[Samba-it] pdc samba e usrmrg.exe
Daniele Melosi
mailing2004 at melosi.it
Fri Jan 28 10:32:02 MST 2005
Salve a tutti,
ho un pdc samba 3.0.10 su debian woody.
Non riesco a visualizzare informazioni sugli utenti dal programma
usrmrg.exe (ottengo il seguente errore: "Una periferica collegata al
sistema non e' in funzione").
questo e' l'output del comando net groupmap list:
pdc:/var/log/samba# net groupmap list
System Operators (S-1-5-32-549) -> nobody
Replicators (S-1-5-32-552) -> nobody
Domain Users (S-1-5-21-2276015355-2619491448-3726653824-513) -> utenti
Guests (S-1-5-32-546) -> nobody
Power Users (S-1-5-32-547) -> nobody
Domain Admins (S-1-5-21-2276015355-2619491448-3726653824-512) -> admin
Print Operators (S-1-5-32-550) -> nobody
Administrators (S-1-5-32-544) -> nobody
Domain Guests (S-1-5-21-2276015355-2619491448-3726653824-514) -> nobody
Contabilita (S-1-5-21-2276015355-2619491448-3726653824-2101) -> contabilita
Account Operators (S-1-5-32-548) -> nobody
Commerciale (S-1-5-21-2276015355-2619491448-3726653824-2099) -> commerciale
Backup Operators (S-1-5-32-551) -> nobody
Users (S-1-5-32-545) -> nobody
Questo e' un estratto dei log di samba relativi al pc dal quale lancio
il programma (log level 3):
getsmbfilepwent: returning passwd entry for user alandi, uid 505
[2005/01/28 10:23:17, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/01/28 10:23:17, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(103) : conn_ctx_stack_ndx = 1
[2005/01/28 10:23:17, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/01/28 10:23:17, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/01/28 10:23:17, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/01/28 10:23:17, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/01/28 10:23:17, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 100) - sec_ctx_stack_ndx = 0
[2005/01/28 10:23:17, 3] rpc_server/srv_samr_nt.c:get_user_info_20(1783)
User:[alandi]
[2005/01/28 10:23:17, 5] rpc_parse/parse_samr.c:init_samr_r_query_userinfo(6471)
init_samr_r_query_userinfo
[2005/01/28 10:23:17, 5] rpc_server/srv_samr_nt.c:_samr_query_userinfo(1929)
_samr_query_userinfo: 1929
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_r_query_userinfo
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 ptr: 00000001
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0004 switch_value: 0014
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 uni_str_len: 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a uni_max_len: 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c buffer : 00000000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
0010 status: NT_STATUS_OK
[2005/01/28 10:23:17, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
api_rpcTNP: called samr successfully
[2005/01/28 10:23:17, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 1032
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 02
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 002c
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000053
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000014
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0016 cancel_ct : 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0017 reserved : 00
[2005/01/28 10:23:17, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..44]
[2005/01/28 10:23:17, 5] lib/util.c:show_msg(464)
[2005/01/28 10:23:17, 5] lib/util.c:show_msg(474)
size=100
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2
smb_pid=640
smb_uid=103
smb_mid=56768
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 44 (0x2C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 44 (0x2C)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=45
[2005/01/28 10:23:17, 3] smbd/process.c:process_smb(1091)
Transaction 889 of length 132
[2005/01/28 10:23:17, 5] lib/util.c:show_msg(464)
[2005/01/28 10:23:17, 5] lib/util.c:show_msg(474)
size=128
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=2
smb_pid=640
smb_uid=103
smb_mid=56832
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 44 (0x2C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 3196 (0xC7C)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 44 (0x2C)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29993 (0x7529)
smb_bcc=61
[2005/01/28 10:23:17, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 31135) conn 0x833aa68
[2005/01/28 10:23:17, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 100) - sec_ctx_stack_ndx = 0
[2005/01/28 10:23:17, 5] auth/auth_util.c:debug_nt_user_token(491)
NT user token of user S-1-5-21-2276015355-2619491448-3726653824-3046
contains 6 SIDs
SID[ 0]: S-1-5-21-2276015355-2619491448-3726653824-3046
SID[ 1]: S-1-5-21-2276015355-2619491448-3726653824-1201
SID[ 2]: S-1-1-0
SID[ 3]: S-1-5-2
SID[ 4]: S-1-5-11
SID[ 5]: S-1-5-21-2276015355-2619491448-3726653824-512
[2005/01/28 10:23:17, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 100 and contains 2 supplementary groups
Group[ 0]: 100
Group[ 1]: 503
[2005/01/28 10:23:17, 5] smbd/uid.c:change_to_user(281)
change_to_user uid=(0,0) gid=(0,100)
[2005/01/28 10:23:17, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=44 params=0 setup=2
[2005/01/28 10:23:17, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2005/01/28 10:23:17, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/01/28 10:23:17, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2005/01/28 10:23:17, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7529
[2005/01/28 10:23:17, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name lsarpc pnum=752a (pipes_open=2)
[2005/01/28 10:23:17, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name samr pnum=7529 (pipes_open=2)
[2005/01/28 10:23:17, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7529)
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 002c
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000054
[2005/01/28 10:23:17, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
unmarshall_rpc_header: using little-endian RPC
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr_req req
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 alloc_hint: 00000014
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0004 context_id: 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0006 opnum : 0001
[2005/01/28 10:23:17, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/01/28 10:23:17, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
Requested \PIPE\samr
[2005/01/28 10:23:17, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_q_close_hnd
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 000000d8
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: 85 04 fa 41 9f 79 00 00
[2005/01/28 10:23:17, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 D8 00 00 00 00 00 00 00 85 04 FA 41 ........ .......A
[010] 9F 79 00 00 .y..
[2005/01/28 10:23:17, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/01/28 10:23:17, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(365)
samr_reply_close_hnd: 365
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_r_close_hnd
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: 00 00 00 00 00 00 00 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
0014 status: NT_STATUS_OK
[2005/01/28 10:23:17, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
api_rpcTNP: called samr successfully
[2005/01/28 10:23:17, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 02
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0030
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000054
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000018
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0016 cancel_ct : 00
[2005/01/28 10:23:17, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0017 reserved : 00
[2005/01/28 10:23:17, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..48]
--
Daniele Melosi
More information about the samba-it
mailing list