API tools faq
paste
Guest User

log.consulting7 (Windows 10)

a guest
Feb 1st, 2016
79
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 58.67 KB | None | 0 0
raw download clone embed print report
  1. [2016/01/07 12:29:30.729682, 3] ../source3/lib/access.c:338(allow_access)
  2. Allowed connection from 192.1.1.41 (192.1.1.41)
  3. [2016/01/07 12:29:30.729732, 3] ../source3/smbd/service.c:612(make_connection_snum)
  4. Connect path is '/mnt/aaa' for service [aaa]
  5. [2016/01/07 12:29:30.729761, 3] ../source3/smbd/vfs.c:113(vfs_init_default)
  6. Initialising default vfs hooks
  7. [2016/01/07 12:29:30.729774, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
  8. Initialising custom vfs hooks from [/[Default VFS]/]
  9. [2016/01/07 12:29:30.729843, 2] ../source3/smbd/service.c:856(make_connection_snum)
  10. consulting7 (ipv4:192.1.1.41:53486) connect to service aaa initially as user win10user (uid=1003, gid=1003) (pid 1444)
  11. [2016/01/07 12:29:30.731389, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  12. check_reduced_name [.] [/mnt/aaa]
  13. [2016/01/07 12:29:30.731411, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  14. check_reduced_name: . reduced to /mnt/aaa
  15. [2016/01/07 12:29:30.733044, 3] ../source3/smbd/trans2.c:3092(smbd_do_qfsinfo)
  16. smbd_do_qfsinfo: level = 1007
  17. [2016/01/07 12:29:30.733098, 3] ../source3/lib/sysquotas.c:433(sys_get_quota)
  18. sys_get_vfs_quota() failed for mntpath[/] bdev[/dev/mapper/CONSULTING8--vg-root] qtype[2] id[1003]: Operation not permitted
  19. [2016/01/07 12:29:30.733123, 3] ../source3/lib/sysquotas.c:433(sys_get_quota)
  20. sys_get_vfs_quota() failed for mntpath[/] bdev[/dev/mapper/CONSULTING8--vg-root] qtype[4] id[1003]: Operation not permitted
  21. [2016/01/07 12:29:30.735693, 3] ../source3/smbd/trans2.c:3092(smbd_do_qfsinfo)
  22. smbd_do_qfsinfo: level = 1007
  23. [2016/01/07 12:29:30.735729, 3] ../source3/lib/sysquotas.c:433(sys_get_quota)
  24. sys_get_vfs_quota() failed for mntpath[/] bdev[/dev/mapper/CONSULTING8--vg-root] qtype[2] id[1003]: Operation not permitted
  25. [2016/01/07 12:29:30.735749, 3] ../source3/lib/sysquotas.c:433(sys_get_quota)
  26. sys_get_vfs_quota() failed for mntpath[/] bdev[/dev/mapper/CONSULTING8--vg-root] qtype[4] id[1003]: Operation not permitted
  27. [2016/01/07 12:29:30.835667, 3] ../source3/lib/access.c:338(allow_access)
  28. Allowed connection from 192.1.1.41 (192.1.1.41)
  29. [2016/01/07 12:29:30.835837, 3] ../source3/smbd/service.c:612(make_connection_snum)
  30. Connect path is '/tmp' for service [IPC$]
  31. [2016/01/07 12:29:30.835912, 3] ../source3/smbd/vfs.c:113(vfs_init_default)
  32. Initialising default vfs hooks
  33. [2016/01/07 12:29:30.835953, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
  34. Initialising custom vfs hooks from [/[Default VFS]/]
  35. [2016/01/07 12:29:30.836111, 3] ../source3/smbd/service.c:856(make_connection_snum)
  36. consulting7 (ipv4:192.1.1.41:53486) connect to service IPC$ initially as user win10user (uid=1003, gid=1003) (pid 1444)
  37. [2016/01/07 12:29:31.107622, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  38. check_reduced_name [.] [/mnt/aaa]
  39. [2016/01/07 12:29:31.107717, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  40. check_reduced_name: . reduced to /mnt/aaa
  41. [2016/01/07 12:29:31.108316, 3] ../source3/smbd/smb2_notify.c:249(smbd_smb2_notify_send)
  42. smbd_smb2_notify_send: notify change called on ., filter = FILE_NAME|DIR_NAME|ATTRIBUTES|LAST_WRITE, recursive = 0
  43. [2016/01/07 12:29:31.111326, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  44. check_reduced_name [desktop.ini] [/mnt/aaa]
  45. [2016/01/07 12:29:31.111419, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  46. check_reduced_name: desktop.ini reduced to /mnt/aaa/desktop.ini
  47. [2016/01/07 12:29:31.111539, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  48. unix_mode(desktop.ini) returning 0744
  49. [2016/01/07 12:29:31.112440, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  50. check_reduced_name [.] [/mnt/aaa]
  51. [2016/01/07 12:29:31.112536, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  52. check_reduced_name: . reduced to /mnt/aaa
  53. [2016/01/07 12:29:31.112642, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  54. unix_mode(.) returning 0744
  55. [2016/01/07 12:29:31.113495, 3] ../source3/smbd/dir.c:675(dptr_create)
  56. creating new dirptr 0 for path ., expect_close = 0
  57. [2016/01/07 12:29:31.113656, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  58. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  59. [2016/01/07 12:29:31.113781, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  60. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  61. [2016/01/07 12:29:31.113876, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  62. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  63. [2016/01/07 12:29:31.113969, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  64. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  65. [2016/01/07 12:29:31.114033, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  66. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  67. [2016/01/07 12:29:31.114094, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  68. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  69. [2016/01/07 12:29:31.114159, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  70. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  71. [2016/01/07 12:29:31.143363, 3] ../source3/smbd/trans2.c:3092(smbd_do_qfsinfo)
  72. smbd_do_qfsinfo: level = 1001
  73. [2016/01/07 12:29:31.143475, 3] ../source3/smbd/trans2.c:3092(smbd_do_qfsinfo)
  74. smbd_do_qfsinfo: level = 1005
  75. [2016/01/07 12:29:33.707362, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  76. check_reduced_name [notepad10.exe] [/mnt/aaa]
  77. [2016/01/07 12:29:33.707462, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  78. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  79. [2016/01/07 12:29:33.707569, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  80. unix_mode(notepad10.exe) returning 0744
  81. [2016/01/07 12:29:33.707917, 2] ../source3/smbd/open.c:972(open_file)
  82. win10user opened file notepad10.exe read=Yes write=No (numopen=3)
  83. [2016/01/07 12:29:33.710313, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  84. smbd_smb2_read: fnum 1526580465, file notepad10.exe, length=32768 offset=0 read=32768
  85. [2016/01/07 12:29:33.711698, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  86. smbd_smb2_read: fnum 1526580465, file notepad10.exe, length=31744 offset=212992 read=31744
  87. [2016/01/07 12:29:33.715068, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  88. smbd_smb2_read: fnum 1526580465, file notepad10.exe, length=32768 offset=122880 read=32768
  89. [2016/01/07 12:29:33.716196, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  90. smbd_smb2_read: fnum 1526580465, file notepad10.exe, length=32768 offset=90112 read=32768
  91. [2016/01/07 12:29:36.557490, 2] ../source3/smbd/close.c:780(close_normal_file)
  92. win10user closed file notepad10.exe (numopen=2) NT_STATUS_OK
  93. [2016/01/07 12:29:36.558569, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  94. check_reduced_name [notepad10.exe] [/mnt/aaa]
  95. [2016/01/07 12:29:36.558666, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  96. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  97. [2016/01/07 12:29:36.558773, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  98. unix_mode(notepad10.exe) returning 0744
  99. [2016/01/07 12:29:36.560511, 2] ../source3/smbd/open.c:972(open_file)
  100. win10user opened file notepad10.exe read=No write=No (numopen=3)
  101. [2016/01/07 12:29:36.562139, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  102. smbd_do_query_security_desc: sd_size = 20.
  103. [2016/01/07 12:29:36.562719, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  104. smbd_do_query_security_desc: sd_size = 20.
  105. [2016/01/07 12:29:36.563418, 2] ../source3/smbd/close.c:780(close_normal_file)
  106. win10user closed file notepad10.exe (numopen=2) NT_STATUS_OK
  107. [2016/01/07 12:29:36.565974, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  108. check_reduced_name [notepad10.exe] [/mnt/aaa]
  109. [2016/01/07 12:29:36.566075, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  110. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  111. [2016/01/07 12:29:36.570300, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  112. check_reduced_name [notepad10.exe] [/mnt/aaa]
  113. [2016/01/07 12:29:36.570399, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  114. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  115. [2016/01/07 12:29:36.570524, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  116. unix_mode(notepad10.exe) returning 0744
  117. [2016/01/07 12:29:36.570850, 2] ../source3/smbd/open.c:972(open_file)
  118. win10user opened file notepad10.exe read=Yes write=No (numopen=3)
  119. [2016/01/07 12:29:36.573031, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  120. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=32768 offset=0 read=32768
  121. [2016/01/07 12:29:36.574410, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  122. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=31744 offset=212992 read=31744
  123. [2016/01/07 12:29:36.577687, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  124. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=32768 offset=122880 read=32768
  125. [2016/01/07 12:29:36.578833, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  126. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=32768 offset=90112 read=32768
  127. [2016/01/07 12:29:36.603439, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  128. smbd_do_query_security_desc: sd_size = 20.
  129. [2016/01/07 12:29:36.609467, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  130. Got NTLMSSP neg_flags=0xe2088297
  131. [2016/01/07 12:29:36.610390, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  132. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  133. [2016/01/07 12:29:36.610489, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  134. lp_load_ex: refreshing parameters
  135. [2016/01/07 12:29:36.610569, 3] ../source3/param/loadparm.c:750(init_globals)
  136. Initialising global parameters
  137. [2016/01/07 12:29:36.610686, 3] ../lib/util/params.c:550(pm_process)
  138. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  139. [2016/01/07 12:29:36.610744, 3] ../source3/param/loadparm.c:3564(do_section)
  140. Processing section "[global]"
  141. [2016/01/07 12:29:36.610981, 2] ../source3/param/loadparm.c:3581(do_section)
  142. Processing section "[printers]"
  143. [2016/01/07 12:29:36.611088, 2] ../source3/param/loadparm.c:3581(do_section)
  144. Processing section "[print$]"
  145. [2016/01/07 12:29:36.611169, 2] ../source3/param/loadparm.c:3581(do_section)
  146. Processing section "[aaa]"
  147. [2016/01/07 12:29:36.611259, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  148. adding IPC service
  149. [2016/01/07 12:29:36.611315, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  150. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  151. [2016/01/07 12:29:36.611357, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  152. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  153. [2016/01/07 12:29:36.611413, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  154. check_ntlm_password: guest authentication for user [] succeeded
  155. [2016/01/07 12:29:36.611468, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  156. NTLMSSP Sign/Seal - Initialising with flags:
  157. [2016/01/07 12:29:36.611504, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  158. Got NTLMSSP neg_flags=0xe2088215
  159. [2016/01/07 12:29:36.617217, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  160. Got NTLMSSP neg_flags=0xe2088297
  161. [2016/01/07 12:29:36.618127, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  162. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  163. [2016/01/07 12:29:36.618223, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  164. lp_load_ex: refreshing parameters
  165. [2016/01/07 12:29:36.618302, 3] ../source3/param/loadparm.c:750(init_globals)
  166. Initialising global parameters
  167. [2016/01/07 12:29:36.618421, 3] ../lib/util/params.c:550(pm_process)
  168. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  169. [2016/01/07 12:29:36.618480, 3] ../source3/param/loadparm.c:3564(do_section)
  170. Processing section "[global]"
  171. [2016/01/07 12:29:36.618717, 2] ../source3/param/loadparm.c:3581(do_section)
  172. Processing section "[printers]"
  173. [2016/01/07 12:29:36.618823, 2] ../source3/param/loadparm.c:3581(do_section)
  174. Processing section "[print$]"
  175. [2016/01/07 12:29:36.618904, 2] ../source3/param/loadparm.c:3581(do_section)
  176. Processing section "[aaa]"
  177. [2016/01/07 12:29:36.619012, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  178. adding IPC service
  179. [2016/01/07 12:29:36.619069, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  180. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  181. [2016/01/07 12:29:36.619110, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  182. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  183. [2016/01/07 12:29:36.619156, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  184. check_ntlm_password: guest authentication for user [] succeeded
  185. [2016/01/07 12:29:36.619211, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  186. NTLMSSP Sign/Seal - Initialising with flags:
  187. [2016/01/07 12:29:36.619247, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  188. Got NTLMSSP neg_flags=0xe2088215
  189. [2016/01/07 12:29:36.624927, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  190. Got NTLMSSP neg_flags=0xe2088297
  191. [2016/01/07 12:29:36.625860, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  192. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  193. [2016/01/07 12:29:36.625956, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  194. lp_load_ex: refreshing parameters
  195. [2016/01/07 12:29:36.626036, 3] ../source3/param/loadparm.c:750(init_globals)
  196. Initialising global parameters
  197. [2016/01/07 12:29:36.626158, 3] ../lib/util/params.c:550(pm_process)
  198. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  199. [2016/01/07 12:29:36.626219, 3] ../source3/param/loadparm.c:3564(do_section)
  200. Processing section "[global]"
  201. [2016/01/07 12:29:36.626456, 2] ../source3/param/loadparm.c:3581(do_section)
  202. Processing section "[printers]"
  203. [2016/01/07 12:29:36.626564, 2] ../source3/param/loadparm.c:3581(do_section)
  204. Processing section "[print$]"
  205. [2016/01/07 12:29:36.626645, 2] ../source3/param/loadparm.c:3581(do_section)
  206. Processing section "[aaa]"
  207. [2016/01/07 12:29:36.626735, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  208. adding IPC service
  209. [2016/01/07 12:29:36.626789, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  210. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  211. [2016/01/07 12:29:36.626831, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  212. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  213. [2016/01/07 12:29:36.626877, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  214. check_ntlm_password: guest authentication for user [] succeeded
  215. [2016/01/07 12:29:36.626931, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  216. NTLMSSP Sign/Seal - Initialising with flags:
  217. [2016/01/07 12:29:36.626966, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  218. Got NTLMSSP neg_flags=0xe2088215
  219. [2016/01/07 12:29:36.628130, 3] ../source3/smbd/dir.c:675(dptr_create)
  220. creating new dirptr 0 for path ., expect_close = 0
  221. [2016/01/07 12:29:36.628293, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  222. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  223. [2016/01/07 12:29:36.628372, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  224. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  225. [2016/01/07 12:29:36.628451, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  226. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  227. [2016/01/07 12:29:36.628520, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  228. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  229. [2016/01/07 12:29:36.628581, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  230. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  231. [2016/01/07 12:29:36.628649, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  232. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  233. [2016/01/07 12:29:36.628713, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  234. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  235. [2016/01/07 12:29:36.629809, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  236. check_reduced_name [notepad10.exe] [/mnt/aaa]
  237. [2016/01/07 12:29:36.629849, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  238. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  239. [2016/01/07 12:29:36.629886, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  240. unix_mode(notepad10.exe) returning 0744
  241. [2016/01/07 12:29:36.629995, 2] ../source3/smbd/open.c:972(open_file)
  242. win10user opened file notepad10.exe read=Yes write=No (numopen=4)
  243. [2016/01/07 12:29:36.630174, 3] ../source3/smbd/oplock.c:275(initial_break_processing)
  244. initial_break_processing: called for fc00:2e0b34:0/877029274
  245. Current oplocks_open (exclusive = 1, levelII = 0)
  246. [2016/01/07 12:29:36.630758, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  247. check_reduced_name [notepad10.exe] [/mnt/aaa]
  248. [2016/01/07 12:29:36.630790, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  249. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  250. [2016/01/07 12:29:36.630825, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  251. unix_mode(notepad10.exe) returning 0744
  252. [2016/01/07 12:29:36.630934, 2] ../source3/smbd/open.c:972(open_file)
  253. win10user opened file notepad10.exe read=Yes write=No (numopen=4)
  254. [2016/01/07 12:29:36.631884, 2] ../source3/smbd/close.c:780(close_normal_file)
  255. win10user closed file notepad10.exe (numopen=3) NT_STATUS_OK
  256. [2016/01/07 12:29:36.636291, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  257. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=3072 offset=132096 read=3072
  258. [2016/01/07 12:29:36.637831, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  259. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=8704 offset=123392 read=8704
  260. [2016/01/07 12:29:36.638644, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  261. Got NTLMSSP neg_flags=0xe2088297
  262. [2016/01/07 12:29:36.639216, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  263. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  264. [2016/01/07 12:29:36.639250, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  265. lp_load_ex: refreshing parameters
  266. [2016/01/07 12:29:36.639279, 3] ../source3/param/loadparm.c:750(init_globals)
  267. Initialising global parameters
  268. [2016/01/07 12:29:36.639321, 3] ../lib/util/params.c:550(pm_process)
  269. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  270. [2016/01/07 12:29:36.639341, 3] ../source3/param/loadparm.c:3564(do_section)
  271. Processing section "[global]"
  272. [2016/01/07 12:29:36.639424, 2] ../source3/param/loadparm.c:3581(do_section)
  273. Processing section "[printers]"
  274. [2016/01/07 12:29:36.639461, 2] ../source3/param/loadparm.c:3581(do_section)
  275. Processing section "[print$]"
  276. [2016/01/07 12:29:36.639489, 2] ../source3/param/loadparm.c:3581(do_section)
  277. Processing section "[aaa]"
  278. [2016/01/07 12:29:36.639521, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  279. adding IPC service
  280. [2016/01/07 12:29:36.639540, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  281. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  282. [2016/01/07 12:29:36.639555, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  283. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  284. [2016/01/07 12:29:36.639572, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  285. check_ntlm_password: guest authentication for user [] succeeded
  286. [2016/01/07 12:29:36.639591, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  287. NTLMSSP Sign/Seal - Initialising with flags:
  288. [2016/01/07 12:29:36.639603, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  289. Got NTLMSSP neg_flags=0xe2088215
  290. [2016/01/07 12:29:36.640529, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  291. check_reduced_name [FeClient.dll] [/mnt/aaa]
  292. [2016/01/07 12:29:36.640562, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  293. check_reduced_name: FeClient.dll reduced to /mnt/aaa/FeClient.dll
  294. [2016/01/07 12:29:36.640599, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  295. unix_mode(FeClient.dll) returning 0744
  296. [2016/01/07 12:29:36.640671, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  297. check_reduced_name [WINSPOOL.DRV] [/mnt/aaa]
  298. [2016/01/07 12:29:36.640697, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  299. check_reduced_name: WINSPOOL.DRV reduced to /mnt/aaa/WINSPOOL.DRV
  300. [2016/01/07 12:29:36.640729, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  301. unix_mode(WINSPOOL.DRV) returning 0744
  302. [2016/01/07 12:29:36.640787, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  303. check_reduced_name [PROPSYS.dll] [/mnt/aaa]
  304. [2016/01/07 12:29:36.640811, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  305. check_reduced_name: PROPSYS.dll reduced to /mnt/aaa/PROPSYS.dll
  306. [2016/01/07 12:29:36.640840, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  307. unix_mode(PROPSYS.dll) returning 0744
  308. [2016/01/07 12:29:36.641009, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  309. check_reduced_name [urlmon.dll] [/mnt/aaa]
  310. [2016/01/07 12:29:36.641085, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  311. check_reduced_name: urlmon.dll reduced to /mnt/aaa/urlmon.dll
  312. [2016/01/07 12:29:36.641171, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  313. unix_mode(urlmon.dll) returning 0744
  314. [2016/01/07 12:29:36.641565, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  315. check_reduced_name [DAVHLPR.DLL] [/mnt/aaa]
  316. [2016/01/07 12:29:36.641668, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  317. check_reduced_name: DAVHLPR.DLL reduced to /mnt/aaa/DAVHLPR.DLL
  318. [2016/01/07 12:29:36.641775, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  319. unix_mode(DAVHLPR.DLL) returning 0744
  320. [2016/01/07 12:29:36.641970, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  321. check_reduced_name [bcrypt.dll] [/mnt/aaa]
  322. [2016/01/07 12:29:36.642043, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  323. check_reduced_name: bcrypt.dll reduced to /mnt/aaa/bcrypt.dll
  324. [2016/01/07 12:29:36.642131, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  325. unix_mode(bcrypt.dll) returning 0744
  326. [2016/01/07 12:29:36.642300, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  327. check_reduced_name [iertutil.dll] [/mnt/aaa]
  328. [2016/01/07 12:29:36.642369, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  329. check_reduced_name: iertutil.dll reduced to /mnt/aaa/iertutil.dll
  330. [2016/01/07 12:29:36.642453, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  331. unix_mode(iertutil.dll) returning 0744
  332. [2016/01/07 12:29:36.643892, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  333. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=15872 offset=227840 read=15872
  334. [2016/01/07 12:29:36.646246, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  335. check_reduced_name [fwbase.dll] [/mnt/aaa]
  336. [2016/01/07 12:29:36.646352, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  337. check_reduced_name: fwbase.dll reduced to /mnt/aaa/fwbase.dll
  338. [2016/01/07 12:29:36.646459, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  339. unix_mode(fwbase.dll) returning 0744
  340. [2016/01/07 12:29:36.647522, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  341. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=32256 offset=70656 read=32256
  342. [2016/01/07 12:29:36.648439, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  343. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=32768 offset=1024 read=32768
  344. [2016/01/07 12:29:36.650064, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  345. smbd_smb2_read: fnum 1052021900, file notepad10.exe, length=12288 offset=107008 read=12288
  346. [2016/01/07 12:29:36.661508, 2] ../source3/smbd/close.c:780(close_normal_file)
  347. win10user closed file notepad10.exe (numopen=2) NT_STATUS_OK
  348. [2016/01/07 12:29:38.293992, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  349. check_reduced_name [notepad10.exe] [/mnt/aaa]
  350. [2016/01/07 12:29:38.294093, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  351. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  352. [2016/01/07 12:29:38.294201, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  353. unix_mode(notepad10.exe) returning 0744
  354. [2016/01/07 12:29:38.294528, 2] ../source3/smbd/open.c:972(open_file)
  355. win10user opened file notepad10.exe read=No write=No (numopen=3)
  356. [2016/01/07 12:29:38.296158, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  357. smbd_do_query_security_desc: sd_size = 20.
  358. [2016/01/07 12:29:38.296742, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  359. smbd_do_query_security_desc: sd_size = 20.
  360. [2016/01/07 12:29:38.297422, 2] ../source3/smbd/close.c:780(close_normal_file)
  361. win10user closed file notepad10.exe (numopen=2) NT_STATUS_OK
  362. [2016/01/07 12:29:38.300045, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  363. check_reduced_name [notepad10.exe] [/mnt/aaa]
  364. [2016/01/07 12:29:38.300143, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  365. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  366. [2016/01/07 12:29:38.304341, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  367. check_reduced_name [notepad10.exe] [/mnt/aaa]
  368. [2016/01/07 12:29:38.304441, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  369. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  370. [2016/01/07 12:29:38.304549, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  371. unix_mode(notepad10.exe) returning 0744
  372. [2016/01/07 12:29:38.304909, 2] ../source3/smbd/open.c:972(open_file)
  373. win10user opened file notepad10.exe read=Yes write=No (numopen=3)
  374. [2016/01/07 12:29:38.307086, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  375. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=32768 offset=0 read=32768
  376. [2016/01/07 12:29:38.308428, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  377. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=31744 offset=212992 read=31744
  378. [2016/01/07 12:29:38.311458, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  379. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=32768 offset=122880 read=32768
  380. [2016/01/07 12:29:38.312541, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  381. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=32768 offset=90112 read=32768
  382. [2016/01/07 12:29:38.334957, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  383. smbd_do_query_security_desc: sd_size = 20.
  384. [2016/01/07 12:29:38.340907, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  385. Got NTLMSSP neg_flags=0xe2088297
  386. [2016/01/07 12:29:38.341807, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  387. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  388. [2016/01/07 12:29:38.341906, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  389. lp_load_ex: refreshing parameters
  390. [2016/01/07 12:29:38.341987, 3] ../source3/param/loadparm.c:750(init_globals)
  391. Initialising global parameters
  392. [2016/01/07 12:29:38.342102, 3] ../lib/util/params.c:550(pm_process)
  393. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  394. [2016/01/07 12:29:38.342161, 3] ../source3/param/loadparm.c:3564(do_section)
  395. Processing section "[global]"
  396. [2016/01/07 12:29:38.342396, 2] ../source3/param/loadparm.c:3581(do_section)
  397. Processing section "[printers]"
  398. [2016/01/07 12:29:38.342504, 2] ../source3/param/loadparm.c:3581(do_section)
  399. Processing section "[print$]"
  400. [2016/01/07 12:29:38.342585, 2] ../source3/param/loadparm.c:3581(do_section)
  401. Processing section "[aaa]"
  402. [2016/01/07 12:29:38.342676, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  403. adding IPC service
  404. [2016/01/07 12:29:38.342732, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  405. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  406. [2016/01/07 12:29:38.342774, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  407. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  408. [2016/01/07 12:29:38.342821, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  409. check_ntlm_password: guest authentication for user [] succeeded
  410. [2016/01/07 12:29:38.342875, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  411. NTLMSSP Sign/Seal - Initialising with flags:
  412. [2016/01/07 12:29:38.342911, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  413. Got NTLMSSP neg_flags=0xe2088215
  414. [2016/01/07 12:29:38.348379, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  415. Got NTLMSSP neg_flags=0xe2088297
  416. [2016/01/07 12:29:38.349133, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  417. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  418. [2016/01/07 12:29:38.349183, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  419. lp_load_ex: refreshing parameters
  420. [2016/01/07 12:29:38.349223, 3] ../source3/param/loadparm.c:750(init_globals)
  421. Initialising global parameters
  422. [2016/01/07 12:29:38.349280, 3] ../lib/util/params.c:550(pm_process)
  423. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  424. [2016/01/07 12:29:38.349309, 3] ../source3/param/loadparm.c:3564(do_section)
  425. Processing section "[global]"
  426. [2016/01/07 12:29:38.349428, 2] ../source3/param/loadparm.c:3581(do_section)
  427. Processing section "[printers]"
  428. [2016/01/07 12:29:38.349481, 2] ../source3/param/loadparm.c:3581(do_section)
  429. Processing section "[print$]"
  430. [2016/01/07 12:29:38.349522, 2] ../source3/param/loadparm.c:3581(do_section)
  431. Processing section "[aaa]"
  432. [2016/01/07 12:29:38.349567, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  433. adding IPC service
  434. [2016/01/07 12:29:38.349596, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  435. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  436. [2016/01/07 12:29:38.349617, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  437. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  438. [2016/01/07 12:29:38.349640, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  439. check_ntlm_password: guest authentication for user [] succeeded
  440. [2016/01/07 12:29:38.349667, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  441. NTLMSSP Sign/Seal - Initialising with flags:
  442. [2016/01/07 12:29:38.349685, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  443. Got NTLMSSP neg_flags=0xe2088215
  444. [2016/01/07 12:29:38.355003, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  445. Got NTLMSSP neg_flags=0xe2088297
  446. [2016/01/07 12:29:38.355751, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  447. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  448. [2016/01/07 12:29:38.355799, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  449. lp_load_ex: refreshing parameters
  450. [2016/01/07 12:29:38.355840, 3] ../source3/param/loadparm.c:750(init_globals)
  451. Initialising global parameters
  452. [2016/01/07 12:29:38.355903, 3] ../lib/util/params.c:550(pm_process)
  453. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  454. [2016/01/07 12:29:38.355934, 3] ../source3/param/loadparm.c:3564(do_section)
  455. Processing section "[global]"
  456. [2016/01/07 12:29:38.356052, 2] ../source3/param/loadparm.c:3581(do_section)
  457. Processing section "[printers]"
  458. [2016/01/07 12:29:38.356106, 2] ../source3/param/loadparm.c:3581(do_section)
  459. Processing section "[print$]"
  460. [2016/01/07 12:29:38.356146, 2] ../source3/param/loadparm.c:3581(do_section)
  461. Processing section "[aaa]"
  462. [2016/01/07 12:29:38.356191, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  463. adding IPC service
  464. [2016/01/07 12:29:38.356219, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  465. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  466. [2016/01/07 12:29:38.356240, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  467. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  468. [2016/01/07 12:29:38.356263, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  469. check_ntlm_password: guest authentication for user [] succeeded
  470. [2016/01/07 12:29:38.356291, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  471. NTLMSSP Sign/Seal - Initialising with flags:
  472. [2016/01/07 12:29:38.356309, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  473. Got NTLMSSP neg_flags=0xe2088215
  474. [2016/01/07 12:29:38.357264, 3] ../source3/smbd/dir.c:675(dptr_create)
  475. creating new dirptr 0 for path ., expect_close = 0
  476. [2016/01/07 12:29:38.357430, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  477. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  478. [2016/01/07 12:29:38.357528, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  479. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  480. [2016/01/07 12:29:38.357611, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  481. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  482. [2016/01/07 12:29:38.357683, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  483. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  484. [2016/01/07 12:29:38.357745, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  485. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  486. [2016/01/07 12:29:38.357816, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  487. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  488. [2016/01/07 12:29:38.357880, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  489. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  490. [2016/01/07 12:29:38.358997, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  491. check_reduced_name [notepad10.exe] [/mnt/aaa]
  492. [2016/01/07 12:29:38.359094, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  493. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  494. [2016/01/07 12:29:38.359205, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  495. unix_mode(notepad10.exe) returning 0744
  496. [2016/01/07 12:29:38.359527, 2] ../source3/smbd/open.c:972(open_file)
  497. win10user opened file notepad10.exe read=Yes write=No (numopen=4)
  498. [2016/01/07 12:29:38.359775, 3] ../source3/smbd/oplock.c:275(initial_break_processing)
  499. initial_break_processing: called for fc00:2e0b34:0/1538956550
  500. Current oplocks_open (exclusive = 1, levelII = 0)
  501. [2016/01/07 12:29:38.360596, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  502. check_reduced_name [notepad10.exe] [/mnt/aaa]
  503. [2016/01/07 12:29:38.360699, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  504. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  505. [2016/01/07 12:29:38.360799, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  506. unix_mode(notepad10.exe) returning 0744
  507. [2016/01/07 12:29:38.361170, 2] ../source3/smbd/open.c:972(open_file)
  508. win10user opened file notepad10.exe read=Yes write=No (numopen=4)
  509. [2016/01/07 12:29:38.362553, 2] ../source3/smbd/close.c:780(close_normal_file)
  510. win10user closed file notepad10.exe (numopen=3) NT_STATUS_OK
  511. [2016/01/07 12:29:38.367139, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  512. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=3072 offset=132096 read=3072
  513. [2016/01/07 12:29:38.368652, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  514. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=8704 offset=123392 read=8704
  515. [2016/01/07 12:29:38.369247, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  516. Got NTLMSSP neg_flags=0xe2088297
  517. [2016/01/07 12:29:38.369844, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  518. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  519. [2016/01/07 12:29:38.369901, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  520. lp_load_ex: refreshing parameters
  521. [2016/01/07 12:29:38.369948, 3] ../source3/param/loadparm.c:750(init_globals)
  522. Initialising global parameters
  523. [2016/01/07 12:29:38.370013, 3] ../lib/util/params.c:550(pm_process)
  524. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  525. [2016/01/07 12:29:38.370048, 3] ../source3/param/loadparm.c:3564(do_section)
  526. Processing section "[global]"
  527. [2016/01/07 12:29:38.370184, 2] ../source3/param/loadparm.c:3581(do_section)
  528. Processing section "[printers]"
  529. [2016/01/07 12:29:38.370246, 2] ../source3/param/loadparm.c:3581(do_section)
  530. Processing section "[print$]"
  531. [2016/01/07 12:29:38.370293, 2] ../source3/param/loadparm.c:3581(do_section)
  532. Processing section "[aaa]"
  533. [2016/01/07 12:29:38.370345, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  534. adding IPC service
  535. [2016/01/07 12:29:38.370377, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  536. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  537. [2016/01/07 12:29:38.370409, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  538. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  539. [2016/01/07 12:29:38.370438, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  540. check_ntlm_password: guest authentication for user [] succeeded
  541. [2016/01/07 12:29:38.370469, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  542. NTLMSSP Sign/Seal - Initialising with flags:
  543. [2016/01/07 12:29:38.370490, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  544. Got NTLMSSP neg_flags=0xe2088215
  545. [2016/01/07 12:29:38.372751, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  546. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=15872 offset=227840 read=15872
  547. [2016/01/07 12:29:38.375345, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  548. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=32256 offset=70656 read=32256
  549. [2016/01/07 12:29:38.375996, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  550. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=32768 offset=1024 read=32768
  551. [2016/01/07 12:29:38.377492, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  552. smbd_smb2_read: fnum 2300366014, file notepad10.exe, length=12288 offset=107008 read=12288
  553. [2016/01/07 12:29:38.388766, 2] ../source3/smbd/close.c:780(close_normal_file)
  554. win10user closed file notepad10.exe (numopen=2) NT_STATUS_OK
  555. [2016/01/07 12:29:38.670519, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  556. Got NTLMSSP neg_flags=0xe2088297
  557. [2016/01/07 12:29:38.671696, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  558. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  559. [2016/01/07 12:29:38.671794, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  560. lp_load_ex: refreshing parameters
  561. [2016/01/07 12:29:38.671875, 3] ../source3/param/loadparm.c:750(init_globals)
  562. Initialising global parameters
  563. [2016/01/07 12:29:38.671991, 3] ../lib/util/params.c:550(pm_process)
  564. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  565. [2016/01/07 12:29:38.672049, 3] ../source3/param/loadparm.c:3564(do_section)
  566. Processing section "[global]"
  567. [2016/01/07 12:29:38.672285, 2] ../source3/param/loadparm.c:3581(do_section)
  568. Processing section "[printers]"
  569. [2016/01/07 12:29:38.672394, 2] ../source3/param/loadparm.c:3581(do_section)
  570. Processing section "[print$]"
  571. [2016/01/07 12:29:38.672476, 2] ../source3/param/loadparm.c:3581(do_section)
  572. Processing section "[aaa]"
  573. [2016/01/07 12:29:38.672567, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  574. adding IPC service
  575. [2016/01/07 12:29:38.672624, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  576. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  577. [2016/01/07 12:29:38.672666, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  578. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  579. [2016/01/07 12:29:38.672713, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  580. check_ntlm_password: guest authentication for user [] succeeded
  581. [2016/01/07 12:29:38.672767, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  582. NTLMSSP Sign/Seal - Initialising with flags:
  583. [2016/01/07 12:29:38.672803, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  584. Got NTLMSSP neg_flags=0xe2088215
  585. [2016/01/07 12:29:39.773894, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  586. check_reduced_name [notepad10.exe] [/mnt/aaa]
  587. [2016/01/07 12:29:39.773992, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  588. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  589. [2016/01/07 12:29:39.774097, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  590. unix_mode(notepad10.exe) returning 0744
  591. [2016/01/07 12:29:39.774398, 2] ../source3/smbd/open.c:972(open_file)
  592. win10user opened file notepad10.exe read=No write=No (numopen=3)
  593. [2016/01/07 12:29:39.775974, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  594. smbd_do_query_security_desc: sd_size = 20.
  595. [2016/01/07 12:29:39.776533, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  596. smbd_do_query_security_desc: sd_size = 20.
  597. [2016/01/07 12:29:39.777222, 2] ../source3/smbd/close.c:780(close_normal_file)
  598. win10user closed file notepad10.exe (numopen=2) NT_STATUS_OK
  599. [2016/01/07 12:29:39.779901, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  600. check_reduced_name [notepad10.exe] [/mnt/aaa]
  601. [2016/01/07 12:29:39.780000, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  602. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  603. [2016/01/07 12:29:39.784197, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  604. check_reduced_name [notepad10.exe] [/mnt/aaa]
  605. [2016/01/07 12:29:39.784297, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  606. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  607. [2016/01/07 12:29:39.784405, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  608. unix_mode(notepad10.exe) returning 0744
  609. [2016/01/07 12:29:39.784723, 2] ../source3/smbd/open.c:972(open_file)
  610. win10user opened file notepad10.exe read=Yes write=No (numopen=3)
  611. [2016/01/07 12:29:39.786950, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  612. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=32768 offset=0 read=32768
  613. [2016/01/07 12:29:39.788297, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  614. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=31744 offset=212992 read=31744
  615. [2016/01/07 12:29:39.790113, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  616. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=32768 offset=122880 read=32768
  617. [2016/01/07 12:29:39.791026, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  618. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=32768 offset=90112 read=32768
  619. [2016/01/07 12:29:39.806227, 3] ../source3/smbd/nttrans.c:1972(smbd_do_query_security_desc)
  620. smbd_do_query_security_desc: sd_size = 20.
  621. [2016/01/07 12:29:39.811614, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  622. Got NTLMSSP neg_flags=0xe2088297
  623. [2016/01/07 12:29:39.812421, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  624. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  625. [2016/01/07 12:29:39.812502, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  626. lp_load_ex: refreshing parameters
  627. [2016/01/07 12:29:39.812579, 3] ../source3/param/loadparm.c:750(init_globals)
  628. Initialising global parameters
  629. [2016/01/07 12:29:39.812694, 3] ../lib/util/params.c:550(pm_process)
  630. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  631. [2016/01/07 12:29:39.812751, 3] ../source3/param/loadparm.c:3564(do_section)
  632. Processing section "[global]"
  633. [2016/01/07 12:29:39.813042, 2] ../source3/param/loadparm.c:3581(do_section)
  634. Processing section "[printers]"
  635. [2016/01/07 12:29:39.813166, 2] ../source3/param/loadparm.c:3581(do_section)
  636. Processing section "[print$]"
  637. [2016/01/07 12:29:39.813247, 2] ../source3/param/loadparm.c:3581(do_section)
  638. Processing section "[aaa]"
  639. [2016/01/07 12:29:39.813339, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  640. adding IPC service
  641. [2016/01/07 12:29:39.813395, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  642. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  643. [2016/01/07 12:29:39.813438, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  644. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  645. [2016/01/07 12:29:39.813485, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  646. check_ntlm_password: guest authentication for user [] succeeded
  647. [2016/01/07 12:29:39.813540, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  648. NTLMSSP Sign/Seal - Initialising with flags:
  649. [2016/01/07 12:29:39.813576, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  650. Got NTLMSSP neg_flags=0xe2088215
  651. [2016/01/07 12:29:39.818629, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  652. Got NTLMSSP neg_flags=0xe2088297
  653. [2016/01/07 12:29:39.819377, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  654. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  655. [2016/01/07 12:29:39.819489, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  656. lp_load_ex: refreshing parameters
  657. [2016/01/07 12:29:39.819573, 3] ../source3/param/loadparm.c:750(init_globals)
  658. Initialising global parameters
  659. [2016/01/07 12:29:39.819692, 3] ../lib/util/params.c:550(pm_process)
  660. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  661. [2016/01/07 12:29:39.819750, 3] ../source3/param/loadparm.c:3564(do_section)
  662. Processing section "[global]"
  663. [2016/01/07 12:29:39.819985, 2] ../source3/param/loadparm.c:3581(do_section)
  664. Processing section "[printers]"
  665. [2016/01/07 12:29:39.820093, 2] ../source3/param/loadparm.c:3581(do_section)
  666. Processing section "[print$]"
  667. [2016/01/07 12:29:39.820174, 2] ../source3/param/loadparm.c:3581(do_section)
  668. Processing section "[aaa]"
  669. [2016/01/07 12:29:39.820264, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  670. adding IPC service
  671. [2016/01/07 12:29:39.820320, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  672. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  673. [2016/01/07 12:29:39.820361, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  674. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  675. [2016/01/07 12:29:39.820407, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  676. check_ntlm_password: guest authentication for user [] succeeded
  677. [2016/01/07 12:29:39.820463, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  678. NTLMSSP Sign/Seal - Initialising with flags:
  679. [2016/01/07 12:29:39.820498, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  680. Got NTLMSSP neg_flags=0xe2088215
  681. [2016/01/07 12:29:39.823206, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  682. Got NTLMSSP neg_flags=0xe2088297
  683. [2016/01/07 12:29:39.823812, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  684. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  685. [2016/01/07 12:29:39.823867, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  686. lp_load_ex: refreshing parameters
  687. [2016/01/07 12:29:39.823912, 3] ../source3/param/loadparm.c:750(init_globals)
  688. Initialising global parameters
  689. [2016/01/07 12:29:39.823982, 3] ../lib/util/params.c:550(pm_process)
  690. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  691. [2016/01/07 12:29:39.824016, 3] ../source3/param/loadparm.c:3564(do_section)
  692. Processing section "[global]"
  693. [2016/01/07 12:29:39.824151, 2] ../source3/param/loadparm.c:3581(do_section)
  694. Processing section "[printers]"
  695. [2016/01/07 12:29:39.824213, 2] ../source3/param/loadparm.c:3581(do_section)
  696. Processing section "[print$]"
  697. [2016/01/07 12:29:39.824259, 2] ../source3/param/loadparm.c:3581(do_section)
  698. Processing section "[aaa]"
  699. [2016/01/07 12:29:39.824310, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  700. adding IPC service
  701. [2016/01/07 12:29:39.824341, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  702. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  703. [2016/01/07 12:29:39.824365, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  704. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  705. [2016/01/07 12:29:39.824392, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  706. check_ntlm_password: guest authentication for user [] succeeded
  707. [2016/01/07 12:29:39.824423, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  708. NTLMSSP Sign/Seal - Initialising with flags:
  709. [2016/01/07 12:29:39.824443, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  710. Got NTLMSSP neg_flags=0xe2088215
  711. [2016/01/07 12:29:39.825332, 3] ../source3/smbd/dir.c:675(dptr_create)
  712. creating new dirptr 0 for path ., expect_close = 0
  713. [2016/01/07 12:29:39.825429, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  714. smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
  715. [2016/01/07 12:29:39.825475, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  716. smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
  717. [2016/01/07 12:29:39.825519, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  718. smbd_dirptr_get_entry mask=[*] found ./notepad81.exe fname=notepad81.exe (notepad81.exe)
  719. [2016/01/07 12:29:39.825569, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  720. smbd_dirptr_get_entry mask=[*] found ./MyApp fname=MyApp (MyApp)
  721. [2016/01/07 12:29:39.825605, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  722. smbd_dirptr_get_entry mask=[*] found ./notepad7.exe fname=notepad7.exe (notepad7.exe)
  723. [2016/01/07 12:29:39.825645, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  724. smbd_dirptr_get_entry mask=[*] found ./notepad10.exe fname=notepad10.exe (notepad10.exe)
  725. [2016/01/07 12:29:39.825680, 3] ../source3/smbd/dir.c:1226(smbd_dirptr_get_entry)
  726. smbd_dirptr_get_entry mask=[*] found ./bbb fname=bbb (bbb)
  727. [2016/01/07 12:29:39.826615, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  728. check_reduced_name [notepad10.exe] [/mnt/aaa]
  729. [2016/01/07 12:29:39.826671, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  730. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  731. [2016/01/07 12:29:39.826733, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  732. unix_mode(notepad10.exe) returning 0744
  733. [2016/01/07 12:29:39.826917, 2] ../source3/smbd/open.c:972(open_file)
  734. win10user opened file notepad10.exe read=Yes write=No (numopen=4)
  735. [2016/01/07 12:29:39.827064, 3] ../source3/smbd/oplock.c:275(initial_break_processing)
  736. initial_break_processing: called for fc00:2e0b34:0/3774607822
  737. Current oplocks_open (exclusive = 1, levelII = 0)
  738. [2016/01/07 12:29:39.827613, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  739. check_reduced_name [notepad10.exe] [/mnt/aaa]
  740. [2016/01/07 12:29:39.827655, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  741. check_reduced_name: notepad10.exe reduced to /mnt/aaa/notepad10.exe
  742. [2016/01/07 12:29:39.827716, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  743. unix_mode(notepad10.exe) returning 0744
  744. [2016/01/07 12:29:39.827889, 2] ../source3/smbd/open.c:972(open_file)
  745. win10user opened file notepad10.exe read=Yes write=No (numopen=4)
  746. [2016/01/07 12:29:39.828910, 2] ../source3/smbd/close.c:780(close_normal_file)
  747. win10user closed file notepad10.exe (numopen=3) NT_STATUS_OK
  748. [2016/01/07 12:29:39.832535, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  749. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=3072 offset=132096 read=3072
  750. [2016/01/07 12:29:39.833927, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  751. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=8704 offset=123392 read=8704
  752. [2016/01/07 12:29:39.834930, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  753. Got NTLMSSP neg_flags=0xe2088297
  754. [2016/01/07 12:29:39.835667, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  755. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  756. [2016/01/07 12:29:39.835720, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  757. lp_load_ex: refreshing parameters
  758. [2016/01/07 12:29:39.835772, 3] ../source3/param/loadparm.c:750(init_globals)
  759. Initialising global parameters
  760. [2016/01/07 12:29:39.835850, 3] ../lib/util/params.c:550(pm_process)
  761. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  762. [2016/01/07 12:29:39.835888, 3] ../source3/param/loadparm.c:3564(do_section)
  763. Processing section "[global]"
  764. [2016/01/07 12:29:39.836045, 2] ../source3/param/loadparm.c:3581(do_section)
  765. Processing section "[printers]"
  766. [2016/01/07 12:29:39.836117, 2] ../source3/param/loadparm.c:3581(do_section)
  767. Processing section "[print$]"
  768. [2016/01/07 12:29:39.836171, 2] ../source3/param/loadparm.c:3581(do_section)
  769. Processing section "[aaa]"
  770. [2016/01/07 12:29:39.836230, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  771. adding IPC service
  772. [2016/01/07 12:29:39.836268, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  773. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  774. [2016/01/07 12:29:39.836296, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  775. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  776. [2016/01/07 12:29:39.836337, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  777. check_ntlm_password: guest authentication for user [] succeeded
  778. [2016/01/07 12:29:39.836375, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  779. NTLMSSP Sign/Seal - Initialising with flags:
  780. [2016/01/07 12:29:39.836399, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  781. Got NTLMSSP neg_flags=0xe2088215
  782. [2016/01/07 12:29:39.842020, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  783. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=15872 offset=227840 read=15872
  784. [2016/01/07 12:29:39.847899, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  785. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=32256 offset=70656 read=32256
  786. [2016/01/07 12:29:39.848762, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  787. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=32768 offset=1024 read=32768
  788. [2016/01/07 12:29:39.851023, 3] ../source3/smbd/smb2_read.c:354(smb2_read_complete)
  789. smbd_smb2_read: fnum 3057972018, file notepad10.exe, length=12288 offset=107008 read=12288
  790. [2016/01/07 12:29:39.870237, 2] ../source3/smbd/close.c:780(close_normal_file)
  791. win10user closed file notepad10.exe (numopen=2) NT_STATUS_OK
  792. [2016/01/07 12:29:40.400592, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  793. Got NTLMSSP neg_flags=0xe2088297
  794. [2016/01/07 12:29:40.401769, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  795. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  796. [2016/01/07 12:29:40.401867, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  797. lp_load_ex: refreshing parameters
  798. [2016/01/07 12:29:40.401948, 3] ../source3/param/loadparm.c:750(init_globals)
  799. Initialising global parameters
  800. [2016/01/07 12:29:40.402064, 3] ../lib/util/params.c:550(pm_process)
  801. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  802. [2016/01/07 12:29:40.402121, 3] ../source3/param/loadparm.c:3564(do_section)
  803. Processing section "[global]"
  804. [2016/01/07 12:29:40.402357, 2] ../source3/param/loadparm.c:3581(do_section)
  805. Processing section "[printers]"
  806. [2016/01/07 12:29:40.402465, 2] ../source3/param/loadparm.c:3581(do_section)
  807. Processing section "[print$]"
  808. [2016/01/07 12:29:40.402547, 2] ../source3/param/loadparm.c:3581(do_section)
  809. Processing section "[aaa]"
  810. [2016/01/07 12:29:40.402638, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  811. adding IPC service
  812. [2016/01/07 12:29:40.402693, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  813. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  814. [2016/01/07 12:29:40.402736, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  815. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  816. [2016/01/07 12:29:40.402783, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  817. check_ntlm_password: guest authentication for user [] succeeded
  818. [2016/01/07 12:29:40.402838, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  819. NTLMSSP Sign/Seal - Initialising with flags:
  820. [2016/01/07 12:29:40.402874, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  821. Got NTLMSSP neg_flags=0xe2088215
  822. [2016/01/07 12:29:41.437733, 3] ../source3/smbd/service.c:1130(close_cnum)
  823. consulting7 (ipv4:192.1.1.41:53486) closed connection to service IPC$
  824. [2016/01/07 12:29:41.881313, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  825. Got NTLMSSP neg_flags=0xe2088297
  826. [2016/01/07 12:29:41.882552, 3] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth)
  827. Got user=[] domain=[] workstation=[CONSULTING7] len1=1 len2=0
  828. [2016/01/07 12:29:41.882649, 3] ../source3/param/loadparm.c:4838(lp_load_ex)
  829. lp_load_ex: refreshing parameters
  830. [2016/01/07 12:29:41.882729, 3] ../source3/param/loadparm.c:750(init_globals)
  831. Initialising global parameters
  832. [2016/01/07 12:29:41.882843, 3] ../lib/util/params.c:550(pm_process)
  833. params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
  834. [2016/01/07 12:29:41.882901, 3] ../source3/param/loadparm.c:3564(do_section)
  835. Processing section "[global]"
  836. [2016/01/07 12:29:41.883154, 2] ../source3/param/loadparm.c:3581(do_section)
  837. Processing section "[printers]"
  838. [2016/01/07 12:29:41.883263, 2] ../source3/param/loadparm.c:3581(do_section)
  839. Processing section "[print$]"
  840. [2016/01/07 12:29:41.883344, 2] ../source3/param/loadparm.c:3581(do_section)
  841. Processing section "[aaa]"
  842. [2016/01/07 12:29:41.883435, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
  843. adding IPC service
  844. [2016/01/07 12:29:41.883490, 3] ../source3/auth/auth.c:177(auth_check_ntlm_password)
  845. check_ntlm_password: Checking password for unmapped user []\[]@[CONSULTING7] with the new password interface
  846. [2016/01/07 12:29:41.883532, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password)
  847. check_ntlm_password: mapped user is: [CONSULTING8]\[]@[CONSULTING7]
  848. [2016/01/07 12:29:41.883578, 3] ../source3/auth/auth.c:226(auth_check_ntlm_password)
  849. check_ntlm_password: guest authentication for user [] succeeded
  850. [2016/01/07 12:29:41.883633, 3] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
  851. NTLMSSP Sign/Seal - Initialising with flags:
  852. [2016/01/07 12:29:41.883669, 3] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
  853. Got NTLMSSP neg_flags=0xe2088215
  854. [2016/01/07 12:29:43.633605, 3] ../source3/smbd/vfs.c:1141(check_reduced_name)
  855. check_reduced_name [.] [/mnt/aaa]
  856. [2016/01/07 12:29:43.633699, 3] ../source3/smbd/vfs.c:1274(check_reduced_name)
  857. check_reduced_name: . reduced to /mnt/aaa
  858. [2016/01/07 12:29:43.633804, 3] ../source3/smbd/dosmode.c:158(unix_mode)
  859. unix_mode(.) returning 0744
  860. [2016/01/07 12:32:19.276789, 1] ../source3/smbd/service.c:1130(close_cnum)
  861. consulting7 (ipv4:192.1.1.41:53486) closed connection to service aaa
  862. [2016/01/07 12:32:19.284183, 3] ../source3/smbd/server_exit.c:212(exit_server_common)
  863. Server exit (termination signal)
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!