25 12:54:36 [MISC] [652] NetpDcAllocateCacheEntry: new entry 0x000002B617649EE0 -> DC:11ADC003 DnsDomName:DOMAIN.COM Flags:0x1f37d
  4960. 04/25 12:54:36 [MISC] [652] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM. returned 0
  4961. 04/25 12:54:36 [MISC] [652] NetpDcDerefCacheEntry: destroying entry 0x000002B616505F20
  4962. 04/25 12:54:36 [MISC] [652] DsGetDcName: results as follows: DCName:\\11ADC003.DOMAIN.COM DCAddress:\\10.1.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f37d DcSiteName:Datacenter-ASH ClientSiteName:Datacenter-CHI
  4963. 04/25 12:54:36 [MISC] [652] DsGetDcName function returns 0 (client PID=2360): Dom:(null) Acct:(null) Flags: FORCE DS PDC
  4964. 04/25 12:54:46 [SESSION] [1664] DOMAIN: NlTimeoutApiClientSession: Unbind from server CH03ADC003.DOMAIN.COM (TCP) 0.
  4965. 04/25 13:01:19 [MISC] [1876] DsGetDcName function called: client PID=5056, Dom:DOMAIN.COM Acct:(null) Flags:
  4966. 04/25 13:01:19 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4967. 04/25 13:01:19 [MISC] [1876] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B61764A4C0 )
  4968. 04/25 13:01:19 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4969. 04/25 13:01:19 [MISC] [1876] DsGetDcName function returns 0 (client PID=5056): Dom:DOMAIN.COM Acct:(null) Flags:
  4970. 04/25 13:01:23 [MISC] [652] DsGetDcName function called: client PID=3404, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4971. 04/25 13:01:23 [MISC] [652] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4972. 04/25 13:01:23 [MAILSLOT] [652] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  4973. 04/25 13:01:23 [MISC] [652] NetpDcAllocateCacheEntry: new entry 0x000002B61764A7B0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  4974. 04/25 13:01:23 [MISC] [652] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  4975. 04/25 13:01:23 [MISC] [652] NetpDcDerefCacheEntry: destroying entry 0x000002B61764A4C0
  4976. 04/25 13:01:23 [MISC] [652] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=CH03ADC003, SrvCount=2, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  4977. 04/25 13:01:23 [MISC] [652] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4978. 04/25 13:01:23 [MISC] [652] DsGetDcName function returns 0 (client PID=3404): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  4979. 04/25 13:01:48 [SESSION] [652] NETLOGON_CONTROL_TC_QUERY function received.
  4980. 04/25 13:02:39 [CRITICAL] [1876] Rejecting an unauthorized RPC call from ncalrpc:TRORAWDFS001.
  4981. 04/25 13:02:45 [MISC] [1876] DsGetDcName function called: client PID=1052, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4982. 04/25 13:02:45 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4983. 04/25 13:02:45 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4984. 04/25 13:02:45 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4985. 04/25 13:02:45 [MISC] [1876] DsGetDcName function returns 0 (client PID=1052): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4986. 04/25 13:02:45 [MISC] [1876] DsGetDcName function called: client PID=1052, Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4987. 04/25 13:02:45 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4988. 04/25 13:02:45 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B616463BE0 )
  4989. 04/25 13:02:45 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC004.DOMAIN.COM DCAddress:\\10.6.2.14 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4990. 04/25 13:02:45 [MISC] [1876] DsGetDcName function returns 0 (client PID=1052): Dom:(null) Acct:(null) Flags: LDAPONLY BACKGROUND RET_DNS
  4991. 04/25 13:09:34 [MISC] [1876] DsGetDcName function called: client PID=300, Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4992. 04/25 13:09:34 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4993. 04/25 13:09:34 [MISC] [1876] NetpDcGetName: DOMAIN.COM. using cached information ( NlDcCacheEntry = 0x000002B61764A7B0 )
  4994. 04/25 13:09:34 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  4995. 04/25 13:09:34 [MISC] [1876] DsGetDcName function returns 0 (client PID=300): Dom:(null) Acct:(null) Flags: DS BACKGROUND
  4996. 04/25 13:10:10 [MISC] [1876] DsGetDcName function called: client PID=3316, Dom:DOMAIN.COM Acct:(null) Flags:
  4997. 04/25 13:10:10 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  4998. 04/25 13:10:10 [MISC] [1876] NetpDcGetName: DOMAIN.COM using cached information ( NlDcCacheEntry = 0x000002B61764A7B0 )
  4999. 04/25 13:10:10 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  5000. 04/25 13:10:10 [MISC] [1876] DsGetDcName function returns 0 (client PID=3316): Dom:DOMAIN.COM Acct:(null) Flags:
  5001. 04/25 13:10:15 [MISC] [1876] DsGetDcName function called: client PID=3884, Dom:DOMAIN.COM Acct:(null) Flags: FORCE
  5002. 04/25 13:10:15 [MISC] [1876] NetpDcInitializeContext: DSGETDC_VALID_FLAGS is c0fffff1
  5003. 04/25 13:10:15 [MAILSLOT] [1876] NetpDcPingListIp: DOMAIN.COM: Sent UDP ping to 10.6.2.13
  5004. 04/25 13:10:15 [MISC] [1876] NetpDcAllocateCacheEntry: new entry 0x000002B617649BF0 -> DC:TRCH03ADC003 DnsDomName:DOMAIN.COM Flags:0x1f1fc
  5005. 04/25 13:10:15 [MISC] [1876] NetpDcGetName: NetpDcGetNameIp for DOMAIN.COM returned 0
  5006. 04/25 13:10:15 [MISC] [1876] NetpDcDerefCacheEntry: destroying entry 0x000002B61764A7B0
  5007. 04/25 13:10:15 [MISC] [1876] LoadBalanceDebug (Flags: FORCE DNS RET_DNS ): DC=CH03ADC003, SrvCount=2, FailedAQueryCount=0, DcsPinged=1, LoopIndex=0
  5008. 04/25 13:10:15 [MISC] [1876] DsGetDcName: results as follows: DCName:CH03ADC003.DOMAIN.COM DCAddress:\\10.6.2.13 DCAddrType:0x1 DomainName:DOMAIN.COM DnsForestName: Flags:0xe001f1fc DcSiteName:Datacenter-CHI ClientSiteName:Datacenter-CHI
  5009. 04/25 13:10:15 [MISC] [1876] DsGetDcName function returns 0 (client PID=3884): Dom:DOMAIN.COM Acct:(null) Flags: FORCE
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!