[2004/12/01 22:39:46, 0] smbd/server.c:main(764) smbd version 3.0.9-SUSE started. Copyright Andrew Tridgell and the Samba Team 1992-2004 [2004/12/01 22:39:46, 5] lib/debug.c:debug_dump_status(367) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 [2004/12/01 22:39:46, 2] param/loadparm.c:do_section(3410) Processing section "[thd]" [2004/12/01 22:39:46, 8] param/loadparm.c:add_a_service(2295) add_a_service: Creating snum = 0 for thd doing parameter path = /srv/www/htdocs/thd doing parameter valid users = +FERM, +THD doing parameter write list = +FERM, germste doing parameter force user = wwwrun doing parameter force group = THD doing parameter create mask = 0660 doing parameter directory mask = 0770 doing parameter browseable = No [2004/12/01 22:39:46, 2] param/loadparm.c:do_section(3410) Processing section "[rsm]" [2004/12/01 22:39:46, 8] param/loadparm.c:add_a_service(2295) add_a_service: Creating snum = 1 for rsm doing parameter path = /srv/www/htdocs/rsm doing parameter valid users = +FERM, +THD doing parameter write list = +FERM, mcbrgra doing parameter force user = wwwrun doing parameter force group = RSM doing parameter create mask = 0660 doing parameter directory mask = 0770 doing parameter browseable = No [2004/12/01 22:39:46, 2] param/loadparm.c:do_section(3410) Processing section "[htdocs]" [2004/12/01 22:39:46, 8] param/loadparm.c:add_a_service(2295) add_a_service: Creating snum = 2 for htdocs doing parameter path = /srv/www doing parameter valid users = +FERM doing parameter write list = +FERM doing parameter force user = wwwrun doing parameter force group = www doing parameter create mask = 0660 doing parameter directory mask = 0770 doing parameter read only = No doing parameter browseable = No [2004/12/01 22:39:46, 2] param/loadparm.c:do_section(3410) Processing section "[php]" [2004/12/01 22:39:46, 8] param/loadparm.c:add_a_service(2295) add_a_service: Creating snum = 3 for php doing parameter path = /etc/php doing parameter valid users = nazaand doing parameter write list = nazaand doing parameter force user = wwwrun doing parameter force group = www doing parameter create mask = 0660 doing parameter directory mask = 0770 doing parameter read only = No doing parameter browseable = No [2004/12/01 22:39:46, 4] param/loadparm.c:lp_load(3931) pm_process() returned Yes [2004/12/01 22:39:46, 7] param/loadparm.c:lp_servicenumber(4041) lp_servicenumber: couldn't find homes [2004/12/01 22:39:46, 8] param/loadparm.c:add_a_service(2295) add_a_service: Creating snum = 4 for IPC$ [2004/12/01 22:39:46, 3] param/loadparm.c:lp_add_ipc(2377) adding IPC service [2004/12/01 22:39:46, 8] param/loadparm.c:add_a_service(2295) add_a_service: Creating snum = 5 for ADMIN$ [2004/12/01 22:39:46, 3] param/loadparm.c:lp_add_ipc(2377) adding IPC service [2004/12/01 22:39:46, 10] param/loadparm.c:set_server_role(3840) set_server_role: role = ROLE_STANDALONE [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UCS-2LE [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset UCS-2LE [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF-16LE [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset UTF-16LE [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UCS-2BE [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset UCS-2BE [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF-16BE [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset UTF-16BE [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF8 [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset UTF8 [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF-8 [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset UTF-8 [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset ASCII [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset ASCII [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset 646 [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset 646 [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset ISO-8859-1 [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset ISO-8859-1 [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(103) Attempting to register new charset UCS2-HEX [2004/12/01 22:39:46, 5] lib/iconv.c:smb_register_charset(111) Registered charset UCS2-HEX [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 5] lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE [2004/12/01 22:39:46, 7] param/loadparm.c:lp_servicenumber(4041) lp_servicenumber: couldn't find printers [2004/12/01 22:39:46, 7] param/loadparm.c:lp_servicenumber(4041) lp_servicenumber: couldn't find printers [2004/12/01 22:39:46, 7] param/loadparm.c:lp_servicenumber(4041) lp_servicenumber: couldn't find printers [2004/12/01 22:39:46, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:46, 2] lib/interface.c:add_interface(79) added interface ip=172.17.67.250 bcast=172.17.67.255 nmask=255.255.255.0 [2004/12/01 22:39:46, 2] lib/interface.c:add_interface(79) added interface ip=192.168.1.22 bcast=192.168.1.255 nmask=255.255.255.0 [2004/12/01 22:39:46, 5] lib/util.c:init_names(253) Netbios name list:- my_netbios_names[0]="CTS2" [2004/12/01 22:39:46, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:46, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:46, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:46, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:make_pdb_context_list(764) Trying to load: smbpasswd [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend ldapsam [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'ldapsam' [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend ldapsam_compat [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'ldapsam_compat' [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend NDS_ldapsam [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'NDS_ldapsam' [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend NDS_ldapsam_compat [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'NDS_ldapsam_compat' [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend smbpasswd [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'smbpasswd' [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend tdbsam [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'tdbsam' [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend guest [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'guest' [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:make_pdb_methods_name(649) Attempting to find an passdb backend to match smbpasswd (smbpasswd) [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:make_pdb_methods_name(670) Found pdb backend smbpasswd [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:make_pdb_methods_name(673) pdb backend smbpasswd has a valid init [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:make_pdb_methods_name(649) Attempting to find an passdb backend to match guest (guest) [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:make_pdb_methods_name(670) Found pdb backend guest [2004/12/01 22:39:46, 5] passdb/pdb_interface.c:make_pdb_methods_name(673) pdb backend guest has a valid init [2004/12/01 22:39:46, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1367) smbpasswd_getsampwrid: search by sid: S-1-5-21-158085016-904300585-1883629701-501 [2004/12/01 22:39:46, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1318) getsampwnam (smbpasswd): search by name: nobody [2004/12/01 22:39:46, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(184) startsmbfilepwent_internal: opening file /etc/samba/smbpasswd [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user nazaand, uid 503 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user mcbrgra, uid 504 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user germste, uid 505 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user elkanis, uid 506 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user killmar, uid 509 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user rossuwe, uid 510 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user sabimoh, uid 511 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user opalvik, uid 512 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user gabebor, uid 513 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user strywol, uid 514 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user orloale, uid 515 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user stephol, uid 517 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user neuemic, uid 518 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user bystant, uid 520 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user rotharm, uid 521 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user kailaxe, uid 522 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user engeand, uid 519 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user bacholi, uid 523 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user roecber, uid 524 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user zaghabd, uid 525 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user langand, uid 526 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user zurnand, uid 527 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user reyecar, uid 528 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user payechr, uid 529 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user janufra, uid 530 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user hoppjoa, uid 531 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user ledekir, uid 532 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user meyekla, uid 533 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user kandlev, uid 534 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user armimar, uid 535 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user tyrpmar, uid 536 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user muenmar, uid 537 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user daubmat, uid 538 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user taubmic, uid 539 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user jaegrol, uid 540 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user waldsie, uid 541 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user bergste, uid 542 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user phamtan, uid 543 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user offudav, uid 546 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user albeoli, uid 547 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user huetand, uid 548 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user hasslor, uid 549 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user richsil, uid 550 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user deiswol, uid 551 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user rosemar, uid 545 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user watlste, uid 551 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user breyrob, uid 552 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user abduale, uid 553 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user heppwol, uid 554 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user volldan, uid 555 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user hofming, uid 556 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user andrvol, uid 508 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user hillrei, uid 516 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user kozabir, uid 557 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user nolljue, uid 558 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user schatob, uid 559 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user ehreann, uid 560 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user dutitho, uid 561 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user sauerai, uid 562 [2004/12/01 22:39:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2004/12/01 22:39:46, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2004/12/01 22:39:46, 10] passdb/pdb_get_set.c:pdb_set_username(625) pdb_set_username: setting username nobody, was [2004/12/01 22:39:46, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 12 -> now SET [2004/12/01 22:39:46, 10] passdb/pdb_get_set.c:pdb_set_fullname(706) pdb_set_full_name: setting full name nobody, was [2004/12/01 22:39:46, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 13 -> now SET [2004/12/01 22:39:46, 10] passdb/pdb_get_set.c:pdb_set_domain(652) pdb_set_domain: setting domain CTS2, was [2004/12/01 22:39:46, 10] passdb/pdb_get_set.c:pdb_set_user_sid(552) pdb_set_user_sid: setting user sid S-1-5-21-158085016-904300585-1883629701-501 [2004/12/01 22:39:46, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 18 -> now SET [2004/12/01 22:39:46, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-158085016-904300585-1883629701-501 from rid 501 [2004/12/01 22:39:46, 10] passdb/pdb_get_set.c:pdb_set_group_sid(588) pdb_set_group_sid: setting group sid S-1-5-21-158085016-904300585-1883629701-514 [2004/12/01 22:39:46, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-158085016-904300585-1883629701-514 from rid 514 [2004/12/01 22:39:46, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:46, 10] lib/system_smbd.c:sys_getgrouplist(117) sys_getgrouplist: user [nobody] [2004/12/01 22:39:46, 10] lib/system_smbd.c:sys_getgrouplist(126) sys_getgrouplist(): disabled winbindd for group lookup [user == nobody] [2004/12/01 22:39:46, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:46, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:46, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:46, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:46, 8] lib/util_getent.c:remove_duplicate_gids(330) remove_duplicate_gids: Enter 2 gids [2004/12/01 22:39:46, 8] lib/util_getent.c:remove_duplicate_gids(348) remove_duplicate_gids: Exit 1 gids [2004/12/01 22:39:46, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:46, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 65534 Primary group is 65533 and contains 1 supplementary groups Group[ 0]: 65533 [2004/12/01 22:39:46, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:46, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:46, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:46, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:46, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:46, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 65533 -> S-0-0 [2004/12/01 22:39:46, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:46, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (65533) -> SID S-1-5-21-158085016-904300585-1883629701-132067. [2004/12/01 22:39:46, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 65533 -> S-1-5-21-158085016-904300585-1883629701-132067 [2004/12/01 22:39:46, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-501 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-501 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-514 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-132067 [2004/12/01 22:39:46, 5] auth/auth_util.c:make_server_info_sam(844) make_server_info_sam: made server info for user nobody -> nobody [2004/12/01 22:39:46, 3] smbd/server.c:main(797) loaded services [2004/12/01 22:39:46, 3] smbd/server.c:main(812) Becoming a daemon. [2004/12/01 22:39:46, 8] lib/util.c:fcntl_lock(1663) fcntl_lock 7 13 0 1 1 [2004/12/01 22:39:46, 8] lib/util.c:fcntl_lock(1698) fcntl_lock: Lock call successful [2004/12/01 22:39:46, 2] lib/tallocmsg.c:register_msg_pool_usage(57) Registered MSG_REQ_POOL_USAGE [2004/12/01 22:39:46, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2004/12/01 22:39:46, 5] lib/gencache.c:gencache_init(59) Opening cache file at /var/lib/samba/gencache.tdb [2004/12/01 22:39:46, 5] libsmb/namecache.c:namecache_enable(58) namecache_enable: enabling netbios namecache, timeout 660 seconds [2004/12/01 22:39:46, 10] registry/reg_cachehook.c:reghook_cache_add(60) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2004/12/01 22:39:46, 8] lib/adt_tree.c:sorted_tree_add(247) sorted_tree_add: Enter [2004/12/01 22:39:46, 10] lib/adt_tree.c:sorted_tree_add(314) sorted_tree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2004/12/01 22:39:46, 8] lib/adt_tree.c:sorted_tree_add(316) sorted_tree_add: Exit [2004/12/01 22:39:46, 10] printing/nt_printing.c:update_c_setprinter(447) update_c_setprinter: c_setprinter = 0 [2004/12/01 22:39:46, 5] smbd/connection.c:claim_connection(170) claiming 0 [2004/12/01 22:39:46, 3] printing/printing.c:start_background_queue(1224) start_background_queue: Starting background LPQ thread [2004/12/01 22:39:46, 5] printing/printing.c:start_background_queue(1234) start_background_queue: background LPQ thread started [2004/12/01 22:39:46, 5] smbd/connection.c:claim_connection(170) claiming smbd lpq backend 0 [2004/12/01 22:39:46, 5] printing/printing.c:start_background_queue(1245) start_background_queue: background LPQ thread waiting for messages [2004/12/01 22:39:46, 10] lib/util_sock.c:open_socket_in(717) bind succeeded on port 445 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 16384 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDLOWAT = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDTIMEO = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 16384 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDLOWAT = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDTIMEO = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 [2004/12/01 22:39:46, 10] lib/util_sock.c:open_socket_in(717) bind succeeded on port 139 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 16384 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDLOWAT = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDTIMEO = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 16384 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDLOWAT = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDTIMEO = 0 [2004/12/01 22:39:46, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 [2004/12/01 22:39:46, 2] smbd/server.c:open_sockets_smbd(327) waiting for a connection [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 16384 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDLOWAT = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDTIMEO = 0 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 16384 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDLOWAT = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDTIMEO = 0 [2004/12/01 22:39:58, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 [2004/12/01 22:39:58, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:58, 3] smbd/oplock.c:init_oplocks(1302) open_oplock_ipc: opening loopback UDP socket. [2004/12/01 22:39:58, 10] lib/util_sock.c:open_socket_in(717) bind succeeded on port 0 [2004/12/01 22:39:58, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303) Linux kernel oplocks enabled [2004/12/01 22:39:58, 3] smbd/oplock.c:init_oplocks(1333) open_oplock ipc: pid = 5865, global_oplock_port = 32808 [2004/12/01 22:39:58, 4] lib/time.c:get_serverzone(122) Serverzone is -3600 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 133 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x85 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 0 of length 137 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBnegprot (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [PC NETWORK PROGRAM 1.0] [2004/12/01 22:39:58, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN1.0] [2004/12/01 22:39:58, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [Windows for Workgroups 3.1a] [2004/12/01 22:39:58, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LM1.2X002] [2004/12/01 22:39:58, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN2.1] [2004/12/01 22:39:58, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [NT LM 0.12] [2004/12/01 22:39:58, 10] lib/util.c:set_remote_arch(1874) set_remote_arch: Client arch is 'Win2K' [2004/12/01 22:39:58, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:58, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:58, 3] smbd/negprot.c:reply_nt1(333) using SPNEGO [2004/12/01 22:39:58, 3] smbd/negprot.c:reply_negprot(549) Selected protocol NT LM 0.12 [2004/12/01 22:39:58, 5] smbd/negprot.c:reply_negprot(555) negprot index=5 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=59648 (0xE900) smb_vwv[ 8]= 22 (0x16) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=49803 (0xC28B) smb_vwv[13]=61005 (0xEE4D) smb_vwv[14]=50391 (0xC4D7) smb_vwv[15]=50177 (0xC401) smb_vwv[16]=15103 (0x3AFF) smb_bcc=58 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 63 74 73 32 00 00 00 00 00 00 00 00 00 00 00 00 cts2.... ........ [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... .. .0. . [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7...£. [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0. ...NO NE [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,131) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,131) wrote 131 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 236 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0xec [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 1 of length 240 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3136 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... .. >0< . [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7...¢* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .â...... ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBsesssetupX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=12 flg2=0xc807 [2004/12/01 22:39:58, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535) Doing spnego session setup [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/12/01 22:39:58, 10] lib/util.c:set_remote_arch(1874) set_remote_arch: Client arch is 'WinXP' [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_spnego_negotiate(444) Got OID 1 3 6 1 4 1 311 2 2 10 [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_spnego_negotiate(447) Got secblob of size 40 [2004/12/01 22:39:58, 5] auth/auth.c:make_auth_context_subsystem(480) Making default auth method list for standalone security=user, encrypt passwords = yes [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend rhosts [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'rhosts' [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend hostsequiv [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'hostsequiv' [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam' [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam_ignoredomain [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam_ignoredomain' [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend unix [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'unix' [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend winbind [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'winbind' [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend smbserver [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'smbserver' [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend trustdomain [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'trustdomain' [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend ntdomain [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'ntdomain' [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend guest [2004/12/01 22:39:58, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'guest' [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match guest [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(409) load_auth_module: auth method guest has a valid init [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match sam [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(409) load_auth_module: auth method sam has a valid init [2004/12/01 22:39:58, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2004/12/01 22:39:58, 5] lib/util.c:dump_data(1899) [000] 33 48 44 2C C4 1F 66 3A 3HD,Ä.f: [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,316) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,316) wrote 316 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 364 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x16c [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 2 of length 368 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=364 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3200 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 364 (0x16C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 202 (0xCA) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=305 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] A1 81 C7 30 81 C4 A2 81 C1 04 81 BE 4E 54 4C 4D ¡.Ç0.Ä¢. Á..¾NTLM [010] 53 53 50 00 03 00 00 00 18 00 18 00 7E 00 00 00 SSP..... ....~... [020] 18 00 18 00 96 00 00 00 14 00 14 00 48 00 00 00 ........ ....H... [030] 0E 00 0E 00 5C 00 00 00 14 00 14 00 6A 00 00 00 ....\... ....j... [040] 10 00 10 00 AE 00 00 00 15 82 88 62 05 01 28 0A ....®... ...b..(. [050] 00 00 00 0F 41 00 42 00 58 00 2D 00 45 00 55 00 ....A.B. X.-.E.U. [060] 52 00 45 00 58 00 32 00 6E 00 61 00 7A 00 61 00 R.E.X.2. n.a.z.a. [070] 61 00 6E 00 64 00 41 00 42 00 58 00 2D 00 45 00 a.n.d.A. B.X.-.E. [080] 55 00 52 00 45 00 58 00 32 00 42 9B E4 31 10 57 U.R.E.X. 2.B.ä1.W [090] 99 EF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .ï...... ........ [0A0] 00 00 08 FC D1 AC A3 73 CD 54 B3 19 65 FF 05 D3 ...üѬ£s ÍT³.eÿ.Ó [0B0] 43 36 AC 2B 9F CD 6B 44 35 C0 6F 07 9B 1C 26 03 C6¬+.ÍkD 5Ào...&. [0C0] FE CE C9 F4 27 2F E6 7E 98 71 00 57 00 69 00 6E þÎÉô'/æ~ .q.W.i.n [0D0] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [0E0] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [0F0] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [100] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [110] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [120] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [130] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBsesssetupX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=12 flg2=0xc807 [2004/12/01 22:39:58, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535) Doing spnego session setup [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/12/01 22:39:58, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615) Got user=[nazaand] domain=[ABX-EUREX2] workstation=[ABX-EUREX2] len1=24 len2=24 [2004/12/01 22:39:58, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66) auth_context challenge set by NTLMSSP callback (NTLM2) [2004/12/01 22:39:58, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67) challenge is: [2004/12/01 22:39:58, 5] lib/util.c:dump_data(1899) [000] E8 14 AB 21 40 25 BE 8A è.«!@%¾. [2004/12/01 22:39:58, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info_map(225) make_user_info_map: Mapping user [ABX-EUREX2]\[nazaand] from workstation [ABX-EUREX2] [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info(133) attempting to make a user_info for nazaand (nazaand) [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info(143) making strings for nazaand's user_info struct [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info(185) making blobs for nazaand's user_info struct [2004/12/01 22:39:58, 10] auth/auth_util.c:make_user_info(201) made an encrypted user_info for nazaand (nazaand) [2004/12/01 22:39:58, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [ABX-EUREX2]\[nazaand]@[ABX-EUREX2] with the new password interface [2004/12/01 22:39:58, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [CTS2]\[nazaand]@[ABX-EUREX2] [2004/12/01 22:39:58, 10] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2004/12/01 22:39:58, 10] auth/auth.c:check_ntlm_password(233) challenge is: [2004/12/01 22:39:58, 5] lib/util.c:dump_data(1899) [000] E8 14 AB 21 40 25 BE 8A è.«!@%¾. [2004/12/01 22:39:58, 10] auth/auth.c:check_ntlm_password(259) check_ntlm_password: guest had nothing to say [2004/12/01 22:39:58, 8] lib/util.c:is_myname(1719) is_myname("CTS2") returns 1 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1318) getsampwnam (smbpasswd): search by name: nazaand [2004/12/01 22:39:58, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(184) startsmbfilepwent_internal: opening file /etc/samba/smbpasswd [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user nazaand, uid 503 [2004/12/01 22:39:58, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2004/12/01 22:39:58, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1340) getsampwnam (smbpasswd): found by name: nazaand [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_username(625) pdb_set_username: setting username nazaand, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 12 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_fullname(706) pdb_set_full_name: setting full name Andrei Nazarenko, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 13 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(841) pdb_set_unix_homedir: setting home dir , was NULL [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 22 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_domain(652) pdb_set_domain: setting domain CTS2, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_user_sid(552) pdb_set_user_sid: setting user sid S-1-5-21-158085016-904300585-1883629701-2006 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 18 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-158085016-904300585-1883629701-2006 from rid 2006 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_group_sid(588) pdb_set_group_sid: setting group sid S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 19 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-158085016-904300585-1883629701-2001 from rid 2001 [2004/12/01 22:39:58, 4] lib/substitute.c:automount_server(323) Home server: cts2 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_profile_path(760) pdb_set_profile_path: setting profile path \\cts2\nazaand\profile, was [2004/12/01 22:39:58, 4] lib/substitute.c:automount_server(323) Home server: cts2 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_homedir(814) pdb_set_homedir: setting home dir \\cts2\nazaand, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(787) pdb_set_dir_drive: setting dir drive , was NULL [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_logon_script(733) pdb_set_logon_script: setting logon script , was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 33 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 32 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 20 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 21 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 9 -> now SET [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 9] passdb/passdb.c:pdb_update_autolock_flag(2349) pdb_update_autolock_flag: Account nazaand not autolocked, no check needed [2004/12/01 22:39:58, 4] libsmb/ntlm_check.c:ntlm_password_check(326) ntlm_password_check: Checking NT MD4 password [2004/12/01 22:39:58, 4] auth/auth_sam.c:sam_account_ok(119) sam_account_ok: Checking SMB password for user nazaand [2004/12/01 22:39:58, 5] auth/auth_sam.c:logon_hours_ok(101) logon_hours_ok: user nazaand allowed to logon at this time (Wed Dec 1 22:39:58 2004 ) [2004/12/01 22:39:58, 10] lib/system_smbd.c:sys_getgrouplist(117) sys_getgrouplist: user [nazaand] [2004/12/01 22:39:58, 10] lib/system_smbd.c:sys_getgrouplist(126) sys_getgrouplist(): disabled winbindd for group lookup [user == nazaand] [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 8] lib/util_getent.c:remove_duplicate_gids(330) remove_duplicate_gids: Enter 3 gids [2004/12/01 22:39:58, 8] lib/util_getent.c:remove_duplicate_gids(348) remove_duplicate_gids: Exit 2 gids [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 500 -> S-0-0 [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (500) -> SID S-1-5-21-158085016-904300585-1883629701-2001. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 505 -> S-0-0 [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (505) -> SID S-1-5-21-158085016-904300585-1883629701-2011. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 505 -> S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:make_server_info_sam(844) make_server_info_sam: made server info for user nazaand -> nazaand [2004/12/01 22:39:58, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: sam authentication for user [nazaand] succeeded [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth.c:check_ntlm_password(292) check_ntlm_password: PAM Account for user [nazaand] succeeded [2004/12/01 22:39:58, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [nazaand] -> [nazaand] -> [nazaand] succeeded [2004/12/01 22:39:58, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2004/12/01 22:39:58, 10] auth/auth_util.c:free_user_info(1364) structure was created for nazaand [2004/12/01 22:39:58, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117) Got NT session key of length 16 [2004/12/01 22:39:58, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123) Got LM session key of length 16 [2004/12/01 22:39:58, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(678) ntlmssp_server_auth: Created NTLM2 session key. [2004/12/01 22:39:58, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) NTLMSSP Sign/Seal - Initialising with flags: [2004/12/01 22:39:58, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2004/12/01 22:39:58, 10] smbd/password.c:register_vuid(158) register_vuid: allocated vuid = 100 [2004/12/01 22:39:58, 10] smbd/password.c:register_vuid(220) register_vuid: (503,500) nazaand nazaand CTS2 guest=0 [2004/12/01 22:39:58, 3] smbd/password.c:register_vuid(222) User name: nazaand Real name: Andrei Nazarenko [2004/12/01 22:39:58, 3] smbd/password.c:register_vuid(241) UNIX uid 503 is UNIX user nazaand, and will be vuid 100 [2004/12/01 22:39:58, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,120) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,120) wrote 120 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 78 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x4e [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 3 of length 82 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=78 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=3264 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 78 (0x4E) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=35 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 5C 00 43 00 54 00 53 00 32 00 5C 00 48 .\.\.C.T .S.2.\.H [010] 00 54 00 44 00 4F 00 43 00 53 00 00 00 3F 3F 3F .T.D.O.C .S...??? [020] 3F 3F 00 ??. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtconX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 4] smbd/reply.c:reply_tcon_and_X(408) Client requested device type [?????] for share [HTDOCS] [2004/12/01 22:39:58, 5] smbd/service.c:make_connection(813) making a connection to 'normal' service htdocs [2004/12/01 22:39:58, 10] lib/username.c:user_in_list(529) user_in_list: checking user nazaand in list [2004/12/01 22:39:58, 10] lib/username.c:user_in_list(533) user_in_list: checking user |nazaand| against |+FERM| [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam(293) Finding user nazaand [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is nazaand [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [nazaand]! [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam(293) Finding user wwwrun [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is wwwrun [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [wwwrun]! [2004/12/01 22:39:58, 3] smbd/service.c:make_connection_snum(406) Forced user wwwrun [2004/12/01 22:39:58, 3] smbd/service.c:make_connection_snum(455) Forced group www [2004/12/01 22:39:58, 3] smbd/service.c:make_connection_snum(472) Connect path is '/srv/www' for service [htdocs] [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 8 groups: 8, 4, 600, 500, 501, 503, 504, 506 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 8 groups: 8, 4, 600, 500, 501, 503, 504, 506 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 10] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1318) getsampwnam (smbpasswd): search by name: wwwrun [2004/12/01 22:39:58, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(184) startsmbfilepwent_internal: opening file /etc/samba/smbpasswd [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user nazaand, uid 503 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user mcbrgra, uid 504 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user germste, uid 505 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user elkanis, uid 506 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user killmar, uid 509 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user rossuwe, uid 510 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user sabimoh, uid 511 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user opalvik, uid 512 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user gabebor, uid 513 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user strywol, uid 514 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user orloale, uid 515 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user stephol, uid 517 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user neuemic, uid 518 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user bystant, uid 520 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user rotharm, uid 521 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user kailaxe, uid 522 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user engeand, uid 519 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user bacholi, uid 523 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user roecber, uid 524 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user zaghabd, uid 525 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user langand, uid 526 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user zurnand, uid 527 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user reyecar, uid 528 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user payechr, uid 529 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user janufra, uid 530 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user hoppjoa, uid 531 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user ledekir, uid 532 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user meyekla, uid 533 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user kandlev, uid 534 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user armimar, uid 535 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user tyrpmar, uid 536 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user muenmar, uid 537 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user daubmat, uid 538 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user taubmic, uid 539 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user jaegrol, uid 540 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user waldsie, uid 541 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user bergste, uid 542 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user phamtan, uid 543 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user offudav, uid 546 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user albeoli, uid 547 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user huetand, uid 548 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user hasslor, uid 549 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user richsil, uid 550 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user deiswol, uid 551 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user rosemar, uid 545 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user watlste, uid 551 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user breyrob, uid 552 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user abduale, uid 553 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user heppwol, uid 554 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user volldan, uid 555 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user hofming, uid 556 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user andrvol, uid 508 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user hillrei, uid 516 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user kozabir, uid 557 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user nolljue, uid 558 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user schatob, uid 559 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user ehreann, uid 560 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user dutitho, uid 561 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user sauerai, uid 562 [2004/12/01 22:39:58, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2004/12/01 22:39:58, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 4] passdb/passdb.c:local_uid_to_sid(1160) local_uid_to_sid: User wwwrun [uid == 30] has no samba account [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_uid_to_sid(1121) algorithmic_uid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_uid_to_sid(1125) algorithmic_uid_to_sid: uid (30) -> SID S-1-5-21-158085016-904300585-1883629701-1060. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:uid_to_sid(330) uid_to_sid: local 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 8 -> S-0-0 [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (8) -> SID S-1-5-21-158085016-904300585-1883629701-1017. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 4 -> S-0-0 [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (4) -> SID S-1-5-21-158085016-904300585-1883629701-1009. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 600 -> S-0-0 [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (600) -> SID S-1-5-21-158085016-904300585-1883629701-2201. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 501 -> S-0-0 [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (501) -> SID S-1-5-21-158085016-904300585-1883629701-2003. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 503 -> S-0-0 [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (503) -> SID S-1-5-21-158085016-904300585-1883629701-2007. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 504 -> S-0-0 [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (504) -> SID S-1-5-21-158085016-904300585-1883629701-2009. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 10] passdb/passdb.c:local_gid_to_sid(1272) local_gid_to_sid: Fall back to algorithmic mapping: 506 -> S-0-0 [2004/12/01 22:39:58, 8] passdb/passdb.c:algorithmic_gid_to_sid(1238) algorithmic_gid_to_sid: falling back to RID algorithm [2004/12/01 22:39:58, 10] passdb/passdb.c:algorithmic_gid_to_sid(1242) algorithmic_gid_to_sid: gid (506) -> SID S-1-5-21-158085016-904300585-1883629701-2013. [2004/12/01 22:39:58, 10] passdb/lookup_sid.c:gid_to_sid(372) gid_to_sid: local 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for htdocs [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 12 entries and first sid S-1-5-21-158085016-904300585-1883629701-1060. [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-158085016-904300585-1883629701-1060 se_access_check: also S-1-5-21-158085016-904300585-1883629701-1017 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-158085016-904300585-1883629701-1009 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2201 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2001 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2003 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2007 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2009 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2013 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/12/01 22:39:58, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/12/01 22:39:58, 3] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2004/12/01 22:39:58, 5] smbd/connection.c:claim_connection(170) claiming htdocs 0 [2004/12/01 22:39:58, 10] lib/username.c:user_in_list(529) user_in_list: checking user nazaand in list [2004/12/01 22:39:58, 10] lib/username.c:user_in_list(533) user_in_list: checking user |nazaand| against |+FERM| [2004/12/01 22:39:58, 10] lib/username.c:user_in_list(529) user_in_list: checking user nazaand in list [2004/12/01 22:39:58, 10] lib/username.c:user_in_list(533) user_in_list: checking user |nazaand| against |+FERM| [2004/12/01 22:39:58, 10] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share htdocs is read-write for unix user nazaand [2004/12/01 22:39:58, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for htdocs [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 12 entries and first sid S-1-5-21-158085016-904300585-1883629701-1060. [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-158085016-904300585-1883629701-1060 se_access_check: also S-1-5-21-158085016-904300585-1883629701-1017 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-158085016-904300585-1883629701-1009 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2201 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2001 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2003 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2007 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2009 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2013 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/12/01 22:39:58, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/12/01 22:39:58, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for htdocs [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 12 entries and first sid S-1-5-21-158085016-904300585-1883629701-1060. [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-158085016-904300585-1883629701-1060 se_access_check: also S-1-5-21-158085016-904300585-1883629701-1017 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-158085016-904300585-1883629701-1009 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2201 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2001 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2003 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2007 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2009 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2013 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/12/01 22:39:58, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 1] smbd/service.c:make_connection_snum(648) abx-eurex2 (172.17.27.106) connect to service htdocs initially as user wwwrun (uid=30, gid=8) (pid 5865) [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/reply.c:reply_tcon_and_X(456) tconX service=HTDOCS [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=54 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=3264 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=13 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,58) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,58) wrote 58 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 4 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=3328 smt_wct=15 smb_vwv[ 0]= 32 (0x20) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 32 (0x20) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=35 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 00 00 ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [HTDOCS/FERM] [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [HTDOCS] [2004/12/01 22:39:58, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (83934f8:sizec) HTDOCS/FERM -> htdocs/ferm [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(174) conversion finished htdocs/ferm -> htdocs/ferm [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:14:24 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 10 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 5 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=3392 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM] -> [htdocs/ferm] [2004/12/01 22:39:58, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (83825f0:size22) HTDOCS/FERM/NEW TEXT DOCUMENT.TXT -> htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(174) conversion finished htdocs/ferm/New Text Document.txt -> htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 6 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=3456 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 7 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=3520 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 8 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=3584 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 76 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x4c [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 9 of length 80 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=3648 smt_wct=15 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8 (0x8) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=11 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 00 00 ...ì.... ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: . [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Mon Nov 15 14:41:08 2004 access: Wed Dec 1 22:39:23 2004 write: Mon Nov 15 14:41:08 2004 change: Mon Nov 15 14:41:08 2004 mode: 10 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 96 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x60 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 10 of length 100 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=96 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=3712 smt_wct=15 smb_vwv[ 0]= 28 (0x1C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 28 (0x1C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=31 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 68 00 74 00 64 00 6F 00 63 00 73 00 00 00 .h.t.d.o .c.s... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2findfirst(1365) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(210) stat_cache_lookup: lookup failed for name [HTDOCS] [2004/12/01 22:39:58, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (8395010:size7) HTDOCS -> htdocs [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(174) conversion finished htdocs -> htdocs [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2findfirst(1418) dir=./, mask = htdocs [2004/12/01 22:39:58, 5] smbd/dir.c:start_dir(334) start_dir dir=./ [2004/12/01 22:39:58, 3] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path ./, expect_close = 1 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2findfirst(1448) dptr_num is 256, wcard = htdocs, attr = 22 [2004/12/01 22:39:58, 8] smbd/trans2.c:call_trans2findfirst(1453) dirpath=<./> dontdescend=<> [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x8351d00 now at offset 1 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x8351d00 now at offset 2 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x8351d00 now at offset 3 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x8351d00 now at offset 4 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: ./htdocs [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 5] smbd/trans2.c:get_lanman2_dir_entry(974) get_lanman2_dir_entry found ./htdocs fname=htdocs [2004/12/01 22:39:58, 10] smbd/trans2.c:get_lanman2_dir_entry(1058) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2findfirst(1499) call_trans2findfirst - (2) closing dptr_num 256 [2004/12/01 22:39:58, 4] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,180) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,180) wrote 180 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2findfirst(1529) SMBtrans2 mask=htdocs directory=./ dirtype=22 numentries=1 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 90 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x5a [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 11 of length 94 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=90 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=3776 smt_wct=15 smb_vwv[ 0]= 22 (0x16) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 22 (0x16) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=25 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 00 00 .o.c.s.. . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS] -> [htdocs] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:33:32 2004 access: Wed Dec 1 22:39:23 2004 write: Wed Dec 1 22:33:32 2004 change: Wed Dec 1 22:33:32 2004 mode: 10 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x6a [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 12 of length 110 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=106 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=3840 smt_wct=15 smb_vwv[ 0]= 38 (0x26) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 38 (0x26) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=41 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 68 00 74 00 64 00 6F 00 63 00 73 00 5C 00 66 .h.t.d.o .c.s.\.f [020] 00 65 00 72 00 6D 00 00 00 .e.r.m.. . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2findfirst(1365) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM] -> [htdocs/ferm] [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2findfirst(1418) dir=htdocs, mask = ferm [2004/12/01 22:39:58, 5] smbd/dir.c:start_dir(334) start_dir dir=htdocs [2004/12/01 22:39:58, 3] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path htdocs, expect_close = 1 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2findfirst(1448) dptr_num is 256, wcard = ferm, attr = 22 [2004/12/01 22:39:58, 8] smbd/trans2.c:call_trans2findfirst(1453) dirpath= dontdescend=<> [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838de78 now at offset 1 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838de78 now at offset 2 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838de78 now at offset 3 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838de78 now at offset 4 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838de78 now at offset 5 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838de78 now at offset 6 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838de78 now at offset 7 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838de78 now at offset 8 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 5] smbd/trans2.c:get_lanman2_dir_entry(974) get_lanman2_dir_entry found htdocs/ferm fname=ferm [2004/12/01 22:39:58, 10] smbd/trans2.c:get_lanman2_dir_entry(1058) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2findfirst(1499) call_trans2findfirst - (2) closing dptr_num 256 [2004/12/01 22:39:58, 4] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 10, data_sent_thistime = 104, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 10, data_to_send = 104, paramsize = 10, datasize = 104 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,176) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,176) wrote 176 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2findfirst(1529) SMBtrans2 mask=ferm directory=htdocs dirtype=22 numentries=1 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 236 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0xec [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 13 of length 240 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3904 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... .. >0< . [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7...¢* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .â...... ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBsesssetupX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=12 flg2=0xc807 [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535) Doing spnego session setup [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_spnego_negotiate(444) Got OID 1 3 6 1 4 1 311 2 2 10 [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_spnego_negotiate(447) Got secblob of size 40 [2004/12/01 22:39:58, 5] auth/auth.c:make_auth_context_subsystem(480) Making default auth method list for standalone security=user, encrypt passwords = yes [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match guest [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(409) load_auth_module: auth method guest has a valid init [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match sam [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(409) load_auth_module: auth method sam has a valid init [2004/12/01 22:39:58, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2004/12/01 22:39:58, 5] lib/util.c:dump_data(1899) [000] 32 74 B1 FE 55 BC 74 CC 2t±þU¼tÌ [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,316) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,316) wrote 316 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 278 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x116 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 14 of length 282 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=278 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3968 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 278 (0x116) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 117 (0x75) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=219 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] A1 73 30 71 A2 6F 04 6D 4E 54 4C 4D 53 53 50 00 ¡s0q¢o.m NTLMSSP. [010] 03 00 00 00 01 00 01 00 5C 00 00 00 00 00 00 00 ........ \....... [020] 5D 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 ]....... H....... [030] 48 00 00 00 14 00 14 00 48 00 00 00 10 00 10 00 H....... H....... [040] 5D 00 00 00 15 8A 88 62 05 01 28 0A 00 00 00 0F ]......b ..(..... [050] 41 00 42 00 58 00 2D 00 45 00 55 00 52 00 45 00 A.B.X.-. E.U.R.E. [060] 58 00 32 00 00 B8 C5 56 A0 9E A7 C1 94 05 36 4D X.2..¸ÅV  .§Á..6M [070] 6B 68 B0 B9 F6 57 00 69 00 6E 00 64 00 6F 00 77 kh°¹öW.i .n.d.o.w [080] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 53 .s. .2.0 .0.2. .S [090] 00 65 00 72 00 76 00 69 00 63 00 65 00 20 00 50 .e.r.v.i .c.e. .P [0A0] 00 61 00 63 00 6B 00 20 00 32 00 20 00 32 00 36 .a.c.k. .2. .2.6 [0B0] 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F .0.0...W .i.n.d.o [0C0] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. [0D0] 00 35 00 2E 00 31 00 00 00 00 00 .5...1.. ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBsesssetupX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=12 flg2=0xc807 [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535) Doing spnego session setup [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/12/01 22:39:58, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615) Got user=[] domain=[] workstation=[ABX-EUREX2] len1=1 len2=0 [2004/12/01 22:39:58, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info_map(225) make_user_info_map: Mapping user []\[] from workstation [ABX-EUREX2] [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info(133) attempting to make a user_info for () [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info(143) making strings for 's user_info struct [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info(185) making blobs for 's user_info struct [2004/12/01 22:39:58, 10] auth/auth_util.c:make_user_info(201) made an encrypted user_info for () [2004/12/01 22:39:58, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[ABX-EUREX2] with the new password interface [2004/12/01 22:39:58, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [CTS2]\[]@[ABX-EUREX2] [2004/12/01 22:39:58, 10] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by random [2004/12/01 22:39:58, 10] auth/auth.c:check_ntlm_password(233) challenge is: [2004/12/01 22:39:58, 5] lib/util.c:dump_data(1899) [000] 32 74 B1 FE 55 BC 74 CC 2t±þU¼tÌ [2004/12/01 22:39:58, 10] lib/account_pol.c:account_policy_get(155) account_policy_get: password history:0 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 5 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 6 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 7 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 8 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 9 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 10 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 21 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_username(625) pdb_set_username: setting username nobody, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 12 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_domain(652) pdb_set_domain: setting domain CTS2, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 14 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_nt_username(679) pdb_set_nt_username: setting nt username , was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 15 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_fullname(706) pdb_set_full_name: setting full name nobody, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 13 -> now SET [2004/12/01 22:39:58, 4] lib/substitute.c:automount_server(323) Home server: cts2 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_homedir(814) pdb_set_homedir: setting home dir \\cts2\nobody, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(787) pdb_set_dir_drive: setting dir drive , was NULL [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_logon_script(733) pdb_set_logon_script: setting logon script , was [2004/12/01 22:39:58, 4] lib/substitute.c:automount_server(323) Home server: cts2 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_profile_path(760) pdb_set_profile_path: setting profile path \\cts2\nobody\profile, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 23 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_workstations(893) pdb_set_workstations: setting workstations , was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 24 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 26 -> now SET [2004/12/01 22:39:58, 10] lib/account_pol.c:account_policy_get(155) account_policy_get: password history:0 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 34 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_user_sid(552) pdb_set_user_sid: setting user sid S-1-5-21-158085016-904300585-1883629701-501 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 18 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-158085016-904300585-1883629701-501 from rid 501 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_group_sid(588) pdb_set_group_sid: setting group sid S-1-5-21-158085016-904300585-1883629701-514 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 19 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-158085016-904300585-1883629701-514 from rid 514 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 16 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 29 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 30 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 31 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 20 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 17 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 27 -> now SET [2004/12/01 22:39:58, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2004/12/01 22:39:58, 5] auth/auth.c:check_ntlm_password(305) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2004/12/01 22:39:58, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2004/12/01 22:39:58, 10] auth/auth_util.c:free_user_info(1364) structure was created for [2004/12/01 22:39:58, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117) Got NT session key of length 16 [2004/12/01 22:39:58, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123) Got LM session key of length 16 [2004/12/01 22:39:58, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(705) ntlmssp_server_auth: Using unmodified nt session key. [2004/12/01 22:39:58, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) NTLMSSP Sign/Seal - Initialising with flags: [2004/12/01 22:39:58, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2004/12/01 22:39:58, 10] smbd/password.c:register_vuid(158) register_vuid: allocated vuid = 101 [2004/12/01 22:39:58, 10] smbd/password.c:register_vuid(220) register_vuid: (65534,65533) nobody CTS2 guest=1 [2004/12/01 22:39:58, 3] smbd/password.c:register_vuid(222) User name: nobody Real name: nobody [2004/12/01 22:39:58, 3] smbd/password.c:register_vuid(241) UNIX uid 65534 is UNIX user nobody, and will be vuid 101 [2004/12/01 22:39:58, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,120) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,120) wrote 120 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 74 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x4a [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 15 of length 78 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=74 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=4032 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 74 (0x4A) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=31 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 5C 00 43 00 54 00 53 00 32 00 5C 00 49 .\.\.C.T .S.2.\.I [010] 00 50 00 43 00 24 00 00 00 3F 3F 3F 3F 3F 00 .P.C.$.. .?????. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtconX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 4] smbd/reply.c:reply_tcon_and_X(408) Client requested device type [?????] for share [IPC$] [2004/12/01 22:39:58, 5] smbd/service.c:make_connection(813) making a connection to 'normal' service ipc$ [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam(293) Finding user nobody [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is nobody [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [nobody]! [2004/12/01 22:39:58, 3] smbd/service.c:make_connection_snum(472) Connect path is '/var/tmp' for service [IPC$] [2004/12/01 22:39:58, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 6 entries and first sid S-1-5-21-158085016-904300585-1883629701-501. [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-158085016-904300585-1883629701-501 se_access_check: also S-1-5-21-158085016-904300585-1883629701-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-158085016-904300585-1883629701-132067 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/12/01 22:39:58, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/12/01 22:39:58, 3] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2004/12/01 22:39:58, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2004/12/01 22:39:58, 10] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2004/12/01 22:39:58, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 6 entries and first sid S-1-5-21-158085016-904300585-1883629701-501. [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-158085016-904300585-1883629701-501 se_access_check: also S-1-5-21-158085016-904300585-1883629701-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-158085016-904300585-1883629701-132067 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2004/12/01 22:39:58, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (1) granted. [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-501 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-501 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-514 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-132067 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 65534 Primary group is 65533 and contains 1 supplementary groups Group[ 0]: 65533 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(65534,65534) gid=(0,65533) [2004/12/01 22:39:58, 3] smbd/service.c:make_connection_snum(648) abx-eurex2 (172.17.27.106) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 5865) [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/reply.c:reply_tcon_and_X(456) tconX service=IPC$ [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=4032 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 49 50 43 00 00 00 00 IPC.... [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,52) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,52) wrote 52 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 39 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x27 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 16 of length 43 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=4096 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBulogoffX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2004/12/01 22:39:58, 3] smbd/reply.c:reply_ulogoffX(1249) ulogoffX vuid=101 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=4096 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,43) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,43) wrote 43 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 35 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x23 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 17 of length 39 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=4160 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtdis (pid 5865) conn 0x8399658 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/service.c:close_cnum(836) abx-eurex2 (172.17.27.106) closed connection to service IPC$ [2004/12/01 22:39:58, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to / [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=4160 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 74 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x4a [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 18 of length 78 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=74 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=4224 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 74 (0x4A) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=31 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 5C 00 43 00 54 00 53 00 32 00 5C 00 49 .\.\.C.T .S.2.\.I [010] 00 50 00 43 00 24 00 00 00 3F 3F 3F 3F 3F 00 .P.C.$.. .?????. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtconX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 4] smbd/reply.c:reply_tcon_and_X(408) Client requested device type [?????] for share [IPC$] [2004/12/01 22:39:58, 5] smbd/service.c:make_connection(813) making a connection to 'normal' service ipc$ [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam(293) Finding user nazaand [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is nazaand [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [nazaand]! [2004/12/01 22:39:58, 3] smbd/service.c:make_connection_snum(472) Connect path is '/var/tmp' for service [IPC$] [2004/12/01 22:39:58, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 6 entries and first sid S-1-5-21-158085016-904300585-1883629701-2006. [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-158085016-904300585-1883629701-2006 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2011 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/12/01 22:39:58, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/12/01 22:39:58, 3] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2004/12/01 22:39:58, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2004/12/01 22:39:58, 10] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share IPC$ is read-only for unix user nazaand [2004/12/01 22:39:58, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 6 entries and first sid S-1-5-21-158085016-904300585-1883629701-2006. [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-158085016-904300585-1883629701-2006 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-158085016-904300585-1883629701-2011 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2004/12/01 22:39:58, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (1) granted. [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 3] smbd/service.c:make_connection_snum(648) abx-eurex2 (172.17.27.106) connect to service IPC$ initially as user nazaand (uid=503, gid=500) (pid 5865) [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/reply.c:reply_tcon_and_X(456) tconX service=IPC$ [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=4224 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 49 50 43 00 00 00 00 IPC.... [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,52) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,52) wrote 52 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 150 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x96 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 19 of length 154 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=150 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=4289 smt_wct=15 smb_vwv[ 0]= 82 (0x52) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 82 (0x52) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=85 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 68 00 74 00 64 00 6F 00 63 00 73 00 5C 00 66 .h.t.d.o .c.s.\.f [020] 00 65 00 72 00 6D 00 5C 00 4E 00 65 00 77 00 20 .e.r.m.\ .N.e.w. [030] 00 54 00 65 00 78 00 74 00 20 00 44 00 6F 00 63 .T.e.x.t . .D.o.c [040] 00 75 00 6D 00 65 00 6E 00 74 00 2E 00 74 00 78 .u.m.e.n .t...t.x [050] 00 74 00 00 00 .t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2findfirst(1365) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2findfirst(1418) dir=htdocs/ferm, mask = New Text Document.txt [2004/12/01 22:39:58, 5] smbd/dir.c:start_dir(334) start_dir dir=htdocs/ferm [2004/12/01 22:39:58, 3] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path htdocs/ferm, expect_close = 1 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2findfirst(1448) dptr_num is 256, wcard = New Text Document.txt, attr = 22 [2004/12/01 22:39:58, 8] smbd/trans2.c:call_trans2findfirst(1453) dirpath= dontdescend=<> [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838dc18 now at offset 1 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838dc18 now at offset 2 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838dc18 now at offset 3 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838dc18 now at offset 4 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x838dc18 now at offset 5 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 5] smbd/trans2.c:get_lanman2_dir_entry(974) get_lanman2_dir_entry found htdocs/ferm/New Text Document.txt fname=New Text Document.txt [2004/12/01 22:39:58, 10] smbd/trans2.c:get_lanman2_dir_entry(1058) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2004/12/01 22:39:58, 10] smbd/mangle_hash2.c:name_map(607) name_map: New Text Document.txt -> 124541D5 -> N52HZ2~T.TXT (cache=1) [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2findfirst(1499) call_trans2findfirst - (2) closing dptr_num 256 [2004/12/01 22:39:58, 4] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 10, data_sent_thistime = 136, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 10, data_to_send = 136, paramsize = 10, datasize = 136 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,208) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,208) wrote 208 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2findfirst(1529) SMBtrans2 mask=New Text Document.txt directory=htdocs/ferm dirtype=22 numentries=1 [2004/12/01 22:39:58, 10] smbd/mangle_hash2.c:name_map(607) name_map: New Text Document.txt -> 124541D5 -> N52HZ2~T.TXT (cache=1) [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 20 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=4352 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x10, desired_access = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2004/12/01 22:39:58, 4] smbd/nttrans.c:nt_open_pipe(496) nt_open_pipe: Opening pipe \srvsvc. [2004/12/01 22:39:58, 3] smbd/nttrans.c:nt_open_pipe(513) nt_open_pipe: Known pipe srvsvc opening. [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 74c7 (pipes_open=1) [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=74c7 [2004/12/01 22:39:58, 5] smbd/nttrans.c:do_ntcreate_pipe_open(561) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=4352 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=50944 (0xC700) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 21 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=640 smb_uid=100 smb_mid=4417 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x48 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 22 of length 76 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=4480 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 C7 74 0A 04 ...Çt.. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(4041) cmd=50 (SMBtrans2) NT_STATUS_NETWORK_ACCESS_DENIED [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x32 smb_rcls=202 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=4480 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 23 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=640 smb_uid=100 smb_mid=4545 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 0A 04 00 00 00 00 5C 00 68 00 74 00 64 ........ .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1034 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1034 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2707) call_trans2qfilepathinfo: SMB_FILE_NETWORK_OPEN_INFORMATION [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 56, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 56, paramsize = 2, datasize = 56 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,120) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,120) wrote 120 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 24 of length 45 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=4608 smt_wct=3 smb_vwv[ 0]=29895 (0x74C7) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74c7 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74c7 (pipes_open=1) [2004/12/01 22:39:58, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:74c7 [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=74c7 (pipes_open=0) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=4608 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 154 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x9a [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 25 of length 158 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=154 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=640 smb_uid=100 smb_mid=4673 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=17408 (0x4400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=71 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 68 00 74 00 64 00 6F 00 63 00 73 00 5C .\.h.t.d .o.c.s.\ [010] 00 66 00 65 00 72 00 6D 00 5C 00 4E 00 65 00 77 .f.e.r.m .\.N.e.w [020] 00 20 00 54 00 65 00 78 00 74 00 20 00 44 00 6F . .T.e.x .t. .D.o [030] 00 63 00 75 00 6D 00 65 00 6E 00 74 00 2E 00 74 .c.u.m.e .n.t...t [040] 00 78 00 74 00 00 00 .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_create_disposition(340) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_share_mode(422) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_share_mode(479) map_share_mode: Mapped desired access 0x20089, share access 0x7, file attributes 0x0 to open_mode 0x8040 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/dosmode.c:unix_mode(111) unix_mode(htdocs/ferm/New Text Document.txt) returning 0660 [2004/12/01 22:39:58, 5] smbd/files.c:file_new(122) allocated file structure 3767, fnum = 7863 (1 used) [2004/12/01 22:39:58, 10] smbd/open.c:open_file_shared1(1038) open_file_shared: fname = htdocs/ferm/New Text Document.txt, dos_attrs = 0, share_mode = 8040, ofun = 1, mode = 660, oplock request = 3 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 4] smbd/open.c:open_file_shared1(1244) calling open_file with flags=0x0 flags2=0x0 mode=0660 [2004/12/01 22:39:58, 10] smbd/open.c:fd_open(50) fd_open: name htdocs/ferm/New Text Document.txt, flags = 00 mode = 0660, fd = 26. [2004/12/01 22:39:58, 2] smbd/open.c:open_file(245) nazaand opened file htdocs/ferm/New Text Document.txt read=Yes write=No (numopen=1) [2004/12/01 22:39:58, 10] smbd/open.c:open_file_shared1(1373) open_file_shared : share_mode = 8040 [2004/12/01 22:39:58, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file htdocs/ferm/New Text Document.txt, dev = 807, inode = 1439, file_id = 1 [2004/12/01 22:39:58, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file htdocs/ferm/New Text Document.txt, dev = 807, inode = 1439, file_id = 1, tv_sec = 41ae3a2e, tv_usec = 9a129 [2004/12/01 22:39:58, 10] locking/locking.c:set_share_mode(689) set_share_mode: creating entry for file htdocs/ferm/New Text Document.txt. num_share_modes = 1 [2004/12/01 22:39:58, 10] locking/locking.c:print_share_mode_table(420) print_share_mode_table: share_mode_entry[0]: pid = 5865, share_mode = 0x8040, desired_access = 0x20089, port = 0x8028, type= 0x3, file_id = 1, dev = 0x807, inode = 1439 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 5] smbd/nttrans.c:reply_ntcreate_and_X(1002) reply_ntcreate_and_X: fnum = 7863, open name = htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=640 smb_uid=100 smb_mid=4673 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=46850 (0xB702) smb_vwv[ 3]= 286 (0x11E) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15214 (0x3B6E) smb_vwv[ 7]=59879 (0xE9E7) smb_vwv[ 8]=50391 (0xC4D7) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=15214 (0x3B6E) smb_vwv[11]=59879 (0xE9E7) smb_vwv[12]=50391 (0xC4D7) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15214 (0x3B6E) smb_vwv[15]=59879 (0xE9E7) smb_vwv[16]=50391 (0xC4D7) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15214 (0x3B6E) smb_vwv[19]=59879 (0xE9E7) smb_vwv[20]=50391 (0xC4D7) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 26 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=4736 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=17 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 [2004/12/01 22:39:58, 4] smbd/nttrans.c:nt_open_pipe(496) nt_open_pipe: Opening pipe \srvsvc. [2004/12/01 22:39:58, 3] smbd/nttrans.c:nt_open_pipe(513) nt_open_pipe: Known pipe srvsvc opening. [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 74c8 (pipes_open=1) [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=74c8 [2004/12/01 22:39:58, 5] smbd/nttrans.c:do_ntcreate_pipe_open(561) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=4736 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=51200 (0xC800) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x48 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 27 of length 76 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=640 smb_uid=100 smb_mid=4801 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 B7 1E EE 03 ...·.î. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2294) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = 7863) level=1006 call=7 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2627) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,72) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,72) wrote 72 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 70 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x46 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 28 of length 74 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=4864 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 02 01 ..... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(4041) cmd=50 (SMBtrans2) NT_STATUS_NETWORK_ACCESS_DENIED [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x32 smb_rcls=202 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=4864 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 70 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x46 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 29 of length 74 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=640 smb_uid=100 smb_mid=4929 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 02 01 ..... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfsinfo(1830) call_trans2qfsinfo: level = 258 [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfsinfo(1933) call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 6, vol=htdocs serv=htdocs [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 0, data_sent_thistime = 30, useable_space = 131012 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 0, data_to_send = 30, paramsize = 0, datasize = 30 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,90) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,90) wrote 90 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2qfsinfo(2113) SMBtrans2 info_level = 258 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 30 of length 45 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=4992 smt_wct=3 smb_vwv[ 0]=29896 (0x74C8) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74c8 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74c8 (pipes_open=1) [2004/12/01 22:39:58, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:74c8 [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=74c8 (pipes_open=0) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=4992 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x48 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 31 of length 76 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=640 smb_uid=100 smb_mid=5057 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 104 (0x68) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 B7 1E EC 03 ...·.ì. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2294) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = 7863) level=1004 call=7 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 32 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=3856 smb_uid=100 smb_mid=5120 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 [2004/12/01 22:39:58, 4] smbd/nttrans.c:nt_open_pipe(496) nt_open_pipe: Opening pipe \srvsvc. [2004/12/01 22:39:58, 3] smbd/nttrans.c:nt_open_pipe(513) nt_open_pipe: Known pipe srvsvc opening. [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 74c9 (pipes_open=1) [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=74c9 [2004/12/01 22:39:58, 5] smbd/nttrans.c:do_ntcreate_pipe_open(561) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=3856 smb_uid=100 smb_mid=5120 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=51456 (0xC900) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 33 of length 45 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=5185 smt_wct=3 smb_vwv[ 0]= 7863 (0x1EB7) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/reply.c:reply_close(2772) close fd=26 fnum=7863 (numopen=1) [2004/12/01 22:39:58, 10] locking/locking.c:del_share_entry(597) del_share_entry: num_share_modes = 1 [2004/12/01 22:39:58, 10] locking/locking.c:del_share_entry(602) del_share_entry: deleted share_mode_entry[0]: pid = 5865, share_mode = 0x8040, desired_access = 0x20089, port = 0x8028, type= 0x3, file_id = 1, dev = 0x807, inode = 1439 [2004/12/01 22:39:58, 10] locking/locking.c:del_share_entry(612) del_share_entry: deleting entry 0 [2004/12/01 22:39:58, 10] locking/locking.c:del_share_entry(634) del_share_entry: Remaining table. [2004/12/01 22:39:58, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 0 for file htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file htdocs/ferm/New Text Document.txt, dev = 807, inode = 1439 file_id = 1 has kernel oplock state of 1. [2004/12/01 22:39:58, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file htdocs/ferm/New Text Document.txt has no outstanding locks. [2004/12/01 22:39:58, 2] smbd/close.c:close_normal_file(270) wwwrun closed file htdocs/ferm/New Text Document.txt (numopen=0) [2004/12/01 22:39:58, 5] smbd/files.c:file_free(385) freed files structure 7863 (0 used) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=5185 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 136 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x88 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 34 of length 140 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=136 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=5248 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29897 (0x74C9) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 72 (0x48) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=73 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 î....... .H...... [010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 .¸.¸.... ........ [020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 .ÈO2Kp.Ó ..xZG¿ná [030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. .ë.É..è. [040] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74c9 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74c9 (pipes_open=1) [2004/12/01 22:39:58, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74c9 name: srvsvc open: Yes len: 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0b [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0048 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 11, flags = 3 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 11 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(879) api_pipe_bind_req: decode request. 879 [2004/12/01 22:39:58, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(890) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 num_elements: 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000c context_id : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 000e num_syntaxes: 01 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 data : 4b324fc8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 data : 1670 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 data : 01d3 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 0018 data : 12 78 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 001a data : 5a 47 bf 6e e1 88 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 version: 00000003 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 data : 8a885d04 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0028 data : 1ceb [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 002a data : 11c9 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 002c data : 9f e8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 002e data : 08 00 2b 10 48 60 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 version: 00000002 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1020) api_pipe_bind_req: make response. 1020 [2004/12/01 22:39:58, 3] rpc_server/srv_pipe.c:check_bind_req(762) check_bind_req for \PIPE\srvsvc [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 000053f0 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 len: 000d [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000a str: \PIPE\ntsvcs. [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0018 num_results: 01 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001c result : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e reason : 0000 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 data : 8a885d04 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0024 data : 1ceb [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0026 data : 11c9 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 0028 data : 9f e8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 002a data : 08 00 2b 10 48 60 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 version: 00000002 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0c [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0044 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 56 [2004/12/01 22:39:58, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74c9 nwritten=72 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=5248 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 72 (0x48) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,51) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,51) wrote 51 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 154 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x9a [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 35 of length 158 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=154 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=5313 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=17408 (0x4400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=71 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 68 00 74 00 64 00 6F 00 63 00 73 00 5C .\.h.t.d .o.c.s.\ [010] 00 66 00 65 00 72 00 6D 00 5C 00 4E 00 65 00 77 .f.e.r.m .\.N.e.w [020] 00 20 00 54 00 65 00 78 00 74 00 20 00 44 00 6F . .T.e.x .t. .D.o [030] 00 63 00 75 00 6D 00 65 00 6E 00 74 00 2E 00 74 .c.u.m.e .n.t...t [040] 00 78 00 74 00 00 00 .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_create_disposition(340) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_share_mode(479) map_share_mode: Mapped desired access 0x20089, share access 0x3, file attributes 0x80 to open_mode 0x40 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/dosmode.c:unix_mode(111) unix_mode(htdocs/ferm/New Text Document.txt) returning 0660 [2004/12/01 22:39:58, 5] smbd/files.c:file_new(122) allocated file structure 3768, fnum = 7864 (1 used) [2004/12/01 22:39:58, 10] smbd/open.c:open_file_shared1(1038) open_file_shared: fname = htdocs/ferm/New Text Document.txt, dos_attrs = 80, share_mode = 40, ofun = 1, mode = 660, oplock request = 3 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 4] smbd/open.c:open_file_shared1(1244) calling open_file with flags=0x0 flags2=0x0 mode=0660 [2004/12/01 22:39:58, 10] smbd/open.c:fd_open(50) fd_open: name htdocs/ferm/New Text Document.txt, flags = 00 mode = 0660, fd = 26. [2004/12/01 22:39:58, 2] smbd/open.c:open_file(245) nazaand opened file htdocs/ferm/New Text Document.txt read=Yes write=No (numopen=1) [2004/12/01 22:39:58, 10] smbd/open.c:open_file_shared1(1373) open_file_shared : share_mode = 40 [2004/12/01 22:39:58, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file htdocs/ferm/New Text Document.txt, dev = 807, inode = 1439, file_id = 2 [2004/12/01 22:39:58, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file htdocs/ferm/New Text Document.txt, dev = 807, inode = 1439, file_id = 2, tv_sec = 41ae3a2e, tv_usec = 9dd35 [2004/12/01 22:39:58, 10] locking/locking.c:set_share_mode(689) set_share_mode: creating entry for file htdocs/ferm/New Text Document.txt. num_share_modes = 1 [2004/12/01 22:39:58, 10] locking/locking.c:print_share_mode_table(420) print_share_mode_table: share_mode_entry[0]: pid = 5865, share_mode = 0x40, desired_access = 0x20089, port = 0x8028, type= 0x3, file_id = 2, dev = 0x807, inode = 1439 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 5] smbd/nttrans.c:reply_ntcreate_and_X(1002) reply_ntcreate_and_X: fnum = 7864, open name = htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=5313 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=47106 (0xB802) smb_vwv[ 3]= 286 (0x11E) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15214 (0x3B6E) smb_vwv[ 7]=59879 (0xE9E7) smb_vwv[ 8]=50391 (0xC4D7) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=15214 (0x3B6E) smb_vwv[11]=59879 (0xE9E7) smb_vwv[12]=50391 (0xC4D7) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15214 (0x3B6E) smb_vwv[15]=59879 (0xE9E7) smb_vwv[16]=50391 (0xC4D7) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15214 (0x3B6E) smb_vwv[19]=59879 (0xE9E7) smb_vwv[20]=50391 (0xC4D7) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 36 of length 63 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=5376 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29897 (0x74C9) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74c9 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74c9 (pipes_open=1) [2004/12/01 22:39:58, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74c9 name: srvsvc len: 1024 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(970) read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2004/12/01 22:39:58, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74c9 min=1024 max=1024 nread=68 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=5376 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 00 ........ D....... [010] B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 5C ¸.¸.ðS.. ..\PIPE\ [020] 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 00 ntsvcs.. ........ [030] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]..ë.É. .è..+.H` [040] 02 00 00 00 .... [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,131) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,131) wrote 131 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x48 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 37 of length 76 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=5441 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 104 (0x68) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 B8 1E EC 03 ...¸.ì. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2294) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = 7864) level=1004 call=7 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 172 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0xac [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 38 of length 176 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=172 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=3856 smb_uid=100 smb_mid=5504 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 88 (0x58) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29897 (0x74C9) smb_bcc=105 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 58 00 00 00 01 00 00 ........ .X...... [020] 00 40 00 00 00 00 00 10 00 F4 D1 1E 01 07 00 00 .@...... .ôÑ..... [030] 00 00 00 00 00 07 00 00 00 5C 00 5C 00 63 00 74 ........ .\.\.c.t [040] 00 73 00 32 00 00 00 88 8A 07 00 00 00 00 00 00 .s.2.... ........ [050] 00 07 00 00 00 68 00 74 00 64 00 6F 00 63 00 73 .....h.t .d.o.c.s [060] 00 00 00 00 00 01 00 00 00 ........ . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=88 params=0 setup=2 [2004/12/01 22:39:58, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/12/01 22:39:58, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/12/01 22:39:58, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74c9 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74c9 (pipes_open=1) [2004/12/01 22:39:58, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "srvsvc" (pnum 74c9) [2004/12/01 22:39:58, 10] smbd/ipc.c:api_fd_reply(301) api_fd_reply: p:0x838ad58 max_trans_reply: 1024 [2004/12/01 22:39:58, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74c9 name: srvsvc open: Yes len: 88 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 88 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 88 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 88, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 72 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0058 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 3 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 72, incoming data = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00000040 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0010 [2004/12/01 22:39:58, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe.c:api_pipe_request(1500) Requested \PIPE\srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe.c:api_rpcTNP(1534) api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO [2004/12/01 22:39:58, 6] rpc_server/srv_pipe.c:api_rpcTNP(1560) api_rpc_cmds[7].fn == 0x8121bbd [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_share_get_info [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 ptr_srv_name: 011ed1f4 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 uni_max_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c uni_str_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0010 buffer : \.\.c.t.s.2... [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 00001e smb_io_unistr2 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 uni_max_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 offset : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0028 uni_str_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 002c buffer : h.t.d.o.c.s... [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 003c info_level: 00000001 [2004/12/01 22:39:58, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1391) _srv_net_share_get_info: 1391 [2004/12/01 22:39:58, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(737) init_srv_r_net_share_get_info: 737 [2004/12/01 22:39:58, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: htdocs 0 [2004/12/01 22:39:58, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2004/12/01 22:39:58, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1397) _srv_net_share_get_info: 1397 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_share_get_info [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_srv_share_info info [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 switch_value : 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 ptr_share_ctr: 00000001 [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000008 srv_io_share_info1 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 ptr_netname: 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c type : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 ptr_remark : 00000001 [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 srv_io_share_info1_str [2004/12/01 22:39:58, 8] rpc_parse/parse_prs.c:prs_debug(82) 000014 smb_io_unistr2 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 uni_max_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 offset : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c uni_str_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0020 buffer : h.t.d.o.c.s... [2004/12/01 22:39:58, 8] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_unistr2 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 uni_max_len: 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 offset : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0038 uni_str_len: 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 003c buffer : .. [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_werror(695) 0040 status: WERR_OK [2004/12/01 22:39:58, 5] rpc_server/srv_pipe.c:api_rpcTNP(1581) api_rpcTNP: called srvsvc successfully [2004/12/01 22:39:58, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 1052 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 72 [2004/12/01 22:39:58, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74c9 name: srvsvc len: 1024 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 68. [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 005c [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00000044 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/12/01 22:39:58, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..92] [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=148 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=3856 smb_uid=100 smb_mid=5504 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 92 (0x5C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 92 (0x5C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=93 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 05 00 02 03 10 00 00 00 5C 00 00 00 01 00 00 ........ .\...... [010] 00 44 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .D...... ........ [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 07 00 00 ........ ........ [030] 00 00 00 00 00 07 00 00 00 68 00 74 00 64 00 6F ........ .h.t.d.o [040] 00 63 00 73 00 00 00 00 00 01 00 00 00 00 00 00 .c.s.... ........ [050] 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ..... [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,152) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,152) wrote 152 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 39 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=5569 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 40 of length 45 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=5632 smt_wct=3 smb_vwv[ 0]=29897 (0x74C9) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74c9 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74c9 (pipes_open=1) [2004/12/01 22:39:58, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:74c9 [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=74c9 (pipes_open=0) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=5632 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 41 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=5697 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 42 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=5761 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 150 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x96 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 43 of length 154 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=150 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=5825 smt_wct=15 smb_vwv[ 0]= 82 (0x52) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 82 (0x52) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=85 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 68 00 74 00 64 00 6F 00 63 00 73 00 5C 00 66 .h.t.d.o .c.s.\.f [020] 00 65 00 72 00 6D 00 5C 00 4E 00 65 00 77 00 20 .e.r.m.\ .N.e.w. [030] 00 54 00 65 00 78 00 74 00 20 00 44 00 6F 00 63 .T.e.x.t . .D.o.c [040] 00 75 00 6D 00 65 00 6E 00 74 00 2E 00 74 00 78 .u.m.e.n .t...t.x [050] 00 74 00 00 00 .t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2findfirst(1365) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2findfirst(1418) dir=htdocs/ferm, mask = New Text Document.txt [2004/12/01 22:39:58, 5] smbd/dir.c:start_dir(334) start_dir dir=htdocs/ferm [2004/12/01 22:39:58, 3] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path htdocs/ferm, expect_close = 1 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2findfirst(1448) dptr_num is 256, wcard = New Text Document.txt, attr = 22 [2004/12/01 22:39:58, 8] smbd/trans2.c:call_trans2findfirst(1453) dirpath= dontdescend=<> [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x8394ba8 now at offset 1 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x8394ba8 now at offset 2 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x8394ba8 now at offset 3 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x8394ba8 now at offset 4 [2004/12/01 22:39:58, 8] smbd/trans2.c:get_lanman2_dir_entry(884) get_lanman2_dir_entry:readdir on dirptr 0x8394ba8 now at offset 5 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 5] smbd/trans2.c:get_lanman2_dir_entry(974) get_lanman2_dir_entry found htdocs/ferm/New Text Document.txt fname=New Text Document.txt [2004/12/01 22:39:58, 10] smbd/trans2.c:get_lanman2_dir_entry(1058) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2004/12/01 22:39:58, 10] smbd/mangle_hash2.c:name_map(607) name_map: New Text Document.txt -> 124541D5 -> N52HZ2~T.TXT (cache=1) [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2findfirst(1499) call_trans2findfirst - (2) closing dptr_num 256 [2004/12/01 22:39:58, 4] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 10, data_sent_thistime = 136, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 10, data_to_send = 136, paramsize = 10, datasize = 136 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,208) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,208) wrote 208 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2findfirst(1529) SMBtrans2 mask=New Text Document.txt directory=htdocs/ferm dirtype=22 numentries=1 [2004/12/01 22:39:58, 10] smbd/mangle_hash2.c:name_map(607) name_map: New Text Document.txt -> 124541D5 -> N52HZ2~T.TXT (cache=1) [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 44 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=5888 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 104 (0x68) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EC 03 00 00 00 00 5C 00 68 00 74 00 64 ...ì.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1004 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2503) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/12/01 22:39:58, 5] smbd/trans2.c:call_trans2qfilepathinfo(2513) SMB_QFBI - create: Wed Dec 1 22:08:28 2004 access: Wed Dec 1 22:08:28 2004 write: Wed Dec 1 22:08:28 2004 change: Wed Dec 1 22:08:28 2004 mode: 80 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,104) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,104) wrote 104 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 144 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x90 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 45 of length 148 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=144 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=5952 smt_wct=15 smb_vwv[ 0]= 76 (0x4C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 32 (0x20) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 76 (0x4C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=79 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EF 03 00 00 00 00 5C 00 68 00 74 00 64 ...ï.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 5C 00 4E 00 65 00 77 00 20 00 54 00 65 00 78 .\.N.e.w . .T.e.x [030] 00 74 00 20 00 44 00 6F 00 63 00 75 00 6D 00 65 .t. .D.o .c.u.m.e [040] 00 6E 00 74 00 2E 00 74 00 78 00 74 00 00 00 .n.t...t .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = -1) level=1007 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2544) call_trans2qfilepathinfo: SMB_FILE_EA_INFORMATION [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 4, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 4, paramsize = 2, datasize = 4 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,68) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,68) wrote 68 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 154 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x9a [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 46 of length 158 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=154 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=6016 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=17408 (0x4400) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=71 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 68 00 74 00 64 00 6F 00 63 00 73 00 5C .\.h.t.d .o.c.s.\ [010] 00 66 00 65 00 72 00 6D 00 5C 00 4E 00 65 00 77 .f.e.r.m .\.N.e.w [020] 00 20 00 54 00 65 00 78 00 74 00 20 00 44 00 6F . .T.e.x .t. .D.o [030] 00 63 00 75 00 6D 00 65 00 6E 00 74 00 2E 00 74 .c.u.m.e .n.t...t [040] 00 78 00 74 00 00 00 .x.t... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x10, desired_access = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_create_disposition(340) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_share_mode(422) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_share_mode(479) map_share_mode: Mapped desired access 0x100080, share access 0x7, file attributes 0x80 to open_mode 0x8040 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:39:58, 3] smbd/dosmode.c:unix_mode(111) unix_mode(htdocs/ferm/New Text Document.txt) returning 0660 [2004/12/01 22:39:58, 5] smbd/files.c:file_new(122) allocated file structure 3769, fnum = 7865 (2 used) [2004/12/01 22:39:58, 10] smbd/open.c:open_file_shared1(1038) open_file_shared: fname = htdocs/ferm/New Text Document.txt, dos_attrs = 80, share_mode = 8040, ofun = 1, mode = 660, oplock request = 0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 10] locking/locking.c:get_share_modes(468) get_share_modes: share_mode_entry[0]: pid = 5865, share_mode = 0x40, desired_access = 0x20089, port = 0x8028, type= 0x3, file_id = 2, dev = 0x807, inode = 1439 [2004/12/01 22:39:58, 4] smbd/open.c:open_file_shared1(1244) calling open_file with flags=0x0 flags2=0x0 mode=0660 [2004/12/01 22:39:58, 2] smbd/open.c:open_file(245) nazaand opened file htdocs/ferm/New Text Document.txt read=Yes write=No (numopen=2) [2004/12/01 22:39:58, 10] smbd/open.c:open_file_shared1(1373) open_file_shared : share_mode = 8040 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:39:58, 5] smbd/nttrans.c:reply_ntcreate_and_X(1002) reply_ntcreate_and_X: fnum = 7865, open name = htdocs/ferm/New Text Document.txt [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=6016 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=47360 (0xB900) smb_vwv[ 3]= 286 (0x11E) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15214 (0x3B6E) smb_vwv[ 7]=59879 (0xE9E7) smb_vwv[ 8]=50391 (0xC4D7) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=15214 (0x3B6E) smb_vwv[11]=59879 (0xE9E7) smb_vwv[12]=50391 (0xC4D7) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15214 (0x3B6E) smb_vwv[15]=59879 (0xE9E7) smb_vwv[16]=50391 (0xC4D7) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15214 (0x3B6E) smb_vwv[19]=59879 (0xE9E7) smb_vwv[20]=50391 (0xC4D7) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 84 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x54 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 47 of length 88 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=6080 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=16384 (0x4000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 192 (0xC0) smb_vwv[20]= 9 (0x9) smb_vwv[21]= 7865 (0x1EB9) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBnttrans (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_nttrans(2734) reply_nttrans: setup_count = 8 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] C0 00 09 00 B9 1E 01 00 À...¹... [2004/12/01 22:39:58, 10] smbd/nttrans.c:call_nt_transact_ioctl(2061) call_nt_transact_ioctl: function[0x000900C0] FID[0x1EB9] isFSctl[0x01] compfilter[0x00] [2004/12/01 22:39:58, 10] smbd/nttrans.c:call_nt_transact_ioctl(2083) FSCTL_0x000900C0: called on FID[0x1EB9](but not implemented) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,75) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,75) wrote 75 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 70 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x46 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 48 of length 74 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=6144 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 F0 03 ...ð. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfsinfo(1830) call_trans2qfsinfo: level = 1008 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 131012 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,124) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,124) wrote 124 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2qfsinfo(2113) SMBtrans2 info_level = 1008 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 236 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0xec [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 49 of length 240 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6208 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... .. >0< . [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7...¢* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .â...... ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBsesssetupX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=12 flg2=0xc807 [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535) Doing spnego session setup [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_spnego_negotiate(444) Got OID 1 3 6 1 4 1 311 2 2 10 [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_spnego_negotiate(447) Got secblob of size 40 [2004/12/01 22:39:58, 5] auth/auth.c:make_auth_context_subsystem(480) Making default auth method list for standalone security=user, encrypt passwords = yes [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match guest [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(409) load_auth_module: auth method guest has a valid init [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match sam [2004/12/01 22:39:58, 5] auth/auth.c:load_auth_module(409) load_auth_module: auth method sam has a valid init [2004/12/01 22:39:58, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2004/12/01 22:39:58, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2004/12/01 22:39:58, 5] lib/util.c:dump_data(1899) [000] 4F CC 0A 7E 24 BE 7F 1B OÌ.~$¾.. [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,316) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,316) wrote 316 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 278 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x116 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 50 of length 282 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=278 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=6272 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 278 (0x116) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 117 (0x75) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=219 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] A1 73 30 71 A2 6F 04 6D 4E 54 4C 4D 53 53 50 00 ¡s0q¢o.m NTLMSSP. [010] 03 00 00 00 01 00 01 00 5C 00 00 00 00 00 00 00 ........ \....... [020] 5D 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 ]....... H....... [030] 48 00 00 00 14 00 14 00 48 00 00 00 10 00 10 00 H....... H....... [040] 5D 00 00 00 15 8A 88 62 05 01 28 0A 00 00 00 0F ]......b ..(..... [050] 41 00 42 00 58 00 2D 00 45 00 55 00 52 00 45 00 A.B.X.-. E.U.R.E. [060] 58 00 32 00 00 5C 09 D7 FF F6 A5 FF 5E 5A 23 DB X.2..\.× ÿö¥ÿ^Z#Û [070] 70 36 16 5B 62 57 00 69 00 6E 00 64 00 6F 00 77 p6.[bW.i .n.d.o.w [080] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 53 .s. .2.0 .0.2. .S [090] 00 65 00 72 00 76 00 69 00 63 00 65 00 20 00 50 .e.r.v.i .c.e. .P [0A0] 00 61 00 63 00 6B 00 20 00 32 00 20 00 32 00 36 .a.c.k. .2. .2.6 [0B0] 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F .0.0...W .i.n.d.o [0C0] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. [0D0] 00 35 00 2E 00 31 00 00 00 00 00 .5...1.. ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBsesssetupX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=12 flg2=0xc807 [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535) Doing spnego session setup [2004/12/01 22:39:58, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/12/01 22:39:58, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615) Got user=[] domain=[] workstation=[ABX-EUREX2] len1=1 len2=0 [2004/12/01 22:39:58, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info_map(225) make_user_info_map: Mapping user []\[] from workstation [ABX-EUREX2] [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info(133) attempting to make a user_info for () [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info(143) making strings for 's user_info struct [2004/12/01 22:39:58, 5] auth/auth_util.c:make_user_info(185) making blobs for 's user_info struct [2004/12/01 22:39:58, 10] auth/auth_util.c:make_user_info(201) made an encrypted user_info for () [2004/12/01 22:39:58, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[ABX-EUREX2] with the new password interface [2004/12/01 22:39:58, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [CTS2]\[]@[ABX-EUREX2] [2004/12/01 22:39:58, 10] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by random [2004/12/01 22:39:58, 10] auth/auth.c:check_ntlm_password(233) challenge is: [2004/12/01 22:39:58, 5] lib/util.c:dump_data(1899) [000] 4F CC 0A 7E 24 BE 7F 1B OÌ.~$¾.. [2004/12/01 22:39:58, 10] lib/account_pol.c:account_policy_get(155) account_policy_get: password history:0 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 5 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 6 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 7 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 8 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 9 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 10 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 21 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_username(625) pdb_set_username: setting username nobody, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 12 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_domain(652) pdb_set_domain: setting domain CTS2, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 14 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_nt_username(679) pdb_set_nt_username: setting nt username , was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 15 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_fullname(706) pdb_set_full_name: setting full name nobody, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 13 -> now SET [2004/12/01 22:39:58, 4] lib/substitute.c:automount_server(323) Home server: cts2 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_homedir(814) pdb_set_homedir: setting home dir \\cts2\nobody, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(787) pdb_set_dir_drive: setting dir drive , was NULL [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_logon_script(733) pdb_set_logon_script: setting logon script , was [2004/12/01 22:39:58, 4] lib/substitute.c:automount_server(323) Home server: cts2 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_profile_path(760) pdb_set_profile_path: setting profile path \\cts2\nobody\profile, was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 23 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_workstations(893) pdb_set_workstations: setting workstations , was [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 24 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 26 -> now SET [2004/12/01 22:39:58, 10] lib/account_pol.c:account_policy_get(155) account_policy_get: password history:0 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 34 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_user_sid(552) pdb_set_user_sid: setting user sid S-1-5-21-158085016-904300585-1883629701-501 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 18 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-158085016-904300585-1883629701-501 from rid 501 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_group_sid(588) pdb_set_group_sid: setting group sid S-1-5-21-158085016-904300585-1883629701-514 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 19 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-158085016-904300585-1883629701-514 from rid 514 [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 16 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 29 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 30 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 31 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 20 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 17 -> now SET [2004/12/01 22:39:58, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525) element 27 -> now SET [2004/12/01 22:39:58, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2004/12/01 22:39:58, 5] auth/auth.c:check_ntlm_password(305) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2004/12/01 22:39:58, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2004/12/01 22:39:58, 10] auth/auth_util.c:free_user_info(1364) structure was created for [2004/12/01 22:39:58, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117) Got NT session key of length 16 [2004/12/01 22:39:58, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123) Got LM session key of length 16 [2004/12/01 22:39:58, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(705) ntlmssp_server_auth: Using unmodified nt session key. [2004/12/01 22:39:58, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) NTLMSSP Sign/Seal - Initialising with flags: [2004/12/01 22:39:58, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2004/12/01 22:39:58, 10] smbd/password.c:register_vuid(158) register_vuid: allocated vuid = 102 [2004/12/01 22:39:58, 10] smbd/password.c:register_vuid(220) register_vuid: (65534,65533) nobody CTS2 guest=1 [2004/12/01 22:39:58, 3] smbd/password.c:register_vuid(222) User name: nobody Real name: nobody [2004/12/01 22:39:58, 3] smbd/password.c:register_vuid(241) UNIX uid 65534 is UNIX user nobody, and will be vuid 102 [2004/12/01 22:39:58, 6] param/loadparm.c:lp_file_list_changed(2684) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Dec 1 22:37:58 2004 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,120) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,120) wrote 120 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 74 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x4a [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 51 of length 78 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=74 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=6336 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 74 (0x4A) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=31 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 5C 00 43 00 54 00 53 00 32 00 5C 00 49 .\.\.C.T .S.2.\.I [010] 00 50 00 43 00 24 00 00 00 3F 3F 3F 3F 3F 00 .P.C.$.. .?????. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtconX (pid 5865) conn 0x0 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 4] smbd/reply.c:reply_tcon_and_X(408) Client requested device type [?????] for share [IPC$] [2004/12/01 22:39:58, 5] smbd/service.c:make_connection(813) making a connection to 'normal' service ipc$ [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam(293) Finding user nobody [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is nobody [2004/12/01 22:39:58, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [nobody]! [2004/12/01 22:39:58, 3] smbd/service.c:make_connection_snum(472) Connect path is '/var/tmp' for service [IPC$] [2004/12/01 22:39:58, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 6 entries and first sid S-1-5-21-158085016-904300585-1883629701-501. [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-158085016-904300585-1883629701-501 se_access_check: also S-1-5-21-158085016-904300585-1883629701-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-158085016-904300585-1883629701-132067 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/12/01 22:39:58, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/12/01 22:39:58, 3] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2004/12/01 22:39:58, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2004/12/01 22:39:58, 10] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2004/12/01 22:39:58, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/12/01 22:39:58, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 6 entries and first sid S-1-5-21-158085016-904300585-1883629701-501. [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(251) [2004/12/01 22:39:58, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-158085016-904300585-1883629701-501 se_access_check: also S-1-5-21-158085016-904300585-1883629701-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-158085016-904300585-1883629701-132067 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2004/12/01 22:39:58, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (1) granted. [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-501 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-501 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-514 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-132067 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 65534 Primary group is 65533 and contains 1 supplementary groups Group[ 0]: 65533 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(65534,65534) gid=(0,65533) [2004/12/01 22:39:58, 3] smbd/service.c:make_connection_snum(648) abx-eurex2 (172.17.27.106) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 5865) [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:39:58, 3] smbd/reply.c:reply_tcon_and_X(456) tconX service=IPC$ [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=6336 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 49 50 43 00 00 00 00 IPC.... [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,52) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,52) wrote 52 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 52 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=6400 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x10, desired_access = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2004/12/01 22:39:58, 4] smbd/nttrans.c:nt_open_pipe(496) nt_open_pipe: Opening pipe \srvsvc. [2004/12/01 22:39:58, 3] smbd/nttrans.c:nt_open_pipe(513) nt_open_pipe: Known pipe srvsvc opening. [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 74ca (pipes_open=1) [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=74ca [2004/12/01 22:39:58, 5] smbd/nttrans.c:do_ntcreate_pipe_open(561) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=6400 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=51712 (0xCA00) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x48 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 53 of length 76 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=6464 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 CA 74 0A 04 ...Êt.. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(4041) cmd=50 (SMBtrans2) NT_STATUS_NETWORK_ACCESS_DENIED [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x32 smb_rcls=202 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=6464 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 54 of length 45 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=6528 smt_wct=3 smb_vwv[ 0]=29898 (0x74CA) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74ca [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74ca (pipes_open=1) [2004/12/01 22:39:58, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:74ca [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=74ca (pipes_open=0) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=6528 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 55 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=6592 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=17 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 [2004/12/01 22:39:58, 4] smbd/nttrans.c:nt_open_pipe(496) nt_open_pipe: Opening pipe \srvsvc. [2004/12/01 22:39:58, 3] smbd/nttrans.c:nt_open_pipe(513) nt_open_pipe: Known pipe srvsvc opening. [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 74cb (pipes_open=1) [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=74cb [2004/12/01 22:39:58, 5] smbd/nttrans.c:do_ntcreate_pipe_open(561) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=6592 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=51968 (0xCB00) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 70 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x46 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 56 of length 74 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=6656 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 02 01 ..... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(4041) cmd=50 (SMBtrans2) NT_STATUS_NETWORK_ACCESS_DENIED [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x32 smb_rcls=202 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=6656 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 57 of length 45 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=6720 smt_wct=3 smb_vwv[ 0]=29899 (0x74CB) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74cb [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74cb (pipes_open=1) [2004/12/01 22:39:58, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:74cb [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=74cb (pipes_open=0) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=6720 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 58 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=3856 smb_uid=100 smb_mid=6784 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 [2004/12/01 22:39:58, 4] smbd/nttrans.c:nt_open_pipe(496) nt_open_pipe: Opening pipe \srvsvc. [2004/12/01 22:39:58, 3] smbd/nttrans.c:nt_open_pipe(513) nt_open_pipe: Known pipe srvsvc opening. [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 74cc (pipes_open=1) [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=74cc [2004/12/01 22:39:58, 5] smbd/nttrans.c:do_ntcreate_pipe_open(561) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=3856 smb_uid=100 smb_mid=6784 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=52224 (0xCC00) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 136 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x88 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 59 of length 140 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=136 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=6848 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29900 (0x74CC) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 72 (0x48) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=73 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 î....... .H...... [010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 .¸.¸.... ........ [020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 .ÈO2Kp.Ó ..xZG¿ná [030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. .ë.É..è. [040] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBwriteX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74cc [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74cc (pipes_open=1) [2004/12/01 22:39:58, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74cc name: srvsvc open: Yes len: 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0b [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0048 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 11, flags = 3 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 11 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(879) api_pipe_bind_req: decode request. 879 [2004/12/01 22:39:58, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(890) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 num_elements: 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000c context_id : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 000e num_syntaxes: 01 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 data : 4b324fc8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 data : 1670 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 data : 01d3 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 0018 data : 12 78 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 001a data : 5a 47 bf 6e e1 88 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 version: 00000003 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 data : 8a885d04 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0028 data : 1ceb [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 002a data : 11c9 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 002c data : 9f e8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 002e data : 08 00 2b 10 48 60 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 version: 00000002 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1020) api_pipe_bind_req: make response. 1020 [2004/12/01 22:39:58, 3] rpc_server/srv_pipe.c:check_bind_req(762) check_bind_req for \PIPE\srvsvc [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 000053f0 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 len: 000d [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000a str: \PIPE\ntsvcs. [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0018 num_results: 01 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001c result : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 001e reason : 0000 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 data : 8a885d04 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0024 data : 1ceb [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0026 data : 11c9 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 0028 data : 9f e8 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 002a data : 08 00 2b 10 48 60 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 version: 00000002 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0c [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0044 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 56 [2004/12/01 22:39:58, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=74cc nwritten=72 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=6848 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 72 (0x48) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,51) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,51) wrote 51 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x3b [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 60 of length 63 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=6912 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=29900 (0x74CC) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBreadX (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74cc [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74cc (pipes_open=1) [2004/12/01 22:39:58, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74cc name: srvsvc len: 1024 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(970) read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2004/12/01 22:39:58, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=74cc min=1024 max=1024 nread=68 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=6912 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 00 ........ D....... [010] B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 5C ¸.¸.ðS.. ..\PIPE\ [020] 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 00 ntsvcs.. ........ [030] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]..ë.É. .è..+.H` [040] 02 00 00 00 .... [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,131) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,131) wrote 131 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 172 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0xac [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 61 of length 176 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=172 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=3856 smb_uid=100 smb_mid=6976 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 88 (0x58) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29900 (0x74CC) smb_bcc=105 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 58 00 00 00 01 00 00 ........ .X...... [020] 00 40 00 00 00 00 00 10 00 F4 D1 1E 01 07 00 00 .@...... .ôÑ..... [030] 00 00 00 00 00 07 00 00 00 5C 00 5C 00 63 00 74 ........ .\.\.c.t [040] 00 73 00 32 00 00 00 88 8A 07 00 00 00 00 00 00 .s.2.... ........ [050] 00 07 00 00 00 68 00 74 00 64 00 6F 00 63 00 73 .....h.t .d.o.c.s [060] 00 00 00 00 00 01 00 00 00 ........ . [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=88 params=0 setup=2 [2004/12/01 22:39:58, 5] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/12/01 22:39:58, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/12/01 22:39:58, 5] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74cc [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74cc (pipes_open=1) [2004/12/01 22:39:58, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "srvsvc" (pnum 74cc) [2004/12/01 22:39:58, 10] smbd/ipc.c:api_fd_reply(301) api_fd_reply: p:0x8396d78 max_trans_reply: 1024 [2004/12/01 22:39:58, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 74cc name: srvsvc open: Yes len: 88 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 88 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 88 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 88, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 72 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0058 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 3 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 72, incoming data = 72 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00000040 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0010 [2004/12/01 22:39:58, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/12/01 22:39:58, 5] rpc_server/srv_pipe.c:api_pipe_request(1500) Requested \PIPE\srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe.c:api_rpcTNP(1534) api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO [2004/12/01 22:39:58, 6] rpc_server/srv_pipe.c:api_rpcTNP(1560) api_rpc_cmds[7].fn == 0x8121bbd [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_share_get_info [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 ptr_srv_name: 011ed1f4 [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 uni_max_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c uni_str_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0010 buffer : \.\.c.t.s.2... [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 00001e smb_io_unistr2 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 uni_max_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 offset : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0028 uni_str_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 002c buffer : h.t.d.o.c.s... [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 003c info_level: 00000001 [2004/12/01 22:39:58, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1391) _srv_net_share_get_info: 1391 [2004/12/01 22:39:58, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(737) init_srv_r_net_share_get_info: 737 [2004/12/01 22:39:58, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: htdocs 0 [2004/12/01 22:39:58, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2004/12/01 22:39:58, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1397) _srv_net_share_get_info: 1397 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_share_get_info [2004/12/01 22:39:58, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_srv_share_info info [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 switch_value : 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 ptr_share_ctr: 00000001 [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000008 srv_io_share_info1 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 ptr_netname: 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c type : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 ptr_remark : 00000001 [2004/12/01 22:39:58, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 srv_io_share_info1_str [2004/12/01 22:39:58, 8] rpc_parse/parse_prs.c:prs_debug(82) 000014 smb_io_unistr2 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 uni_max_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 offset : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c uni_str_len: 00000007 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0020 buffer : h.t.d.o.c.s... [2004/12/01 22:39:58, 8] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_unistr2 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 uni_max_len: 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 offset : 00000000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0038 uni_str_len: 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 003c buffer : .. [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_werror(695) 0040 status: WERR_OK [2004/12/01 22:39:58, 5] rpc_server/srv_pipe.c:api_rpcTNP(1581) api_rpcTNP: called srvsvc successfully [2004/12/01 22:39:58, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 1052 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 72 [2004/12/01 22:39:58, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 74cc name: srvsvc len: 1024 [2004/12/01 22:39:58, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 68. [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 005c [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00000044 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/12/01 22:39:58, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/12/01 22:39:58, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..92] [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=148 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=3856 smb_uid=100 smb_mid=6976 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 92 (0x5C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 92 (0x5C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=93 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 05 00 02 03 10 00 00 00 5C 00 00 00 01 00 00 ........ .\...... [010] 00 44 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .D...... ........ [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 07 00 00 ........ ........ [030] 00 00 00 00 00 07 00 00 00 68 00 74 00 64 00 6F ........ .h.t.d.o [040] 00 63 00 73 00 00 00 00 00 01 00 00 00 00 00 00 .c.s.... ........ [050] 00 01 00 00 00 00 00 00 00 00 00 00 00 ........ ..... [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,152) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,152) wrote 152 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 62 of length 45 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=7040 smt_wct=3 smb_vwv[ 0]=29900 (0x74CC) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x838b020 [2004/12/01 22:39:58, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74cc [2004/12/01 22:39:58, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74cc (pipes_open=1) [2004/12/01 22:39:58, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:74cc [2004/12/01 22:39:58, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/12/01 22:39:58, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=74cc (pipes_open=0) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=7040 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 63 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=7104 smt_wct=15 smb_vwv[ 0]= 32 (0x20) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 64 (0x40) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 32 (0x20) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=35 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 ED 03 00 00 00 00 5C 00 68 00 74 00 64 ...í.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 00 00 ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM] -> [htdocs/ferm] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm (fnum = -1) level=1005 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2528) call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,88) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,88) wrote 88 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 64 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=7168 smt_wct=15 smb_vwv[ 0]= 32 (0x20) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 32 (0x20) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=35 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EE 03 00 00 00 00 5C 00 68 00 74 00 64 ...î.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 00 00 ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1006 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM] -> [htdocs/ferm] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm (fnum = -1) level=1006 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2627) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,72) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,72) wrote 72 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 65 of length 104 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=7232 smt_wct=15 smb_vwv[ 0]= 32 (0x20) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 32 (0x20) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 32 (0x20) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=35 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 EF 03 00 00 00 00 5C 00 68 00 74 00 64 ...ï.... .\.h.t.d [010] 00 6F 00 63 00 73 00 5C 00 66 00 65 00 72 00 6D .o.c.s.\ .f.e.r.m [020] 00 00 00 ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM] -> [htdocs/ferm] [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm (fnum = -1) level=1007 call=5 total_data=0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 10] smbd/trans2.c:call_trans2qfilepathinfo(2544) call_trans2qfilepathinfo: SMB_FILE_EA_INFORMATION [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 4, useable_space = 131010 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 4, paramsize = 2, datasize = 4 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,68) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,68) wrote 68 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 110 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x6e [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 66 of length 114 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=110 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=7296 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 6144 (0x1800) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=27 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 68 00 74 00 64 00 6F 00 63 00 73 00 5C .\.h.t.d .o.c.s.\ [010] 00 66 00 65 00 72 00 6D 00 00 00 .f.e.r.m ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x10, desired_access = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_create_disposition(340) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_share_mode(422) map_share_mode: FILE_SHARE_DELETE requested. open_mode = 0x8000 [2004/12/01 22:39:58, 10] smbd/nttrans.c:map_share_mode(479) map_share_mode: Mapped desired access 0x100080, share access 0x7, file attributes 0x80 to open_mode 0x8040 [2004/12/01 22:39:58, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm" [2004/12/01 22:39:58, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM] -> [htdocs/ferm] [2004/12/01 22:39:58, 3] smbd/dosmode.c:unix_mode(111) unix_mode(htdocs/ferm) returning 0660 [2004/12/01 22:39:58, 5] smbd/files.c:file_new(122) allocated file structure 3770, fnum = 7866 (3 used) [2004/12/01 22:39:58, 10] smbd/open.c:open_file_shared1(1038) open_file_shared: fname = htdocs/ferm, dos_attrs = 80, share_mode = 8040, ofun = 1, mode = 660, oplock request = 0 [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 4] smbd/open.c:open_file_shared1(1244) calling open_file with flags=0x0 flags2=0x0 mode=0660 [2004/12/01 22:39:58, 5] smbd/files.c:file_free(385) freed files structure 7866 (2 used) [2004/12/01 22:39:58, 5] smbd/files.c:file_new(122) allocated file structure 3771, fnum = 7867 (3 used) [2004/12/01 22:39:58, 5] smbd/open.c:open_directory(1641) open_directory: opening directory htdocs/ferm [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/12/01 22:39:58, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning d [2004/12/01 22:39:58, 5] smbd/nttrans.c:reply_ntcreate_and_X(1002) reply_ntcreate_and_X: fnum = 7867, open name = htdocs/ferm [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=7296 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=47872 (0xBB00) smb_vwv[ 3]= 286 (0x11E) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15214 (0x3B6E) smb_vwv[ 7]=59879 (0xE9E7) smb_vwv[ 8]=50391 (0xC4D7) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=49803 (0xC28B) smb_vwv[11]=61005 (0xEE4D) smb_vwv[12]=50391 (0xC4D7) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15214 (0x3B6E) smb_vwv[15]=59879 (0xE9E7) smb_vwv[16]=50391 (0xC4D7) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15214 (0x3B6E) smb_vwv[19]=59879 (0xE9E7) smb_vwv[20]=50391 (0xC4D7) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 84 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x54 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 67 of length 88 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=7360 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=16384 (0x4000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 192 (0xC0) smb_vwv[20]= 9 (0x9) smb_vwv[21]= 7867 (0x1EBB) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 ... [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBnttrans (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 10] smbd/nttrans.c:reply_nttrans(2734) reply_nttrans: setup_count = 8 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] C0 00 09 00 BB 1E 01 00 À...»... [2004/12/01 22:39:58, 10] smbd/nttrans.c:call_nt_transact_ioctl(2061) call_nt_transact_ioctl: function[0x000900C0] FID[0x1EBB] isFSctl[0x01] compfilter[0x00] [2004/12/01 22:39:58, 10] smbd/nttrans.c:call_nt_transact_ioctl(2083) FSCTL_0x000900C0: called on FID[0x1EBB](but not implemented) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,75) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,75) wrote 75 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 70 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x46 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 68 of length 74 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3856 smb_uid=100 smb_mid=7424 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/12/01 22:39:58, 10] lib/util.c:dump_data(1899) [000] 00 00 00 F0 03 ...ð. [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/trans2.c:call_trans2qfsinfo(1830) call_trans2qfsinfo: level = 1008 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 131012 [2004/12/01 22:39:58, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,124) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,124) wrote 124 [2004/12/01 22:39:58, 4] smbd/trans2.c:call_trans2qfsinfo(2113) SMBtrans2 info_level = 1008 [2004/12/01 22:39:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:39:58, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:39:58, 3] smbd/process.c:process_smb(1092) Transaction 69 of length 45 [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=7488 smt_wct=3 smb_vwv[ 0]= 7867 (0x1EBB) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:39:58, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x83958b0 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:39:58, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:39:58, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:39:58, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:39:58, 3] smbd/reply.c:reply_close(2758) close directory fnum=7867 [2004/12/01 22:39:58, 5] smbd/files.c:file_free(385) freed files structure 7867 (2 used) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(461) [2004/12/01 22:39:58, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=7488 smt_wct=0 smb_bcc=0 [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:39:58, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:40:08, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:40:08, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:40:08, 3] smbd/process.c:process_smb(1092) Transaction 70 of length 104 [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=7552 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 8192 (0x2000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=17 [2004/12/01 22:40:08, 10] lib/util.c:dump_data(1899) [000] 70 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 p\.s.r.v .s.v.c.. [010] 00 . [2004/12/01 22:40:08, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x838b020 [2004/12/01 22:40:08, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (503, 500) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:08, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-2006 contains 6 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-2006 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-2011 [2004/12/01 22:40:08, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 503 Primary group is 500 and contains 2 supplementary groups Group[ 0]: 500 Group[ 1]: 505 [2004/12/01 22:40:08, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(503,503) gid=(0,500) [2004/12/01 22:40:08, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:40:08, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x10, desired_access = 0x80 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0 [2004/12/01 22:40:08, 4] smbd/nttrans.c:nt_open_pipe(496) nt_open_pipe: Opening pipe \srvsvc. [2004/12/01 22:40:08, 3] smbd/nttrans.c:nt_open_pipe(513) nt_open_pipe: Known pipe srvsvc opening. [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/12/01 22:40:08, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/12/01 22:40:08, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 74cd (pipes_open=1) [2004/12/01 22:40:08, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=74cd [2004/12/01 22:40:08, 5] smbd/nttrans.c:do_ntcreate_pipe_open(561) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=7552 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=52480 (0xCD00) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:40:08, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2004/12/01 22:40:08, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x48 [2004/12/01 22:40:08, 3] smbd/process.c:process_smb(1092) Transaction 71 of length 76 [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=7616 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 56 (0x38) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/12/01 22:40:08, 10] lib/util.c:dump_data(1899) [000] 00 00 00 CD 74 0A 04 ...Ít.. [2004/12/01 22:40:08, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x838b020 [2004/12/01 22:40:08, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:40:08, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(4041) cmd=50 (SMBtrans2) NT_STATUS_NETWORK_ACCESS_DENIED [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=35 smb_com=0x32 smb_rcls=202 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=7616 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:40:08, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:40:08, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:40:08, 3] smbd/process.c:process_smb(1092) Transaction 72 of length 45 [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=7680 smt_wct=3 smb_vwv[ 0]=29901 (0x74CD) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:40:08, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x838b020 [2004/12/01 22:40:08, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74cd [2004/12/01 22:40:08, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74cd (pipes_open=1) [2004/12/01 22:40:08, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:74cd [2004/12/01 22:40:08, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=74cd (pipes_open=0) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=7680 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:40:08, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2004/12/01 22:40:08, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x64 [2004/12/01 22:40:08, 3] smbd/process.c:process_smb(1092) Transaction 73 of length 104 [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=7744 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 8 (0x8) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=17 [2004/12/01 22:40:08, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/12/01 22:40:08, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x838b020 [2004/12/01 22:40:08, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:40:08, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x840 root_dir_fid = 0x0 [2004/12/01 22:40:08, 4] smbd/nttrans.c:nt_open_pipe(496) nt_open_pipe: Opening pipe \srvsvc. [2004/12/01 22:40:08, 3] smbd/nttrans.c:nt_open_pipe(513) nt_open_pipe: Known pipe srvsvc opening. [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/12/01 22:40:08, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/12/01 22:40:08, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 74ce (pipes_open=1) [2004/12/01 22:40:08, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=74ce [2004/12/01 22:40:08, 5] smbd/nttrans.c:do_ntcreate_pipe_open(561) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=7744 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=52736 (0xCE00) smb_vwv[ 3]= 372 (0x174) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:40:08, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 70 [2004/12/01 22:40:08, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x46 [2004/12/01 22:40:08, 3] smbd/process.c:process_smb(1092) Transaction 74 of length 74 [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=7808 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/12/01 22:40:08, 10] lib/util.c:dump_data(1899) [000] 00 00 00 02 01 ..... [2004/12/01 22:40:08, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x838b020 [2004/12/01 22:40:08, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:40:08, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(4041) cmd=50 (SMBtrans2) NT_STATUS_NETWORK_ACCESS_DENIED [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=35 smb_com=0x32 smb_rcls=202 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=640 smb_uid=100 smb_mid=7808 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:40:08, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:40:08, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:40:08, 3] smbd/process.c:process_smb(1092) Transaction 75 of length 45 [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=7872 smt_wct=3 smb_vwv[ 0]=29902 (0x74CE) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:40:08, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x838b020 [2004/12/01 22:40:08, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1170) search for pipe pnum=74ce [2004/12/01 22:40:08, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1174) pipe name srvsvc pnum=74ce (pipes_open=1) [2004/12/01 22:40:08, 5] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:74ce [2004/12/01 22:40:08, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/12/01 22:40:08, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=74ce (pipes_open=0) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:08, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=7872 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:40:08, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:40:09, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:40:09, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:40:09, 3] smbd/process.c:process_smb(1092) Transaction 76 of length 45 [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=7936 smt_wct=3 smb_vwv[ 0]= 7864 (0x1EB8) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:40:09, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x83958b0 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:09, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:09, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:40:09, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:40:09, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:40:09, 3] smbd/reply.c:reply_close(2772) close fd=26 fnum=7864 (numopen=2) [2004/12/01 22:40:09, 10] locking/locking.c:del_share_entry(597) del_share_entry: num_share_modes = 1 [2004/12/01 22:40:09, 10] locking/locking.c:del_share_entry(602) del_share_entry: deleted share_mode_entry[0]: pid = 5865, share_mode = 0x40, desired_access = 0x20089, port = 0x8028, type= 0x3, file_id = 2, dev = 0x807, inode = 1439 [2004/12/01 22:40:09, 10] locking/locking.c:del_share_entry(612) del_share_entry: deleting entry 0 [2004/12/01 22:40:09, 10] locking/locking.c:del_share_entry(634) del_share_entry: Remaining table. [2004/12/01 22:40:09, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 0 for file htdocs/ferm/New Text Document.txt [2004/12/01 22:40:09, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(196) linux_release_kernel_oplock: file htdocs/ferm/New Text Document.txt, dev = 807, inode = 1439 file_id = 2 has kernel oplock state of 1. [2004/12/01 22:40:09, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file htdocs/ferm/New Text Document.txt has no outstanding locks. [2004/12/01 22:40:09, 2] smbd/close.c:close_normal_file(270) wwwrun closed file htdocs/ferm/New Text Document.txt (numopen=1) [2004/12/01 22:40:09, 5] smbd/files.c:file_free(385) freed files structure 7864 (1 used) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=7936 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:40:09, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2004/12/01 22:40:09, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x29 [2004/12/01 22:40:09, 3] smbd/process.c:process_smb(1092) Transaction 77 of length 45 [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=8000 smt_wct=3 smb_vwv[ 0]= 7865 (0x1EB9) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/12/01 22:40:09, 3] smbd/process.c:switch_message(887) switch message SMBclose (pid 5865) conn 0x83958b0 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:40:09, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:09, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:09, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:40:09, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:40:09, 3] smbd/reply.c:reply_close(2772) close fd=-1 fnum=7865 (numopen=1) [2004/12/01 22:40:09, 10] smbd/close.c:close_normal_file(201) close_normal_file: share_entry_count = 4294967295 for file htdocs/ferm/New Text Document.txt [2004/12/01 22:40:09, 10] locking/posix.c:posix_locking_close_file(1241) posix_locking_close_file: file htdocs/ferm/New Text Document.txt has no outstanding locks. [2004/12/01 22:40:09, 2] smbd/close.c:close_normal_file(270) wwwrun closed file htdocs/ferm/New Text Document.txt (numopen=0) [2004/12/01 22:40:09, 5] smbd/files.c:file_free(385) freed files structure 7865 (0 used) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=8000 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:40:09, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 39 [2004/12/01 22:40:09, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x27 [2004/12/01 22:40:09, 3] smbd/process.c:process_smb(1092) Transaction 78 of length 43 [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=8064 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2004/12/01 22:40:09, 3] smbd/process.c:switch_message(887) switch message SMBulogoffX (pid 5865) conn 0x0 [2004/12/01 22:40:09, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:40:09, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:40:09, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2004/12/01 22:40:09, 3] smbd/reply.c:reply_ulogoffX(1249) ulogoffX vuid=102 [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=8064 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(449) write_socket(23,43) [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(452) write_socket(23,43) wrote 43 [2004/12/01 22:40:09, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 35 [2004/12/01 22:40:09, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x23 [2004/12/01 22:40:09, 3] smbd/process.c:process_smb(1092) Transaction 79 of length 39 [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8128 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:09, 3] smbd/process.c:switch_message(887) switch message SMBtdis (pid 5865) conn 0x8399af8 [2004/12/01 22:40:09, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:40:09, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:40:09, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:40:09, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:40:09, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:40:09, 3] smbd/service.c:close_cnum(836) abx-eurex2 (172.17.27.106) closed connection to service IPC$ [2004/12/01 22:40:09, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2004/12/01 22:40:09, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to / [2004/12/01 22:40:09, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:40:09, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=3 smb_pid=65279 smb_uid=102 smb_mid=8128 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:40:09, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 35 [2004/12/01 22:40:09, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x23 [2004/12/01 22:40:09, 3] smbd/process.c:process_smb(1092) Transaction 80 of length 39 [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=8192 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:09, 3] smbd/process.c:switch_message(887) switch message SMBtdis (pid 5865) conn 0x838b020 [2004/12/01 22:40:09, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:40:09, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:40:09, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /var/tmp [2004/12/01 22:40:09, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:40:09, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:40:09, 3] smbd/service.c:close_cnum(836) abx-eurex2 (172.17.27.106) closed connection to service IPC$ [2004/12/01 22:40:09, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2004/12/01 22:40:09, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to / [2004/12/01 22:40:09, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:40:09, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:40:09, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:09, 5] lib/util.c:show_msg(471) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=8192 smt_wct=0 smb_bcc=0 [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(449) write_socket(23,39) [2004/12/01 22:40:09, 6] lib/util_sock.c:write_socket(452) write_socket(23,39) wrote 39 [2004/12/01 22:40:14, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 154 [2004/12/01 22:40:14, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x9a [2004/12/01 22:40:14, 3] smbd/process.c:process_smb(1092) Transaction 81 of length 158 [2004/12/01 22:40:14, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:14, 5] lib/util.c:show_msg(471) size=154 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=8256 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=17408 (0x4400) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 256 (0x100) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 768 (0x300) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=71 [2004/12/01 22:40:14, 10] lib/util.c:dump_data(1899) [000] 00 5C 00 68 00 74 00 64 00 6F 00 63 00 73 00 5C .\.h.t.d .o.c.s.\ [010] 00 66 00 65 00 72 00 6D 00 5C 00 4E 00 65 00 77 .f.e.r.m .\.N.e.w [020] 00 20 00 54 00 65 00 78 00 74 00 20 00 44 00 6F . .T.e.x .t. .D.o [030] 00 63 00 75 00 6D 00 65 00 6E 00 74 00 2E 00 74 .c.u.m.e .n.t...t [040] 00 78 00 74 00 00 00 .x.t... [2004/12/01 22:40:14, 3] smbd/process.c:switch_message(887) switch message SMBntcreateX (pid 5865) conn 0x83958b0 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:14, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:14, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:14, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:40:14, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:40:14, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /srv/www [2004/12/01 22:40:14, 10] smbd/nttrans.c:reply_ntcreate_and_X(606) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x80, share_access = 0x1, create_disposition = 0x3 create_options = 0x40 root_dir_fid = 0x0 [2004/12/01 22:40:14, 10] smbd/nttrans.c:map_create_disposition(340) map_create_disposition: Mapped create_disposition 0x3 to 0x11 [2004/12/01 22:40:14, 10] smbd/nttrans.c:map_share_mode(479) map_share_mode: Mapped desired access 0x2019f, share access 0x1, file attributes 0x80 to open_mode 0x22 [2004/12/01 22:40:14, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "htdocs/ferm/New Text Document.txt" [2004/12/01 22:40:14, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [HTDOCS/FERM/NEW TEXT DOCUMENT.TXT] -> [htdocs/ferm/New Text Document.txt] [2004/12/01 22:40:14, 3] smbd/dosmode.c:unix_mode(111) unix_mode(htdocs/ferm/New Text Document.txt) returning 0660 [2004/12/01 22:40:14, 5] smbd/files.c:file_new(122) allocated file structure 3772, fnum = 7868 (1 used) [2004/12/01 22:40:14, 10] smbd/open.c:open_file_shared1(1038) open_file_shared: fname = htdocs/ferm/New Text Document.txt, dos_attrs = 80, share_mode = 22, ofun = 11, mode = 660, oplock request = 3 [2004/12/01 22:40:14, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:40:14, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:40:14, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:40:14, 4] smbd/open.c:open_file_shared1(1244) calling open_file with flags=0x2 flags2=0x40 mode=0660 [2004/12/01 22:40:14, 10] smbd/open.c:fd_open(50) fd_open: name htdocs/ferm/New Text Document.txt, flags = 0102 mode = 0660, fd = 26. [2004/12/01 22:40:14, 2] smbd/open.c:open_file(245) nazaand opened file htdocs/ferm/New Text Document.txt read=Yes write=Yes (numopen=1) [2004/12/01 22:40:14, 10] smbd/open.c:open_file_shared1(1373) open_file_shared : share_mode = 22 [2004/12/01 22:40:14, 3] smbd/oplock_linux.c:linux_set_kernel_oplock(185) linux_set_kernel_oplock: got kernel oplock on file htdocs/ferm/New Text Document.txt, dev = 807, inode = 1439, file_id = 6 [2004/12/01 22:40:14, 5] smbd/oplock.c:set_file_oplock(218) set_file_oplock: granted oplock on file htdocs/ferm/New Text Document.txt, dev = 807, inode = 1439, file_id = 6, tv_sec = 41ae3a3e, tv_usec = bf6db [2004/12/01 22:40:14, 10] locking/locking.c:set_share_mode(689) set_share_mode: creating entry for file htdocs/ferm/New Text Document.txt. num_share_modes = 1 [2004/12/01 22:40:14, 10] locking/locking.c:print_share_mode_table(420) print_share_mode_table: share_mode_entry[0]: pid = 5865, share_mode = 0x22, desired_access = 0x2019f, port = 0x8028, type= 0x3, file_id = 6, dev = 0x807, inode = 1439 [2004/12/01 22:40:14, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:40:14, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:40:14, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:40:14, 5] smbd/nttrans.c:reply_ntcreate_and_X(1002) reply_ntcreate_and_X: fnum = 7868, open name = htdocs/ferm/New Text Document.txt [2004/12/01 22:40:14, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:14, 5] lib/util.c:show_msg(471) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=8256 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=48130 (0xBC02) smb_vwv[ 3]= 286 (0x11E) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=15214 (0x3B6E) smb_vwv[ 7]=59879 (0xE9E7) smb_vwv[ 8]=50391 (0xC4D7) smb_vwv[ 9]= 1 (0x1) smb_vwv[10]=15214 (0x3B6E) smb_vwv[11]=59879 (0xE9E7) smb_vwv[12]=50391 (0xC4D7) smb_vwv[13]= 1 (0x1) smb_vwv[14]=15214 (0x3B6E) smb_vwv[15]=59879 (0xE9E7) smb_vwv[16]=50391 (0xC4D7) smb_vwv[17]= 1 (0x1) smb_vwv[18]=15214 (0x3B6E) smb_vwv[19]=59879 (0xE9E7) smb_vwv[20]=50391 (0xC4D7) smb_vwv[21]=32769 (0x8001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 0 (0x0) smb_bcc=0 [2004/12/01 22:40:14, 6] lib/util_sock.c:write_socket(449) write_socket(23,107) [2004/12/01 22:40:14, 6] lib/util_sock.c:write_socket(452) write_socket(23,107) wrote 107 [2004/12/01 22:40:14, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 72 [2004/12/01 22:40:14, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x48 [2004/12/01 22:40:14, 3] smbd/process.c:process_smb(1092) Transaction 82 of length 76 [2004/12/01 22:40:14, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:14, 5] lib/util.c:show_msg(471) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=424 smb_uid=100 smb_mid=8320 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2004/12/01 22:40:14, 10] lib/util.c:dump_data(1899) [000] 00 00 00 BC 1E EE 03 ...¼.î. [2004/12/01 22:40:14, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:14, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:14, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:14, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:40:14, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:40:14, 3] smbd/trans2.c:call_trans2qfilepathinfo(2294) call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 [2004/12/01 22:40:14, 3] smbd/trans2.c:call_trans2qfilepathinfo(2383) call_trans2qfilepathinfo htdocs/ferm/New Text Document.txt (fnum = 7868) level=1006 call=7 total_data=0 [2004/12/01 22:40:14, 8] smbd/dosmode.c:dos_mode(283) dos_mode: htdocs/ferm/New Text Document.txt [2004/12/01 22:40:14, 8] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning [2004/12/01 22:40:14, 8] smbd/dosmode.c:dos_mode(315) dos_mode returning [2004/12/01 22:40:14, 10] smbd/trans2.c:call_trans2qfilepathinfo(2627) call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION [2004/12/01 22:40:14, 9] smbd/trans2.c:send_trans2_replies(557) t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010 [2004/12/01 22:40:14, 9] smbd/trans2.c:send_trans2_replies(559) t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 [2004/12/01 22:40:14, 6] lib/util_sock.c:write_socket(449) write_socket(23,72) [2004/12/01 22:40:14, 6] lib/util_sock.c:write_socket(452) write_socket(23,72) wrote 72 [2004/12/01 22:40:14, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 80 [2004/12/01 22:40:14, 6] smbd/process.c:process_smb(1091) got message type 0x0 of len 0x50 [2004/12/01 22:40:14, 3] smbd/process.c:process_smb(1092) Transaction 83 of length 84 [2004/12/01 22:40:14, 5] lib/util.c:show_msg(461) [2004/12/01 22:40:14, 5] lib/util.c:show_msg(471) size=80 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=8384 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 100 (0x64) smb_vwv[ 3]= 800 (0x320) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 80 (0x50) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=15 [2004/12/01 22:40:14, 10] lib/util.c:dump_data(1899) [000] 00 EE EE EE EE EE EE 01 00 EE EE EE EE EE EE .îîîîîî. .îîîîîî [2004/12/01 22:40:14, 3] smbd/process.c:switch_message(887) switch message SMBtrans2 (pid 5865) conn 0x83958b0 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(159) fetch sid from uid cache 30 -> S-1-5-21-158085016-904300585-1883629701-1060 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 8 -> S-1-5-21-158085016-904300585-1883629701-1017 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 4 -> S-1-5-21-158085016-904300585-1883629701-1009 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 600 -> S-1-5-21-158085016-904300585-1883629701-2201 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 500 -> S-1-5-21-158085016-904300585-1883629701-2001 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 501 -> S-1-5-21-158085016-904300585-1883629701-2003 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 503 -> S-1-5-21-158085016-904300585-1883629701-2007 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 504 -> S-1-5-21-158085016-904300585-1883629701-2009 [2004/12/01 22:40:14, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(233) fetch sid from gid cache 506 -> S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:14, 10] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (30, 8) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:14, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-158085016-904300585-1883629701-1060 contains 12 SIDs SID[ 0]: S-1-5-21-158085016-904300585-1883629701-1060 SID[ 1]: S-1-5-21-158085016-904300585-1883629701-1017 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-158085016-904300585-1883629701-1009 SID[ 6]: S-1-5-21-158085016-904300585-1883629701-2201 SID[ 7]: S-1-5-21-158085016-904300585-1883629701-2001 SID[ 8]: S-1-5-21-158085016-904300585-1883629701-2003 SID[ 9]: S-1-5-21-158085016-904300585-1883629701-2007 SID[ 10]: S-1-5-21-158085016-904300585-1883629701-2009 SID[ 11]: S-1-5-21-158085016-904300585-1883629701-2013 [2004/12/01 22:40:14, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 30 Primary group is 8 and contains 8 supplementary groups Group[ 0]: 8 Group[ 1]: 4 Group[ 2]: 600 Group[ 3]: 500 Group[ 4]: 501 Group[ 5]: 503 Group[ 6]: 504 Group[ 7]: 506 [2004/12/01 22:40:14, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(30,30) gid=(0,8) [2004/12/01 22:40:14, 3] smbd/trans2.c:call_trans2qfsinfo(1830) call_trans2qfsinfo: level = 1 [2004/12/01 22:40:14, 0] lib/fault.c:fault_report(36) =============================================================== [2004/12/01 22:40:14, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 5865 (3.0.9-SUSE) Please read the appendix Bugs of the Samba HOWTO collection [2004/12/01 22:40:14, 0] lib/fault.c:fault_report(39) =============================================================== [2004/12/01 22:40:14, 0] lib/util.c:smb_panic2(1403) PANIC: internal error [2004/12/01 22:40:14, 0] lib/util.c:smb_panic2(1411) BACKTRACE: 22 stack frames: #0 /usr/sbin/smbd(smb_panic2+0x1b6) [0x81d7e0c] #1 /usr/sbin/smbd(smb_panic+0x19) [0x81d7c54] #2 /usr/sbin/smbd [0x81c5c85] #3 /usr/sbin/smbd [0x81c5cfa] #4 /lib/libc.so.6 [0x4021a5c8] #5 /lib/libc.so.6(__getmntent_r+0x56) [0x402cd1e6] #6 /lib/libc.so.6(getmntent+0x6d) [0x402cd07d] #7 /usr/sbin/smbd [0x80dd512] #8 /usr/sbin/smbd(sys_get_quota+0xa0) [0x80dde34] #9 /usr/sbin/smbd(disk_quotas+0x46) [0x80e136a] #10 /usr/sbin/smbd [0x808e6d3] #11 /usr/sbin/smbd(sys_disk_free+0x2d) [0x808e929] #12 /usr/sbin/smbd(vfswrap_disk_free+0x2d) [0x80cf1cc] #13 /usr/sbin/smbd [0x80bbbeb] #14 /usr/sbin/smbd(reply_trans2+0x907) [0x80c3ca4] #15 /usr/sbin/smbd [0x80d9015] #16 /usr/sbin/smbd [0x80d90c5] #17 /usr/sbin/smbd(process_smb+0x1eb) [0x80d940a] #18 /usr/sbin/smbd(smbd_process+0x170) [0x80d9fed] #19 /usr/sbin/smbd(main+0x7e8) [0x824b057] #20 /lib/libc.so.6(__libc_start_main+0xce) [0x402068ae] #21 /usr/sbin/smbd(ldap_msgfree+0x75) [0x8081561] [2004/12/01 22:40:24, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:24, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:40:24, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:40:24, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:40:24, 2] smbd/server.c:exit_server(575) Closing connections [2004/12/01 22:40:24, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2004/12/01 22:40:24, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/12/01 22:40:24, 3] smbd/server.c:exit_server(618) Server exit (Caught TERM signal) [2004/12/01 22:40:24, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/01 22:40:24, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/12/01 22:40:24, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/12/01 22:40:24, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/12/01 22:40:24, 2] smbd/server.c:exit_server(575) Closing connections [2004/12/01 22:40:24, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2004/12/01 22:40:24, 3] smbd/connection.c:yield_connection(76) yield_connection: tdb_delete for name failed with error Record does not exist. [2004/12/01 22:40:24, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/12/01 22:40:24, 3] smbd/server.c:exit_server(618) Server exit (Caught TERM signal)