[2006/06/23 12:36:52, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:36:52, 2] lib/interface.c:add_interface(81) added interface ip=172.17.49.12 bcast=172.17.49.255 nmask=255.255.255.0 [2006/06/23 12:36:52, 5] lib/util.c:init_names(260) Netbios name list:- my_netbios_names[0]="IBRIX2" [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_context_list(950) Trying to load: smbpasswd [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend ldapsam [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'ldapsam' [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend ldapsam_compat [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'ldapsam_compat' [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend NDS_ldapsam [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'NDS_ldapsam' [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend NDS_ldapsam_compat [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'NDS_ldapsam_compat' [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend smbpasswd [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'smbpasswd' [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend tdbsam [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'tdbsam' [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend guest [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'guest' [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(822) Attempting to find an passdb backend to match smbpasswd (smbpasswd) [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(843) Found pdb backend smbpasswd [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(846) pdb backend smbpasswd has a valid init [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(822) Attempting to find an passdb backend to match guest (guest) [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(843) Found pdb backend guest [2006/06/23 12:36:52, 5] passdb/pdb_interface.c:make_pdb_methods_name(846) pdb backend guest has a valid init [2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1371) smbpasswd_getsampwrid: search by sid: S-1-5-21-1055192801-1434710095-1259064960-501 [2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1322) getsampwnam (smbpasswd): search by name: nobody [2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(184) startsmbfilepwent_internal: opening file /usr/local/samba/private/smbpasswd [2006/06/23 12:36:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(539) getsmbfilepwent: end of file reached. [2006/06/23 12:36:52, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username nobody, was [2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name nobody, was [2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain IBRIX2, was [2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-501 [2006/06/23 12:36:52, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-501 from rid 501 [2006/06/23 12:36:52, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-514 [2006/06/23 12:36:52, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-514 from rid 514 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:36:52, 10] lib/system_smbd.c:sys_getgrouplist(167) sys_getgrouplist: user [nobody] [2006/06/23 12:36:52, 10] lib/system_smbd.c:sys_getgrouplist(176) sys_getgrouplist(): disabled winbindd for group lookup [user == nobody] [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:36:52, 8] lib/system_smbd.c:remove_duplicate_gids(49) remove_duplicate_gids: Enter 3 gids [2006/06/23 12:36:52, 8] lib/system_smbd.c:remove_duplicate_gids(67) remove_duplicate_gids: Exit 2 gids [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 99 -> S-1-5-21-1055192801-1434710095-1259064960-1199 [2006/06/23 12:36:52, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 99 -> S-1-5-21-1055192801-1434710095-1259064960-1199 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 90 -> S-1-5-21-1055192801-1434710095-1259064960-1181 [2006/06/23 12:36:52, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 90 -> S-1-5-21-1055192801-1434710095-1259064960-1181 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) grant_privilege: S-1-1-0 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) grant_privilege: S-1-5-32-544 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) grant_privilege: S-1-5-32-548 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) grant_privilege: S-1-5-32-549 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) grant_privilege: S-1-5-32-550 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:36:52, 10] lib/privileges.c:grant_privilege(565) grant_privilege: S-1-5-32-551 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:36:52, 10] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-1055192801-1434710095-1259064960-501 contains 7 SIDs SID[ 0]: S-1-5-21-1055192801-1434710095-1259064960-501 SID[ 1]: S-1-5-21-1055192801-1434710095-1259064960-514 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-1055192801-1434710095-1259064960-1199 SID[ 6]: S-1-5-21-1055192801-1434710095-1259064960-1181 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:36:52, 5] auth/auth_util.c:make_server_info_sam(898) make_server_info_sam: made server info for user nobody -> nobody [2006/06/23 12:36:52, 3] smbd/server.c:main(840) loaded services [2006/06/23 12:36:52, 0] smbd/server.c:main(844) standard input is not a socket, assuming -D option [2006/06/23 12:36:52, 3] smbd/server.c:main(855) Becoming a daemon. [2006/06/23 12:36:52, 8] lib/util.c:fcntl_lock(1820) fcntl_lock 8 6 0 1 1 [2006/06/23 12:36:52, 8] lib/util.c:fcntl_lock(1855) fcntl_lock: Lock call successful [2006/06/23 12:36:52, 2] lib/tallocmsg.c:register_msg_pool_usage(61) Registered MSG_REQ_POOL_USAGE [2006/06/23 12:36:52, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2006/06/23 12:36:52, 5] lib/gencache.c:gencache_init(59) Opening cache file at /usr/local/samba/var/locks/gencache.tdb [2006/06/23 12:36:52, 5] libsmb/namecache.c:namecache_enable(58) namecache_enable: enabling netbios namecache, timeout 660 seconds [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Print] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] with subkey [Printers] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Ports] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [LanmanServer] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer] with subkey [Shares] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Eventlog] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [009] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [Monitors] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [ProductOptions] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Terminal Server] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server] with subkey [DefaultUserConfiguration] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [TcpIp] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp] with subkey [Parameters] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Netlogon] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon] with subkey [Parameters] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKU] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKU] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKCR] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKCR] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKPD] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKPD] with subkey [NULL] [2006/06/23 12:36:52, 6] registry/reg_db.c:init_registry_data(104) init_registry_data: Adding [HKPT] [2006/06/23 12:36:52, 10] registry/reg_db.c:init_registry_data(130) init_registry_data: Storing key [HKPT] with subkey [NULL] [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_fetch_values(562) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) specific: [Samba Printer Port], len: 2 [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_fetch_values(562) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) specific: [DefaultSpoolDirectory], len: 70 [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_fetch_values(562) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) specific: [DisplayName], len: 20 [2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) specific: [ErrorControl], len: 4 [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_fetch_values(562) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) specific: [DisplayName], len: 20 [2006/06/23 12:36:52, 8] registry/reg_db.c:regdb_unpack_values(514) specific: [ErrorControl], len: 4 [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] [2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree [2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] [2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree [2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] [2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree [2006/06/23 12:36:52, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1322) getsampwnam (smbpasswd): search by name: root [2006/06/23 12:36:52, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(184) startsmbfilepwent_internal: opening file /usr/local/samba/private/smbpasswd [2006/06/23 12:36:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(539) getsmbfilepwent: end of file reached. [2006/06/23 12:36:52, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:36:52, 4] passdb/passdb.c:local_uid_to_sid(1146) local_uid_to_sid: User root [uid == 0] has no samba account [2006/06/23 12:36:52, 8] passdb/passdb.c:algorithmic_uid_to_sid(1107) algorithmic_uid_to_sid: falling back to RID algorithm [2006/06/23 12:36:52, 10] passdb/passdb.c:algorithmic_uid_to_sid(1111) Substituting charset 'UTF-8' for LOCALE algorithmic_uid_to_sid: uid (0) -> SID S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 10] passdb/passdb.c:local_uid_to_sid(1154) local_uid_to_sid: uid (0) -> SID S-1-5-21-1055192801-1434710095-1259064960-1000 (root). [2006/06/23 12:36:52, 10] passdb/lookup_sid.c:uid_to_sid(364) [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) uid_to_sid: local 0 -> S-1-5-21-1055192801-1434710095-1259064960-1000 Substituting charset 'UTF-8' for LOCALE [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) [2006/06/23 12:36:52, 3] smbd/uid.c:push_conn_ctx(393) Substituting charset 'UTF-8' for LOCALE push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2006/06/23 12:36:52, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2006/06/23 12:36:52, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:36:52, 10] passdb/passdb.c:local_gid_to_sid(1245) [2006/06/23 12:36:52, 5] lib/charcnv.c:charset_name(81) local_gid_to_sid: Fall back to algorithmic mapping: 0 -> S-1-5-21-1055192801-1434710095-1259064960-1001 Substituting charset 'UTF-8' for LOCALE [2006/06/23 12:36:52, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 0 -> S-1-5-21-1055192801-1434710095-1259064960-1001 [2006/06/23 12:36:52, 10] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-1055192801-1434710095-1259064960-1000 contains 6 SIDs SID[ 0]: S-1-5-21-1055192801-1434710095-1259064960-1000 SID[ 1]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-32-544 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (1) [2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services] [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-544 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-544 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-544 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0000 revision : 0001 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0002 type : 8004 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 off_owner_sid: 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 off_grp_sid : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c off_sacl : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 off_dacl : 00000014 [2006/06/23 12:36:52, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 revision: 0002 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 num_aces : 00000004 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001c type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001d flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 mask: 0002018d [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0024 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0025 num_auths : 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0026 id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0027 id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0029 id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 002a id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 002b id_auth[5] : 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 002c sub_auths : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001e size : 0014 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0030 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0031 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000034 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 mask: 000201fd [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0038 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0039 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003a id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003b id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003c id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003d id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003e id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003f id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0040 sub_auths : 00000020 00000223 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0032 size : 0018 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0048 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0049 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 00004c sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c mask: 000f01ff [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0050 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0051 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0052 id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0053 id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0054 id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0055 id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0056 id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0057 id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0058 sub_auths : 00000020 00000225 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 004a size : 0018 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0060 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0061 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000064 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0064 mask: 000f01ff [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0068 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0069 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006a id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006b id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006c id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006d id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006e id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006f id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0070 sub_auths : 00000020 00000220 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0062 size : 0018 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 size : 0064 [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-544 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-544 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0000 revision : 0001 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0002 type : 8004 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 off_owner_sid: 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 off_grp_sid : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c off_sacl : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 off_dacl : 00000014 [2006/06/23 12:36:52, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 revision: 0002 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 num_aces : 00000004 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001c type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001d flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 mask: 0002018d [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0024 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0025 num_auths : 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0026 id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0027 id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0029 id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 002a id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 002b id_auth[5] : 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 002c sub_auths : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001e size : 0014 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0030 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0031 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000034 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 mask: 000201fd [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0038 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0039 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003a id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003b id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003c id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003d id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003e id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003f id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0040 sub_auths : 00000020 00000223 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0032 size : 0018 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0048 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0049 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 00004c sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c mask: 000f01ff [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0050 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0051 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0052 id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0053 id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0054 id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0055 id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0056 id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0057 id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0058 sub_auths : 00000020 00000225 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 004a size : 0018 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0060 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0061 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000064 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0064 mask: 000f01ff [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0068 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0069 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006a id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006b id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006c id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006d id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006e id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006f id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0070 sub_auths : 00000020 00000220 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0062 size : 0018 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 size : 0064 [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-544 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-544 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0000 revision : 0001 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0002 type : 8004 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 off_owner_sid: 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 off_grp_sid : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c off_sacl : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 off_dacl : 00000014 [2006/06/23 12:36:52, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 revision: 0002 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 num_aces : 00000004 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001c type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001d flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 mask: 0002018d [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0024 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0025 num_auths : 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0026 id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0027 id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0029 id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 002a id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 002b id_auth[5] : 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 002c sub_auths : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001e size : 0014 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0030 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0031 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000034 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 mask: 000201fd [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0038 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0039 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003a id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003b id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003c id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003d id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003e id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003f id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0040 sub_auths : 00000020 00000223 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0032 size : 0018 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0048 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0049 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 00004c sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c mask: 000f01ff [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0050 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0051 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0052 id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0053 id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0054 id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0055 id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0056 id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0057 id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0058 sub_auths : 00000020 00000225 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 004a size : 0018 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0060 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0061 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000064 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0064 mask: 000f01ff [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0068 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0069 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006a id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006b id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006c id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006d id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006e id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006f id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0070 sub_auths : 00000020 00000220 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0062 size : 0018 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 size : 0064 [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-544 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_open(248) regdb_open: incrementing refcount (2) [2006/06/23 12:36:52, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2006/06/23 12:36:52, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2006/06/23 12:36:52, 10] lib/adt_tree.c:pathtree_find(413) pathtree_find: Exit [2006/06/23 12:36:52, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2006/06/23 12:36:52, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 6 entries and first sid S-1-5-21-1055192801-1434710095-1259064960-1000. [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:36:52, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1055192801-1434710095-1259064960-1000 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-544 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2006/06/23 12:36:52, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0000 revision : 0001 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0002 type : 8004 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 off_owner_sid: 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 off_grp_sid : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c off_sacl : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 off_dacl : 00000014 [2006/06/23 12:36:52, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 revision: 0002 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 num_aces : 00000004 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001c type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001d flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 mask: 0002018d [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0024 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0025 num_auths : 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0026 id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0027 id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0029 id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 002a id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 002b id_auth[5] : 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 002c sub_auths : 00000000 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001e size : 0014 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0030 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0031 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000034 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 mask: 000201fd [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0038 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0039 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003a id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003b id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003c id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003d id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003e id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 003f id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0040 sub_auths : 00000020 00000223 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0032 size : 0018 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0048 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0049 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 00004c sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c mask: 000f01ff [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0050 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0051 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0052 id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0053 id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0054 id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0055 id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0056 id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0057 id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0058 sub_auths : 00000020 00000225 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 004a size : 0018 [2006/06/23 12:36:52, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0060 type : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0061 flags: 00 [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000064 sec_io_access info [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0064 mask: 000f01ff [2006/06/23 12:36:52, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0068 sid_rev_num: 01 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0069 num_auths : 02 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006a id_auth[0] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006b id_auth[1] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006c id_auth[2] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006d id_auth[3] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006e id_auth[4] : 00 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint8(614) 006f id_auth[5] : 05 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 0070 sub_auths : 00000020 00000220 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0062 size : 0018 [2006/06/23 12:36:52, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 size : 0064 [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_store_values(592) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (2) [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (1) [2006/06/23 12:36:52, 10] registry/reg_db.c:regdb_close(279) regdb_close: decrementing refcount (0) [2006/06/23 12:36:52, 10] printing/nt_printing.c:update_c_setprinter(689) update_c_setprinter: c_setprinter = 0 [2006/06/23 12:36:52, 6] libads/ldap.c:ads_find_dc(217) ads_find_dc: looking for realm 'TIGR.ORG' [2006/06/23 12:36:52, 8] libsmb/namequery.c:get_sorted_dc_list(1433) get_sorted_dc_list: attempting lookup using [ads] [2006/06/23 12:36:52, 10] libsmb/namequery.c:internal_resolve_name(1028) internal_resolve_name: looking up dc.tigr.org#20 [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(272) Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006 [2006/06/23 12:36:52, 5] libsmb/namecache.c:namecache_fetch(201) name dc.tigr.org#20 found. [2006/06/23 12:36:52, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) remove_duplicate_addrs2: looking for duplicate address/port pairs [2006/06/23 12:36:52, 4] libsmb/namequery.c:get_dc_list(1406) get_dc_list: returning 1 ip addresses in an ordered list [2006/06/23 12:36:52, 4] libsmb/namequery.c:get_dc_list(1407) get_dc_list: 172.17.5.33:389 [2006/06/23 12:36:52, 5] libads/ldap.c:ads_try_connect(126) ads_try_connect: trying ldap server '172.17.5.33' port 389 [2006/06/23 12:36:52, 3] libads/ldap.c:ads_connect(288) Connected to LDAP server 172.17.5.33 [2006/06/23 12:36:52, 3] libads/ldap.c:ads_server_info(2542) got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG [2006/06/23 12:36:52, 4] libads/ldap.c:ads_server_info(2548) time offset is 0 seconds [2006/06/23 12:36:52, 4] libads/sasl.c:ads_sasl_bind(455) Found SASL mechanism GSS-SPNEGO [2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2 [2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 [2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 [2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:36:52, 3] libads/sasl.c:ads_sasl_spnego_bind(219) ads_sasl_spnego_bind: got server principal name =tigrdc2$@TIGR.ORG [2006/06/23 12:36:52, 3] libsmb/clikrb5.c:ads_krb5_mk_req(479) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2006/06/23 12:36:52, 3] nmbd/nmbd.c:reload_nmbd_services(298) services not loaded [2006/06/23 12:36:52, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:36:52, 5] lib/util.c:init_names(260) Netbios name list:- my_netbios_names[0]="IBRIX2" [2006/06/23 12:36:52, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:36:52, 0] nmbd/nmbd.c:main(746) standard input is not a socket, assuming -D option [2006/06/23 12:36:52, 2] nmbd/nmbd.c:main(751) Becoming a daemon. [2006/06/23 12:36:52, 8] lib/util.c:fcntl_lock(1820) fcntl_lock 3 6 0 1 1 [2006/06/23 12:36:52, 8] lib/util.c:fcntl_lock(1855) fcntl_lock: Lock call successful [2006/06/23 12:36:52, 2] lib/tallocmsg.c:register_msg_pool_usage(61) Registered MSG_REQ_POOL_USAGE [2006/06/23 12:36:52, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2006/06/23 12:36:52, 4] lib/time.c:TimeInit(142) TimeInit: Serverzone is 14400 [2006/06/23 12:36:52, 3] nmbd/nmbd.c:main(789) Opening sockets 137 [2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) bind succeeded on port 137 [2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) bind succeeded on port 138 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_NODELAY. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPCNT. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPIDLE. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPINTVL. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 135168 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 135168 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_NODELAY. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPCNT. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPIDLE. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPINTVL. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 135168 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 135168 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:36:52, 3] nmbd/nmbd.c:open_sockets(648) open_sockets: Broadcast sockets opened. [2006/06/23 12:36:52, 2] lib/interface.c:add_interface(81) added interface ip=172.17.49.12 bcast=172.17.49.255 nmask=255.255.255.0 [2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) bind succeeded on port 137 [2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) bind succeeded on port 138 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_NODELAY. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPCNT. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPIDLE. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPINTVL. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 135168 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 135168 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_NODELAY. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPCNT. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPIDLE. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(204) Could not test socket option TCP_KEEPINTVL. [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 135168 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 135168 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:36:52, 2] nmbd/nmbd_subnetdb.c:make_subnet(173) making subnet name:172.17.49.12 Broadcast address:172.17.49.255 Subnet mask:255.255.255.0 [2006/06/23 12:36:52, 2] nmbd/nmbd_subnetdb.c:make_subnet(173) making subnet name:UNICAST_SUBNET Broadcast address:0.0.0.0 Subnet mask:0.0.0.0 [2006/06/23 12:36:52, 2] nmbd/nmbd_subnetdb.c:make_subnet(173) making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0 Subnet mask:0.0.0.0 [2006/06/23 12:36:52, 4] libsmb/namequery.c:startlmhosts(548) startlmhosts: Can't open lmhosts file /usr/local/samba/lib/lmhosts. Error was No such file or directory [2006/06/23 12:36:52, 2] nmbd/nmbd_lmhosts.c:load_lmhosts_file(41) load_lmhosts_file: Can't open lmhosts file /usr/local/samba/lib/lmhosts. Error was No such file or directory [2006/06/23 12:36:52, 3] nmbd/nmbd.c:main(808) Loaded hosts file /usr/local/samba/lib/lmhosts [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:create_workgroup_on_subnet(197) create_workgroup_on_subnet: creating group TIGR on subnet 172.17.49.12 [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name *<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "*<20>", "*<00>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name *<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<20>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name __SAMBA__<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "__SAMBA__<00>", "__SAMBA__<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<00>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name __SAMBA__<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) initiate_name_register_packet: sending registration for name IBRIX2<20> (bcast=Yes) to IP 172.17.49.255 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8756 to subnet 172.17.49.12. num_records:1 [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) initiate_name_register_packet: sending registration for name IBRIX2<03> (bcast=Yes) to IP 172.17.49.255 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8757 to subnet 172.17.49.12. num_records:2 [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) initiate_name_register_packet: sending registration for name IBRIX2<00> (bcast=Yes) to IP 172.17.49.255 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8758 to subnet 172.17.49.12. num_records:3 [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) initiate_name_register_packet: sending registration for name TIGR<00> (bcast=Yes) to IP 172.17.49.255 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8759 to subnet 172.17.49.12. num_records:4 [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) initiate_name_register_packet: sending registration for name TIGR<1e> (bcast=Yes) to IP 172.17.49.255 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8760 to subnet 172.17.49.12. num_records:5 [2006/06/23 12:36:52, 8] lib/util.c:is_myname(1879) is_myname("IBRIX2") returns 1 [2006/06/23 12:36:52, 3] nmbd/nmbd_serverlistdb.c:create_server_on_workgroup(159) create_server_on_workgroup: Created server entry IBRIX2 of type 40809b03 (ibrix2) on workgroup TIGR. [2006/06/23 12:36:52, 3] nmbd/nmbd_workgroupdb.c:initiate_myworkgroup_startup(267) initiate_myworkgroup_startup: Added server name entry IBRIX2 on subnet 172.17.49.12 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:create_workgroup_on_subnet(197) create_workgroup_on_subnet: creating group TIGR on subnet UNICAST_SUBNET [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name *<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "*<20>", "*<00>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name *<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<20>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name __SAMBA__<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "__SAMBA__<00>", "__SAMBA__<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<00>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name __SAMBA__<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<20>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<20>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name IBRIX2<20> with first IP 172.17.49.12 ttl=259200 nb_flags=64 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 5] lib/gencache.c:gencache_init(59) Opening cache file at /usr/local/samba/var/locks/gencache.tdb [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) wins_srv_is_dead: 172.17.5.33 is alive [2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 [2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) Registering name IBRIX2<20> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_multihomed_name_register_packet(362) initiate_multihomed_name_register_packet: sending registration for name IBRIX2<20> IP 172.17.49.12 (bcast=No) to IP 172.17.5.33 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.5.33) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8761 to subnet UNICAST_SUBNET. num_records:6 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<03>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name IBRIX2<03> with first IP 172.17.49.12 ttl=259200 nb_flags=64 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) wins_srv_is_dead: 172.17.5.33 is alive [2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 [2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) Registering name IBRIX2<03> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_multihomed_name_register_packet(362) initiate_multihomed_name_register_packet: sending registration for name IBRIX2<03> IP 172.17.49.12 (bcast=No) to IP 172.17.5.33 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.5.33) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8762 to subnet UNICAST_SUBNET. num_records:7 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<00>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name IBRIX2<00> with first IP 172.17.49.12 ttl=259200 nb_flags=64 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) wins_srv_is_dead: 172.17.5.33 is alive [2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 [2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) Registering name IBRIX2<00> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_multihomed_name_register_packet(362) initiate_multihomed_name_register_packet: sending registration for name IBRIX2<00> IP 172.17.49.12 (bcast=No) to IP 172.17.5.33 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.5.33) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8763 to subnet UNICAST_SUBNET. num_records:8 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "TIGR<00>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name TIGR<00> with first IP 172.17.49.12 ttl=259200 nb_flags=e4 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) wins_srv_is_dead: 172.17.5.33 is alive [2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 [2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) Registering name TIGR<00> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) initiate_name_register_packet: sending registration for name TIGR<00> (bcast=No) to IP 172.17.5.33 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.5.33) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8764 to subnet UNICAST_SUBNET. num_records:9 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "TIGR<1e>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name TIGR<1e> with first IP 172.17.49.12 ttl=259200 nb_flags=e4 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_get(294) Cache entry with key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12 couldn't be found [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_is_dead(111) wins_srv_is_dead: 172.17.5.33 is alive [2006/06/23 12:36:52, 6] lib/wins_srv.c:wins_srv_ip_tag(308) Current wins server for tag '*' with source 172.17.49.12 is 172.17.5.33 [2006/06/23 12:36:52, 6] nmbd/nmbd_nameregister.c:multihomed_register_one(321) Registering name TIGR<1e> IP 172.17.49.12 with WINS server 172.17.5.33 using tag '*' [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:initiate_name_register_packet(334) initiate_name_register_packet: sending registration for name TIGR<1e> (bcast=No) to IP 172.17.5.33 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.5.33) on port 137 [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:add_response_record(42) add_response_record: adding response record id:8765 to subnet UNICAST_SUBNET. num_records:10 [2006/06/23 12:36:52, 8] lib/util.c:is_myname(1879) is_myname("IBRIX2") returns 1 [2006/06/23 12:36:52, 3] nmbd/nmbd_serverlistdb.c:create_server_on_workgroup(159) create_server_on_workgroup: Created server entry IBRIX2 of type 40809b03 (ibrix2) on workgroup TIGR. [2006/06/23 12:36:52, 3] nmbd/nmbd_workgroupdb.c:initiate_myworkgroup_startup(267) initiate_myworkgroup_startup: Added server name entry IBRIX2 on subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "*<00>", "TIGR<1e>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "*<00>", "TIGR<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "*<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "*<00>", "IBRIX2<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "*<00>", "*<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "*<00>", "*<00>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name *<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "*<20>", "*<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "*<20>", "TIGR<1e>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "*<20>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "*<20>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name *<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<20>", "*<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<20>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<20>", "TIGR<1e>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<20>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "__SAMBA__<20>", "__SAMBA__<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name __SAMBA__<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "__SAMBA__<00>", "__SAMBA__<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "__SAMBA__<00>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name __SAMBA__<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<20>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<20>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<20>", "TIGR<1e>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<20>", "TIGR<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "IBRIX2<20>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<20> source=2 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "IBRIX2<03>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<03> source=2 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<00>", "*<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "IBRIX2<00>", "IBRIX2<00>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<00> source=2 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "TIGR<00>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "TIGR<00>", "TIGR<00>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name TIGR<00> source=2 [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "TIGR<1e>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "TIGR<1e>", "TIGR<1e>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name TIGR<1e> source=2 [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name *<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet REMOTE_BROADCAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "*<20>", "*<00>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name *<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet REMOTE_BROADCAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<20>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name __SAMBA__<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet REMOTE_BROADCAST_SUBNET [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "__SAMBA__<00>", "__SAMBA__<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "__SAMBA__<00>", "*<20>", 84 ) [2006/06/23 12:36:52, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name __SAMBA__<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet REMOTE_BROADCAST_SUBNET [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8756 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8761 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 62 from (172.17.5.33) port 137 [2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) nmb packet from 172.17.5.33(137) header: id=8761 opcode=Registration(5) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=IBRIX2<20> rr_type=32 rr_class=1 ttl=518400 answers 0 char `...1. hex 6000AC11310C [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) find_response_record: found response record id = 8761 on subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) wins_srv_alive: marking wins server 172.17.5.33 alive [2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) register_name_response: success in registering WINS name IBRIX2<20> IP 172.17.49.12 with 172.17.5.33. [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<20>", "TIGR<1e>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<20>", "TIGR<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<20>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "IBRIX2<20>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<20> source=2 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:52, 8] lib/util.c:is_myname(1879) is_myname("IBRIX2") returns 1 [2006/06/23 12:36:52, 3] nmbd/nmbd_sendannounce.c:send_host_announcement(208) send_host_announcement: type 809b03 for host IBRIX2 on subnet 172.17.49.12 for workgroup TIGR [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:send_mailslot(1917) send_mailslot: Sending to mailslot \MAILSLOT\BROWSE from IBRIX2<00> IP 172.17.49.12 to TIGR<1d> IP 172.17.49.255 [2006/06/23 12:36:52, 4] nmbd/nmbd_packets.c:debug_browse_data(100) debug_browse_data(): 0 char ..`...IBRIX2.... hex 01 00 60 ea 00 00 49 42 52 49 58 32 00 00 00 00 10 char ..............U. hex 00 00 00 00 00 00 04 09 03 9b 80 00 0f 01 55 aa 20 char ibrix2. hex 69 62 72 69 78 32 00 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 207 to (172.17.49.255) on port 138 [2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8757 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8762 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 62 from (172.17.5.33) port 137 [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 138 read: 207 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 207 from (172.17.49.12) port 138 [2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1829) discarding own dgram packet from 172.17.49.12:138 [2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) nmb packet from 172.17.5.33(137) header: id=8762 opcode=Registration(5) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=IBRIX2<03> rr_type=32 rr_class=1 ttl=518400 answers 0 char `...1. hex 6000AC11310C [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) find_response_record: found response record id = 8762 on subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) wins_srv_alive: marking wins server 172.17.5.33 alive [2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) register_name_response: success in registering WINS name IBRIX2<03> IP 172.17.49.12 with 172.17.5.33. [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "IBRIX2<03>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<03> source=2 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8758 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8763 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 62 from (172.17.5.33) port 137 [2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) nmb packet from 172.17.5.33(137) header: id=8763 opcode=Registration(5) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=IBRIX2<00> rr_type=32 rr_class=1 ttl=518400 answers 0 char `...1. hex 6000AC11310C [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) find_response_record: found response record id = 8763 on subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) wins_srv_alive: marking wins server 172.17.5.33 alive [2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) register_name_response: success in registering WINS name IBRIX2<00> IP 172.17.49.12 with 172.17.5.33. [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "IBRIX2<00>", "IBRIX2<00>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name IBRIX2<00> source=2 [2006/06/23 12:36:52, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(415) [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) Ticket in ccache[MEMORY:prtpub_cache] expiration Fri, 23 Jun 2006 22:36:52 EDT find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:52, 10] libsmb/clikrb5.c:ads_krb5_mk_req(508) [2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) ads_krb5_mk_req: Ticket (tigrdc2$@TIGR.ORG) in ccache (MEMORY:prtpub_cache) is valid until: (Fri, 23 Jun 2006 22:36:52 EDT - 1151116612) announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(610) [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) Got KRB5 session key of length 16 read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8759 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8764 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 62 from (172.17.5.33) port 137 [2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) nmb packet from 172.17.5.33(137) header: id=8764 opcode=Registration(5) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=TIGR<00> rr_type=32 rr_class=1 ttl=518400 answers 0 char ....1. hex E000AC11310C [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) find_response_record: found response record id = 8764 on subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) wins_srv_alive: marking wins server 172.17.5.33 alive [2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) register_name_response: success in registering WINS name TIGR<00> IP 172.17.49.12 with 172.17.5.33. [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "TIGR<00>", "TIGR<1e>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "TIGR<00>", "TIGR<00>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name TIGR<00> source=2 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8760 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:52, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:52, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.5.33 lastport 137 read: 62 [2006/06/23 12:36:52, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8765 [2006/06/23 12:36:52, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 62 from (172.17.5.33) port 137 [2006/06/23 12:36:52, 4] libsmb/nmblib.c:debug_nmb_packet(112) nmb packet from 172.17.5.33(137) header: id=8765 opcode=Registration(5) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=TIGR<1e> rr_type=32 rr_class=1 ttl=518400 answers 0 char ....1. hex E000AC11310C [2006/06/23 12:36:52, 4] nmbd/nmbd_responserecordsdb.c:find_response_record_on_subnet(183) find_response_record: found response record id = 8765 on subnet UNICAST_SUBNET [2006/06/23 12:36:52, 10] lib/gencache.c:gencache_del(217) Deleting cache entry (key = WINS_SRV_DEAD/172.17.5.33,172.17.49.12) [2006/06/23 12:36:52, 4] lib/wins_srv.c:wins_srv_alive(128) wins_srv_alive: marking wins server 172.17.5.33 alive [2006/06/23 12:36:52, 5] nmbd/nmbd_nameregister.c:register_name_response(147) register_name_response: success in registering WINS name TIGR<1e> IP 172.17.49.12 with 172.17.5.33. [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) [2006/06/23 12:36:52, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 0 == memcmp( "TIGR<1e>", "TIGR<1e>", 84 ) [2006/06/23 12:36:52, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(128) find_name_on_subnet: on subnet UNICAST_SUBNET - found name TIGR<1e> source=2 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:52, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:52, 5] smbd/connection.c:claim_connection(170) claiming 0 [2006/06/23 12:36:52, 3] printing/printing.c:start_background_queue(1379) start_background_queue: Starting background LPQ thread [2006/06/23 12:36:52, 5] printing/printing.c:start_background_queue(1389) start_background_queue: background LPQ thread started [2006/06/23 12:36:52, 5] smbd/connection.c:claim_connection(170) claiming smbd lpq backend 0 [2006/06/23 12:36:52, 5] printing/printing.c:start_background_queue(1400) start_background_queue: background LPQ thread waiting for messages [2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) bind succeeded on port 445 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:36:52, 10] lib/util_sock.c:open_socket_in(835) bind succeeded on port 139 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:36:52, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:36:52, 2] smbd/server.c:open_sockets_smbd(336) waiting for a connection [2006/06/23 12:36:53, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:53, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080612) - last(1151080612) < 900 [2006/06/23 12:36:53, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:53, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080613) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8756 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8757 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8758 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8759 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8760 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8756 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8757 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8758 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8759 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:54, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8760 [2006/06/23 12:36:54, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:54, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:54, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:54, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:55, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:55, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080614) - last(1151080612) < 900 [2006/06/23 12:36:55, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:55, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080615) - last(1151080612) < 900 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:56, 5] libsmb/nmblib.c:send_udp(777) Sending a packet of len 68 to (172.17.49.255) on port 137 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8756 [2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) retransmit_or_expire_response_records: timeout for packet id 8756 to IP 172.17.49.255 on subnet 172.17.49.12 [2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) register_name_timeout_response: success in registering name IBRIX2<20> on subnet 172.17.49.12. [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<20>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<20>", "*<20>", 84 ) [2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) find_name_on_subnet: on subnet 172.17.49.12 - name IBRIX2<20> NOT FOUND [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<20>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<20>", "*<20>", 84 ) [2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name IBRIX2<20> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 [2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) retransmit_or_expire_response_records: timeout for packet id 8757 to IP 172.17.49.255 on subnet 172.17.49.12 [2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) register_name_timeout_response: success in registering name IBRIX2<03> on subnet 172.17.49.12. [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<03>", "*<20>", 84 ) [2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) find_name_on_subnet: on subnet 172.17.49.12 - name IBRIX2<03> NOT FOUND [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<03>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<03>", "*<20>", 84 ) [2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name IBRIX2<03> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 [2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) retransmit_or_expire_response_records: timeout for packet id 8758 to IP 172.17.49.255 on subnet 172.17.49.12 [2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) register_name_timeout_response: success in registering name IBRIX2<00> on subnet 172.17.49.12. [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<00>", "*<20>", 84 ) [2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) find_name_on_subnet: on subnet 172.17.49.12 - name IBRIX2<00> NOT FOUND [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "IBRIX2<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "IBRIX2<00>", "*<20>", 84 ) [2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name IBRIX2<00> with first IP 172.17.49.12 ttl=0 nb_flags=60 to subnet 172.17.49.12 [2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) retransmit_or_expire_response_records: timeout for packet id 8759 to IP 172.17.49.255 on subnet 172.17.49.12 [2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) register_name_timeout_response: success in registering name TIGR<00> on subnet 172.17.49.12. [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "TIGR<00>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) find_name_on_subnet: on subnet 172.17.49.12 - name TIGR<00> NOT FOUND [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<00>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<03>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<00>", "IBRIX2<20>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "TIGR<00>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name TIGR<00> with first IP 172.17.49.12 ttl=0 nb_flags=e0 to subnet 172.17.49.12 [2006/06/23 12:36:56, 4] nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1615) retransmit_or_expire_response_records: timeout for packet id 8760 to IP 172.17.49.255 on subnet 172.17.49.12 [2006/06/23 12:36:56, 5] nmbd/nmbd_nameregister.c:register_name_timeout_response(276) register_name_timeout_response: success in registering name TIGR<1e> on subnet 172.17.49.12. [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "TIGR<1e>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:56, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(134) find_name_on_subnet: on subnet 172.17.49.12 - name TIGR<1e> NOT FOUND [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() 1 == memcmp( "TIGR<1e>", "TIGR<00>", 84 ) [2006/06/23 12:36:56, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70) nmbd_subnetdb:namelist_entry_compare() -1 == memcmp( "TIGR<1e>", "__SAMBA__<00>", 84 ) [2006/06/23 12:36:56, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(246) add_name_to_subnet: Added netbios name TIGR<1e> with first IP 172.17.49.12 ttl=0 nb_flags=e0 to subnet 172.17.49.12 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8757 [2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8758 [2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8759 [2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 10] lib/util_sock.c:read_udp_socket(289) read_udp_socket: lastip 172.17.49.12 lastport 137 read: 68 [2006/06/23 12:36:56, 10] libsmb/nmblib.c:parse_nmb(506) parse_nmb: packet id = 8760 [2006/06/23 12:36:56, 5] libsmb/nmblib.c:read_packet(755) Received a packet of len 68 from (172.17.49.12) port 137 [2006/06/23 12:36:56, 7] nmbd/nmbd_packets.c:listen_for_packets(1803) discarding own bcast packet from 172.17.49.12:137 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:36:56, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:36:56, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:37:06, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:37:06, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080616) - last(1151080612) < 900 [2006/06/23 12:37:06, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:37:06, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:37:16, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080626) - last(1151080612) < 900 [2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:37:16, 8] lib/util.c:is_myname(1879) is_myname("IBRIX2") returns 1 [2006/06/23 12:37:16, 8] lib/util.c:is_myname(1879) is_myname("IBRIX2") returns 1 [2006/06/23 12:37:16, 3] nmbd/nmbd_serverlistdb.c:write_browse_list(421) write_browse_list: Wrote browse list into file /usr/local/samba/var/locks/browse.dat [2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:37:16, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:37:26, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080636) - last(1151080612) < 900 [2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:37:26, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:37:31, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:37:31, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:37:31, 3] smbd/oplock.c:init_oplocks(871) open_oplock_ipc: initializing messages. [2006/06/23 12:37:31, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(259) Linux kernel oplocks enabled [2006/06/23 12:37:31, 4] lib/time.c:TimeInit(142) TimeInit: Serverzone is 14400 [2006/06/23 12:37:31, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:31, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:31, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 133 [2006/06/23 12:37:31, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x85 [2006/06/23 12:37:31, 3] smbd/process.c:process_smb(1194) Transaction 0 of length 137 [2006/06/23 12:37:31, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:31, 5] lib/util.c:show_msg(464) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2006/06/23 12:37:31, 10] lib/util.c:dump_data(2058) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2006/06/23 12:37:31, 3] smbd/process.c:switch_message(993) switch message SMBnegprot (pid 23622) conn 0x0 [2006/06/23 12:37:31, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:31, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:31, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:31, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [PC NETWORK PROGRAM 1.0] [2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [LANMAN1.0] [2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [Windows for Workgroups 3.1a] [2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [LM1.2X002] [2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [LANMAN2.1] [2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(486) Requested protocol [NT LM 0.12] [2006/06/23 12:37:31, 10] lib/util.c:set_remote_arch(2033) set_remote_arch: Client arch is 'Win2K' [2006/06/23 12:37:31, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:37:31, 5] smbd/connection.c:claim_connection(170) claiming 0 [2006/06/23 12:37:31, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:37:31, 10] lib/util.c:name_to_fqdn(2675) name_to_fqdn: lookup for IBRIX2 -> IBRIX2.tigr.org. [2006/06/23 12:37:31, 3] smbd/negprot.c:reply_nt1(357) using SPNEGO [2006/06/23 12:37:31, 3] smbd/negprot.c:reply_negprot(579) Selected protocol NT LM 0.12 [2006/06/23 12:37:31, 5] smbd/negprot.c:reply_negprot(585) negprot index=5 [2006/06/23 12:37:31, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:31, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=17920 (0x4600) smb_vwv[ 8]= 92 (0x5C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=22999 (0x59D7) smb_vwv[13]=58194 (0xE352) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]=26880 (0x6900) smb_bcc=105 [2006/06/23 12:37:31, 10] lib/util.c:dump_data(2058) [000] 69 62 72 69 78 32 00 00 00 00 00 00 00 00 00 00 ibrix2.. ........ [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 24 `W..+... ...M0K.$ [020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. .......* [030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+..... [040] 37 02 02 0A A3 23 30 21 A0 1F 1B 1D 63 69 66 73 7....#0! ....cifs [050] 2F 69 62 72 69 78 32 2E 74 69 67 72 2E 6F 72 67 /ibrix2. tigr.org [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:37:31, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:31, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:31, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:31, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:31, 3] smbd/process.c:process_smb(1194) Transaction 1 of length 2096 [2006/06/23 12:37:31, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:31, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=5760 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:31, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:31, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:31, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:31, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:31, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:31, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:31, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:31, 10] lib/util.c:set_remote_arch(2033) set_remote_arch: Client arch is 'WinXP' [2006/06/23 12:37:31, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 100 [2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:31, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:31, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=5760 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1438 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x59e [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 2 of length 1442 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=1438 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=5824 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1438 (0x59E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1276 (0x4FC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1379 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 101 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1210 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5824 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 3 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=5888 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 102 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=5888 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 4 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=5952 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 103 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=5952 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 5 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6016 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 104 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=104 smb_mid=6016 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 6 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6080 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 105 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=105 smb_mid=6080 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 7 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6144 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 106 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=106 smb_mid=6144 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 8 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6208 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 107 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=107 smb_mid=6208 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 9 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6272 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 108 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=108 smb_mid=6272 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1438 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x59e [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 10 of length 1442 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=1438 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6336 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1438 (0x59E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1276 (0x4FC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1379 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 109 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1210 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=109 smb_mid=6336 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 11 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6400 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 110 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=110 smb_mid=6400 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 12 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6464 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 111 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=111 smb_mid=6464 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2092 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x82c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 13 of length 2096 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=2092 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6528 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 2092 (0x82C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1930 (0x78A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=2033 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 07 86 06 06 2B 06 01 05 05 02 A0 82 07 7A `.....+. .......z [010] 30 82 07 76 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..v.$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 07 4C 04 82 +.....7. .....L.. [040] 07 48 60 82 07 44 06 09 2A 86 48 86 F7 12 01 02 .H`..D.. *.H..... [050] 02 01 00 6E 82 07 33 30 82 07 2F A0 03 02 01 05 ...n..30 ../..... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 06 5E 61 82 06 5A 30 82 06 56 A0 03 02 01 05 A1 .^a..Z0. .V...... [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 06 1D 30 82 06 19 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 06 0B 04 82 06 07 08 9D BA 3A 20 B9 13 ........ ....: .. [0D0] A2 A3 C5 66 82 1A 02 0D 6E 28 74 87 95 A5 0E 21 ...f.... n(t....! [0E0] A7 1F C4 DB A3 06 68 8C 88 D9 BC 94 76 CB 44 00 ......h. ....v.D. [0F0] 43 95 0D C1 14 10 B0 4E 5A A6 FA A1 9B 8C 0F D7 C......N Z....... [100] E6 11 2F 52 E6 A8 78 11 BC 14 10 DA 39 2A 3B 63 ../R..x. ....9*;c [110] EE 4C 7C 80 AF 05 B1 C4 1A CC 3C 6F 37 83 9A 23 .L|..... ... [160] 98 6D EA 96 BE 8E E8 84 0E 6E 37 D4 98 93 A5 C8 .m...... .n7..... [170] 70 43 9E 2B A1 7B 63 1A 7B E7 63 9C 55 D9 D3 DA pC.+.{c. {.c.U... [180] 25 EF 88 F0 34 95 78 45 1D E2 D4 FB D7 FB 42 EE %...4.xE ......B. [190] EE C8 F5 36 85 E4 78 A4 BA 87 2D BD 89 07 20 20 ...6..x. ..-... [1A0] 75 56 A4 EB FF AD 77 C3 CB 09 28 21 9A 16 B4 80 uV....w. ..(!.... [1B0] 6B 73 4F 59 B8 24 25 A4 C0 B1 95 5D E8 AD 1B 47 ksOY.$%. ...]...G [1C0] 2C EC 48 19 7D 99 18 49 3F 01 61 8D 06 AA E1 F1 ,.H.}..I ?.a..... [1D0] 00 ED 32 0E CA 8F 5D 03 9A B8 F7 35 56 ED 17 A8 ..2...]. ...5V... [1E0] 96 5C CA 15 97 08 36 E6 61 A4 5A E6 2A 4E 9B 46 .\....6. a.Z.*N.F [1F0] EF 36 FE D9 B3 29 1E E8 3F 0D CF 00 A6 62 4F 35 .6...).. ?....bO5 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 112 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1864 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=112 smb_mid=6528 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1438 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x59e [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 14 of length 1442 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=1438 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6592 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1438 (0x59E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1276 (0x4FC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1379 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 113 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1210 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=113 smb_mid=6592 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 236 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0xec [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 15 of length 240 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6656 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 114 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 40 [2006/06/23 12:37:32, 5] auth/auth.c:make_auth_context_subsystem(503) Making default auth method list for security=ADS [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend rhosts [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'rhosts' [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend hostsequiv [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'hostsequiv' [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam' [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam_ignoredomain [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam_ignoredomain' [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend unix [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'unix' [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend winbind [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'winbind' [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend smbserver [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'smbserver' [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend trustdomain [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'trustdomain' [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend ntdomain [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'ntdomain' [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend guest [2006/06/23 12:37:32, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'guest' [2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match ntdomain [2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method ntdomain has a valid init [2006/06/23 12:37:32, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method winbind has a valid init [2006/06/23 12:37:32, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module winbind did not want to specify a challenge [2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2006/06/23 12:37:32, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2006/06/23 12:37:32, 5] lib/util.c:dump_data(2058) [000] 9D D2 88 C8 06 DC CA 92 ........ [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=262 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=114 smb_mid=6656 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 173 (0xAD) smb_bcc=219 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] A1 81 AA 30 81 A7 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 91 04 81 8E 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 TLMSSP.. .......0 [030] 00 00 00 B5 82 89 60 9D D2 88 C8 06 DC CA 92 00 ......`. ........ [040] 00 00 00 00 00 00 00 56 00 56 00 38 00 00 00 54 .......V .V.8...T [050] 00 49 00 47 00 52 00 02 00 08 00 54 00 49 00 47 .I.G.R.. ...T.I.G [060] 00 52 00 01 00 0C 00 49 00 42 00 52 00 49 00 58 .R.....I .B.R.I.X [070] 00 32 00 04 00 10 00 74 00 69 00 67 00 72 00 2E .2.....t .i.g.r.. [080] 00 6F 00 72 00 67 00 03 00 1E 00 69 00 62 00 72 .o.r.g.. ...i.b.r [090] 00 69 00 78 00 32 00 2E 00 74 00 69 00 67 00 72 .i.x.2.. .t.i.g.r [0A0] 00 2E 00 6F 00 72 00 67 00 00 00 00 00 55 00 6E ...o.r.g .....U.n [0B0] 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 00 61 .i.x...S .a.m.b.a [0C0] 00 20 00 33 00 2E 00 30 00 2E 00 32 00 32 00 00 . .3...0 ...2.2.. [0D0] 00 54 00 49 00 47 00 52 00 00 00 .T.I.G.R ... [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 350 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x15e [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 16 of length 354 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=350 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=114 smb_mid=6720 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 350 (0x15E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 188 (0xBC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=291 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] A1 81 B9 30 81 B6 A2 81 B3 04 81 B0 4E 54 4C 4D ...0.... ....NTLM [010] 53 53 50 00 03 00 00 00 18 00 18 00 70 00 00 00 SSP..... ....p... [020] 18 00 18 00 88 00 00 00 08 00 08 00 48 00 00 00 ........ ....H... [030] 0C 00 0C 00 50 00 00 00 14 00 14 00 5C 00 00 00 ....P... ....\... [040] 10 00 10 00 A0 00 00 00 15 82 88 62 05 01 28 0A ........ ...b..(. [050] 00 00 00 0F 54 00 49 00 47 00 52 00 72 00 61 00 ....T.I. G.R.r.a. [060] 6A 00 65 00 65 00 76 00 4B 00 52 00 45 00 41 00 j.e.e.v. K.R.E.A. [070] 50 00 45 00 52 00 2D 00 58 00 50 00 A7 8F E6 19 P.E.R.-. X.P..... [080] 0A F6 F2 C6 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 40 00 86 F8 C0 CF 14 00 38 7A 84 0C ....@... ....8z.. [0A0] 24 E1 54 C6 F0 7C 5B 38 83 21 E7 A6 70 E3 23 9A $.T..|[8 .!..p.#. [0B0] 72 BD 5E E0 0A 2E 1D AB 3D 72 F0 EA 00 57 00 69 r.^..... =r...W.i [0C0] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0D0] 00 30 00 32 00 20 00 53 00 65 00 72 00 76 00 69 .0.2. .S .e.r.v.i [0E0] 00 63 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 .c.e. .P .a.c.k. [0F0] 00 32 00 20 00 32 00 36 00 30 00 30 00 00 00 57 .2. .2.6 .0.0...W [100] 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 .i.n.d.o .w.s. .2 [110] 00 30 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 .0.0.2. .5...1.. [120] 00 00 00 ... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(662) Got user=[rajeev] domain=[TIGR] workstation=[KREAPER-XP] len1=24 len2=24 [2006/06/23 12:37:32, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66) auth_context challenge set by NTLMSSP callback (NTLM2) [2006/06/23 12:37:32, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67) challenge is: [2006/06/23 12:37:32, 5] lib/util.c:dump_data(2058) [000] A3 72 22 53 95 C3 E2 C7 .r"S.... [2006/06/23 12:37:32, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:37:32, 5] auth/auth_util.c:make_user_info_map(163) make_user_info_map: Mapping user [TIGR]\[rajeev] from workstation [KREAPER-XP] [2006/06/23 12:37:32, 10] lib/gencache.c:gencache_get(272) Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Fri Jun 23 12:45:46 2006 [2006/06/23 12:37:32, 10] lib/gencache.c:gencache_set(130) Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Fri Jun 23 12:47:32 2006 (600 seconds ahead) [2006/06/23 12:37:32, 4] libsmb/namequery_dc.c:ads_dc_name(43) ads_dc_name: domain=TIGR [2006/06/23 12:37:32, 6] libads/ldap.c:ads_find_dc(217) ads_find_dc: looking for realm 'TIGR.ORG' [2006/06/23 12:37:32, 8] libsmb/namequery.c:get_sorted_dc_list(1433) get_sorted_dc_list: attempting lookup using [ads] [2006/06/23 12:37:32, 10] libsmb/namequery.c:internal_resolve_name(1028) internal_resolve_name: looking up dc.tigr.org#20 [2006/06/23 12:37:32, 10] lib/gencache.c:gencache_get(272) Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006 [2006/06/23 12:37:32, 5] libsmb/namecache.c:namecache_fetch(201) name dc.tigr.org#20 found. [2006/06/23 12:37:32, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) remove_duplicate_addrs2: looking for duplicate address/port pairs [2006/06/23 12:37:32, 4] libsmb/namequery.c:get_dc_list(1406) get_dc_list: returning 1 ip addresses in an ordered list [2006/06/23 12:37:32, 4] libsmb/namequery.c:get_dc_list(1407) get_dc_list: 172.17.5.33:389 [2006/06/23 12:37:32, 5] libads/ldap.c:ads_try_connect(126) ads_try_connect: trying ldap server '172.17.5.33' port 389 [2006/06/23 12:37:32, 3] libads/ldap.c:ads_connect(288) Connected to LDAP server 172.17.5.33 [2006/06/23 12:37:32, 3] libads/ldap.c:ads_server_info(2542) got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG [2006/06/23 12:37:32, 4] libads/ldap.c:ads_server_info(2548) time offset is 0 seconds [2006/06/23 12:37:32, 4] libsmb/namequery_dc.c:ads_dc_name(63) ads_dc_name: using server='TIGRDC2' IP=172.17.5.33 [2006/06/23 12:37:32, 3] libsmb/cliconnect.c:cli_start_connection(1389) Connecting to host=TIGRDC2 [2006/06/23 12:37:32, 3] lib/util_sock.c:open_socket_out(870) Connecting to 172.17.5.33 at port 445 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,183) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,183) wrote 183 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 174 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23622 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=34688 (0x8780) smb_vwv[12]=14395 (0x383B) smb_vwv[13]=58195 (0xE353) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23622 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=34688 (0x8780) smb_vwv[12]=14395 (0x383B) smb_vwv[13]=58195 (0xE353) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,92) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,92) wrote 92 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 179 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23622 smb_uid=20482 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23622 smb_uid=20482 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,82) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,82) wrote 82 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 48 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_init_creds(233) cli_init_creds: user domain [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,104) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,104) wrote 104 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 103 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 2560 (0xA00) smb_vwv[ 3]= 384 (0x180) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) Bind RPC Pipe[800a]: \lsarpc auth_type 0, auth_level 0 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [010] 00 00 00 00 .... [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0b [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0048 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_rb [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0018 num_contexts: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001c context_id : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001e num_transfer_syntaxes: 01 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001f smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 data : 12345778 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 data : 1234 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0026 data : abcd [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0028 data : ef 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002a data : 01 23 45 67 89 ab [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 version: 00000000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 data : 8a885d04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0038 data : 1ceb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 003a data : 11c9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003c data : 9f e8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003e data : 08 00 2b 10 48 60 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 version: 00000002 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32778 (0x800A) smb_bcc=87 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,158) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,158) wrote 158 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 124 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [010] 00 B8 10 B8 10 04 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [010] 00 B8 10 B8 10 04 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 68 at offset 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a returned 68 bytes. [2006/06/23 12:37:32, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a bind request returned ok. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_ba [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 0106cb04 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_rpc_addr_str [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0018 len: 000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 001a str: \PIPE\lsass. [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000026 smb_io_rpc_results [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 num_results: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002c result : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002e reason : 0000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 data : 8a885d04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0034 data : 1ceb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0036 data : 11c9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0038 data : 9f e8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003a data : 08 00 2b 10 48 60 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 version: 00000002 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:check_bind_response(1701) check_bind_response: accepted! [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine TIGRDC2 and bound anonymously. [2006/06/23 12:37:32, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(142) init_lsa_sec_qos [2006/06/23 12:37:32, 5] rpc_parse/parse_lsa.c:init_q_open_pol(261) init_open_pol: attr:0 da:1 [2006/06/23 12:37:32, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(193) init_lsa_obj_attr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_q_open_pol [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr : 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 system_name: 005c [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000008 lsa_io_obj_attr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 len : 00000018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c ptr_root_dir: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 ptr_obj_name: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 attributes : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 ptr_sec_desc: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c ptr_sec_qos : 00000001 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 lsa_io_obj_qos sec_qos [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 len : 0000000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 sec_imp_level : 0002 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0026 sec_ctxt_mode : 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0027 effective_only: 00 [2006/06/23 12:37:32, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181) lsa_io_sec_qos: length c does not match size 8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 des_access: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000002 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000002c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 0006 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32778 (0x800A) smb_bcc=83 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 44 00 00 00 02 00 00 00 2C .......D ......., [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 01 ........ ........ [050] 00 00 00 ... [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,154) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,154) wrote 154 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 104 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 F9 BF 7A ........ .......z [020] 6C 2C 2A 5F 4E 81 30 85 E0 2B FD AE 4B 00 00 00 l,*_N.0. .+..K... [030] 00 . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 F9 BF 7A ........ .......z [020] 6C 2C 2A 5F 4E 81 30 85 E0 2B FD AE 4B 00 00 00 l,*_N.0. .+..K... [030] 00 . [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0030 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000002 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 48 at offset 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a returned 48 bytes. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_r_open_pol [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_pol_hnd [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 data1: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 data2: 6c7abff9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 data3: 2a2c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a data4: 4e5f [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 000c data5: 81 30 85 e0 2b fd ae 4b [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 0014 status: NT_STATUS_OK [2006/06/23 12:37:32, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(477) init_q_enum_trust_dom [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_q_enum_trust_dom [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_pol_hnd [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 data1: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 data2: 6c7abff9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 data3: 2a2c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a data4: 4e5f [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 000c data5: 81 30 85 e0 2b fd ae 4b [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 enum_context : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 preferred_len: 00010000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0034 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000003 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000001c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 000d [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=134 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 52 (0x34) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 52 (0x34) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32778 (0x800A) smb_bcc=67 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 34 00 00 00 03 00 00 00 1C .......4 ........ [020] 00 00 00 00 00 0D 00 00 00 00 00 F9 BF 7A 6C 2C ........ .....zl, [030] 2A 5F 4E 81 30 85 E0 2B FD AE 4B 00 00 00 00 00 *_N.0..+ ..K..... [040] 00 01 00 ... [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,138) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,138) wrote 138 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 96 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0028 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000003 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000010 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 40 at offset 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \lsarpc fnum 0x800a returned 32 bytes. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_r_enum_trust_dom [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 enum_context: 80000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 count: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 ptr: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 000c status: NT_STATUS_NO_MORE_ENTRIES [2006/06/23 12:37:32, 10] libsmb/trusts_util.c:enumerate_domain_trusts(196) enumerate_domain_trusts: shutting down connection... [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,45) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,45) wrote 45 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=8 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) cli_rpc_pipe_close: closed pipe \lsarpc to machine TIGRDC2 [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,39) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,39) wrote 39 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=12290 smb_pid=23622 smb_uid=20482 smb_mid=9 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] lib/gencache.c:gencache_get(294) Cache entry with key = TDOM/TIGR couldn't be found [2006/06/23 12:37:32, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) no entry for trusted domain TIGR found. [2006/06/23 12:37:32, 5] auth/auth_util.c:make_user_info(69) attempting to make a user_info for rajeev (rajeev) [2006/06/23 12:37:32, 5] auth/auth_util.c:make_user_info(79) making strings for rajeev's user_info struct [2006/06/23 12:37:32, 5] auth/auth_util.c:make_user_info(121) making blobs for rajeev's user_info struct [2006/06/23 12:37:32, 10] auth/auth_util.c:make_user_info(139) made an encrypted user_info for rajeev (rajeev) [2006/06/23 12:37:32, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [TIGR]\[rajeev]@[KREAPER-XP] with the new password interface [2006/06/23 12:37:32, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [TIGR]\[rajeev]@[KREAPER-XP] [2006/06/23 12:37:32, 10] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2006/06/23 12:37:32, 10] auth/auth.c:check_ntlm_password(233) challenge is: [2006/06/23 12:37:32, 5] lib/util.c:dump_data(2058) [000] A3 72 22 53 95 C3 E2 C7 .r"S.... [2006/06/23 12:37:32, 10] auth/auth.c:check_ntlm_password(259) check_ntlm_password: guest had nothing to say [2006/06/23 12:37:32, 8] lib/util.c:is_myname(1879) is_myname("TIGR") returns 0 [2006/06/23 12:37:32, 6] auth/auth_sam.c:check_samstrict_security(383) check_samstrict_security: TIGR is not one of my local names (ROLE_DOMAIN_MEMBER) [2006/06/23 12:37:32, 10] auth/auth.c:check_ntlm_password(259) check_ntlm_password: sam had nothing to say [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 4] libsmb/namequery_dc.c:ads_dc_name(43) ads_dc_name: domain=TIGR [2006/06/23 12:37:32, 6] libads/ldap.c:ads_find_dc(217) ads_find_dc: looking for realm 'TIGR.ORG' [2006/06/23 12:37:32, 8] libsmb/namequery.c:get_sorted_dc_list(1433) get_sorted_dc_list: attempting lookup using [ads] [2006/06/23 12:37:32, 10] libsmb/namequery.c:internal_resolve_name(1028) internal_resolve_name: looking up dc.tigr.org#20 [2006/06/23 12:37:32, 10] lib/gencache.c:gencache_get(272) Returning valid cache entry: key = NBT/DC.TIGR.ORG#20, value = 172.17.5.33:0, timeout = Fri Jun 23 12:45:02 2006 [2006/06/23 12:37:32, 5] libsmb/namecache.c:namecache_fetch(201) name dc.tigr.org#20 found. [2006/06/23 12:37:32, 10] libsmb/namequery.c:remove_duplicate_addrs2(320) remove_duplicate_addrs2: looking for duplicate address/port pairs [2006/06/23 12:37:32, 4] libsmb/namequery.c:get_dc_list(1406) get_dc_list: returning 1 ip addresses in an ordered list [2006/06/23 12:37:32, 4] libsmb/namequery.c:get_dc_list(1407) get_dc_list: 172.17.5.33:389 [2006/06/23 12:37:32, 5] libads/ldap.c:ads_try_connect(126) ads_try_connect: trying ldap server '172.17.5.33' port 389 [2006/06/23 12:37:32, 3] libads/ldap.c:ads_connect(288) Connected to LDAP server 172.17.5.33 [2006/06/23 12:37:32, 3] libads/ldap.c:ads_server_info(2542) got ldap server name tigrdc2@TIGR.ORG, using bind path: dc=TIGR,dc=ORG [2006/06/23 12:37:32, 4] libads/ldap.c:ads_server_info(2548) time offset is 0 seconds [2006/06/23 12:37:32, 4] libsmb/namequery_dc.c:ads_dc_name(63) ads_dc_name: using server='TIGRDC2' IP=172.17.5.33 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for TIGRDC2 [2006/06/23 12:37:32, 3] libsmb/cliconnect.c:cli_start_connection(1389) Connecting to host=TIGRDC2 [2006/06/23 12:37:32, 3] lib/util_sock.c:open_socket_out(870) Connecting to 172.17.5.33 at port 445 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 16384 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2006/06/23 12:37:32, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,183) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,183) wrote 183 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 174 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23622 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=19840 (0x4D80) smb_vwv[12]=15616 (0x3D00) smb_vwv[13]=58195 (0xE353) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=174 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23622 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12815 (0x320F) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=19840 (0x4D80) smb_vwv[12]=15616 (0x3D00) smb_vwv[13]=58195 (0xE353) smb_vwv[14]=50838 (0xC696) smb_vwv[15]=61441 (0xF001) smb_vwv[16]= 0 (0x0) smb_bcc=105 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 49 BB 4D 69 D7 68 42 49 95 EE 1D 7E BA FE E4 A1 I.Mi.hBI ...~.... [010] 60 57 06 06 2B 06 01 05 05 02 A0 4D 30 4B A0 30 `W..+... ...M0K.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 17 30 15 A0 13 1B 11 74 69 67 72 64 63 32 24 ..0..... tigrdc2$ [060] 40 54 49 47 52 2E 4F 52 47 @TIGR.OR G [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,92) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,92) wrote 92 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 179 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23622 smb_uid=12291 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 23 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 #W.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=179 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=23622 smb_uid=12291 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 179 (0xB3) smb_vwv[ 2]= 0 (0x0) smb_bcc=138 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 23 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 #W.i.n.d .o.w.s. [010] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [020] 00 30 00 30 00 33 00 20 00 33 00 37 00 39 00 30 .0.0.3. .3.7.9.0 [030] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [040] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. [050] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [060] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 32 .S.e.r.v .e.r. .2 [070] 00 30 00 30 00 33 00 20 00 35 00 2E 00 32 00 00 .0.0.3. .5...2.. [080] 00 54 00 49 00 47 00 52 00 00 .T.I.G.R .. [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,82) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,82) wrote 82 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 48 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_init_creds(233) cli_init_creds: user domain [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,108) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,108) wrote 108 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 103 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 3072 (0xC00) smb_vwv[ 3]= 384 (0x180) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) Bind RPC Pipe[800c]: \NETLOGON auth_type 0, auth_level 0 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. [010] 01 00 00 00 .... [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0b [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0048 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_rb [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0018 num_contexts: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001c context_id : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001e num_transfer_syntaxes: 01 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001f smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 data : 12345678 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 data : 1234 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0026 data : abcd [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0028 data : ef 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002a data : 01 23 45 67 cf fb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 version: 00000001 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 data : 8a885d04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0038 data : 1ceb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 003a data : 11c9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003c data : 9f e8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003e data : 08 00 2b 10 48 60 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 version: 00000002 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32780 (0x800C) smb_bcc=87 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 04 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,158) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,158) wrote 158 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 124 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 04 00 00 H....... .D...... [010] 00 B8 10 B8 10 05 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 04 00 00 H....... .D...... [010] 00 B8 10 B8 10 05 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000004 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 68 at offset 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c returned 68 bytes. [2006/06/23 12:37:32, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c bind request returned ok. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_ba [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 0106cb05 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_rpc_addr_str [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0018 len: 000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 001a str: \PIPE\lsass. [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000026 smb_io_rpc_results [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 num_results: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002c result : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002e reason : 0000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 data : 8a885d04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0034 data : 1ceb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0036 data : 11c9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0038 data : 9f e8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003a data : 08 00 2b 10 48 60 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 version: 00000002 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:check_bind_response(1701) check_bind_response: accepted! [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2246) cli_rpc_pipe_open_noauth: opened pipe \NETLOGON to machine TIGRDC2 and bound anonymously. [2006/06/23 12:37:32, 4] passdb/secrets.c:secrets_fetch_trust_account_password(282) Using cleartext machine password [2006/06/23 12:37:32, 4] rpc_client/cli_netlogon.c:rpccli_net_req_chal(46) cli_net_req_chal: LSA Request Challenge from IBRIX2 to \\TIGRDC2 [2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_q_req_chal(679) init_q_req_chal: 679 [2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_q_req_chal(688) init_q_req_chal: 688 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_q_req_chal [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 undoc_buffer: 00000001 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 0000000a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 0000000a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.T.I.G.R.D.C.2... [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 uni_max_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c uni_str_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0030 buffer : I.B.R.I.X.2... [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 00003e smb_io_chal [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003e data: 88 17 be e6 a0 15 8f 16 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 005e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000005 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000046 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 0004 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=176 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 94 (0x5E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 94 (0x5E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32780 (0x800C) smb_bcc=109 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 5E 00 00 00 05 00 00 00 46 .......^ .......F [020] 00 00 00 00 00 04 00 01 00 00 00 0A 00 00 00 00 ........ ........ [030] 00 00 00 0A 00 00 00 5C 00 5C 00 54 00 49 00 47 .......\ .\.T.I.G [040] 00 52 00 44 00 43 00 32 00 00 00 07 00 00 00 00 .R.D.C.2 ........ [050] 00 00 00 07 00 00 00 49 00 42 00 52 00 49 00 58 .......I .B.R.I.X [060] 00 32 00 00 00 88 17 BE E6 A0 15 8F 16 .2...... ..... [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,180) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,180) wrote 180 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 92 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 5E 05 00 02 03 10 00 00 00 24 00 00 00 05 00 00 ^....... .$...... [010] 00 0C 00 00 00 00 00 00 00 CF 54 1F 9F 8D 4D 14 ........ ..T...M. [020] 93 00 00 00 00 ..... [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 5E 05 00 02 03 10 00 00 00 24 00 00 00 05 00 00 ^....... .$...... [010] 00 0C 00 00 00 00 00 00 00 CF 54 1F 9F 8D 4D 14 ........ ..T...M. [020] 93 00 00 00 00 ..... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0024 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000005 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 36, data_len 12, ss_len 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 36 at offset 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c returned 24 bytes. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_r_req_chal [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_chal [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0000 data: cf 54 1f 9f 8d 4d 14 93 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 0008 status: NT_STATUS_OK [2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(213) creds_client_init: client chal : 8817BEE6A0158F16 [2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(214) creds_client_init: server chal : CF541F9F8D4D1493 [2006/06/23 12:37:32, 4] libsmb/credentials.c:cred_create_session_key(65) cred_create_session_key [2006/06/23 12:37:32, 5] libsmb/credentials.c:cred_create_session_key(67) clnt_chal_in: 8817BEE6A0158F16 [2006/06/23 12:37:32, 5] libsmb/credentials.c:cred_create_session_key(68) srv_chal_in : CF541F9F8D4D1493 [2006/06/23 12:37:32, 5] libsmb/credentials.c:cred_create_session_key(69) clnt+srv : 576CDD852D63A3A9 [2006/06/23 12:37:32, 5] libsmb/credentials.c:cred_create_session_key(70) sess_key_out : 84C276C5D284E714 [2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(240) creds_client_init: clnt : 1203A1161CCE2C3D [2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(241) creds_client_init: server : 0BE0B2C6F45471D4 [2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_init(242) creds_client_init: seed : 1203A1161CCE2C3D [2006/06/23 12:37:32, 4] rpc_client/cli_netlogon.c:rpccli_net_auth2(170) cli_net_auth2: srv:\\TIGRDC2 acct:IBRIX2$ sc:2 mc: IBRIX2 neg: 400701ff [2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_q_auth_2(800) init_q_auth_2: 800 [2006/06/23 12:37:32, 5] rpc_parse/parse_misc.c:init_log_info(1411) make_log_info 1411 [2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_q_auth_2(806) init_q_auth_2: 806 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_q_auth_2 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_log_info [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 undoc_buffer: 00000001 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 0000000a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 0000000a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.T.I.G.R.D.C.2... [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_unistr2 unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 uni_max_len: 00000008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c uni_str_len: 00000008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0030 buffer : I.B.R.I.X.2.$... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0040 sec_chan: 0002 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000042 smb_io_unistr2 unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 uni_max_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0048 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c uni_str_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0050 buffer : I.B.R.I.X.2... [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 00005e smb_io_chal [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 005e data: 12 03 a1 16 1c ce 2c 3d [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000066 net_io_neg_flags [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0068 neg_flags: 400701ff [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0084 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000006 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000006c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 000f [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=214 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 132 (0x84) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 132 (0x84) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32780 (0x800C) smb_bcc=147 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 84 00 00 00 06 00 00 00 6C ........ .......l [020] 00 00 00 00 00 0F 00 01 00 00 00 0A 00 00 00 00 ........ ........ [030] 00 00 00 0A 00 00 00 5C 00 5C 00 54 00 49 00 47 .......\ .\.T.I.G [040] 00 52 00 44 00 43 00 32 00 00 00 08 00 00 00 00 .R.D.C.2 ........ [050] 00 00 00 08 00 00 00 49 00 42 00 52 00 49 00 58 .......I .B.R.I.X [060] 00 32 00 24 00 00 00 02 00 00 00 07 00 00 00 00 .2.$.... ........ [070] 00 00 00 07 00 00 00 49 00 42 00 52 00 49 00 58 .......I .B.R.I.X [080] 00 32 00 00 00 12 03 A1 16 1C CE 2C 3D 00 00 FF .2...... ...,=... [090] 01 07 40 ..@ [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,218) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,218) wrote 218 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 96 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 84 05 00 02 03 10 00 00 00 28 00 00 00 06 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 0B E0 B2 C6 F4 54 71 ........ ......Tq [020] D4 FF 01 07 40 00 00 00 00 ....@... . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 84 05 00 02 03 10 00 00 00 28 00 00 00 06 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 0B E0 B2 C6 F4 54 71 ........ ......Tq [020] D4 FF 01 07 40 00 00 00 00 ....@... . [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0028 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000006 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000010 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 40 at offset 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x800c returned 32 bytes. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_r_auth_2 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_chal [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0000 data: 0b e0 b2 c6 f4 54 71 d4 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000008 net_io_neg_flags [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 neg_flags: 400701ff [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 000c status: NT_STATUS_OK [2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_check(259) creds_client_check: credentials check OK. [2006/06/23 12:37:32, 5] rpc_client/cli_netlogon.c:rpccli_netlogon_setup_creds(345) rpccli_netlogon_setup_creds: server TIGRDC2 credential chain established. [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,108) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,108) wrote 108 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 103 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=8 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 3840 (0xF00) smb_vwv[ 3]= 320 (0x140) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) Bind RPC Pipe[400f]: \NETLOGON auth_type 2, auth_level 6 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4... ...#Eg.. [010] 01 00 00 00 .... [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_auth_schannel_neg schannel_neg [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 type1: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 type2: 00000003 [2006/06/23 12:37:32, 6] lib/util.c:dump_data(2058) [000] 54 49 47 52 TIGR [2006/06/23 12:37:32, 6] lib/util.c:dump_data(2058) [000] 49 42 52 49 58 32 IBRIX2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0b [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0064 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0014 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_rb [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0018 num_contexts: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001c context_id : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 001e num_transfer_syntaxes: 01 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001f smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 data : 12345678 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 data : 1234 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0026 data : abcd [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0028 data : ef 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002a data : 01 23 45 67 cf fb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 version: 00000001 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 data : 8a885d04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0038 data : 1ceb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 003a data : 11c9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003c data : 9f e8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003e data : 08 00 2b 10 48 60 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 version: 00000002 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_rpc_hdr_auth hdr_auth [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0048 auth_type : 44 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0049 auth_level : 06 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 004a auth_pad_len : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 004b auth_reserved: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c auth_context_id: 00000001 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=182 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=9 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 100 (0x64) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16399 (0x400F) smb_bcc=115 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 64 00 14 00 07 00 00 00 B8 .......d ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 44 06 00 00 01 00 00 00 00 .H`....D ........ [060] 00 00 00 03 00 00 00 54 49 47 52 00 49 42 52 49 .......T IGR.IBRI [070] 58 32 00 X2. [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,186) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,186) wrote 186 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 144 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 64 05 00 0C 03 10 00 00 00 58 00 0C 00 07 00 00 d....... .X...... [010] 00 B8 10 B8 10 06 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 0A FA 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ [050] 00 00 00 00 00 00 00 00 00 ........ . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 64 05 00 0C 03 10 00 00 00 58 00 0C 00 07 00 00 d....... .X...... [010] 00 B8 10 B8 10 06 CB 06 01 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 0A FA 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ [050] 00 00 00 00 00 00 00 00 00 ........ . [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0058 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000007 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 88 at offset 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f returned 88 bytes. [2006/06/23 12:37:32, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f bind request returned ok. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0058 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_ba [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 max_tsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0012 max_rsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 assoc_gid: 0106cb06 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_rpc_addr_str [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0018 len: 000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 001a str: \PIPE\lsass. [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000026 smb_io_rpc_results [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0028 num_results: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002c result : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002e reason : 0000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 data : 8a885d04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0034 data : 1ceb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0036 data : 11c9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0038 data : 9f e8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 003a data : 08 00 2b 10 48 60 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 version: 00000002 [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:check_bind_response(1701) check_bind_response: accepted! [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel_with_key(2509) cli_rpc_pipe_open_schannel_with_key: opened pipe \NETLOGON to machine TIGRDC2 for domain TIGR and bound using schannel. [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,45) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,45) wrote 45 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=10 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2 [2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(82) sequence = 0x449c18ce [2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(84) seed: 1203A1161CCE2C3D [2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(89) seed+seq E01B3D5B1CCE2C3D [2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(93) CLIENT CEE7D455198885A3 [2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(98) seed+seq+1 E11B3D5B1CCE2C3D [2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_step(102) SERVER 81DBFE5D608FAEE6 [2006/06/23 12:37:32, 5] libsmb/credentials.c:creds_reseed(179) cred_reseed: seed E11B3D5B1CCE2C3D [2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_id_info2(1181) init_id_info2: 1181 [2006/06/23 12:37:32, 5] rpc_parse/parse_misc.c:init_logon_id(1590) make_logon_id: 1590 [2006/06/23 12:37:32, 5] rpc_parse/parse_net.c:init_sam_info(1275) init_sam_info: 1275 [2006/06/23 12:37:32, 5] rpc_parse/parse_misc.c:init_clnt_info2(1505) make_clnt_info: 1505 [2006/06/23 12:37:32, 5] rpc_parse/parse_misc.c:init_clnt_srv(1350) init_clnt_srv: 1350 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_q_sam_logon [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_sam_info [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_clnt_info2 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_clnt_srv [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 undoc_buffer : 00000001 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 0000000a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 0000000a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.T.I.G.R.D.C.2... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 undoc_buffer2: 00000001 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000028 smb_io_unistr2 unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_max_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 uni_str_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0034 buffer : I.B.R.I.X.2... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 ptr_cred: 00000001 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_cred [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_chal [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0048 data: ce e7 d4 55 19 88 85 a3 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_utime [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0050 time: 449c18ce [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 ptr_rtn_cred : 00000001 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000058 smb_io_cred [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000058 smb_io_chal [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0058 data: 00 00 00 00 00 00 00 00 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000060 smb_io_utime [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0060 time: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0064 logon_level : 0002 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000066 smb_io_sam_info logon_info [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0066 switch_value : 0002 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 net_io_id_info2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0068 ptr_id_info2: 00000001 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 00006c smb_io_unihdr unihdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 006c uni_str_len: 0008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 006e uni_max_len: 0008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0070 buffer : 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0074 param_ctrl: 00000820 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000078 smb_io_logon_id [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0078 low : 0000dead [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 007c high: 0000beef [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000080 smb_io_unihdr unihdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0080 uni_str_len: 000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0082 uni_max_len: 000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0084 buffer : 00000001 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000088 smb_io_unihdr unihdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0088 uni_str_len: 0018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 008a uni_max_len: 0018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 008c buffer : 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0090 lm_chal: a3 72 22 53 95 c3 e2 c7 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000098 smb_io_strhdr hdr_nt_chal_resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0098 str_str_len: 0018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 009a str_max_len: 0018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 009c buffer : 00000001 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000a0 smb_io_strhdr hdr_lm_chal_resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a0 str_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a2 str_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a4 buffer : 00000000 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000a8 smb_io_unistr2 uni_domain_name [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a8 uni_max_len: 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ac offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b0 uni_str_len: 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00b4 buffer : T.I.G.R. [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000bc smb_io_unistr2 uni_user_name [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00bc uni_max_len: 00000006 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c0 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c4 uni_str_len: 00000006 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00c8 buffer : r.a.j.e.e.v. [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000d4 smb_io_unistr2 uni_wksta_name [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d4 uni_max_len: 0000000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d8 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00dc uni_str_len: 0000000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00e0 buffer : \.\.K.R.E.A.P.E.R.-.X.P. [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000f8 smb_io_string2 nt_chal_resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00f8 str_max_len: 00000018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00fc offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0100 str_str_len: 00000018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_string2(1064) 0104 buffer : @.......8z..$.T..|[8.!.. [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 00011c smb_io_string2 - NULL lm_chal_resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 011c validation_level: 0003 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0160 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0020 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000011e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 opnum : 0002 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000138 smb_io_rpc_hdr_auth hdr_auth [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0138 auth_type : 44 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0139 auth_level : 06 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 013a auth_pad_len : 02 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 013b auth_reserved: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 013c auth_context_id: 00000001 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:add_schannel_auth_footer(1357) add_schannel_auth_footer: SCHANNEL seq_num=0 [2006/06/23 12:37:32, 10] rpc_parse/parse_prs.c:schannel_encode(1571) SCHANNEL: schannel_encode seq_num=0 data_len=288 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000140 smb_io_rpc_auth_schannel_chk [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0140 sig : 77 00 7a 00 ff ff 00 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0148 seq_num: 99 25 e3 f8 a5 bd ce d5 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0150 packet_digest: 44 ac 32 92 31 cb 45 26 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0158 confounder: 68 ba c3 5c 04 d3 cf 7a [2006/06/23 12:37:32, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=434 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=11 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 352 (0x160) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 352 (0x160) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16399 (0x400F) smb_bcc=367 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 60 01 20 00 08 00 00 00 1E .......` . ...... [020] 01 00 00 00 00 02 00 C1 05 37 9E 57 69 5A DD A0 ........ .7.WiZ.. [030] 63 CB 8E A2 02 69 EA 16 79 F4 9C 11 AE 42 4A 2C c....i.. y....BJ, [040] 18 57 D6 85 CE EE 75 68 F7 21 B5 05 B0 90 13 CE .W....uh .!...... [050] 14 B5 1F 3E 8D 5D 31 B5 42 B3 B8 48 03 00 87 A9 ...>.]1. B..H.... [060] 8F BF 3E 7E 7D 9A FD 08 3E 34 89 3B 2A 52 27 E5 ..>~}... >4.;*R'. [070] 59 9E 2D 83 90 B4 5F 1D 30 26 98 C8 9A 42 F0 17 Y.-..._. 0&...B.. [080] 9F CD 2E 04 09 3B CB 44 CB 6A B6 B5 89 51 A9 FA .....;.D .j...Q.. [090] 9F DA 6E BA C9 4E 06 26 CE 5C 2B BF FB 45 16 5D ..n..N.& .\+..E.] [0A0] BE DF 51 68 72 A9 DE 06 A6 4F F7 0B 6F 0C 03 D5 ..Qhr... .O..o... [0B0] E5 60 C3 76 78 28 A1 F4 D3 8E 28 42 3B C1 B9 DC .`.vx(.. ..(B;... [0C0] 04 08 85 64 43 3F 23 02 64 20 11 A8 77 A4 DF 9C ...dC?#. d ..w... [0D0] AA C4 E1 A5 43 19 CC 3A 65 E1 5F B6 E1 FF 87 51 ....C..: e._....Q [0E0] 76 C1 03 2D 15 20 C4 32 43 7D 78 32 DE B6 F9 76 v..-. .2 C}x2...v [0F0] E5 21 83 7D 31 52 5F 88 81 06 9B 06 9D 61 DD BC .!.}1R_. .....a.. [100] FE 41 60 C9 FA 93 A6 93 3A 77 80 FC 2C E2 18 0A .A`..... :w..,... [110] 76 2D 39 C4 0B 3E 0F 15 55 15 0C 87 12 5B 05 61 v-9..>.. U....[.a [120] B9 11 83 EB FA CF 46 F5 CC 07 4D 6A A7 8A 6C FA ......F. ..Mj..l. [130] 25 D9 53 FA 13 2E 54 22 6A E0 1A 30 4C 12 BF 91 %.S...T" j..0L... [140] 35 95 98 ED 5E A5 C9 44 06 02 00 01 00 00 00 77 5...^..D .......w [150] 00 7A 00 FF FF 00 00 99 25 E3 F8 A5 BD CE D5 44 .z...... %......D [160] AC 32 92 31 CB 45 26 68 BA C3 5C 04 D3 CF 7A .2.1.E&h ..\...z [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,438) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,438) wrote 438 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1144 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=1144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1088 (0x440) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1088 (0x440) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1089 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 05 00 02 03 10 00 00 00 40 04 20 00 08 00 00 `....... .@. .... [010] 00 F8 03 00 00 00 00 00 00 BC A4 E1 29 6E E2 84 ........ ....)n.. [020] ED A0 5A 0B D6 54 EC 07 70 72 AC 8D 59 2E 08 F1 ..Z..T.. pr..Y... [030] 84 C4 69 DD 40 B2 23 B2 C2 27 12 52 C3 E0 01 E0 ..i.@.#. .'.R.... [040] C8 35 9A 52 00 CD F1 ED F7 7D 14 BB 51 53 6A 19 .5.R.... .}..QSj. [050] 91 F3 3A 7C 52 38 53 4D 03 1B DA FE 95 91 A7 6C ..:|R8SM .......l [060] E7 38 A5 18 21 7D 17 AE 9D AB 6A 08 1D 2D D9 FD .8..!}.. ..j..-.. [070] 5B 4E D6 18 09 BE 72 78 20 A6 4A B1 D7 91 FD 07 [N....rx .J..... [080] 1D 08 1F 85 54 A8 C9 E5 02 43 C9 85 02 57 C6 6B ....T... .C...W.k [090] C5 C7 FF 3A 43 E4 7E EE B5 C4 E6 A2 8C 43 8B 3F ...:C.~. .....C.? [0A0] 76 6A AA 10 25 8B C5 FA CE C2 1B 83 39 4F DE CC vj..%... ....9O.. [0B0] 7A 83 AD FB 56 D2 97 58 3C 07 E8 92 7D FB F9 94 z...V..X <...}... [0C0] 78 9F 7D FD 7F C4 80 E5 E8 DB B8 30 E0 A1 7F 82 x.}..... ...0.... [0D0] 1C BF 7E AD 96 AA 59 E2 78 78 F5 1E 3F 93 2A 3B ..~...Y. xx..?.*; [0E0] E4 6C 9D 25 B7 4B E4 FF 86 17 B5 7D 0B FC BE AF .l.%.K.. ...}.... [0F0] 79 8D 1E BC 09 2D 6F AB 2B 9F 49 A0 9D 74 19 23 y....-o. +.I..t.# [100] 3F 45 E5 1D A8 E4 2B 60 A9 DC 91 8C F3 AB 9E E8 ?E....+` ........ [110] B7 AC C0 70 DE 19 BD 16 CA 17 93 02 3D 85 A6 60 ...p.... ....=..` [120] FD 44 00 23 3B FB 7C 6D 65 47 2A 6C E8 94 DB 48 .D.#;.|m eG*l...H [130] 95 72 D3 4D EA 4C 03 D5 3B 58 98 53 B8 E1 E3 B5 .r.M.L.. ;X.S.... [140] 23 25 1D E3 BD 5F BC 71 8D 30 4A BC 00 11 D7 EE #%..._.q .0J..... [150] 64 99 53 C1 0F B2 D5 33 0D C6 6C 54 8D FA FB 48 d.S....3 ..lT...H [160] E1 8F CB FA 69 5D 69 F7 4D 1A A7 96 BD 8B 48 EC ....i]i. M.....H. [170] 99 91 56 96 A5 69 77 7C 04 D8 F2 0E 48 F9 E5 D3 ..V..iw| ....H... [180] 98 73 C0 80 41 9F 92 C2 AE 6B 4F B5 50 84 25 52 .s..A... .kO.P.%R [190] F6 4D E9 57 3F F0 63 8E 90 FA 5A 09 AE 48 47 EC .M.W?.c. ..Z..HG. [1A0] 2D 54 0F D8 14 26 7A BC F0 E1 C1 D9 5E 86 59 8A -T...&z. ....^.Y. [1B0] 9F 29 BD 75 E7 98 CE 86 5E 8A CA 03 2F 4D F3 1F .).u.... ^.../M.. [1C0] 87 FB 98 7C D2 C8 F9 1C DE F6 6E 04 C8 6D 3E 6D ...|.... ..n..m>m [1D0] C3 0B 2D 30 86 54 5B 66 91 DD 47 48 1C 32 A2 18 ..-0.T[f ..GH.2.. [1E0] 58 D3 12 4D 1E 51 E1 80 39 01 B2 F3 08 DC 3B 98 X..M.Q.. 9.....;. [1F0] A1 29 22 A7 F9 05 79 F5 F6 A4 5A DC F5 33 06 D6 .)"...y. ..Z..3.. [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=1144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1088 (0x440) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1088 (0x440) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1089 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 05 00 02 03 10 00 00 00 40 04 20 00 08 00 00 `....... .@. .... [010] 00 F8 03 00 00 00 00 00 00 BC A4 E1 29 6E E2 84 ........ ....)n.. [020] ED A0 5A 0B D6 54 EC 07 70 72 AC 8D 59 2E 08 F1 ..Z..T.. pr..Y... [030] 84 C4 69 DD 40 B2 23 B2 C2 27 12 52 C3 E0 01 E0 ..i.@.#. .'.R.... [040] C8 35 9A 52 00 CD F1 ED F7 7D 14 BB 51 53 6A 19 .5.R.... .}..QSj. [050] 91 F3 3A 7C 52 38 53 4D 03 1B DA FE 95 91 A7 6C ..:|R8SM .......l [060] E7 38 A5 18 21 7D 17 AE 9D AB 6A 08 1D 2D D9 FD .8..!}.. ..j..-.. [070] 5B 4E D6 18 09 BE 72 78 20 A6 4A B1 D7 91 FD 07 [N....rx .J..... [080] 1D 08 1F 85 54 A8 C9 E5 02 43 C9 85 02 57 C6 6B ....T... .C...W.k [090] C5 C7 FF 3A 43 E4 7E EE B5 C4 E6 A2 8C 43 8B 3F ...:C.~. .....C.? [0A0] 76 6A AA 10 25 8B C5 FA CE C2 1B 83 39 4F DE CC vj..%... ....9O.. [0B0] 7A 83 AD FB 56 D2 97 58 3C 07 E8 92 7D FB F9 94 z...V..X <...}... [0C0] 78 9F 7D FD 7F C4 80 E5 E8 DB B8 30 E0 A1 7F 82 x.}..... ...0.... [0D0] 1C BF 7E AD 96 AA 59 E2 78 78 F5 1E 3F 93 2A 3B ..~...Y. xx..?.*; [0E0] E4 6C 9D 25 B7 4B E4 FF 86 17 B5 7D 0B FC BE AF .l.%.K.. ...}.... [0F0] 79 8D 1E BC 09 2D 6F AB 2B 9F 49 A0 9D 74 19 23 y....-o. +.I..t.# [100] 3F 45 E5 1D A8 E4 2B 60 A9 DC 91 8C F3 AB 9E E8 ?E....+` ........ [110] B7 AC C0 70 DE 19 BD 16 CA 17 93 02 3D 85 A6 60 ...p.... ....=..` [120] FD 44 00 23 3B FB 7C 6D 65 47 2A 6C E8 94 DB 48 .D.#;.|m eG*l...H [130] 95 72 D3 4D EA 4C 03 D5 3B 58 98 53 B8 E1 E3 B5 .r.M.L.. ;X.S.... [140] 23 25 1D E3 BD 5F BC 71 8D 30 4A BC 00 11 D7 EE #%..._.q .0J..... [150] 64 99 53 C1 0F B2 D5 33 0D C6 6C 54 8D FA FB 48 d.S....3 ..lT...H [160] E1 8F CB FA 69 5D 69 F7 4D 1A A7 96 BD 8B 48 EC ....i]i. M.....H. [170] 99 91 56 96 A5 69 77 7C 04 D8 F2 0E 48 F9 E5 D3 ..V..iw| ....H... [180] 98 73 C0 80 41 9F 92 C2 AE 6B 4F B5 50 84 25 52 .s..A... .kO.P.%R [190] F6 4D E9 57 3F F0 63 8E 90 FA 5A 09 AE 48 47 EC .M.W?.c. ..Z..HG. [1A0] 2D 54 0F D8 14 26 7A BC F0 E1 C1 D9 5E 86 59 8A -T...&z. ....^.Y. [1B0] 9F 29 BD 75 E7 98 CE 86 5E 8A CA 03 2F 4D F3 1F .).u.... ^.../M.. [1C0] 87 FB 98 7C D2 C8 F9 1C DE F6 6E 04 C8 6D 3E 6D ...|.... ..n..m>m [1D0] C3 0B 2D 30 86 54 5B 66 91 DD 47 48 1C 32 A2 18 ..-0.T[f ..GH.2.. [1E0] 58 D3 12 4D 1E 51 E1 80 39 01 B2 F3 08 DC 3B 98 X..M.Q.. 9.....;. [1F0] A1 29 22 A7 F9 05 79 F5 F6 A4 5A DC F5 33 06 D6 .)"...y. ..Z..3.. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0440 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0020 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 000003f8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000418 smb_io_rpc_hdr_auth hdr_auth [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0418 auth_type : 44 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0419 auth_level : 06 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 041a auth_pad_len : 08 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 041b auth_reserved: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 041c auth_context_id: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000420 smb_io_rpc_auth_schannel_chk [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0420 sig : 77 00 7a 00 ff ff 00 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0428 seq_num: b0 14 e8 8a 5e b2 93 8f [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0430 packet_digest: a9 50 19 35 0e 04 af db [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0438 confounder: fa e2 bd 39 ae 88 25 0f [2006/06/23 12:37:32, 10] rpc_parse/parse_prs.c:schannel_decode(1648) SCHANNEL: schannel_decode seq_num=1 data_len=1024 [2006/06/23 12:37:32, 10] rpc_parse/parse_prs.c:schannel_decode(1668) SCHANNEL: schannel_decode seq_num=1 data_len=1024 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 1088, data_len 1016, ss_len 8 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 1088 at offset 0 [2006/06/23 12:37:32, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine TIGRDC2 pipe \NETLOGON fnum 0x400f returned 2032 bytes. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 net_io_r_sam_logon [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 buffer_creds: 00020000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_cred [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_chal [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0004 data: 81 db fe 5d 60 8f ae e6 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 00000c smb_io_utime [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c time: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0010 switch_value: 0003 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 net_io_user_info3 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 ptr_user_info : 00020004 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_time logon time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 low : d2ca8713 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c high: 01c696dc [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_time logoff time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 low : ffffffff [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 high: 7fffffff [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000028 smb_io_time kickoff time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 low : ffffffff [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c high: 7fffffff [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_time last set time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 low : 09fac924 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 high: 01c6868d [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_time can change time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0038 low : 09fac924 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 003c high: 01c6868d [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000040 smb_io_time must change time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 low : ffffffff [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 high: 7fffffff [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_unihdr hdr_user_name [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0048 uni_str_len: 000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 004a uni_max_len: 000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c buffer : 00020008 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_unihdr hdr_full_name [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0050 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0052 uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 buffer : 00000000 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000058 smb_io_unihdr hdr_logon_script [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0058 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 005a uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 005c buffer : 00000000 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 smb_io_unihdr hdr_profile_path [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0060 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0062 uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0064 buffer : 00000000 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_unihdr hdr_home_dir [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0068 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 006a uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 006c buffer : 00000000 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000070 smb_io_unihdr hdr_dir_drive [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0070 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0072 uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0074 buffer : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0078 logon_count : 08c3 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 007a bad_pw_count : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 007c user_rid : 00000c2a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0080 group_rid : 00000201 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0084 num_groups : 0000000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0088 buffer_groups : 0002000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 008c user_flgs : 00000120 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0090 user_sess_key: e9 44 1c 27 6e ca 64 de 42 a9 99 90 b6 05 cb 5c [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000a0 smb_io_unihdr hdr_logon_srv [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a0 uni_str_len: 000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a2 uni_max_len: 0010 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a4 buffer : 00020010 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000a8 smb_io_unihdr hdr_logon_dom [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00a8 uni_str_len: 0008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 00aa uni_max_len: 000a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ac buffer : 00020014 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b0 buffer_dom_id : 00020018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 00b4 lm_sess_key: e7 74 f4 48 61 9d 04 3b [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00bc acct_flags : 00000210 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c0 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c4 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c8 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00cc unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d0 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d4 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d8 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00dc num_other_sids: 0000000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00e0 buffer_other_sids: 0002001c [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000e4 smb_io_unistr2 uni_user_name [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00e4 uni_max_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00e8 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ec uni_str_len: 00000006 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00f0 buffer : r.a.j.e.e.v. [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_full_name [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_logon_script [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_profile_path [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_home_dir [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0000fc smb_io_unistr2 - NULL uni_dir_drive [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00fc num_groups2 : 0000000e [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000100 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0100 g_rid: 0000128a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0104 attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000108 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0108 g_rid: 0000053c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 010c attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000110 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0110 g_rid: 00001bdb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0114 attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000118 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0118 g_rid: 00000d53 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 011c attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000120 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0120 g_rid: 00000fa7 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0124 attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000128 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0128 g_rid: 00000fa8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 012c attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000130 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0130 g_rid: 0000169a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0134 attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000138 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0138 g_rid: 0000055e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 013c attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000140 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0140 g_rid: 00000555 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0144 attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000148 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0148 g_rid: 00000540 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 014c attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000150 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0150 g_rid: 00000fdd [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0154 attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000158 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0158 g_rid: 00000201 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 015c attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000160 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0160 g_rid: 0000055c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0164 attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000168 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0168 g_rid: 0000051b [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 016c attr : 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000170 smb_io_unistr2 uni_logon_srv [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0170 uni_max_len: 00000008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0174 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0178 uni_str_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 017c buffer : T.I.G.R.D.C.2. [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 00018a smb_io_unistr2 uni_logon_dom [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 018c uni_max_len: 00000005 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0190 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0194 uni_str_len: 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0198 buffer : T.I.G.R. [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0001a0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01a0 num_auths: 00000004 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0001a4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a5 num_auths : 04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01a9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01aa id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 01ab id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 01ac sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01bc num_other_sids: 0000000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c0 sid_ptr: 00020020 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c4 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c8 sid_ptr: 00020024 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01cc attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d0 sid_ptr: 00020028 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d4 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d8 sid_ptr: 0002002c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01dc attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e0 sid_ptr: 00020030 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e4 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e8 sid_ptr: 00020034 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01ec attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f0 sid_ptr: 00020038 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f4 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f8 sid_ptr: 0002003c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01fc attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0200 sid_ptr: 00020040 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0204 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0208 sid_ptr: 00020044 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 020c attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0210 sid_ptr: 00020048 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0214 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0218 sid_ptr: 0002004c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 021c attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0220 sid_ptr: 00020050 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0224 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0228 sid_ptr: 00020054 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 022c attribute: 00000007 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000230 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0230 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000234 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0234 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0235 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0236 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0237 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0238 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0239 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 023a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 023b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 023c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000250 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0250 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000254 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0254 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0255 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0256 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0257 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0258 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0259 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 025a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 025b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 025c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000270 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0270 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000274 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0274 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0275 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0276 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0277 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0278 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0279 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 027a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 027b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 027c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000290 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0290 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000294 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0294 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0295 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0296 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0297 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0298 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0299 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 029a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 029b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 029c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002b0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02b0 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0002b4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02b9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02ba id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02bb id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02bc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002d0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02d0 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0002d4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02d9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02da id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02db id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002f0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02f0 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0002f4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02f9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02fa id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02fb id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02fc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000310 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0310 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000314 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0314 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0315 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0316 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0317 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0318 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0319 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 031a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 031b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 031c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000330 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0330 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000334 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0334 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0335 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0336 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0337 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0338 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0339 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 033a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 033b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 033c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000350 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0350 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000354 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0354 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0355 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0356 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0357 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0358 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0359 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 035a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 035b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 035c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000370 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0370 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000374 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0374 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0375 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0376 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0377 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0378 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0379 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 037a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 037b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 037c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000390 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0390 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 000394 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0394 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0395 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0396 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0397 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0398 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0399 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 039a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 039b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 039c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0003b0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03b0 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0003b4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03b9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03ba id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03bb id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 03bc sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0003d0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03d0 num_auths: 00000005 [2006/06/23 12:37:32, 9] rpc_parse/parse_prs.c:prs_debug(84) 0003d4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03d9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03da id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03db id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 03dc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03f0 auth_resp : 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 03f4 status : NT_STATUS_OK [2006/06/23 12:37:32, 10] libsmb/credentials.c:creds_client_check(259) creds_client_check: credentials check OK. [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for TIGRDC2 [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user TIGR\rajeev [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is tigr\rajeev [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(242) Trying _Get_Pwnam(), username as given is TIGR\rajeev [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(252) Trying _Get_Pwnam(), username as uppercase is TIGR\RAJEEV [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(261) Checking combinations of 0 uppercase letters in tigr\rajeev [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals didn't find user [TIGR\rajeev]! [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user rajeev [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is rajeev [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals did find user [rajeev]! [2006/06/23 12:37:32, 5] auth/auth_util.c:fill_sam_account(1118) fill_sam_account: located username was [rajeev] [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username rajeev, was [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name Rajeev Karamchedu, was [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(833) pdb_set_unix_homedir: setting home dir /home/rajeev, was NULL [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain IBRIX2, was [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-4036 [2006/06/23 12:37:32, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1055192801-1434710095-1259064960-4036 from rid 4036 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-1081 [2006/06/23 12:37:32, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-1055192801-1434710095-1259064960-1081 from rid 1081 [2006/06/23 12:37:32, 4] lib/substitute.c:automount_server(359) Home server: ibrix2 [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path \\ibrix2\rajeev\profile, was [2006/06/23 12:37:32, 4] lib/substitute.c:automount_server(359) Home server: ibrix2 [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir \\ibrix2\rajeev, was [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive , was NULL [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script , was [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671) pdb_set_nt_username: setting nt username rajeev, was [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username rajeev, was rajeev [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain TIGR, was IBRIX2 [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-2867130070-3872911017-3508780997-3114 [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-2867130070-3872911017-3508780997-513 [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name , was Rajeev Karamchedu [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script , was [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path , was \\ibrix2\rajeev\profile [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir , was \\ibrix2\rajeev [2006/06/23 12:37:32, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive , was [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 10] lib/system_smbd.c:sys_getgrouplist(167) sys_getgrouplist: user [rajeev] [2006/06/23 12:37:32, 10] lib/system_smbd.c:sys_getgrouplist(176) sys_getgrouplist(): disabled winbindd for group lookup [user == rajeev] [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 8] lib/system_smbd.c:remove_duplicate_gids(49) remove_duplicate_gids: Enter 14 gids [2006/06/23 12:37:32, 8] lib/system_smbd.c:remove_duplicate_gids(67) remove_duplicate_gids: Exit 13 gids [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 40 -> S-1-5-21-1055192801-1434710095-1259064960-1081 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 40 -> S-1-5-21-1055192801-1434710095-1259064960-1081 [2006/06/23 12:37:32, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(267) fetch sid from gid cache 0 -> S-1-5-21-1055192801-1434710095-1259064960-1001 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-5-21-1055192801-1434710095-1259064960-1029 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 14 -> S-1-5-21-1055192801-1434710095-1259064960-1029 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 60 -> S-1-5-21-1055192801-1434710095-1259064960-1121 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 60 -> S-1-5-21-1055192801-1434710095-1259064960-1121 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 63 -> S-1-5-21-1055192801-1434710095-1259064960-1127 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 63 -> S-1-5-21-1055192801-1434710095-1259064960-1127 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 80 -> S-1-5-21-1055192801-1434710095-1259064960-1161 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 80 -> S-1-5-21-1055192801-1434710095-1259064960-1161 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 120 -> S-1-5-21-1055192801-1434710095-1259064960-1241 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 120 -> S-1-5-21-1055192801-1434710095-1259064960-1241 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 130 -> S-1-5-21-1055192801-1434710095-1259064960-1261 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 130 -> S-1-5-21-1055192801-1434710095-1259064960-1261 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 160 -> S-1-5-21-1055192801-1434710095-1259064960-1321 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 160 -> S-1-5-21-1055192801-1434710095-1259064960-1321 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 162 -> S-1-5-21-1055192801-1434710095-1259064960-1325 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 162 -> S-1-5-21-1055192801-1434710095-1259064960-1325 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 167 -> S-1-5-21-1055192801-1434710095-1259064960-1335 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 167 -> S-1-5-21-1055192801-1434710095-1259064960-1335 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 170 -> S-1-5-21-1055192801-1434710095-1259064960-1341 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 170 -> S-1-5-21-1055192801-1434710095-1259064960-1341 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 10] passdb/passdb.c:local_gid_to_sid(1245) local_gid_to_sid: Fall back to algorithmic mapping: 1025 -> S-1-5-21-1055192801-1434710095-1259064960-3051 [2006/06/23 12:37:32, 10] passdb/lookup_sid.c:gid_to_sid(406) gid_to_sid: local 1025 -> S-1-5-21-1055192801-1434710095-1259064960-3051 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 10] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:37:32, 10] libsmb/samlogon_cache.c:netsamlogon_cache_store(134) netsamlogon_cache_store: SID [S-1-5-21-2867130070-3872911017-3508780997-3114] [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 timestamp: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000004 net_io_user_info3 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 ptr_user_info : 00020004 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000008 smb_io_time logon time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 low : d2ca8713 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c high: 01c696dc [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_time logoff time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 low : ffffffff [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 high: 7fffffff [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_time kickoff time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 low : ffffffff [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c high: 7fffffff [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_time last set time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 low : 09fac924 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 high: 01c6868d [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000028 smb_io_time can change time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 low : 09fac924 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c high: 01c6868d [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_time must change time [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 low : ffffffff [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 high: 7fffffff [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_unihdr hdr_user_name [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0038 uni_str_len: 000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 003a uni_max_len: 000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 003c buffer : 00020008 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000040 smb_io_unihdr hdr_full_name [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0040 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0042 uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 buffer : 00000000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000048 smb_io_unihdr hdr_logon_script [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0048 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 004a uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c buffer : 00000000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_unihdr hdr_profile_path [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0050 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0052 uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 buffer : 00000000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000058 smb_io_unihdr hdr_home_dir [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0058 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 005a uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 005c buffer : 00000000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000060 smb_io_unihdr hdr_dir_drive [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0060 uni_str_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0062 uni_max_len: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0064 buffer : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0068 logon_count : 08c3 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 006a bad_pw_count : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 006c user_rid : 00000c2a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0070 group_rid : 00000201 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0074 num_groups : 0000000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0078 buffer_groups : 0002000c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 007c user_flgs : 00000120 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0080 user_sess_key: 44 1e ea fc 4e 56 5c 63 cb e2 35 70 2d 85 ad e6 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000090 smb_io_unihdr hdr_logon_srv [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0090 uni_str_len: 000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0092 uni_max_len: 0010 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0094 buffer : 00020010 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000098 smb_io_unihdr hdr_logon_dom [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0098 uni_str_len: 0008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 009a uni_max_len: 000a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 009c buffer : 00020014 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a0 buffer_dom_id : 00020018 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 00a4 lm_sess_key: 4a 2e 02 93 41 01 3c 86 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ac acct_flags : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b0 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b4 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b8 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00bc unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c0 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c4 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c8 unkown: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00cc num_other_sids: 0000000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d0 buffer_other_sids: 0002001c [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000d4 smb_io_unistr2 uni_user_name [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d4 uni_max_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00d8 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00dc uni_str_len: 00000006 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 00e0 buffer : r.a.j.e.e.v. [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_full_name [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_logon_script [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_profile_path [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_home_dir [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ec smb_io_unistr2 - NULL uni_dir_drive [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ec num_groups2 : 0000000e [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000f0 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00f0 g_rid: 0000128a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00f4 attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000f8 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00f8 g_rid: 0000053c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00fc attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000100 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0100 g_rid: 00001bdb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0104 attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000108 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0108 g_rid: 00000d53 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 010c attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000110 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0110 g_rid: 00000fa7 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0114 attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000118 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0118 g_rid: 00000fa8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 011c attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000120 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0120 g_rid: 0000169a [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0124 attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000128 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0128 g_rid: 0000055e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 012c attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000130 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0130 g_rid: 00000555 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0134 attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000138 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0138 g_rid: 00000540 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 013c attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000140 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0140 g_rid: 00000fdd [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0144 attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000148 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0148 g_rid: 00000201 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 014c attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000150 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0150 g_rid: 0000055c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0154 attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000158 smb_io_gid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0158 g_rid: 0000051b [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 015c attr : 00000007 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000160 smb_io_unistr2 uni_logon_srv [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0160 uni_max_len: 00000008 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0164 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0168 uni_str_len: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 016c buffer : T.I.G.R.D.C.2. [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 00017a smb_io_unistr2 uni_logon_dom [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 017c uni_max_len: 00000005 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0180 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0184 uni_str_len: 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0188 buffer : T.I.G.R. [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000190 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0190 num_auths: 00000004 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000194 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0194 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0195 num_auths : 04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0196 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0197 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0198 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0199 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 019a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 019b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 019c sub_auths : 00000015 aae4eed6 e6d7eea9 d123bfc5 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01ac num_other_sids: 0000000e [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01b0 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01b4 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01b8 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01bc attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c0 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c4 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01c8 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01cc attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d0 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d4 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01d8 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01dc attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e0 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e4 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01e8 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01ec attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f0 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f4 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01f8 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 01fc attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0200 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0204 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0208 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 020c attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0210 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0214 attribute: 00000007 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0218 sid_ptr: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 021c attribute: 00000007 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000220 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0220 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000224 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0224 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0225 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0226 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0227 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0228 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0229 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 022a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 022b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 022c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000201 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000240 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0240 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000244 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0244 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0245 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0246 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0247 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0248 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0249 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 024a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 024b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 024c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5a [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000260 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0260 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000264 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0264 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0265 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0266 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0267 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0268 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0269 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 026a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 026b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 026c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b5c [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000280 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0280 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000284 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0284 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0285 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0286 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0287 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0288 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0289 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 028a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 028b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 028c sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b64 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0002a0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02a0 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002a4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02a9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02aa id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02ab id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02ac sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b69 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0002c0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02c0 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002c4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02c9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02ca id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02cb id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000b6b [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0002e0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 02e0 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0002e4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02e9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02ea id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 02eb id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 02ec sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000a84 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000300 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0300 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000304 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0304 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0305 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0306 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0307 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0308 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0309 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 030a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 030b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 030c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000523 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000320 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0320 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000324 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0324 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0325 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0326 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0327 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0328 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0329 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 032a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 032b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 032c sub_auths : 00000015 6ec530f9 32862e3f 29191987 00000e62 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000340 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0340 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000344 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0344 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0345 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0346 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0347 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0348 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0349 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 034a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 034b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 034c sub_auths : 00000015 6ec530f9 32862e3f 29191987 0000078d [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000360 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0360 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000364 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0364 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0365 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0366 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0367 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0368 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0369 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 036a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 036b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 036c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000005c8 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000380 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0380 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000384 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0384 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0385 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0386 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0387 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0388 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0389 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 038a id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 038b id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 038c sub_auths : 00000015 6ec530f9 32862e3f 29191987 000004dc [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0003a0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03a0 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0003a4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03a9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03aa id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03ab id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 03ac sub_auths : 00000015 6ec530f9 32862e3f 29191987 000006ed [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 0003c0 smb_io_dom_sid2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 03c0 num_auths: 00000005 [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 0003c4 smb_io_dom_sid sid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c4 sid_rev_num: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c5 num_auths : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c6 id_auth[0] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c7 id_auth[1] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c8 id_auth[2] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03c9 id_auth[3] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03ca id_auth[4] : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 03cb id_auth[5] : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32s(959) 03cc sub_auths : 00000015 eb0b15f1 1c6b0949 0f2b7997 00000c18 [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,45) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,45) wrote 45 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=12 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] libsmb/clientgen.c:cli_rpc_pipe_close(383) cli_rpc_pipe_close: closed pipe \NETLOGON to machine TIGRDC2 [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(132) write_socket(19,39) [2006/06/23 12:37:32, 6] libsmb/clientgen.c:write_socket(135) write_socket(19,39) wrote 39 [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 35 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=45058 smb_pid=23622 smb_uid=12291 smb_mid=13 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: winbind authentication for user [rajeev] succeeded [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth.c:check_ntlm_password(294) check_ntlm_password: PAM Account for user [rajeev] succeeded [2006/06/23 12:37:32, 2] auth/auth.c:check_ntlm_password(307) check_ntlm_password: authentication for user [rajeev] -> [rajeev] -> [rajeev] succeeded [2006/06/23 12:37:32, 5] auth/auth_util.c:free_user_info(1485) attempting to free (and zero) a user_info structure [2006/06/23 12:37:32, 10] auth/auth_util.c:free_user_info(1488) structure was created for rajeev [2006/06/23 12:37:32, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(120) Got NT session key of length 16 [2006/06/23 12:37:32, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(127) Got LM session key of length 8 [2006/06/23 12:37:32, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(728) ntlmssp_server_auth: Created NTLM2 session key. [2006/06/23 12:37:32, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2006/06/23 12:37:32, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0x60088235 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_SEAL NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 115 [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(255) register_vuid: (1518,40) rajeev rajeev TIGR guest=0 [2006/06/23 12:37:32, 3] smbd/password.c:register_vuid(257) User name: rajeev Real name: [2006/06/23 12:37:32, 3] smbd/password.c:register_vuid(276) UNIX uid 1518 is UNIX user rajeev, and will be vuid 115 [2006/06/23 12:37:32, 7] param/loadparm.c:lp_servicenumber(4343) lp_servicenumber: couldn't find rajeev [2006/06/23 12:37:32, 3] smbd/password.c:register_vuid(305) Adding homes service for user 'rajeev' using home directory: '/home/rajeev' [2006/06/23 12:37:32, 7] param/loadparm.c:lp_servicenumber(4343) lp_servicenumber: couldn't find homes [2006/06/23 12:37:32, 6] param/loadparm.c:lp_file_list_changed(2947) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_time: Fri Jun 23 12:25:20 2006 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=98 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=115 smb_mid=6720 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=55 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 32 00 00 00 54 00 49 ...0...2 .2...T.I [030] 00 47 00 52 00 00 00 .G.R... [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 76 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x4c [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 17 of length 80 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=76 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=115 smb_mid=6784 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 76 (0x4C) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=33 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 5C 00 49 00 42 00 52 00 49 00 58 00 32 .\.\.I.B .R.I.X.2 [010] 00 5C 00 44 00 46 00 53 00 00 00 3F 3F 3F 3F 3F .\.D.F.S ...????? [020] 00 . [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtconX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 4] smbd/reply.c:reply_tcon_and_X(660) Client requested device type [?????] for share [DFS] [2006/06/23 12:37:32, 5] smbd/service.c:make_connection(860) making a connection to 'normal' service dfs [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user rajeev [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is rajeev [2006/06/23 12:37:32, 10] lib/util_pw.c:getpwnam_alloc(98) Got rajeev from pwnam_cache [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals did find user [rajeev]! [2006/06/23 12:37:32, 3] smbd/service.c:make_connection_snum(488) Connect path is '/export/dfsroot' for service [dfs] [2006/06/23 12:37:32, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for dfs [2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. [2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2006/06/23 12:37:32, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2006/06/23 12:37:32, 3] smbd/vfs.c:vfs_init_default(216) Initialising default vfs hooks [2006/06/23 12:37:32, 5] smbd/connection.c:claim_connection(170) claiming dfs 0 [2006/06/23 12:37:32, 10] smbd/uid.c:is_share_read_only_for_user(127) is_share_read_only_for_user: share dfs is read-only for unix user rajeev [2006/06/23 12:37:32, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for dfs [2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000001, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. [2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2006/06/23 12:37:32, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (1) granted. [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:37:32, 1] smbd/service.c:make_connection_snum(693) kreaper-xp (172.17.134.118) connect to service dfs initially as user rajeev (uid=1518, gid=40) (pid 23622) [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 2] smbd/reply.c:reply_tcon_and_X(703) Serving dfs as a Dfs root [2006/06/23 12:37:32, 3] smbd/reply.c:reply_tcon_and_X(708) tconX service=DFS [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=54 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=6784 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 3 (0x3) smb_bcc=13 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 102 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x66 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 18 of length 106 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=6848 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8256 (0x2040) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h [010] 00 00 00 ... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:37:32, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /export/dfsroot [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x204000 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [SCRATCH] [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af1d350:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af1d350:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:37:32, 3] smbd/dosmode.c:unix_mode(121) unix_mode(scratch) returning 0744 [2006/06/23 12:37:32, 10] smbd/open.c:open_file_ntcreate(1091) open_file_ntcreate: fname=scratch, dos_attrs=0x0 access_mask=0x80 share_access=0x7 create_disposition = 0x1 create_options=0x204000 unix mode=0744 oplock_request=0 [2006/06/23 12:37:32, 5] smbd/open.c:open_file_ntcreate(1178) open_file_ntcreate: FILE_OPEN requested for file scratch and file doesn't exist. [2006/06/23 12:37:32, 10] smbd/trans2.c:set_bad_path_error(2623) set_bad_path_error: err = 2 bad_path = 0 [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=6848 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1438 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x59e [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 19 of length 1442 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=1438 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6912 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1438 (0x59E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1276 (0x4FC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1379 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 116 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1210 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=116 smb_mid=6912 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 78 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x4e [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 20 of length 82 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=78 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=115 smb_mid=6976 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 78 (0x4E) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=35 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 5C 00 49 00 42 00 52 00 49 00 58 00 32 .\.\.I.B .R.I.X.2 [010] 00 5C 00 49 00 50 00 43 00 24 00 00 00 3F 3F 3F .\.I.P.C .$...??? [020] 3F 3F 00 ??. [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtconX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 4] smbd/reply.c:reply_tcon_and_X(660) Client requested device type [?????] for share [IPC$] [2006/06/23 12:37:32, 5] smbd/service.c:make_connection(860) making a connection to 'normal' service ipc$ [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user rajeev [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is rajeev [2006/06/23 12:37:32, 10] lib/util_pw.c:getpwnam_alloc(98) Got rajeev from pwnam_cache [2006/06/23 12:37:32, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals did find user [rajeev]! [2006/06/23 12:37:32, 3] smbd/service.c:make_connection_snum(488) Connect path is '/tmp' for service [IPC$] [2006/06/23 12:37:32, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for IPC$ [2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. [2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2006/06/23 12:37:32, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2006/06/23 12:37:32, 3] smbd/vfs.c:vfs_init_default(216) Initialising default vfs hooks [2006/06/23 12:37:32, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2006/06/23 12:37:32, 10] smbd/uid.c:is_share_read_only_for_user(127) is_share_read_only_for_user: share IPC$ is read-only for unix user rajeev [2006/06/23 12:37:32, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for IPC$ [2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/06/23 12:37:32, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000001, for NT token with 45 entries and first sid S-1-5-21-2867130070-3872911017-3508780997-3114. [2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(250) [2006/06/23 12:37:32, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-2867130070-3872911017-3508780997-3114 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4746 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1340 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-7131 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-3411 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4007 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4008 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-5786 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1374 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1365 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1344 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-4061 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1372 se_access_check: also S-1-5-21-2867130070-3872911017-3508780997-1307 se_access_check: also S-1-5-21-3943372273-476776777-254507415-513 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2906 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2908 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2916 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2921 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2923 se_access_check: also S-1-5-21-3943372273-476776777-254507415-2692 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1315 se_access_check: also S-1-5-21-1858416889-847654463-689510791-3682 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1933 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1480 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1244 se_access_check: also S-1-5-21-1858416889-847654463-689510791-1773 se_access_check: also S-1-5-21-3943372273-476776777-254507415-3096 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1081 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1001 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1029 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1121 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1127 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1161 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1241 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1261 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1321 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1325 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1335 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-1341 se_access_check: also S-1-5-21-1055192801-1434710095-1259064960-3051 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2006/06/23 12:37:32, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (1) granted. [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:37:32, 3] smbd/service.c:make_connection_snum(693) kreaper-xp (172.17.134.118) connect to service IPC$ initially as user rajeev (uid=1518, gid=40) (pid 23622) [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/reply.c:reply_tcon_and_X(708) tconX service=IPC$ [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=6976 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 100 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x64 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 21 of length 104 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=748 smb_uid=115 smb_mid=7040 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:37:32, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /tmp [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 [2006/06/23 12:37:32, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \srvsvc. [2006/06/23 12:37:32, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe srvsvc opening. [2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(180) Open pipe requested srvsvc (pipes_open=0) [2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(285) Create pipe requested srvsvc [2006/06/23 12:37:32, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2006/06/23 12:37:32, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(363) Created internal pipe srvsvc (pipes_open=0) [2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) Opened pipe srvsvc with handle 748a (pipes_open=1) [2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(269) open pipes: name srvsvc pnum=748a [2006/06/23 12:37:32, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \srvsvc [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=748 smb_uid=115 smb_mid=7040 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=35328 (0x8A00) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 136 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x88 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 22 of length 140 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=136 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=7104 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29834 (0x748A) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 72 (0x48) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=73 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... [010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ [020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. [030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ [040] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBwriteX (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=748a [2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name srvsvc pnum=748a (pipes_open=1) [2006/06/23 12:37:32, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 748a name: srvsvc open: Yes len: 72 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 72 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 56 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0b [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0048 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 11, flags = 3 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 56 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 11 [2006/06/23 12:37:32, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1495) api_pipe_bind_req: decode request. 1495 [2006/06/23 12:37:32, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1506) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_rb [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_bba [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0000 max_tsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0002 max_rsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 assoc_gid: 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0008 num_contexts: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000c context_id : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 000e num_transfer_syntaxes: 01 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 00000f smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 data : 4b324fc8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 data : 1670 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0016 data : 01d3 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0018 data : 12 78 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 001a data : 5a 47 bf 6e e1 88 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 version: 00000003 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 data : 8a885d04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0028 data : 1ceb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 002a data : 11c9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002c data : 9f e8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002e data : 08 00 2b 10 48 60 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 version: 00000002 [2006/06/23 12:37:32, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1548) api_pipe_bind_req: make response. 1548 [2006/06/23 12:37:32, 3] rpc_server/srv_pipe.c:check_bind_req(959) check_bind_req for \PIPE\srvsvc [2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\lsarpc [2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\lsarpc [2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\samr [2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\NETLOGON [2006/06/23 12:37:32, 10] rpc_server/srv_pipe.c:check_bind_req(964) checking \PIPE\srvsvc [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_ba [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_bba [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0000 max_tsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0002 max_rsize: 10b8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 assoc_gid: 000053f0 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000008 smb_io_rpc_addr_str [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 len: 000d [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 000a str: \PIPE\ntsvcs. [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000017 smb_io_rpc_results [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0018 num_results: 01 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001c result : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 001e reason : 0000 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_rpc_iface [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 data : 8a885d04 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0024 data : 1ceb [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0026 data : 11c9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 0028 data : 9f e8 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 002a data : 08 00 2b 10 48 60 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 version: 00000002 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 0c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0044 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 56 [2006/06/23 12:37:32, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=748a nwritten=72 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=7104 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 72 (0x48) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 59 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x3b [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 23 of length 63 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=7168 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29834 (0x748A) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBreadX (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=748a [2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name srvsvc pnum=748a (pipes_open=1) [2006/06/23 12:37:32, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 748a name: srvsvc len: 1024 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1051) read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2006/06/23 12:37:32, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=748a min=1024 max=1024 nread=68 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=7168 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 00 ........ D....... [010] B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 5C .....S.. ..\PIPE\ [020] 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 00 ntsvcs.. ........ [030] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [040] 02 00 00 00 .... [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 168 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0xa8 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 24 of length 172 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=168 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=748 smb_uid=115 smb_mid=7232 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 84 (0x54) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 84 (0x54) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29834 (0x748A) smb_bcc=101 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 54 00 00 00 01 00 00 ........ .T...... [020] 00 3C 00 00 00 00 00 10 00 A8 DA F6 04 09 00 00 .<...... ........ [030] 00 00 00 00 00 09 00 00 00 5C 00 5C 00 69 00 62 ........ .\.\.i.b [040] 00 72 00 69 00 78 00 32 00 00 00 C9 11 04 00 00 .r.i.x.2 ........ [050] 00 00 00 00 00 04 00 00 00 64 00 66 00 73 00 00 ........ .d.f.s.. [060] 00 01 00 00 00 ..... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=84 params=0 setup=2 [2006/06/23 12:37:32, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/06/23 12:37:32, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/06/23 12:37:32, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=748a [2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name srvsvc pnum=748a (pipes_open=1) [2006/06/23 12:37:32, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "srvsvc" (pnum 748a) [2006/06/23 12:37:32, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x552af93c20 max_trans_reply: 1024 [2006/06/23 12:37:32, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 748a name: srvsvc open: Yes len: 84 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 84 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 84 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 84, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 68 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 68 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0054 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 3 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 68 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 68, incoming data = 68 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 0000003c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 0010 [2006/06/23 12:37:32, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 77 [2006/06/23 12:37:32, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\srvsvc [2006/06/23 12:37:32, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO [2006/06/23 12:37:32, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[8].fn == 0x552abc10d9 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 srv_io_q_net_share_get_info [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr_srv_name: 04f6daa8 [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 00000009 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 00000009 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.i.b.r.i.x.2... [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000022 smb_io_unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 uni_max_len: 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c uni_str_len: 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0030 buffer : d.f.s... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0038 info_level: 00000001 [2006/06/23 12:37:32, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1491) _srv_net_share_get_info: 1491 [2006/06/23 12:37:32, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(774) init_srv_r_net_share_get_info: 774 [2006/06/23 12:37:32, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: dfs 0 DFS root [2006/06/23 12:37:32, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2006/06/23 12:37:32, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1497) _srv_net_share_get_info: 1497 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 srv_io_r_net_share_get_info [2006/06/23 12:37:32, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 srv_io_srv_share_info info [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 switch_value : 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 ptr_share_ctr: 00000001 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000008 srv_io_share_info1 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 ptr_netname: 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c type : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 ptr_remark : 00000001 [2006/06/23 12:37:32, 7] rpc_parse/parse_prs.c:prs_debug(84) 000014 srv_io_share_info1_str [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000014 smb_io_unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 uni_max_len: 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c uni_str_len: 00000004 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0020 buffer : d.f.s... [2006/06/23 12:37:32, 8] rpc_parse/parse_prs.c:prs_debug(84) 000028 smb_io_unistr2 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_max_len: 00000009 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c offset : 00000000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 uni_str_len: 00000009 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0034 buffer : D.F.S. .r.o.o.t... [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_werror(792) 0048 status: WERR_OK [2006/06/23 12:37:32, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called srvsvc successfully [2006/06/23 12:37:32, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 52 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 68 [2006/06/23 12:37:32, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 748a name: srvsvc len: 1024 [2006/06/23 12:37:32, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 76. [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0064 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000001 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 0000004c [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/06/23 12:37:32, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/06/23 12:37:32, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..100] [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=748 smb_uid=115 smb_mid=7232 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=101 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 64 00 00 00 01 00 00 ........ .d...... [010] 00 4C 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .L...... ........ [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 04 00 00 ........ ........ [030] 00 00 00 00 00 04 00 00 00 64 00 66 00 73 00 00 ........ .d.f.s.. [040] 00 09 00 00 00 00 00 00 00 09 00 00 00 44 00 46 ........ .....D.F [050] 00 53 00 20 00 72 00 6F 00 6F 00 74 00 00 00 00 .S. .r.o .o.t.... [060] 00 00 00 00 00 ..... [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 25 of length 45 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=7296 smt_wct=3 smb_vwv[ 0]=29834 (0x748A) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af5b3b0 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=748a [2006/06/23 12:37:32, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name srvsvc pnum=748a (pipes_open=1) [2006/06/23 12:37:32, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:748a [2006/06/23 12:37:32, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2006/06/23 12:37:32, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1166) closed pipe name srvsvc pnum=748a (pipes_open=0) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=115 smb_mid=7296 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 88 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x58 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 26 of length 92 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7360 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 00 00 .\... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:37:32, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /export/dfsroot [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) allocated file structure 1850, fnum = 5946 (1 used) [2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5946, open name = . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7360 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=14848 (0x3A00) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62062 (0xF26E) smb_vwv[11]=58194 (0xE352) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 72 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x48 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 27 of length 76 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7424 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 00 00 3A 17 EE 03 ...:... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2qfilepathinfo(2799) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2qfilepathinfo(2913) call_trans2qfilepathinfo . (fnum = 5946) level=1006 call=7 total_data=0 [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:37:32, 10] smbd/trans2.c:call_trans2qfilepathinfo(3228) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=68 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7424 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 8 (0x8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 8 (0x8) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=13 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 00 00 00 00 02 00 0A 00 00 FD 00 00 ........ ..... [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 70 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x46 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 28 of length 74 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7488 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 00 00 05 01 ..... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2qfsinfo(2136) call_trans2qfsinfo: level = 261 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7488 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 2B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 .+...... .....N.T [010] 00 46 00 53 00 .F.S. [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2qfsinfo(2465) SMBtrans2 info_level = 261 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 29 of length 45 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=7552 smt_wct=3 smb_vwv[ 0]= 5946 (0x173A) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) close directory fnum=5946 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 1, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) freed files structure 5946 (0 used) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=7552 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 88 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x58 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 30 of length 92 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7616 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 00 00 .\... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) allocated file structure 1851, fnum = 5947 (1 used) [2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 2, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5947, open name = . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7616 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=15104 (0x3B00) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62062 (0xF26E) smb_vwv[11]=58194 (0xE352) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 102 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x66 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 31 of length 106 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=102 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7680 smt_wct=15 smb_vwv[ 0]= 34 (0x22) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 34 (0x22) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=37 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 00 00 16 00 56 05 16 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 53 00 43 00 52 00 41 00 54 00 43 00 48 00 22 .S.C.R.A .T.C.H." [020] 00 2A 00 00 00 .*... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2findfirst(1632) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "SCRATCH"*" [2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [SCRATCH"*] [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = SCRATCH"*, dirpath = , start = SCRATCH"* [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled SCRATCH"* ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component SCRATCH"* (len 9) ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled SCRATCH"* ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component SCRATCH"* (len 9) ? [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(335) New file SCRATCH"* [2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1688) dir=./, mask = SCRATCH"* [2006/06/23 12:37:32, 5] smbd/dir.c:dptr_create(391) dptr_create dir=./ [2006/06/23 12:37:32, 3] smbd/dir.c:dptr_create(511) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1745) dptr_num is 256, wcard = SCRATCH"*, attr = 22 [2006/06/23 12:37:32, 8] smbd/trans2.c:call_trans2findfirst(1750) dirpath=<./> dontdescend=<> [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 0 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 2147483648 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 771496934 [2006/06/23 12:37:32, 5] smbd/msdfs.c:is_msdfs_link(281) is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch [2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: ./scratch [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d[sparse] [2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) get_lanman2_dir_entry found ./scratch fname=scratch [2006/06/23 12:37:32, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 1671277131 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 2147483647 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset -1 [2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1798) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/23 12:37:32, 4] smbd/dir.c:dptr_close_internal(238) closing dptr key 256 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=176 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7680 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 108 (0x6C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 108 (0x6C) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=121 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 6E F2 .......O ......n. [020] 52 E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F R......O .......O [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1834) SMBtrans2 mask=SCRATCH"* directory=./ dirtype=22 numentries=1 [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:name_map(617) name_map: SCRATCH"* -> 09E18AF1 -> S2QP5O~1 (cache=1) [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 32 of length 45 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=7744 smt_wct=3 smb_vwv[ 0]= 5947 (0x173B) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) close directory fnum=5947 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 2, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) freed files structure 5947 (0 used) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=7744 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 88 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x58 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 33 of length 92 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7808 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 00 00 .\... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) allocated file structure 1852, fnum = 5948 (1 used) [2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5948, open name = . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7808 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=15360 (0x3C00) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62062 (0xF26E) smb_vwv[11]=58194 (0xE352) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 98 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x62 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 34 of length 102 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=98 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7872 smt_wct=15 smb_vwv[ 0]= 30 (0x1E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 30 (0x1E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=33 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 00 00 16 00 56 05 17 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 63 00 72 00 61 00 74 00 63 00 68 00 00 .s.c.r.a .t.c.h.. [020] 00 . [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2findfirst(1632) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1688) dir=./, mask = scratch [2006/06/23 12:37:32, 5] smbd/dir.c:dptr_create(391) dptr_create dir=./ [2006/06/23 12:37:32, 3] smbd/dir.c:dptr_create(511) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1745) dptr_num is 256, wcard = scratch, attr = 22 [2006/06/23 12:37:32, 8] smbd/trans2.c:call_trans2findfirst(1750) dirpath=<./> dontdescend=<> [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 0 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 2147483648 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 771496934 [2006/06/23 12:37:32, 5] smbd/msdfs.c:is_msdfs_link(281) is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch [2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: ./scratch [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d[sparse] [2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) get_lanman2_dir_entry found ./scratch fname=scratch [2006/06/23 12:37:32, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1798) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/23 12:37:32, 4] smbd/dir.c:dptr_close_internal(238) closing dptr key 256 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=176 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=7872 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 108 (0x6C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 108 (0x6C) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=121 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 6E F2 .......O ......n. [020] 52 E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F R......O .......O [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1834) SMBtrans2 mask=scratch directory=./ dirtype=22 numentries=1 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 35 of length 45 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=7936 smt_wct=3 smb_vwv[ 0]= 5948 (0x173C) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) close directory fnum=5948 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 3, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) freed files structure 5948 (0 used) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=7936 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 102 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x66 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 36 of length 106 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8000 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8256 (0x2040) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h [010] 00 00 00 ... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x204000 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:37:32, 3] smbd/dosmode.c:unix_mode(121) unix_mode(scratch) returning 0744 [2006/06/23 12:37:32, 10] smbd/open.c:open_file_ntcreate(1091) open_file_ntcreate: fname=scratch, dos_attrs=0x0 access_mask=0x80 share_access=0x7 create_disposition = 0x1 create_options=0x204000 unix mode=0744 oplock_request=0 [2006/06/23 12:37:32, 5] smbd/open.c:open_file_ntcreate(1178) open_file_ntcreate: FILE_OPEN requested for file scratch and file doesn't exist. [2006/06/23 12:37:32, 10] smbd/trans2.c:set_bad_path_error(2623) set_bad_path_error: err = 2 bad_path = 0 [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8000 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 88 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x58 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 37 of length 92 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8064 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 00 00 .\... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) allocated file structure 1853, fnum = 5949 (1 used) [2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5949, open name = . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8064 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=15616 (0x3D00) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62062 (0xF26E) smb_vwv[11]=58194 (0xE352) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 98 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x62 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 38 of length 102 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=98 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8128 smt_wct=15 smb_vwv[ 0]= 30 (0x1E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 30 (0x1E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=33 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 00 00 16 00 56 05 17 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 63 00 72 00 61 00 74 00 63 00 68 00 00 .s.c.r.a .t.c.h.. [020] 00 . [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2findfirst(1632) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1688) dir=./, mask = scratch [2006/06/23 12:37:32, 5] smbd/dir.c:dptr_create(391) dptr_create dir=./ [2006/06/23 12:37:32, 3] smbd/dir.c:dptr_create(511) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1745) dptr_num is 256, wcard = scratch, attr = 22 [2006/06/23 12:37:32, 8] smbd/trans2.c:call_trans2findfirst(1750) dirpath=<./> dontdescend=<> [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 0 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 2147483648 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af45f00 now at offset 771496934 [2006/06/23 12:37:32, 5] smbd/msdfs.c:is_msdfs_link(281) is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch [2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: ./scratch [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d[sparse] [2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) get_lanman2_dir_entry found ./scratch fname=scratch [2006/06/23 12:37:32, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1798) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/23 12:37:32, 4] smbd/dir.c:dptr_close_internal(238) closing dptr key 256 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=176 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8128 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 108 (0x6C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 108 (0x6C) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=121 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 6E F2 .......O ......n. [020] 52 E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F R......O .......O [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1834) SMBtrans2 mask=scratch directory=./ dirtype=22 numentries=1 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 39 of length 45 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=8192 smt_wct=3 smb_vwv[ 0]= 5949 (0x173D) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) close directory fnum=5949 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 4, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) freed files structure 5949 (0 used) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=8192 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 88 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x58 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 40 of length 92 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8256 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 00 00 .\... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) allocated file structure 1854, fnum = 5950 (1 used) [2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 5, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5950, open name = . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8256 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=15872 (0x3E00) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62062 (0xF26E) smb_vwv[11]=58194 (0xE352) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 70 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x46 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 41 of length 74 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8320 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 00 00 05 01 ..... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2qfsinfo(2136) call_trans2qfsinfo: level = 261 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8320 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 2B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 .+...... .....N.T [010] 00 46 00 53 00 .F.S. [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2qfsinfo(2465) SMBtrans2 info_level = 261 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 42 of length 45 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=8384 smt_wct=3 smb_vwv[ 0]= 5950 (0x173E) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) close directory fnum=5950 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 5, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) freed files structure 5950 (0 used) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=8384 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 88 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x58 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 43 of length 92 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8448 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=5 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 00 00 .\... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) open_directory: opening directory ., access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:37:32, 5] smbd/files.c:file_new(128) allocated file structure 1855, fnum = 5951 (1 used) [2006/06/23 12:37:32, 10] locking/locking.c:unparse_share_modes(540) unparse_share_modes: del: 0, num: 1 [2006/06/23 12:37:32, 10] locking/locking.c:print_share_mode_table(417) print_share_mode_table: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: . [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d [2006/06/23 12:37:32, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 5951, open name = . [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8448 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=16128 (0x3F00) smb_vwv[ 3]= 279 (0x117) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=32768 (0x8000) smb_vwv[ 6]=46040 (0xB3D8) smb_vwv[ 7]= 2238 (0x8BE) smb_vwv[ 8]=50838 (0xC696) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=62062 (0xF26E) smb_vwv[11]=58194 (0xE352) smb_vwv[12]=50838 (0xC696) smb_vwv[13]=32769 (0x8001) smb_vwv[14]=46040 (0xB3D8) smb_vwv[15]= 2238 (0x8BE) smb_vwv[16]=50838 (0xC696) smb_vwv[17]=32769 (0x8001) smb_vwv[18]=46040 (0xB3D8) smb_vwv[19]= 2238 (0x8BE) smb_vwv[20]=50838 (0xC696) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 98 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x62 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 44 of length 102 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=98 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8512 smt_wct=15 smb_vwv[ 0]= 30 (0x1E) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 30 (0x1E) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=33 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 00 00 16 00 56 05 17 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 73 00 63 00 72 00 61 00 74 00 63 00 68 00 00 .s.c.r.a .t.c.h.. [020] 00 . [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBtrans2 (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/trans2.c:call_trans2findfirst(1632) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1688) dir=./, mask = scratch [2006/06/23 12:37:32, 5] smbd/dir.c:dptr_create(391) dptr_create dir=./ [2006/06/23 12:37:32, 3] smbd/dir.c:dptr_create(511) creating new dirptr 256 for path ./, expect_close = 1 [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1745) dptr_num is 256, wcard = scratch, attr = 22 [2006/06/23 12:37:32, 8] smbd/trans2.c:call_trans2findfirst(1750) dirpath=<./> dontdescend=<> [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 0 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 2147483648 [2006/06/23 12:37:32, 8] smbd/trans2.c:get_lanman2_dir_entry(1079) get_lanman2_dir_entry:readdir on dirptr 0x552af67d80 now at offset 771496934 [2006/06/23 12:37:32, 5] smbd/msdfs.c:is_msdfs_link(281) is_msdfs_link: ./scratch -> msdfs:netvenus.tigr.org\scratch [2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1131) get_lanman2_dir_entry: Masquerading msdfs link ./scratch as a directory [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(300) dos_mode: ./scratch [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode_from_sbuf(167) dos_mode_from_sbuf returning d [2006/06/23 12:37:32, 8] smbd/dosmode.c:dos_mode(334) dos_mode returning d[sparse] [2006/06/23 12:37:32, 5] smbd/trans2.c:get_lanman2_dir_entry(1169) get_lanman2_dir_entry found ./scratch fname=scratch [2006/06/23 12:37:32, 10] smbd/trans2.c:get_lanman2_dir_entry(1310) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2006/06/23 12:37:32, 5] smbd/trans2.c:call_trans2findfirst(1798) call_trans2findfirst - (2) closing dptr_num 256 [2006/06/23 12:37:32, 4] smbd/dir.c:dptr_close_internal(238) closing dptr key 256 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(685) t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 [2006/06/23 12:37:32, 9] smbd/trans2.c:send_trans2_replies(687) t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=176 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8512 smt_wct=10 smb_vwv[ 0]= 10 (0xA) smb_vwv[ 1]= 108 (0x6C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 10 (0xA) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 108 (0x6C) smb_vwv[ 7]= 68 (0x44) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=121 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 6C 00 00 ........ .....l.. [010] 00 00 00 00 00 80 7F 4F BC 04 96 C6 01 00 6E F2 .......O ......n. [020] 52 E3 96 C6 01 80 7F 4F BC 04 96 C6 01 80 7F 4F R......O .......O [030] BC 04 96 C6 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 10 02 00 00 0E 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 73 00 63 00 72 ........ ...s.c.r [070] 00 61 00 74 00 63 00 68 00 .a.t.c.h . [2006/06/23 12:37:32, 4] smbd/trans2.c:call_trans2findfirst(1834) SMBtrans2 mask=scratch directory=./ dirtype=22 numentries=1 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 41 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x29 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 45 of length 45 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=8576 smt_wct=3 smb_vwv[ 0]= 5951 (0x173F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBclose (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 3] smbd/reply.c:reply_close(3257) close directory fnum=5951 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(442) parse_share_modes: delete_on_close: 0, num_share_modes: 1 [2006/06/23 12:37:32, 10] locking/locking.c:parse_share_modes(488) parse_share_modes: share_mode_entry[0]: pid = 23622, share_access = 0x3, private_options = 0x4001, access_mask = 0x100001, mid = 0x0, type= 0x0, file_id = 6, dev = 0xfd00, inode = 655362 [2006/06/23 12:37:32, 5] smbd/files.c:file_free(450) freed files structure 5951 (0 used) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=115 smb_mid=8576 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 102 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x66 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 46 of length 106 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8640 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h [010] 00 00 00 ... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) open_directory: opening directory scratch, access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1823) open_directory: FILE_OPEN requested for directory scratch and it doesn't exist. [2006/06/23 12:37:32, 10] smbd/trans2.c:set_bad_path_error(2623) set_bad_path_error: err = 2 bad_path = 0 [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8640 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1438 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x59e [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 47 of length 1442 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=1438 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=8704 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1438 (0x59E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1276 (0x4FC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1379 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 60 82 04 F8 06 06 2B 06 01 05 05 02 A0 82 04 EC `.....+. ........ [010] 30 82 04 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BE 04 82 +.....7. ........ [040] 04 BA 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [050] 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 ...n...0 ........ [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 03 CB 61 82 03 C7 30 82 03 C3 A0 03 02 01 05 A1 ..a...0. ........ [080] 0A 1B 08 54 49 47 52 2E 4F 52 47 A2 22 30 20 A0 ...TIGR. ORG."0 . [090] 03 02 01 02 A1 19 30 17 1B 04 63 69 66 73 1B 0F ......0. ..cifs.. [0A0] 69 62 72 69 78 32 2E 54 49 47 52 2E 4F 52 47 A3 ibrix2.T IGR.ORG. [0B0] 82 03 8A 30 82 03 86 A0 03 02 01 17 A1 03 02 01 ...0.... ........ [0C0] 05 A2 82 03 78 04 82 03 74 5A 8C 40 4C BF 12 C1 ....x... tZ.@L... [0D0] E2 FD E7 8B AA BA EB 6E 4A 36 C6 C3 EE E2 7B AA .......n J6....{. [0E0] C2 18 7E DF A4 C2 2A 02 41 29 6C 70 10 F9 2F 8E ..~...*. A)lp../. [0F0] B0 96 1A 62 1F DC CB D7 5D E4 86 52 AE 08 74 85 ...b.... ]..R..t. [100] 59 69 AC F5 8D 47 89 01 3E 1F BD CA 8D 33 14 97 Yi...G.. >....3.. [110] D2 72 25 0D 09 E6 37 13 B1 E7 B0 22 BE 69 85 E2 .r%...7. ...".i.. [120] 4A 27 F1 FA FF 6D D3 9D 4B 7E 77 16 73 5F 9C 70 J'...m.. K~w.s_.p [130] 71 3B CB 86 2D 16 7C 38 BA 3E EF E0 81 C9 F9 2C q;..-.|8 .>....., [140] 70 7B EE D7 EB 12 52 AC B4 AF 93 FE 90 C8 8D F6 p{....R. ........ [150] B7 0F 96 0E 04 8D A8 95 D7 2C F5 92 24 B0 29 4C ........ .,..$.)L [160] 8D E8 1C 36 AA CF 16 E3 B6 6F 5A 43 E1 72 39 02 ...6.... .oZC.r9. [170] 89 D3 90 5E 8E 82 97 58 9D 83 37 3D CA F4 07 8C ...^...X ..7=.... [180] EE 8E 9E 6E 71 65 72 8C CD 82 72 B1 56 65 43 D5 ...nqer. ..r.VeC. [190] 08 BC F9 97 E8 26 C7 CA 49 38 A7 A0 3A AF 0C E1 .....&.. I8..:... [1A0] 40 73 89 E0 2F F3 A1 A8 84 C8 40 2C 6E D2 D0 1C @s../... ..@,n... [1B0] C0 29 11 D0 F4 81 C9 C7 79 80 0E F6 8C 01 F1 3C .)...... y......< [1C0] ED CC 9C 86 AC 12 F5 0A 6D 0B A8 A1 72 4A 52 9F ........ m...rJR. [1D0] CD 98 C3 F9 BD CC 1A C4 FA F7 0B 88 24 F1 6F 4C ........ ....$.oL [1E0] 52 AA 5F 37 A6 4E ED 9A 1E C0 EF A0 6A 4A 39 12 R._7.N.. ....jJ9. [1F0] 93 DF D6 D7 F3 B0 01 60 A2 E6 2A CC A0 26 55 D8 .......` ..*..&U. [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBsesssetupX (pid 23622) conn 0x0 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X(822) wct=12 flg2=0xc807 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633) Doing spnego session setup [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2006/06/23 12:37:32, 10] smbd/password.c:register_vuid(182) register_vuid: allocated vuid = 117 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 48018 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 2 840 113554 1 2 2 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(525) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/06/23 12:37:32, 3] smbd/sesssetup.c:reply_spnego_negotiate(528) Got secblob of size 1210 [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex(809) secrets_named_mutex: got mutex for replay cache mutex [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [1] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [3] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(249) ads_secrets_verify_ticket: enc type [2] failed to decrypt with error Bad encryption type [2006/06/23 12:37:32, 10] passdb/secrets.c:secrets_named_mutex_release(821) secrets_named_mutex: released mutex for replay cache mutex [2006/06/23 12:37:32, 3] libads/kerberos_verify.c:ads_verify_ticket(378) ads_verify_ticket: krb5_rd_req with auth failed (Success) [2006/06/23 12:37:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(199) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=117 smb_mid=8704 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:32, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 102 [2006/06/23 12:37:32, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x66 [2006/06/23 12:37:32, 3] smbd/process.c:process_smb(1194) Transaction 48 of length 106 [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8768 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 256 (0x100) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 256 (0x100) smb_vwv[20]= 64 (0x40) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2006/06/23 12:37:32, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 73 00 63 00 72 00 61 00 74 00 63 00 68 .\.s.c.r .a.t.c.h [010] 00 00 00 ... [2006/06/23 12:37:32, 3] smbd/process.c:switch_message(993) switch message SMBntcreateX (pid 23622) conn 0x552af72460 [2006/06/23 12:37:32, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1518, 40) - sec_ctx_stack_ndx = 0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-2867130070-3872911017-3508780997-3114 contains 45 SIDs SID[ 0]: S-1-5-21-2867130070-3872911017-3508780997-3114 SID[ 1]: S-1-5-21-2867130070-3872911017-3508780997-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2867130070-3872911017-3508780997-4746 SID[ 6]: S-1-5-21-2867130070-3872911017-3508780997-1340 SID[ 7]: S-1-5-21-2867130070-3872911017-3508780997-7131 SID[ 8]: S-1-5-21-2867130070-3872911017-3508780997-3411 SID[ 9]: S-1-5-21-2867130070-3872911017-3508780997-4007 SID[ 10]: S-1-5-21-2867130070-3872911017-3508780997-4008 SID[ 11]: S-1-5-21-2867130070-3872911017-3508780997-5786 SID[ 12]: S-1-5-21-2867130070-3872911017-3508780997-1374 SID[ 13]: S-1-5-21-2867130070-3872911017-3508780997-1365 SID[ 14]: S-1-5-21-2867130070-3872911017-3508780997-1344 SID[ 15]: S-1-5-21-2867130070-3872911017-3508780997-4061 SID[ 16]: S-1-5-21-2867130070-3872911017-3508780997-1372 SID[ 17]: S-1-5-21-2867130070-3872911017-3508780997-1307 SID[ 18]: S-1-5-21-3943372273-476776777-254507415-513 SID[ 19]: S-1-5-21-3943372273-476776777-254507415-2906 SID[ 20]: S-1-5-21-3943372273-476776777-254507415-2908 SID[ 21]: S-1-5-21-3943372273-476776777-254507415-2916 SID[ 22]: S-1-5-21-3943372273-476776777-254507415-2921 SID[ 23]: S-1-5-21-3943372273-476776777-254507415-2923 SID[ 24]: S-1-5-21-3943372273-476776777-254507415-2692 SID[ 25]: S-1-5-21-1858416889-847654463-689510791-1315 SID[ 26]: S-1-5-21-1858416889-847654463-689510791-3682 SID[ 27]: S-1-5-21-1858416889-847654463-689510791-1933 SID[ 28]: S-1-5-21-1858416889-847654463-689510791-1480 SID[ 29]: S-1-5-21-1858416889-847654463-689510791-1244 SID[ 30]: S-1-5-21-1858416889-847654463-689510791-1773 SID[ 31]: S-1-5-21-3943372273-476776777-254507415-3096 SID[ 32]: S-1-5-21-1055192801-1434710095-1259064960-1081 SID[ 33]: S-1-5-21-1055192801-1434710095-1259064960-1001 SID[ 34]: S-1-5-21-1055192801-1434710095-1259064960-1029 SID[ 35]: S-1-5-21-1055192801-1434710095-1259064960-1121 SID[ 36]: S-1-5-21-1055192801-1434710095-1259064960-1127 SID[ 37]: S-1-5-21-1055192801-1434710095-1259064960-1161 SID[ 38]: S-1-5-21-1055192801-1434710095-1259064960-1241 SID[ 39]: S-1-5-21-1055192801-1434710095-1259064960-1261 SID[ 40]: S-1-5-21-1055192801-1434710095-1259064960-1321 SID[ 41]: S-1-5-21-1055192801-1434710095-1259064960-1325 SID[ 42]: S-1-5-21-1055192801-1434710095-1259064960-1335 SID[ 43]: S-1-5-21-1055192801-1434710095-1259064960-1341 SID[ 44]: S-1-5-21-1055192801-1434710095-1259064960-3051 SE_PRIV 0x0 0x0 0x0 0x0 [2006/06/23 12:37:32, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1518 Primary group is 40 and contains 13 supplementary groups Group[ 0]: 40 Group[ 1]: 0 Group[ 2]: 14 Group[ 3]: 60 Group[ 4]: 63 Group[ 5]: 80 Group[ 6]: 120 Group[ 7]: 130 Group[ 8]: 160 Group[ 9]: 162 Group[ 10]: 167 Group[ 11]: 170 Group[ 12]: 1025 [2006/06/23 12:37:32, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1518,1518) gid=(0,40) [2006/06/23 12:37:32, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x4001 root_dir_fid = 0x0 [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "scratch" [2006/06/23 12:37:32, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [SCRATCH] -> [scratch] [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(185) unix_convert begin: name = scratch, dirpath = , start = scratch [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled scratch ? [2006/06/23 12:37:32, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component scratch (len 7) ? [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (552af68a90:size8) SCRATCH -> scratch [2006/06/23 12:37:32, 5] smbd/filename.c:unix_convert(400) conversion finished scratch -> scratch [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1808) open_directory: opening directory scratch, access_mask = 0x100001, share_access = 0x3 create_options = 0x4001, create_disposition = 0x1 [2006/06/23 12:37:32, 5] smbd/open.c:open_directory(1823) open_directory: FILE_OPEN requested for directory scratch and it doesn't exist. [2006/06/23 12:37:32, 10] smbd/trans2.c:set_bad_path_error(2623) set_bad_path_error: err = 2 bad_path = 0 [2006/06/23 12:37:32, 3] smbd/error.c:error_packet(146) error packet at smbd/trans2.c(2629) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND [2006/06/23 12:37:32, 5] lib/util.c:show_msg(454) [2006/06/23 12:37:32, 5] lib/util.c:show_msg(464) size=35 smb_com=0xa2 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=748 smb_uid=115 smb_mid=8768 smt_wct=0 smb_bcc=0 [2006/06/23 12:37:32, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/06/23 12:37:32, 10] smbd/process.c:run_events(299) run_events: No events [2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet 172.17.49.12: found. [2006/06/23 12:37:36, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(382) announce_myself_to_domain_master_browser: t (1151080646) - last(1151080612) < 900 [2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet 172.17.49.12: netmask= 255.255.255.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0: TIGR(1) current master browser = UNKNOWN IBRIX2 40809b03 (ibrix2) [2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found. [2006/06/23 12:37:36, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173) find_workgroup_on_subnet: workgroup search for TIGR on subnet UNICAST_SUBNET: found.