[2007/11/14 09:19:54, 3] smbd/process.c:check_reload(1340) Printcap cache time expired. [2007/11/14 09:19:54, 3] printing/pcap.c:pcap_cache_reload(117) reloading printcap cache [2007/11/14 09:19:54, 3] printing/pcap.c:pcap_cache_reload(223) reload status: ok [2007/11/14 09:19:54, 2] tdb/tdbutil.c:tdb_log(783) tdb(/etc/samba/secrets.tdb): tdb_mmap failed for size 8192 (Invalid argument) [2007/11/14 09:19:54, 3] smbd/oplock.c:init_oplocks(862) open_oplock_ipc: initializing messages. [2007/11/14 09:19:54, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(260) Linux kernel oplocks enabled [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 0 of length 137 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBnegprot (pid 22107) conn 0x0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/negprot.c:reply_negprot(508) Requested protocol [PC NETWORK PROGRAM 1.0] [2007/11/14 09:19:54, 3] smbd/negprot.c:reply_negprot(508) Requested protocol [LANMAN1.0] [2007/11/14 09:19:54, 3] smbd/negprot.c:reply_negprot(508) Requested protocol [Windows for Workgroups 3.1a] [2007/11/14 09:19:54, 3] smbd/negprot.c:reply_negprot(508) Requested protocol [LM1.2X002] [2007/11/14 09:19:54, 3] smbd/negprot.c:reply_negprot(508) Requested protocol [LANMAN2.1] [2007/11/14 09:19:54, 3] smbd/negprot.c:reply_negprot(508) Requested protocol [NT LM 0.12] [2007/11/14 09:19:54, 2] tdb/tdbutil.c:tdb_log(783) tdb(/etc/samba/secrets.tdb): tdb_mmap failed for size 8192 (Invalid argument) [2007/11/14 09:19:54, 3] smbd/oplock.c:init_oplocks(862) open_oplock_ipc: initializing messages. [2007/11/14 09:19:54, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(260) Linux kernel oplocks enabled [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 0 of length 72 [2007/11/14 09:19:54, 2] smbd/reply.c:reply_special(496) netbios connect: name1=SAMBA name2=TESTCOMP01 [2007/11/14 09:19:54, 2] smbd/reply.c:reply_special(503) netbios connect: local=samba remote=testcomp01, name type = 0 [2007/11/14 09:19:54, 3] smbd/process.c:timeout_processing(1359) timeout_processing: End of file from client (client has disconnected). [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2007/11/14 09:19:54, 3] smbd/connection.c:yield_connection(76) yield_connection: tdb_delete for name failed with error Record does not exist. [2007/11/14 09:19:54, 3] smbd/server.c:exit_server_common(675) Server exit (normal exit) [2007/11/14 09:19:54, 3] smbd/negprot.c:reply_nt1(367) using SPNEGO [2007/11/14 09:19:54, 3] smbd/negprot.c:reply_negprot(609) Selected protocol NT LM 0.12 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 1 of length 210 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBsesssetupX (pid 22107) conn 0x0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849) wct=12 flg2=0xc807 [2007/11/14 09:19:54, 2] smbd/sesssetup.c:setup_new_vc_session(799) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/11/14 09:19:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660) Doing spnego session setup [2007/11/14 09:19:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2007/11/14 09:19:54, 3] smbd/sesssetup.c:reply_spnego_negotiate(551) Got OID 1 3 6 1 4 1 311 2 2 10 [2007/11/14 09:19:54, 3] smbd/sesssetup.c:reply_spnego_negotiate(554) Got secblob of size 40 [2007/11/14 09:19:54, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088297 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 2 of length 344 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBsesssetupX (pid 22107) conn 0x0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849) wct=12 flg2=0xc807 [2007/11/14 09:19:54, 2] smbd/sesssetup.c:setup_new_vc_session(799) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/11/14 09:19:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660) Doing spnego session setup [2007/11/14 09:19:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2007/11/14 09:19:54, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[netce.admin] domain=[netce.com] workstation=[TESTCOMP01] len1=24 len2=24 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user [netce.com]\[netce.admin]@[TESTCOMP01] with the new password interface [2007/11/14 09:19:54, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [netce.com]\[netce.admin]@[TESTCOMP01] [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 2] lib/smbldap.c:smbldap_open_connection(788) smbldap_open_connection: connection opened [2007/11/14 09:19:54, 3] lib/smbldap.c:smbldap_connect_system(992) ldap_connect_system: succesful connection to the LDAP server [2007/11/14 09:19:54, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541) init_sam_from_ldap: Entry found for user: netce.admin [2007/11/14 09:19:54, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 1000 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2007/11/14 09:19:54, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 1000 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2007/11/14 09:19:54, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 1000 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] passdb/lookup_sid.c:store_gid_sid_cache(1079) store_gid_sid_cache: gid 1000 in cache -> S-1-5-21-1076953358-2977740552-3776987585-512 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1015) fetch sid from gid cache 1000 -> S-1-5-21-1076953358-2977740552-3776987585-512 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 1001 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] passdb/lookup_sid.c:store_gid_sid_cache(1079) store_gid_sid_cache: gid 1001 in cache -> S-1-5-21-1076953358-2977740552-3776987585-513 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: sam authentication for user [netce.admin] succeeded [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 2] auth/auth.c:check_ntlm_password(309) check_ntlm_password: authentication for user [netce.admin] -> [netce.admin] -> [netce.admin] succeeded [2007/11/14 09:19:54, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 10000 -> S-1-5-32-544 [2007/11/14 09:19:54, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 10001 -> S-1-5-32-545 [2007/11/14 09:19:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-1076953358-2977740552-3776987585-3006] [2007/11/14 09:19:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/11/14 09:19:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-11] [2007/11/14 09:19:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-1076953358-2977740552-3776987585-513] [2007/11/14 09:19:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-22-2-1000] [2007/11/14 09:19:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-22-2-1001] [2007/11/14 09:19:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-545] [2007/11/14 09:19:54, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 1000 -> S-1-5-21-1076953358-2977740552-3776987585-512 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 1001 -> S-1-5-21-1076953358-2977740552-3776987585-513 [2007/11/14 09:19:54, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 10000 -> S-1-5-32-544 [2007/11/14 09:19:54, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 10001 -> S-1-5-32-545 [2007/11/14 09:19:54, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2007/11/14 09:19:54, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088215 [2007/11/14 09:19:54, 3] smbd/password.c:register_vuid(282) User name: netce.admin Real name: NetCE Admin [2007/11/14 09:19:54, 3] smbd/password.c:register_vuid(303) UNIX uid 1003 is UNIX user netce.admin, and will be vuid 101 [2007/11/14 09:19:54, 3] smbd/password.c:register_vuid(334) Adding homes service for user 'netce.admin' using home directory: '/home/netce.admin' [2007/11/14 09:19:54, 3] param/loadparm.c:lp_add_home(2638) adding home's share [netce.admin] for user 'netce.admin' at '/cluster/samba-ntprofiles/%S' [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 3 of length 80 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtconX (pid 22107) conn 0x0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/service.c:make_connection_snum(761) Connect path is '/var/tmp' for service [IPC$] [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513 se_access_check: also S-1-22-2-1000 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 se_access_check: also S-1-5-32-545 [2007/11/14 09:19:54, 3] smbd/vfs.c:vfs_init_default(219) Initialising default vfs hooks [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513 se_access_check: also S-1-22-2-1000 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 se_access_check: also S-1-5-32-545 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/service.c:make_connection_snum(950) testcomp01 (192.168.9.97) connect to service IPC$ initially as user netce.admin (uid=1003, gid=1000) (pid 22107) [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/reply.c:reply_tcon_and_X(716) tconX service=IPC$ [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 4 of length 104 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBntcreateX (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/nttrans.c:nt_open_pipe(346) nt_open_pipe: Known pipe lsarpc opening. [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 5 of length 160 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=72 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "lsarpc" (pnum 7061) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534) api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:check_bind_req(985) check_bind_req for \PIPE\lsarpc [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 6 of length 172 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=84 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "lsarpc" (pnum 7061) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 71 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: LSA_OPENPOLICY2 [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513 se_access_check: also S-1-22-2-1000 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 se_access_check: also S-1-5-32-545 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 816 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 7 of length 134 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=46 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "lsarpc" (pnum 7061) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 8 of length 134 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=46 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "lsarpc" (pnum 7061) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 20 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 9 of length 104 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBntcreateX (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/nttrans.c:nt_open_pipe(346) nt_open_pipe: Known pipe winreg opening. [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 10 of length 160 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=72 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "winreg" (pnum 7062) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534) api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:check_bind_req(985) check_bind_req for \PIPE\winreg [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 11 of length 124 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=36 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "winreg" (pnum 7062) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 71 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: REG_OPEN_HKLM [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513 se_access_check: also S-1-22-2-1000 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 se_access_check: also S-1-5-32-545 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 510 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 12 of length 272 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=184 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "winreg" (pnum 7062) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: REG_OPEN_ENTRY [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513 se_access_check: also S-1-22-2-1000 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 se_access_check: also S-1-5-32-545 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 634 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 13 of length 236 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=148 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "winreg" (pnum 7062) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: REG_QUERY_VALUE [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 90 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 14 of length 132 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=44 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "winreg" (pnum 7062) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: REG_CLOSE [2007/11/14 09:19:54, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 15 of length 132 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=44 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "winreg" (pnum 7062) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: REG_CLOSE [2007/11/14 09:19:54, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 16 of length 45 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBclose (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 17 of length 100 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBntcreateX (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/nttrans.c:nt_open_pipe(346) nt_open_pipe: Known pipe samr opening. [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 18 of length 160 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=72 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534) api_pipe_bind_req: \PIPE\samr -> \PIPE\lsass [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:check_bind_req(985) check_bind_req for \PIPE\samr [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 19 of length 152 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=64 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 69 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_CONNECT4 [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513 se_access_check: also S-1-22-2-1000 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 se_access_check: also S-1-5-32-545 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 972 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 20 of length 140 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=52 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_ENUM_DOMAINS [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 92 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 21 of length 170 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=82 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_LOOKUP_DOMAIN [2007/11/14 09:19:54, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2797) Returning domain sid for domain NETCE.COM -> S-1-5-21-1076953358-2977740552-3776987585 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 18 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 22 of length 164 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=76 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_OPEN_DOMAIN [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:19:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513 se_access_check: also S-1-22-2-1000 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 se_access_check: also S-1-5-32-545 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 956 [2007/11/14 09:19:54, 3] smbd/process.c:process_smb(1110) Transaction 23 of length 184 [2007/11/14 09:19:54, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:19:54, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=96 params=0 setup=2 [2007/11/14 09:19:54, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:19:54, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:19:54, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:19:54, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_CREATE_USER [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1 [2007/11/14 09:19:54, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2007/11/14 09:19:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] passdb/pdb_interface.c:pdb_default_create_user(368) _samr_create_user: Running the command `/cluster/samba-ntprofiles/create_computer_account2 192.168.9.97 testcomp01 netce.admin' gave 0 [2007/11/14 09:20:07, 2] lib/smbldap_util.c:smbldap_search_domain_info(219) smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=NETCE.COM))] [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/14 09:20:07, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] passdb/pdb_ldap.c:ldapsam_add_sam_account(1984) ldapsam_add_sam_account: User exists without samba attributes: adding them [2007/11/14 09:20:07, 2] passdb/pdb_ldap.c:init_ldap_from_sam(965) init_ldap_from_sam: Setting entry for user: TESTCOMP01$ [2007/11/14 09:20:07, 2] passdb/pdb_ldap.c:ldapsam_add_sam_account(2094) ldapsam_add_sam_account: added: uid == TESTCOMP01$ in the LDAP database [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:20:07, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513 se_access_check: also S-1-22-2-1000 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 se_access_check: also S-1-5-32-545 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 1216 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 24 of length 134 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=46 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_QUERY_USERINFO [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541) init_sam_from_ldap: Entry found for user: testcomp01$ [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] rpc_server/srv_samr_nt.c:get_user_info_16(1832) User:[testcomp01$] [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 12 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 25 of length 132 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=44 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_GET_USRDOM_PWINFO [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 26 of length 898 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=810 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_SET_USERINFO [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541) init_sam_from_ldap: Entry found for user: testcomp01$ [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 2] passdb/pdb_ldap.c:init_ldap_from_sam(965) init_ldap_from_sam: Setting entry for user: testcomp01$ [2007/11/14 09:20:07, 2] passdb/pdb_ldap.c:ldapsam_update_sam_account(1817) ldapsam_update_sam_account: successfully modified uid = testcomp01$ in the LDAP database [2007/11/14 09:20:07, 2] passdb/pdb_ldap.c:init_ldap_from_sam(965) init_ldap_from_sam: Setting entry for user: testcomp01$ [2007/11/14 09:20:07, 2] passdb/pdb_ldap.c:ldapsam_update_sam_account(1817) ldapsam_update_sam_account: successfully modified uid = testcomp01$ in the LDAP database [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 920 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 27 of length 132 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=44 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_CLOSE_HND [2007/11/14 09:20:07, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 28 of length 132 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=44 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_CLOSE_HND [2007/11/14 09:20:07, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 29 of length 132 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=44 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "samr" (pnum 7063) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: SAMR_CLOSE_HND [2007/11/14 09:20:07, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:07, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 30 of length 45 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBclose (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 31 of length 108 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBntcreateX (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/nttrans.c:nt_open_pipe(346) nt_open_pipe: Known pipe NETLOGON opening. [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 32 of length 160 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=72 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "NETLOGON" (pnum 7064) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534) api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:check_bind_req(985) check_bind_req for \PIPE\NETLOGON [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 33 of length 148 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=60 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "NETLOGON" (pnum 7064) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 73 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 34 of length 45 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBclose (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 35 of length 108 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBntcreateX (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/nttrans.c:nt_open_pipe(346) nt_open_pipe: Known pipe NETLOGON opening. [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 36 of length 160 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=72 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "NETLOGON" (pnum 7065) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534) api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:check_bind_req(985) check_bind_req for \PIPE\NETLOGON [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 37 of length 148 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=60 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "NETLOGON" (pnum 7065) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 73 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 38 of length 45 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBclose (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 39 of length 108 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBntcreateX (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/nttrans.c:nt_open_pipe(346) nt_open_pipe: Known pipe NETLOGON opening. [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 40 of length 160 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=72 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "NETLOGON" (pnum 7066) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534) api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:check_bind_req(985) check_bind_req for \PIPE\NETLOGON [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 41 of length 144 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=56 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "NETLOGON" (pnum 7066) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 73 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: NET_TRUST_DOM_LIST [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 40 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 42 of length 45 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBclose (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 43 of length 172 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=84 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "lsarpc" (pnum 7061) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: LSA_OPENPOLICY2 [2007/11/14 09:20:07, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:20:07, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513 se_access_check: also S-1-22-2-1000 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 se_access_check: also S-1-5-32-545 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 816 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 44 of length 134 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=46 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "lsarpc" (pnum 7061) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 20 [2007/11/14 09:20:07, 3] smbd/process.c:process_smb(1110) Transaction 45 of length 132 [2007/11/14 09:20:07, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:07, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=44 params=0 setup=2 [2007/11/14 09:20:07, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:07, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "lsarpc" (pnum 7061) [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:07, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: LSA_CLOSE [2007/11/14 09:20:07, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/11/14 09:20:07, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 46 of length 228 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBsesssetupX (pid 22107) conn 0x0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849) wct=12 flg2=0xc807 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660) Doing spnego session setup [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_spnego_negotiate(551) Got OID 1 3 6 1 4 1 311 2 2 10 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_spnego_negotiate(554) Got secblob of size 59 [2007/11/14 09:20:08, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe208b297 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 47 of length 252 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBsesssetupX (pid 22107) conn 0x0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849) wct=12 flg2=0xc807 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660) Doing spnego session setup [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2007/11/14 09:20:08, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[] domain=[] workstation=[TESTCOMP01] len1=1 len2=0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user []\[]@[TESTCOMP01] with the new password interface [2007/11/14 09:20:08, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [NETCE.COM]\[]@[TESTCOMP01] [2007/11/14 09:20:08, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 1001 -> S-1-5-21-1076953358-2977740552-3776987585-513 [2007/11/14 09:20:08, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: guest authentication for user [] succeeded [2007/11/14 09:20:08, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 10000 -> S-1-5-32-544 [2007/11/14 09:20:08, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 10001 -> S-1-5-32-545 [2007/11/14 09:20:08, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-1076953358-2977740552-3776987585-501] [2007/11/14 09:20:08, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/11/14 09:20:08, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2007/11/14 09:20:08, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088215 [2007/11/14 09:20:08, 3] smbd/password.c:register_vuid(282) User name: nobody Real name: nobody [2007/11/14 09:20:08, 3] smbd/password.c:register_vuid(303) UNIX uid 65534 is UNIX user nobody, and will be vuid 103 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 48 of length 80 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBtconX (pid 22107) conn 0x0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/service.c:make_connection_snum(761) Connect path is '/var/tmp' for service [IPC$] [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2007/11/14 09:20:08, 3] smbd/vfs.c:vfs_init_default(219) Initialising default vfs hooks [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/service.c:make_connection_snum(950) testcomp01 (192.168.9.97) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 22107) [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/reply.c:reply_tcon_and_X(716) tconX service=IPC$ [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 49 of length 108 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBntcreateX (pid 22107) conn 0x8041a330 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/nttrans.c:nt_open_pipe(346) nt_open_pipe: Known pipe NETLOGON opening. [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 50 of length 160 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8041a330 [2007/11/14 09:20:08, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=72 params=0 setup=2 [2007/11/14 09:20:08, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:08, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "NETLOGON" (pnum 7067) [2007/11/14 09:20:08, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534) api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass [2007/11/14 09:20:08, 3] rpc_server/srv_pipe.c:check_bind_req(985) check_bind_req for \PIPE\NETLOGON [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 51 of length 166 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBwriteX (pid 22107) conn 0x8041a330 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 73 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: NET_REQCHAL [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 38 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_write_and_X(217) writeX-IPC pnum=7067 nwritten=98 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 52 of length 63 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBreadX (pid 22107) conn 0x8041a330 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_read_and_X(262) readX-IPC pnum=7067 min=1024 max=1024 nread=36 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 53 of length 212 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBwriteX (pid 22107) conn 0x8041a330 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_write_and_X(217) writeX-IPC pnum=7067 nwritten=144 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 54 of length 63 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBreadX (pid 22107) conn 0x8041a330 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_read_and_X(262) readX-IPC pnum=7067 min=1024 max=1024 nread=32 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 55 of length 212 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBwriteX (pid 22107) conn 0x8041a330 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: NET_AUTH2 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(103) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541) init_sam_from_ldap: Entry found for user: testcomp01$ [2007/11/14 09:20:08, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 1001 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(103) : conn_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(103) : conn_ctx_stack_ndx = 2 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2007/11/14 09:20:08, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140) init_group_from_ldap: Entry found for group: 1001 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 1001 -> S-1-5-21-1076953358-2977740552-3776987585-513 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(103) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 2] tdb/tdbutil.c:tdb_log(783) tdb(/etc/samba/schannel_store.tdb): tdb_mmap failed for size 16384 (Invalid argument) [2007/11/14 09:20:08, 3] passdb/secrets.c:secrets_store_schannel_session_info(995) secrets_store_schannel_session_info: stored schannel info with key SECRETS/SCHANNEL/TESTCOMP01 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 62 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_write_and_X(217) writeX-IPC pnum=7067 nwritten=144 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 56 of length 63 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBreadX (pid 22107) conn 0x8041a330 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_read_and_X(262) readX-IPC pnum=7067 min=1024 max=1024 nread=40 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 57 of length 228 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBsesssetupX (pid 22107) conn 0x0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849) wct=12 flg2=0xc807 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660) Doing spnego session setup [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_spnego_negotiate(551) Got OID 1 3 6 1 4 1 311 2 2 10 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_spnego_negotiate(554) Got secblob of size 59 [2007/11/14 09:20:08, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe208b297 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 58 of length 252 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBsesssetupX (pid 22107) conn 0x0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849) wct=12 flg2=0xc807 [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660) Doing spnego session setup [2007/11/14 09:20:08, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2007/11/14 09:20:08, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[] domain=[] workstation=[TESTCOMP01] len1=1 len2=0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user []\[]@[TESTCOMP01] with the new password interface [2007/11/14 09:20:08, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [NETCE.COM]\[]@[TESTCOMP01] [2007/11/14 09:20:08, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 1001 -> S-1-5-21-1076953358-2977740552-3776987585-513 [2007/11/14 09:20:08, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: guest authentication for user [] succeeded [2007/11/14 09:20:08, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 10000 -> S-1-5-32-544 [2007/11/14 09:20:08, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035) fetch gid from cache 10001 -> S-1-5-32-545 [2007/11/14 09:20:08, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-1076953358-2977740552-3776987585-501] [2007/11/14 09:20:08, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/11/14 09:20:08, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2007/11/14 09:20:08, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088215 [2007/11/14 09:20:08, 3] smbd/password.c:register_vuid(282) User name: nobody Real name: nobody [2007/11/14 09:20:08, 3] smbd/password.c:register_vuid(303) UNIX uid 65534 is UNIX user nobody, and will be vuid 105 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 59 of length 80 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBtconX (pid 22107) conn 0x0 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/service.c:make_connection_snum(761) Connect path is '/var/tmp' for service [IPC$] [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2007/11/14 09:20:08, 3] smbd/vfs.c:vfs_init_default(219) Initialising default vfs hooks [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/service.c:make_connection_snum(950) testcomp01 (192.168.9.97) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 22107) [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/reply.c:reply_tcon_and_X(716) tconX service=IPC$ [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 60 of length 104 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBntcreateX (pid 22107) conn 0x80428e58 [2007/11/14 09:20:08, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:08, 3] smbd/nttrans.c:nt_open_pipe(346) nt_open_pipe: Known pipe lsarpc opening. [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 61 of length 160 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x80428e58 [2007/11/14 09:20:08, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=72 params=0 setup=2 [2007/11/14 09:20:08, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:08, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "lsarpc" (pnum 7068) [2007/11/14 09:20:08, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534) api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass [2007/11/14 09:20:08, 3] rpc_server/srv_pipe.c:check_bind_req(985) check_bind_req for \PIPE\lsarpc [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 62 of length 152 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBwriteX (pid 22107) conn 0x80428e58 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 71 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: LSA_OPENPOLICY2 [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:20:08, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 816 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_write_and_X(217) writeX-IPC pnum=7068 nwritten=84 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 63 of length 63 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBreadX (pid 22107) conn 0x80428e58 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_read_and_X(262) readX-IPC pnum=7068 min=1024 max=1024 nread=48 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 64 of length 120 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBwriteX (pid 22107) conn 0x80428e58 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: LSA_ENUMTRUSTDOM [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 24 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_write_and_X(217) writeX-IPC pnum=7068 nwritten=52 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 65 of length 63 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBreadX (pid 22107) conn 0x80428e58 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_read_and_X(262) readX-IPC pnum=7068 min=1024 max=1024 nread=40 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 66 of length 112 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBwriteX (pid 22107) conn 0x80428e58 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:08, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: LSA_CLOSE [2007/11/14 09:20:08, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/11/14 09:20:08, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_write_and_X(217) writeX-IPC pnum=7068 nwritten=44 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 67 of length 63 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBreadX (pid 22107) conn 0x80428e58 [2007/11/14 09:20:08, 3] smbd/pipes.c:reply_pipe_read_and_X(262) readX-IPC pnum=7068 min=1024 max=1024 nread=48 [2007/11/14 09:20:08, 3] smbd/process.c:process_smb(1110) Transaction 68 of length 45 [2007/11/14 09:20:08, 3] smbd/process.c:switch_message(914) switch message SMBclose (pid 22107) conn 0x80428e58 [2007/11/14 09:20:10, 3] smbd/process.c:process_smb(1110) Transaction 69 of length 132 [2007/11/14 09:20:10, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x8042e560 [2007/11/14 09:20:10, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (1003, 1000) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:10, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=44 params=0 setup=2 [2007/11/14 09:20:10, 3] smbd/ipc.c:named_pipe(340) named pipe command on <> name [2007/11/14 09:20:10, 3] smbd/ipc.c:api_fd_reply(300) Got API command 0x26 on pipe "lsarpc" (pnum 7061) [2007/11/14 09:20:10, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:10, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265) api_rpcTNP: rpc command: LSA_CLOSE [2007/11/14 09:20:10, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/11/14 09:20:10, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549) free_pipe_context: destroying talloc pool of size 0 [2007/11/14 09:20:10, 3] smbd/process.c:process_smb(1110) Transaction 70 of length 45 [2007/11/14 09:20:10, 3] smbd/process.c:switch_message(914) switch message SMBclose (pid 22107) conn 0x8042e560 [2007/11/14 09:20:10, 3] smbd/process.c:process_smb(1110) Transaction 71 of length 43 [2007/11/14 09:20:10, 3] smbd/process.c:switch_message(914) switch message SMBulogoffX (pid 22107) conn 0x0 [2007/11/14 09:20:10, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:10, 3] smbd/reply.c:reply_ulogoffX(1618) ulogoffX vuid=101 [2007/11/14 09:20:10, 3] smbd/process.c:process_smb(1110) Transaction 72 of length 39 [2007/11/14 09:20:10, 3] smbd/process.c:switch_message(914) switch message SMBtdis (pid 22107) conn 0x8042e560 [2007/11/14 09:20:10, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:10, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:10, 3] smbd/service.c:close_cnum(1150) testcomp01 (192.168.9.97) closed connection to service IPC$ [2007/11/14 09:20:10, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2007/11/14 09:20:10, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:19, 3] smbd/process.c:process_smb(1110) Transaction 73 of length 43 [2007/11/14 09:20:19, 3] smbd/process.c:switch_message(914) switch message SMBulogoffX (pid 22107) conn 0x0 [2007/11/14 09:20:19, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:19, 3] smbd/reply.c:reply_ulogoffX(1618) ulogoffX vuid=105 [2007/11/14 09:20:19, 3] smbd/process.c:process_smb(1110) Transaction 74 of length 39 [2007/11/14 09:20:19, 3] smbd/process.c:switch_message(914) switch message SMBtdis (pid 22107) conn 0x80428e58 [2007/11/14 09:20:19, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:19, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:19, 3] smbd/service.c:close_cnum(1150) testcomp01 (192.168.9.97) closed connection to service IPC$ [2007/11/14 09:20:19, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2007/11/14 09:20:19, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:24, 3] smbd/process.c:process_smb(1110) Transaction 75 of length 80 [2007/11/14 09:20:24, 3] smbd/process.c:switch_message(914) switch message SMBtconX (pid 22107) conn 0x0 [2007/11/14 09:20:24, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:24, 3] smbd/service.c:make_connection_snum(761) Connect path is '/var/tmp' for service [IPC$] [2007/11/14 09:20:24, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:20:24, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2007/11/14 09:20:24, 3] smbd/vfs.c:vfs_init_default(219) Initialising default vfs hooks [2007/11/14 09:20:24, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/14 09:20:24, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2007/11/14 09:20:24, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:24, 3] smbd/service.c:make_connection_snum(950) testcomp01 (192.168.9.97) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 22107) [2007/11/14 09:20:24, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:24, 3] smbd/reply.c:reply_tcon_and_X(716) tconX service=IPC$ [2007/11/14 09:20:24, 3] smbd/process.c:process_smb(1110) Transaction 76 of length 122 [2007/11/14 09:20:24, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 22107) conn 0x80418928 [2007/11/14 09:20:24, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2007/11/14 09:20:24, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\LANMAN> data=0 params=26 setup=0 [2007/11/14 09:20:24, 3] smbd/ipc.c:named_pipe(340) named pipe command on name [2007/11/14 09:20:24, 3] smbd/lanman.c:api_reply(4029) Got API command 104 of form (tdscnt=0,tpscnt=26,mdrcnt=4200,mprcnt=8) [2007/11/14 09:20:24, 3] smbd/lanman.c:api_reply(4033) Doing NetServerEnum [2007/11/14 09:20:24, 3] smbd/lanman.c:api_RNetServerEnum(1381) NetServerEnum domain = NETCE.COM uLevel=1 counted=1 total=1