API tools faq
paste
Guest User

log.consulting5 (Windows 8.1)

a guest
Feb 1st, 2016
44
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 64.58 KB | None | 0 0
raw download clone embed print report
  1. [2016/01/07 12:29:52.634745, 3] ../source3/lib/access.c:338(allow_access)
  2. Allowed connection from 192.1.1.38 (192.1.1.38)
  3. [2016/01/07 12:29:52.634813, 3] ../source3/smbd/service.c:612(make_connection_snum)
  4. Connect path is '/mnt/aaa' for service [aaa]
  5. [2016/01/07 12:29:52.634853, 3] ../source3/smbd/vfs.c:113(vfs_init_default)
  6. Initialising default vfs hooks
  7. [2016/01/07 12:29:52.634872, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
  8. Initialising custom vfs hooks from [/[Default VFS]/]
  9. [2016/01/07 12:29:52.634966, 2] ../source3/smbd/service.c:856(make_connection_snum)
  10. consulting5 (ipv4:192.1.1.38:50422) connect to service aaa initially as user win81user (uid=1002, gid=1002) (pid 1445)
  11. [2016/01/07 12:29:52.636252, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  12. check_reduced_name [.] [/mnt/aaa]
  13. [2016/01/07 12:29:52.636282, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  14. check_reduced_name: . reduced to /mnt/aaa
  15. [2016/01/07 12:29:52.636344, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  16. unix_mode(.) returning 0744
  17. [2016/01/07 12:29:52.652030, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  18. check_reduced_name [.] [/mnt/aaa]
  19. [2016/01/07 12:29:52.652096, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  20. check_reduced_name: . reduced to /mnt/aaa
  21. [2016/01/07 12:29:52.653283, 3] ../source3/smbd/smb2_notify.c:249(smbd_smb2_notify_send)
  22. smbd_smb2_notify_send: notify change called on ., filter = FILE_NAME|DIR_NAME|ATTRIBUTES|LAST_WRITE, recursive = 0
  23. [2016/01/07 12:29:52.654214, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  24. check_reduced_name [desktop.ini] [/mnt/aaa]
  25. [2016/01/07 12:29:52.654283, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  26. check_reduced_name: desktop.ini reduced to /mnt/aaa/desktop.ini
  27. [2016/01/07 12:29:52.654355, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  28. unix_mode(desktop.ini) returning 0744
  29. [2016/01/07 12:29:52.655041, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  30. check_reduced_name [.] [/mnt/aaa]
  31. [2016/01/07 12:29:52.655106, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  32. check_reduced_name: . reduced to /mnt/aaa
  33. [2016/01/07 12:29:52.655176, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  34. unix_mode(.) returning 0744
  35. [2016/01/07 12:29:52.655691, 3] ../source3/smbd/dir.c:675(dptr_create)
  36. creating new dirptr 0 for path ., expect_close = 0
  37. [2016/01/07 12:29:52.655797, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  38. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  39. [2016/01/07 12:29:52.655868, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  40. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  41. [2016/01/07 12:29:52.655928, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  42. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  43. [2016/01/07 12:29:52.655989, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  44. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  45. [2016/01/07 12:29:52.656031, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  46. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  47. [2016/01/07 12:29:52.656070, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  48. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  49. [2016/01/07 12:29:52.656113, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  50. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  51. [2016/01/07 12:29:52.676816, 3] ../source3/smbd/trans2.c:3092(smbd_do_qfsinfo)
  52. smbd_do_qfsinfo: level = 1001
  53. [2016/01/07 12:29:52.676993, 3] ../source3/smbd/trans2.c:3092(smbd_do_qfsinfo)
  54. smbd_do_qfsinfo: level = 1005
  55. [2016/01/07 12:29:54.832750, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  56. check_reduced_name [notepad81.exe] [/mnt/aaa]
  57. [2016/01/07 12:29:54.832849, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  58. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  59. [2016/01/07 12:29:54.833012, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  60. unix_mode(notepad81.exe) returning 0744
  61. [2016/01/07 12:29:54.834115, 2] ../source3/smbd/open.c:972(open_file)
  62. win81user opened file notepad81.exe read=No write=No (numopen=3)
  63. [2016/01/07 12:29:54.835788, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  64. smbd_do_query_security_desc: sd_size = 20.
  65. [2016/01/07 12:29:54.836646, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  66. smbd_do_query_security_desc: sd_size = 20.
  67. [2016/01/07 12:29:54.837621, 2] ../source3/smbd/close.c:780(close_normal_file)
  68. win81user closed file notepad81.exe (numopen=2) NT_STATUS_OK
  69. [2016/01/07 12:29:54.839303, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  70. check_reduced_name [notepad81.exe] [/mnt/aaa]
  71. [2016/01/07 12:29:54.839400, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  72. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  73. [2016/01/07 12:29:54.841494, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  74. check_reduced_name [notepad81.exe] [/mnt/aaa]
  75. [2016/01/07 12:29:54.841593, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  76. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  77. [2016/01/07 12:29:54.841701, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  78. unix_mode(notepad81.exe) returning 0744
  79. [2016/01/07 12:29:54.842025, 2] ../source3/smbd/open.c:972(open_file)
  80. win81user opened file notepad81.exe read=Yes write=No (numopen=3)
  81. [2016/01/07 12:29:54.843799, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  82. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=32768 offset=0 read=32768
  83. [2016/01/07 12:29:54.844953, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  84. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=29184 offset=188416 read=29184
  85. [2016/01/07 12:29:54.846624, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  86. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=32768 offset=102400 read=32768
  87. [2016/01/07 12:29:54.848557, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  88. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=32768 offset=69632 read=32768
  89. [2016/01/07 12:29:54.852952, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  90. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=32768 offset=36864 read=32768
  91. [2016/01/07 12:29:54.855820, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  92. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=4096 offset=32768 read=4096
  93. [2016/01/07 12:29:54.863678, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  94. smbd_do_query_security_desc: sd_size = 20.
  95. [2016/01/07 12:29:54.866252, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  96. Got NTLMSSP neg_flags=0xe2088297
  97. [2016/01/07 12:29:54.867361, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  98. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  99. [2016/01/07 12:29:54.867460, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  100. lp_load_ex: refreshing parameters
  101. [2016/01/07 12:29:54.867542, 3] ../source3/param/loadparm.c:750(init_globals)
  102. Initialising global parameters
  103. [2016/01/07 12:29:54.867659, 3] ../lib/util/params.c:550(pm_process)
  104. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  105. [2016/01/07 12:29:54.867717, 3] ../source3/param/loadparm.c:3564(do_section)
  106. Processing section "[global]"
  107. [2016/01/07 12:29:54.867953, 2] ../source3/param/loadparm.c:3581(do_section)
  108. Processing section "[printers]"
  109. [2016/01/07 12:29:54.868061, 2] ../source3/param/loadparm.c:3581(do_section)
  110. Processing section "[print$]"
  111. [2016/01/07 12:29:54.868143, 2] ../source3/param/loadparm.c:3581(do_section)
  112. Processing section "[aaa]"
  113. [2016/01/07 12:29:54.868232, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  114. adding IPC service
  115. [2016/01/07 12:29:54.868289, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  116. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  117. [2016/01/07 12:29:54.868331, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  118. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  119. [2016/01/07 12:29:54.868385, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  120. check_ntlm_password: guest authentication for user [] succeeded
  121. [2016/01/07 12:29:54.868456, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  122. NTLMSSP Sign/Seal - Initialising with flags:
  123. [2016/01/07 12:29:54.868493, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  124. Got NTLMSSP neg_flags=0xe2088215
  125. [2016/01/07 12:29:54.869700, 3] ../source3/lib/access.c:338(allow_access)
  126. Allowed connection from 192.1.1.38 (192.1.1.38)
  127. [2016/01/07 12:29:54.869805, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  128. guest user (from session setup) not permitted to access this share (aaa)
  129. [2016/01/07 12:29:54.869850, 1] ../source3/smbd/service.c:550(make_connection_snum)
  130. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  131. [2016/01/07 12:29:54.877805, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  132. Got NTLMSSP neg_flags=0xe2088297
  133. [2016/01/07 12:29:54.878535, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  134. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  135. [2016/01/07 12:29:54.878600, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  136. lp_load_ex: refreshing parameters
  137. [2016/01/07 12:29:54.878667, 3] ../source3/param/loadparm.c:750(init_globals)
  138. Initialising global parameters
  139. [2016/01/07 12:29:54.878746, 3] ../lib/util/params.c:550(pm_process)
  140. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  141. [2016/01/07 12:29:54.878784, 3] ../source3/param/loadparm.c:3564(do_section)
  142. Processing section "[global]"
  143. [2016/01/07 12:29:54.878941, 2] ../source3/param/loadparm.c:3581(do_section)
  144. Processing section "[printers]"
  145. [2016/01/07 12:29:54.879013, 2] ../source3/param/loadparm.c:3581(do_section)
  146. Processing section "[print$]"
  147. [2016/01/07 12:29:54.879067, 2] ../source3/param/loadparm.c:3581(do_section)
  148. Processing section "[aaa]"
  149. [2016/01/07 12:29:54.879128, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  150. adding IPC service
  151. [2016/01/07 12:29:54.879165, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  152. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  153. [2016/01/07 12:29:54.879193, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  154. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  155. [2016/01/07 12:29:54.879224, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  156. check_ntlm_password: guest authentication for user [] succeeded
  157. [2016/01/07 12:29:54.879260, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  158. NTLMSSP Sign/Seal - Initialising with flags:
  159. [2016/01/07 12:29:54.879284, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  160. Got NTLMSSP neg_flags=0xe2088215
  161. [2016/01/07 12:29:54.879512, 3] ../source3/smbd/dir.c:675(dptr_create)
  162. creating new dirptr 0 for path ., expect_close = 0
  163. [2016/01/07 12:29:54.879610, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  164. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  165. [2016/01/07 12:29:54.879661, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  166. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  167. [2016/01/07 12:29:54.879721, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  168. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  169. [2016/01/07 12:29:54.879771, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  170. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  171. [2016/01/07 12:29:54.879811, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  172. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  173. [2016/01/07 12:29:54.879848, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  174. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  175. [2016/01/07 12:29:54.879885, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  176. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  177. [2016/01/07 12:29:54.880268, 3] ../source3/lib/access.c:338(allow_access)
  178. Allowed connection from 192.1.1.38 (192.1.1.38)
  179. [2016/01/07 12:29:54.880344, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  180. guest user (from session setup) not permitted to access this share (aaa)
  181. [2016/01/07 12:29:54.880375, 1] ../source3/smbd/service.c:550(make_connection_snum)
  182. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  183. [2016/01/07 12:29:54.880899, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  184. check_reduced_name [notepad81.exe] [/mnt/aaa]
  185. [2016/01/07 12:29:54.880925, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  186. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  187. [2016/01/07 12:29:54.880953, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  188. unix_mode(notepad81.exe) returning 0744
  189. [2016/01/07 12:29:54.881034, 2] ../source3/smbd/open.c:972(open_file)
  190. win81user opened file notepad81.exe read=Yes write=No (numopen=4)
  191. [2016/01/07 12:29:54.881153, 3] ../source3/smbd/oplock.c:275(initial_break_processing)
  192. initial_break_processing: called for fc00:2e0003:0/2659909679
  193. Current oplocks_open (exclusive = 1, levelII = 0)
  194. [2016/01/07 12:29:54.883679, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  195. check_reduced_name [notepad81.exe] [/mnt/aaa]
  196. [2016/01/07 12:29:54.883701, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  197. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  198. [2016/01/07 12:29:54.883727, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  199. unix_mode(notepad81.exe) returning 0744
  200. [2016/01/07 12:29:54.883810, 2] ../source3/smbd/open.c:972(open_file)
  201. win81user opened file notepad81.exe read=Yes write=No (numopen=4)
  202. [2016/01/07 12:29:54.884028, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  203. Got NTLMSSP neg_flags=0xe2088297
  204. [2016/01/07 12:29:54.884492, 2] ../source3/smbd/close.c:780(close_normal_file)
  205. win81user closed file notepad81.exe (numopen=3) NT_STATUS_OK
  206. [2016/01/07 12:29:54.884551, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  207. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  208. [2016/01/07 12:29:54.884570, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  209. lp_load_ex: refreshing parameters
  210. [2016/01/07 12:29:54.884590, 3] ../source3/param/loadparm.c:750(init_globals)
  211. Initialising global parameters
  212. [2016/01/07 12:29:54.884618, 3] ../lib/util/params.c:550(pm_process)
  213. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  214. [2016/01/07 12:29:54.884633, 3] ../source3/param/loadparm.c:3564(do_section)
  215. Processing section "[global]"
  216. [2016/01/07 12:29:54.884698, 2] ../source3/param/loadparm.c:3581(do_section)
  217. Processing section "[printers]"
  218. [2016/01/07 12:29:54.884727, 2] ../source3/param/loadparm.c:3581(do_section)
  219. Processing section "[print$]"
  220. [2016/01/07 12:29:54.884747, 2] ../source3/param/loadparm.c:3581(do_section)
  221. Processing section "[aaa]"
  222. [2016/01/07 12:29:54.884770, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  223. adding IPC service
  224. [2016/01/07 12:29:54.884785, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  225. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  226. [2016/01/07 12:29:54.884796, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  227. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  228. [2016/01/07 12:29:54.884808, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  229. check_ntlm_password: guest authentication for user [] succeeded
  230. [2016/01/07 12:29:54.884822, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  231. NTLMSSP Sign/Seal - Initialising with flags:
  232. [2016/01/07 12:29:54.884831, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  233. Got NTLMSSP neg_flags=0xe2088215
  234. [2016/01/07 12:29:54.885305, 3] ../source3/lib/access.c:338(allow_access)
  235. Allowed connection from 192.1.1.38 (192.1.1.38)
  236. [2016/01/07 12:29:54.885331, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  237. guest user (from session setup) not permitted to access this share (aaa)
  238. [2016/01/07 12:29:54.885342, 1] ../source3/smbd/service.c:550(make_connection_snum)
  239. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  240. [2016/01/07 12:29:54.888009, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  241. check_reduced_name [notepad81.exe.Config] [/mnt/aaa]
  242. [2016/01/07 12:29:54.888032, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  243. check_reduced_name: notepad81.exe.Config reduced to /mnt/aaa/notepad81.exe.Config
  244. [2016/01/07 12:29:54.888059, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  245. unix_mode(notepad81.exe.Config) returning 0744
  246. [2016/01/07 12:29:54.889259, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  247. check_reduced_name [en-GB] [/mnt/aaa]
  248. [2016/01/07 12:29:54.889286, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  249. check_reduced_name: en-GB reduced to /mnt/aaa/en-GB
  250. [2016/01/07 12:29:54.889313, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  251. unix_mode(en-GB) returning 0744
  252. [2016/01/07 12:29:54.890007, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  253. check_reduced_name [en] [/mnt/aaa]
  254. [2016/01/07 12:29:54.890028, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  255. check_reduced_name: en reduced to /mnt/aaa/en
  256. [2016/01/07 12:29:54.890052, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  257. unix_mode(en) returning 0744
  258. [2016/01/07 12:29:54.890727, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  259. check_reduced_name [en-US] [/mnt/aaa]
  260. [2016/01/07 12:29:54.890747, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  261. check_reduced_name: en-US reduced to /mnt/aaa/en-US
  262. [2016/01/07 12:29:54.890770, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  263. unix_mode(en-US) returning 0744
  264. [2016/01/07 12:29:54.894154, 3] ../source3/smbd/dir.c:675(dptr_create)
  265. creating new dirptr 0 for path ., expect_close = 0
  266. [2016/01/07 12:29:54.894221, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  267. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  268. [2016/01/07 12:29:54.894252, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  269. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  270. [2016/01/07 12:29:54.894288, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  271. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  272. [2016/01/07 12:29:54.894317, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  273. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  274. [2016/01/07 12:29:54.894342, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  275. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  276. [2016/01/07 12:29:54.894364, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  277. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  278. [2016/01/07 12:29:54.894386, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  279. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  280. [2016/01/07 12:29:54.895886, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  281. check_reduced_name [notepad81.exe] [/mnt/aaa]
  282. [2016/01/07 12:29:54.895925, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  283. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  284. [2016/01/07 12:29:54.895968, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  285. unix_mode(notepad81.exe) returning 0744
  286. [2016/01/07 12:29:54.896093, 2] ../source3/smbd/open.c:972(open_file)
  287. win81user opened file notepad81.exe read=Yes write=No (numopen=4)
  288. [2016/01/07 12:29:54.897019, 2] ../source3/smbd/close.c:780(close_normal_file)
  289. win81user closed file notepad81.exe (numopen=3) NT_STATUS_OK
  290. [2016/01/07 12:29:54.900328, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  291. check_reduced_name [notepad81.exe] [/mnt/aaa]
  292. [2016/01/07 12:29:54.900368, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  293. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  294. [2016/01/07 12:29:54.900411, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  295. unix_mode(notepad81.exe) returning 0744
  296. [2016/01/07 12:29:54.900537, 2] ../source3/smbd/open.c:972(open_file)
  297. win81user opened file notepad81.exe read=Yes write=No (numopen=4)
  298. [2016/01/07 12:29:54.901419, 2] ../source3/smbd/close.c:780(close_normal_file)
  299. win81user closed file notepad81.exe (numopen=3) NT_STATUS_OK
  300. [2016/01/07 12:29:54.902969, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  301. check_reduced_name [notepad81.exe] [/mnt/aaa]
  302. [2016/01/07 12:29:54.903008, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  303. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  304. [2016/01/07 12:29:54.903051, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  305. unix_mode(notepad81.exe) returning 0744
  306. [2016/01/07 12:29:54.903178, 2] ../source3/smbd/open.c:972(open_file)
  307. win81user opened file notepad81.exe read=Yes write=No (numopen=4)
  308. [2016/01/07 12:29:54.904169, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  309. smbd_smb2_read: fnum 3040483326, file notepad81.exe, length=32768 offset=0 read=32768
  310. [2016/01/07 12:29:54.905145, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  311. check_reduced_name [notepad81.exe] [/mnt/aaa]
  312. [2016/01/07 12:29:54.905224, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  313. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  314. [2016/01/07 12:29:54.905310, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  315. unix_mode(notepad81.exe) returning 0744
  316. [2016/01/07 12:29:54.905566, 2] ../source3/smbd/open.c:972(open_file)
  317. win81user opened file notepad81.exe read=Yes write=No (numopen=5)
  318. [2016/01/07 12:29:54.908623, 2] ../source3/smbd/close.c:780(close_normal_file)
  319. win81user closed file notepad81.exe (numopen=4) NT_STATUS_OK
  320. [2016/01/07 12:29:54.909349, 2] ../source3/smbd/close.c:780(close_normal_file)
  321. win81user closed file notepad81.exe (numopen=3) NT_STATUS_OK
  322. [2016/01/07 12:29:54.910537, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  323. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=5632 offset=96256 read=5632
  324. [2016/01/07 12:29:54.911949, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  325. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=7680 offset=103936 read=7680
  326. [2016/01/07 12:29:54.917034, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  327. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=32768 offset=21504 read=32768
  328. [2016/01/07 12:29:54.918082, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  329. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=20480 offset=1024 read=20480
  330. [2016/01/07 12:29:54.918841, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  331. smbd_smb2_read: fnum 773714305, file notepad81.exe, length=32768 offset=58368 read=32768
  332. [2016/01/07 12:29:54.936762, 2] ../source3/smbd/close.c:780(close_normal_file)
  333. win81user closed file notepad81.exe (numopen=2) NT_STATUS_OK
  334. [2016/01/07 12:29:56.040361, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  335. check_reduced_name [notepad81.exe] [/mnt/aaa]
  336. [2016/01/07 12:29:56.040460, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  337. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  338. [2016/01/07 12:29:56.040568, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  339. unix_mode(notepad81.exe) returning 0744
  340. [2016/01/07 12:29:56.040947, 2] ../source3/smbd/open.c:972(open_file)
  341. win81user opened file notepad81.exe read=No write=No (numopen=3)
  342. [2016/01/07 12:29:56.042396, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  343. smbd_do_query_security_desc: sd_size = 20.
  344. [2016/01/07 12:29:56.042981, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  345. smbd_do_query_security_desc: sd_size = 20.
  346. [2016/01/07 12:29:56.043645, 2] ../source3/smbd/close.c:780(close_normal_file)
  347. win81user closed file notepad81.exe (numopen=2) NT_STATUS_OK
  348. [2016/01/07 12:29:56.045197, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  349. check_reduced_name [notepad81.exe] [/mnt/aaa]
  350. [2016/01/07 12:29:56.045254, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  351. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  352. [2016/01/07 12:29:56.047196, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  353. check_reduced_name [notepad81.exe] [/mnt/aaa]
  354. [2016/01/07 12:29:56.047251, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  355. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  356. [2016/01/07 12:29:56.047313, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  357. unix_mode(notepad81.exe) returning 0744
  358. [2016/01/07 12:29:56.047502, 2] ../source3/smbd/open.c:972(open_file)
  359. win81user opened file notepad81.exe read=Yes write=No (numopen=3)
  360. [2016/01/07 12:29:56.048913, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  361. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=32768 offset=0 read=32768
  362. [2016/01/07 12:29:56.049895, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  363. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=29184 offset=188416 read=29184
  364. [2016/01/07 12:29:56.051360, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  365. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=32768 offset=102400 read=32768
  366. [2016/01/07 12:29:56.052626, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  367. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=32768 offset=69632 read=32768
  368. [2016/01/07 12:29:56.056571, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  369. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=32768 offset=36864 read=32768
  370. [2016/01/07 12:29:56.059127, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  371. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=4096 offset=32768 read=4096
  372. [2016/01/07 12:29:56.066117, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  373. smbd_do_query_security_desc: sd_size = 20.
  374. [2016/01/07 12:29:56.068525, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  375. Got NTLMSSP neg_flags=0xe2088297
  376. [2016/01/07 12:29:56.069634, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  377. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  378. [2016/01/07 12:29:56.069735, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  379. lp_load_ex: refreshing parameters
  380. [2016/01/07 12:29:56.069817, 3] ../source3/param/loadparm.c:750(init_globals)
  381. Initialising global parameters
  382. [2016/01/07 12:29:56.069933, 3] ../lib/util/params.c:550(pm_process)
  383. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  384. [2016/01/07 12:29:56.069990, 3] ../source3/param/loadparm.c:3564(do_section)
  385. Processing section "[global]"
  386. [2016/01/07 12:29:56.070226, 2] ../source3/param/loadparm.c:3581(do_section)
  387. Processing section "[printers]"
  388. [2016/01/07 12:29:56.070335, 2] ../source3/param/loadparm.c:3581(do_section)
  389. Processing section "[print$]"
  390. [2016/01/07 12:29:56.070415, 2] ../source3/param/loadparm.c:3581(do_section)
  391. Processing section "[aaa]"
  392. [2016/01/07 12:29:56.070505, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  393. adding IPC service
  394. [2016/01/07 12:29:56.070561, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  395. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  396. [2016/01/07 12:29:56.070604, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  397. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  398. [2016/01/07 12:29:56.070650, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  399. check_ntlm_password: guest authentication for user [] succeeded
  400. [2016/01/07 12:29:56.070704, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  401. NTLMSSP Sign/Seal - Initialising with flags:
  402. [2016/01/07 12:29:56.070740, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  403. Got NTLMSSP neg_flags=0xe2088215
  404. [2016/01/07 12:29:56.071869, 3] ../source3/lib/access.c:338(allow_access)
  405. Allowed connection from 192.1.1.38 (192.1.1.38)
  406. [2016/01/07 12:29:56.071967, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  407. guest user (from session setup) not permitted to access this share (aaa)
  408. [2016/01/07 12:29:56.072011, 1] ../source3/smbd/service.c:550(make_connection_snum)
  409. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  410. [2016/01/07 12:29:56.081255, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  411. Got NTLMSSP neg_flags=0xe2088297
  412. [2016/01/07 12:29:56.082032, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  413. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  414. [2016/01/07 12:29:56.082062, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  415. lp_load_ex: refreshing parameters
  416. [2016/01/07 12:29:56.082084, 3] ../source3/param/loadparm.c:750(init_globals)
  417. Initialising global parameters
  418. [2016/01/07 12:29:56.082113, 3] ../lib/util/params.c:550(pm_process)
  419. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  420. [2016/01/07 12:29:56.082128, 3] ../source3/param/loadparm.c:3564(do_section)
  421. Processing section "[global]"
  422. [2016/01/07 12:29:56.082189, 2] ../source3/param/loadparm.c:3581(do_section)
  423. Processing section "[printers]"
  424. [2016/01/07 12:29:56.082217, 2] ../source3/param/loadparm.c:3581(do_section)
  425. Processing section "[print$]"
  426. [2016/01/07 12:29:56.082238, 2] ../source3/param/loadparm.c:3581(do_section)
  427. Processing section "[aaa]"
  428. [2016/01/07 12:29:56.082261, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  429. adding IPC service
  430. [2016/01/07 12:29:56.082276, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  431. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  432. [2016/01/07 12:29:56.082286, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  433. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  434. [2016/01/07 12:29:56.082298, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  435. check_ntlm_password: guest authentication for user [] succeeded
  436. [2016/01/07 12:29:56.082312, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  437. NTLMSSP Sign/Seal - Initialising with flags:
  438. [2016/01/07 12:29:56.082321, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  439. Got NTLMSSP neg_flags=0xe2088215
  440. [2016/01/07 12:29:56.082410, 3] ../source3/smbd/dir.c:675(dptr_create)
  441. creating new dirptr 0 for path ., expect_close = 0
  442. [2016/01/07 12:29:56.082444, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  443. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  444. [2016/01/07 12:29:56.082462, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  445. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  446. [2016/01/07 12:29:56.082485, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  447. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  448. [2016/01/07 12:29:56.082504, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  449. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  450. [2016/01/07 12:29:56.082519, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  451. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  452. [2016/01/07 12:29:56.082533, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  453. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  454. [2016/01/07 12:29:56.082548, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  455. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  456. [2016/01/07 12:29:56.083149, 3] ../source3/lib/access.c:338(allow_access)
  457. Allowed connection from 192.1.1.38 (192.1.1.38)
  458. [2016/01/07 12:29:56.083175, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  459. guest user (from session setup) not permitted to access this share (aaa)
  460. [2016/01/07 12:29:56.083186, 1] ../source3/smbd/service.c:550(make_connection_snum)
  461. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  462. [2016/01/07 12:29:56.083494, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  463. check_reduced_name [notepad81.exe] [/mnt/aaa]
  464. [2016/01/07 12:29:56.083514, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  465. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  466. [2016/01/07 12:29:56.083539, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  467. unix_mode(notepad81.exe) returning 0744
  468. [2016/01/07 12:29:56.083619, 2] ../source3/smbd/open.c:972(open_file)
  469. win81user opened file notepad81.exe read=Yes write=No (numopen=4)
  470. [2016/01/07 12:29:56.083685, 3] ../source3/smbd/oplock.c:275(initial_break_processing)
  471. initial_break_processing: called for fc00:2e0003:0/2095647987
  472. Current oplocks_open (exclusive = 1, levelII = 0)
  473. [2016/01/07 12:29:56.086151, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  474. check_reduced_name [notepad81.exe] [/mnt/aaa]
  475. [2016/01/07 12:29:56.086175, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  476. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  477. [2016/01/07 12:29:56.086200, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  478. unix_mode(notepad81.exe) returning 0744
  479. [2016/01/07 12:29:56.086285, 2] ../source3/smbd/open.c:972(open_file)
  480. win81user opened file notepad81.exe read=Yes write=No (numopen=4)
  481. [2016/01/07 12:29:56.086501, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  482. Got NTLMSSP neg_flags=0xe2088297
  483. [2016/01/07 12:29:56.086730, 2] ../source3/smbd/close.c:780(close_normal_file)
  484. win81user closed file notepad81.exe (numopen=3) NT_STATUS_OK
  485. [2016/01/07 12:29:56.086973, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  486. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  487. [2016/01/07 12:29:56.086993, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  488. lp_load_ex: refreshing parameters
  489. [2016/01/07 12:29:56.087012, 3] ../source3/param/loadparm.c:750(init_globals)
  490. Initialising global parameters
  491. [2016/01/07 12:29:56.087041, 3] ../lib/util/params.c:550(pm_process)
  492. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  493. [2016/01/07 12:29:56.087055, 3] ../source3/param/loadparm.c:3564(do_section)
  494. Processing section "[global]"
  495. [2016/01/07 12:29:56.087116, 2] ../source3/param/loadparm.c:3581(do_section)
  496. Processing section "[printers]"
  497. [2016/01/07 12:29:56.087144, 2] ../source3/param/loadparm.c:3581(do_section)
  498. Processing section "[print$]"
  499. [2016/01/07 12:29:56.087165, 2] ../source3/param/loadparm.c:3581(do_section)
  500. Processing section "[aaa]"
  501. [2016/01/07 12:29:56.087188, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  502. adding IPC service
  503. [2016/01/07 12:29:56.087202, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  504. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  505. [2016/01/07 12:29:56.087213, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  506. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  507. [2016/01/07 12:29:56.087225, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  508. check_ntlm_password: guest authentication for user [] succeeded
  509. [2016/01/07 12:29:56.087238, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  510. NTLMSSP Sign/Seal - Initialising with flags:
  511. [2016/01/07 12:29:56.087248, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  512. Got NTLMSSP neg_flags=0xe2088215
  513. [2016/01/07 12:29:56.087905, 3] ../source3/lib/access.c:338(allow_access)
  514. Allowed connection from 192.1.1.38 (192.1.1.38)
  515. [2016/01/07 12:29:56.087926, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  516. guest user (from session setup) not permitted to access this share (aaa)
  517. [2016/01/07 12:29:56.087936, 1] ../source3/smbd/service.c:550(make_connection_snum)
  518. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  519. [2016/01/07 12:29:56.091920, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  520. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=5632 offset=96256 read=5632
  521. [2016/01/07 12:29:56.093170, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  522. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=7680 offset=103936 read=7680
  523. [2016/01/07 12:29:56.094100, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  524. check_reduced_name [WINSPOOL.DRV] [/mnt/aaa]
  525. [2016/01/07 12:29:56.094135, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  526. check_reduced_name: WINSPOOL.DRV reduced to /mnt/aaa/WINSPOOL.DRV
  527. [2016/01/07 12:29:56.094173, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  528. unix_mode(WINSPOOL.DRV) returning 0744
  529. [2016/01/07 12:29:56.095212, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  530. check_reduced_name [notepad81.exe.Local] [/mnt/aaa]
  531. [2016/01/07 12:29:56.095241, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  532. check_reduced_name: notepad81.exe.Local reduced to /mnt/aaa/notepad81.exe.Local
  533. [2016/01/07 12:29:56.095279, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  534. unix_mode(notepad81.exe.Local) returning 0744
  535. [2016/01/07 12:29:56.097092, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  536. check_reduced_name [SHCORE.DLL] [/mnt/aaa]
  537. [2016/01/07 12:29:56.097128, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  538. check_reduced_name: SHCORE.DLL reduced to /mnt/aaa/SHCORE.DLL
  539. [2016/01/07 12:29:56.097166, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  540. unix_mode(SHCORE.DLL) returning 0744
  541. [2016/01/07 12:29:56.100578, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  542. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=32768 offset=21504 read=32768
  543. [2016/01/07 12:29:56.101395, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  544. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=20480 offset=1024 read=20480
  545. [2016/01/07 12:29:56.102110, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  546. smbd_smb2_read: fnum 4293924109, file notepad81.exe, length=32768 offset=58368 read=32768
  547. [2016/01/07 12:29:56.103301, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  548. check_reduced_name [CRYPTBASE.dll] [/mnt/aaa]
  549. [2016/01/07 12:29:56.103331, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  550. check_reduced_name: CRYPTBASE.dll reduced to /mnt/aaa/CRYPTBASE.dll
  551. [2016/01/07 12:29:56.103368, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  552. unix_mode(CRYPTBASE.dll) returning 0744
  553. [2016/01/07 12:29:56.104385, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  554. check_reduced_name [bcryptPrimitives.dll] [/mnt/aaa]
  555. [2016/01/07 12:29:56.104413, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  556. check_reduced_name: bcryptPrimitives.dll reduced to /mnt/aaa/bcryptPrimitives.dll
  557. [2016/01/07 12:29:56.104447, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  558. unix_mode(bcryptPrimitives.dll) returning 0744
  559. [2016/01/07 12:29:56.121103, 2] ../source3/smbd/close.c:780(close_normal_file)
  560. win81user closed file notepad81.exe (numopen=2) NT_STATUS_OK
  561. [2016/01/07 12:29:56.937075, 3] ../source3/smbd/dir.c:675(dptr_create)
  562. creating new dirptr 0 for path ., expect_close = 0
  563. [2016/01/07 12:29:56.937255, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  564. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  565. [2016/01/07 12:29:56.937333, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  566. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  567. [2016/01/07 12:29:56.937410, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  568. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  569. [2016/01/07 12:29:56.937478, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  570. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  571. [2016/01/07 12:29:56.937540, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  572. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  573. [2016/01/07 12:29:56.937597, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  574. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  575. [2016/01/07 12:29:56.937655, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  576. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  577. [2016/01/07 12:29:56.938801, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  578. check_reduced_name [notepad81.exe] [/mnt/aaa]
  579. [2016/01/07 12:29:56.938898, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  580. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  581. [2016/01/07 12:29:56.939006, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  582. unix_mode(notepad81.exe) returning 0744
  583. [2016/01/07 12:29:56.939316, 2] ../source3/smbd/open.c:972(open_file)
  584. win81user opened file notepad81.exe read=Yes write=No (numopen=3)
  585. [2016/01/07 12:29:56.940842, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  586. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=32768 offset=0 read=32768
  587. [2016/01/07 12:29:56.942128, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  588. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=29184 offset=188416 read=29184
  589. [2016/01/07 12:29:56.943775, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  590. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=32768 offset=102400 read=32768
  591. [2016/01/07 12:29:56.945125, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  592. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=32768 offset=69632 read=32768
  593. [2016/01/07 12:29:56.949180, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  594. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=32768 offset=36864 read=32768
  595. [2016/01/07 12:29:56.951235, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  596. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=4096 offset=32768 read=4096
  597. [2016/01/07 12:29:56.959174, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  598. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=4096 offset=0 read=4096
  599. [2016/01/07 12:29:56.960022, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  600. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=512 offset=217088 read=512
  601. [2016/01/07 12:29:56.960717, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  602. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=16384 offset=111616 read=16384
  603. [2016/01/07 12:29:56.961632, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  604. smbd_smb2_read: fnum 3550619810, file notepad81.exe, length=15360 offset=201728 read=15360
  605. [2016/01/07 12:29:56.963278, 2] ../source3/smbd/close.c:780(close_normal_file)
  606. win81user closed file notepad81.exe (numopen=2) NT_STATUS_OK
  607. [2016/01/07 12:29:56.964148, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  608. check_reduced_name [notepad81.exe] [/mnt/aaa]
  609. [2016/01/07 12:29:56.964202, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  610. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  611. [2016/01/07 12:29:56.964269, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  612. unix_mode(notepad81.exe) returning 0744
  613. [2016/01/07 12:29:56.964475, 2] ../source3/smbd/open.c:972(open_file)
  614. win81user opened file notepad81.exe read=Yes write=No (numopen=3)
  615. [2016/01/07 12:29:56.965688, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  616. smbd_smb2_read: fnum 2086528478, file notepad81.exe, length=4096 offset=0 read=4096
  617. [2016/01/07 12:29:56.966539, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  618. smbd_smb2_read: fnum 2086528478, file notepad81.exe, length=512 offset=217088 read=512
  619. [2016/01/07 12:29:56.967516, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  620. smbd_smb2_read: fnum 2086528478, file notepad81.exe, length=4608 offset=212992 read=4608
  621. [2016/01/07 12:29:56.968496, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  622. smbd_smb2_read: fnum 2086528478, file notepad81.exe, length=32768 offset=0 read=32768
  623. [2016/01/07 12:29:56.970586, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  624. Got NTLMSSP neg_flags=0xe2088297
  625. [2016/01/07 12:29:56.971561, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  626. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  627. [2016/01/07 12:29:56.971615, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  628. lp_load_ex: refreshing parameters
  629. [2016/01/07 12:29:56.971667, 3] ../source3/param/loadparm.c:750(init_globals)
  630. Initialising global parameters
  631. [2016/01/07 12:29:56.971742, 3] ../lib/util/params.c:550(pm_process)
  632. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  633. [2016/01/07 12:29:56.971779, 3] ../source3/param/loadparm.c:3564(do_section)
  634. Processing section "[global]"
  635. [2016/01/07 12:29:56.971937, 2] ../source3/param/loadparm.c:3581(do_section)
  636. Processing section "[printers]"
  637. [2016/01/07 12:29:56.972009, 2] ../source3/param/loadparm.c:3581(do_section)
  638. Processing section "[print$]"
  639. [2016/01/07 12:29:56.972062, 2] ../source3/param/loadparm.c:3581(do_section)
  640. Processing section "[aaa]"
  641. [2016/01/07 12:29:56.972121, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  642. adding IPC service
  643. [2016/01/07 12:29:56.972158, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  644. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  645. [2016/01/07 12:29:56.972196, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  646. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  647. [2016/01/07 12:29:56.972229, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  648. check_ntlm_password: guest authentication for user [] succeeded
  649. [2016/01/07 12:29:56.972266, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  650. NTLMSSP Sign/Seal - Initialising with flags:
  651. [2016/01/07 12:29:56.972289, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  652. Got NTLMSSP neg_flags=0xe2088215
  653. [2016/01/07 12:29:56.973347, 3] ../source3/lib/access.c:338(allow_access)
  654. Allowed connection from 192.1.1.38 (192.1.1.38)
  655. [2016/01/07 12:29:56.973415, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  656. guest user (from session setup) not permitted to access this share (aaa)
  657. [2016/01/07 12:29:56.973444, 1] ../source3/smbd/service.c:550(make_connection_snum)
  658. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  659. [2016/01/07 12:29:57.160450, 2] ../source3/smbd/close.c:780(close_normal_file)
  660. win81user closed file notepad81.exe (numopen=2) NT_STATUS_OK
  661. [2016/01/07 12:29:57.161266, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  662. check_reduced_name [notepad81.exe] [/mnt/aaa]
  663. [2016/01/07 12:29:57.161363, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  664. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  665. [2016/01/07 12:29:57.161471, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  666. unix_mode(notepad81.exe) returning 0744
  667. [2016/01/07 12:29:57.161775, 2] ../source3/smbd/open.c:972(open_file)
  668. win81user opened file notepad81.exe read=No write=No (numopen=3)
  669. [2016/01/07 12:29:57.163340, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  670. smbd_do_query_security_desc: sd_size = 20.
  671. [2016/01/07 12:29:57.164170, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  672. smbd_do_query_security_desc: sd_size = 20.
  673. [2016/01/07 12:29:57.165071, 2] ../source3/smbd/close.c:780(close_normal_file)
  674. win81user closed file notepad81.exe (numopen=2) NT_STATUS_OK
  675. [2016/01/07 12:29:57.166639, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  676. check_reduced_name [notepad81.exe] [/mnt/aaa]
  677. [2016/01/07 12:29:57.166737, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  678. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  679. [2016/01/07 12:29:57.168901, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  680. check_reduced_name [notepad81.exe] [/mnt/aaa]
  681. [2016/01/07 12:29:57.169013, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  682. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  683. [2016/01/07 12:29:57.169122, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  684. unix_mode(notepad81.exe) returning 0744
  685. [2016/01/07 12:29:57.169443, 2] ../source3/smbd/open.c:972(open_file)
  686. win81user opened file notepad81.exe read=Yes write=No (numopen=3)
  687. [2016/01/07 12:29:57.170991, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  688. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=32768 offset=0 read=32768
  689. [2016/01/07 12:29:57.172007, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  690. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=29184 offset=188416 read=29184
  691. [2016/01/07 12:29:57.173504, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  692. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=32768 offset=102400 read=32768
  693. [2016/01/07 12:29:57.174803, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  694. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=32768 offset=69632 read=32768
  695. [2016/01/07 12:29:57.178812, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  696. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=32768 offset=36864 read=32768
  697. [2016/01/07 12:29:57.180909, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  698. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=4096 offset=32768 read=4096
  699. [2016/01/07 12:29:57.187939, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  700. smbd_do_query_security_desc: sd_size = 20.
  701. [2016/01/07 12:29:57.190392, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  702. Got NTLMSSP neg_flags=0xe2088297
  703. [2016/01/07 12:29:57.191458, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  704. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  705. [2016/01/07 12:29:57.191557, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  706. lp_load_ex: refreshing parameters
  707. [2016/01/07 12:29:57.191637, 3] ../source3/param/loadparm.c:750(init_globals)
  708. Initialising global parameters
  709. [2016/01/07 12:29:57.191751, 3] ../lib/util/params.c:550(pm_process)
  710. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  711. [2016/01/07 12:29:57.191809, 3] ../source3/param/loadparm.c:3564(do_section)
  712. Processing section "[global]"
  713. [2016/01/07 12:29:57.192044, 2] ../source3/param/loadparm.c:3581(do_section)
  714. Processing section "[printers]"
  715. [2016/01/07 12:29:57.192152, 2] ../source3/param/loadparm.c:3581(do_section)
  716. Processing section "[print$]"
  717. [2016/01/07 12:29:57.192233, 2] ../source3/param/loadparm.c:3581(do_section)
  718. Processing section "[aaa]"
  719. [2016/01/07 12:29:57.192324, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  720. adding IPC service
  721. [2016/01/07 12:29:57.192380, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  722. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  723. [2016/01/07 12:29:57.192421, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  724. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  725. [2016/01/07 12:29:57.192467, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  726. check_ntlm_password: guest authentication for user [] succeeded
  727. [2016/01/07 12:29:57.192521, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  728. NTLMSSP Sign/Seal - Initialising with flags:
  729. [2016/01/07 12:29:57.192557, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  730. Got NTLMSSP neg_flags=0xe2088215
  731. [2016/01/07 12:29:57.193731, 3] ../source3/lib/access.c:338(allow_access)
  732. Allowed connection from 192.1.1.38 (192.1.1.38)
  733. [2016/01/07 12:29:57.193831, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  734. guest user (from session setup) not permitted to access this share (aaa)
  735. [2016/01/07 12:29:57.193875, 1] ../source3/smbd/service.c:550(make_connection_snum)
  736. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  737. [2016/01/07 12:29:57.200383, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  738. Got NTLMSSP neg_flags=0xe2088297
  739. [2016/01/07 12:29:57.201203, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  740. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  741. [2016/01/07 12:29:57.201254, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  742. lp_load_ex: refreshing parameters
  743. [2016/01/07 12:29:57.201294, 3] ../source3/param/loadparm.c:750(init_globals)
  744. Initialising global parameters
  745. [2016/01/07 12:29:57.201351, 3] ../lib/util/params.c:550(pm_process)
  746. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  747. [2016/01/07 12:29:57.201380, 3] ../source3/param/loadparm.c:3564(do_section)
  748. Processing section "[global]"
  749. [2016/01/07 12:29:57.201497, 2] ../source3/param/loadparm.c:3581(do_section)
  750. Processing section "[printers]"
  751. [2016/01/07 12:29:57.201551, 2] ../source3/param/loadparm.c:3581(do_section)
  752. Processing section "[print$]"
  753. [2016/01/07 12:29:57.201592, 2] ../source3/param/loadparm.c:3581(do_section)
  754. Processing section "[aaa]"
  755. [2016/01/07 12:29:57.201637, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  756. adding IPC service
  757. [2016/01/07 12:29:57.201665, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  758. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  759. [2016/01/07 12:29:57.201685, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  760. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  761. [2016/01/07 12:29:57.201709, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  762. check_ntlm_password: guest authentication for user [] succeeded
  763. [2016/01/07 12:29:57.201745, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  764. NTLMSSP Sign/Seal - Initialising with flags:
  765. [2016/01/07 12:29:57.201763, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  766. Got NTLMSSP neg_flags=0xe2088215
  767. [2016/01/07 12:29:57.201935, 3] ../source3/smbd/dir.c:675(dptr_create)
  768. creating new dirptr 0 for path ., expect_close = 0
  769. [2016/01/07 12:29:57.202001, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  770. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  771. [2016/01/07 12:29:57.202038, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  772. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  773. [2016/01/07 12:29:57.202090, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  774. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  775. [2016/01/07 12:29:57.202126, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  776. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  777. [2016/01/07 12:29:57.202156, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  778. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  779. [2016/01/07 12:29:57.202183, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  780. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  781. [2016/01/07 12:29:57.202211, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  782. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  783. [2016/01/07 12:29:57.202472, 3] ../source3/lib/access.c:338(allow_access)
  784. Allowed connection from 192.1.1.38 (192.1.1.38)
  785. [2016/01/07 12:29:57.202521, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  786. guest user (from session setup) not permitted to access this share (aaa)
  787. [2016/01/07 12:29:57.202543, 1] ../source3/smbd/service.c:550(make_connection_snum)
  788. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  789. [2016/01/07 12:29:57.207469, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  790. check_reduced_name [notepad81.exe] [/mnt/aaa]
  791. [2016/01/07 12:29:57.207513, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  792. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  793. [2016/01/07 12:29:57.207573, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  794. unix_mode(notepad81.exe) returning 0744
  795. [2016/01/07 12:29:57.207729, 2] ../source3/smbd/open.c:972(open_file)
  796. win81user opened file notepad81.exe read=Yes write=No (numopen=4)
  797. [2016/01/07 12:29:57.207856, 3] ../source3/smbd/oplock.c:275(initial_break_processing)
  798. initial_break_processing: called for fc00:2e0003:0/4009147971
  799. Current oplocks_open (exclusive = 1, levelII = 0)
  800. [2016/01/07 12:29:57.208029, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  801. Got NTLMSSP neg_flags=0xe2088297
  802. [2016/01/07 12:29:57.208635, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  803. check_reduced_name [notepad81.exe] [/mnt/aaa]
  804. [2016/01/07 12:29:57.208674, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  805. check_reduced_name: notepad81.exe reduced to /mnt/aaa/notepad81.exe
  806. [2016/01/07 12:29:57.208721, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  807. unix_mode(notepad81.exe) returning 0744
  808. [2016/01/07 12:29:57.208902, 2] ../source3/smbd/open.c:972(open_file)
  809. win81user opened file notepad81.exe read=Yes write=No (numopen=4)
  810. [2016/01/07 12:29:57.209068, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  811. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  812. [2016/01/07 12:29:57.209087, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  813. lp_load_ex: refreshing parameters
  814. [2016/01/07 12:29:57.209105, 3] ../source3/param/loadparm.c:750(init_globals)
  815. Initialising global parameters
  816. [2016/01/07 12:29:57.209132, 3] ../lib/util/params.c:550(pm_process)
  817. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  818. [2016/01/07 12:29:57.209146, 3] ../source3/param/loadparm.c:3564(do_section)
  819. Processing section "[global]"
  820. [2016/01/07 12:29:57.209215, 2] ../source3/param/loadparm.c:3581(do_section)
  821. Processing section "[printers]"
  822. [2016/01/07 12:29:57.209247, 2] ../source3/param/loadparm.c:3581(do_section)
  823. Processing section "[print$]"
  824. [2016/01/07 12:29:57.209267, 2] ../source3/param/loadparm.c:3581(do_section)
  825. Processing section "[aaa]"
  826. [2016/01/07 12:29:57.209289, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  827. adding IPC service
  828. [2016/01/07 12:29:57.209302, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  829. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  830. [2016/01/07 12:29:57.209313, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  831. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  832. [2016/01/07 12:29:57.209324, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  833. check_ntlm_password: guest authentication for user [] succeeded
  834. [2016/01/07 12:29:57.209337, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  835. NTLMSSP Sign/Seal - Initialising with flags:
  836. [2016/01/07 12:29:57.209345, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  837. Got NTLMSSP neg_flags=0xe2088215
  838. [2016/01/07 12:29:57.209541, 2] ../source3/smbd/close.c:780(close_normal_file)
  839. win81user closed file notepad81.exe (numopen=3) NT_STATUS_OK
  840. [2016/01/07 12:29:57.209798, 3] ../source3/lib/access.c:338(allow_access)
  841. Allowed connection from 192.1.1.38 (192.1.1.38)
  842. [2016/01/07 12:29:57.209822, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  843. guest user (from session setup) not permitted to access this share (aaa)
  844. [2016/01/07 12:29:57.209832, 1] ../source3/smbd/service.c:550(make_connection_snum)
  845. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  846. [2016/01/07 12:29:57.216846, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  847. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=5632 offset=96256 read=5632
  848. [2016/01/07 12:29:57.218100, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  849. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=7680 offset=103936 read=7680
  850. [2016/01/07 12:29:57.222877, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  851. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=32768 offset=21504 read=32768
  852. [2016/01/07 12:29:57.223773, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  853. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=20480 offset=1024 read=20480
  854. [2016/01/07 12:29:57.224485, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  855. smbd_smb2_read: fnum 3379336975, file notepad81.exe, length=32768 offset=58368 read=32768
  856. [2016/01/07 12:29:57.242262, 2] ../source3/smbd/close.c:780(close_normal_file)
  857. win81user closed file notepad81.exe (numopen=2) NT_STATUS_OK
  858. [2016/01/07 12:29:58.122483, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  859. Got NTLMSSP neg_flags=0xe2088297
  860. [2016/01/07 12:29:58.123558, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  861. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  862. [2016/01/07 12:29:58.123656, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  863. lp_load_ex: refreshing parameters
  864. [2016/01/07 12:29:58.123736, 3] ../source3/param/loadparm.c:750(init_globals)
  865. Initialising global parameters
  866. [2016/01/07 12:29:58.123850, 3] ../lib/util/params.c:550(pm_process)
  867. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  868. [2016/01/07 12:29:58.123908, 3] ../source3/param/loadparm.c:3564(do_section)
  869. Processing section "[global]"
  870. [2016/01/07 12:29:58.124144, 2] ../source3/param/loadparm.c:3581(do_section)
  871. Processing section "[printers]"
  872. [2016/01/07 12:29:58.124253, 2] ../source3/param/loadparm.c:3581(do_section)
  873. Processing section "[print$]"
  874. [2016/01/07 12:29:58.124334, 2] ../source3/param/loadparm.c:3581(do_section)
  875. Processing section "[aaa]"
  876. [2016/01/07 12:29:58.124424, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  877. adding IPC service
  878. [2016/01/07 12:29:58.124479, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  879. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  880. [2016/01/07 12:29:58.124533, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  881. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  882. [2016/01/07 12:29:58.124583, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  883. check_ntlm_password: guest authentication for user [] succeeded
  884. [2016/01/07 12:29:58.124638, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  885. NTLMSSP Sign/Seal - Initialising with flags:
  886. [2016/01/07 12:29:58.124673, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  887. Got NTLMSSP neg_flags=0xe2088215
  888. [2016/01/07 12:29:58.125567, 3] ../source3/lib/access.c:338(allow_access)
  889. Allowed connection from 192.1.1.38 (192.1.1.38)
  890. [2016/01/07 12:29:58.125665, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  891. guest user (from session setup) not permitted to access this share (aaa)
  892. [2016/01/07 12:29:58.125708, 1] ../source3/smbd/service.c:550(make_connection_snum)
  893. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  894. [2016/01/07 12:29:59.243029, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  895. Got NTLMSSP neg_flags=0xe2088297
  896. [2016/01/07 12:29:59.244142, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  897. Got user=[] domain=[] workstation=[CONSULTING5] len1=1 len2=0
  898. [2016/01/07 12:29:59.244240, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  899. lp_load_ex: refreshing parameters
  900. [2016/01/07 12:29:59.244319, 3] ../source3/param/loadparm.c:750(init_globals)
  901. Initialising global parameters
  902. [2016/01/07 12:29:59.244435, 3] ../lib/util/params.c:550(pm_process)
  903. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  904. [2016/01/07 12:29:59.244493, 3] ../source3/param/loadparm.c:3564(do_section)
  905. Processing section "[global]"
  906. [2016/01/07 12:29:59.244730, 2] ../source3/param/loadparm.c:3581(do_section)
  907. Processing section "[printers]"
  908. [2016/01/07 12:29:59.244836, 2] ../source3/param/loadparm.c:3581(do_section)
  909. Processing section "[print$]"
  910. [2016/01/07 12:29:59.244998, 2] ../source3/param/loadparm.c:3581(do_section)
  911. Processing section "[aaa]"
  912. [2016/01/07 12:29:59.245097, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  913. adding IPC service
  914. [2016/01/07 12:29:59.245153, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  915. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING5] with the new password interface
  916. [2016/01/07 12:29:59.245194, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  917. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING5]
  918. [2016/01/07 12:29:59.245241, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  919. check_ntlm_password: guest authentication for user [] succeeded
  920. [2016/01/07 12:29:59.245297, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  921. NTLMSSP Sign/Seal - Initialising with flags:
  922. [2016/01/07 12:29:59.245333, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  923. Got NTLMSSP neg_flags=0xe2088215
  924. [2016/01/07 12:29:59.246149, 3] ../source3/lib/access.c:338(allow_access)
  925. Allowed connection from 192.1.1.38 (192.1.1.38)
  926. [2016/01/07 12:29:59.246246, 2] ../source3/smbd/service.c:407(create_connection_session_info)
  927. guest user (from session setup) not permitted to access this share (aaa)
  928. [2016/01/07 12:29:59.246290, 1] ../source3/smbd/service.c:550(make_connection_snum)
  929. create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
  930. [2016/01/07 12:32:19.245847, 1] ../source3/smbd/service.c:1130(close_cnum)
  931. consulting5 (ipv4:192.1.1.38:50422) closed connection to service aaa
  932. [2016/01/07 12:32:19.248727, 3] ../source3/smbd/server_exit.c:212(exit_server_common)
  933. Server exit (termination signal)
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!