[Samba] Samba/LDAP XP Authentication Weirdness

_Chris McKeever_ tech-mail at prupref.com
Thu Jul 10 19:03:22 GMT 2003


some more logs (sorry, these buggers are big and comparing them is making me
cross-eyed)

> -----Original Message-----
> From: _Chris McKeever_ 
> Sent: Thursday, July 10, 2003 1:25 PM
> To: _Chris McKeever_; samba at lists.samba.org
> Subject: RE: [Samba] Samba/LDAP XP Authentication Weirdness
> 
> 
> logs below:
> 
> -- Jason Williams Wrote:
> 
> Weird stuff happening eh?
> 
> Just to get a few things out of the way, the user that is 
> having problems 
> logging on, they have an account on the PDC?
> 
>  ---> all done through ldap, logs show authenticating user 
> fine (below)
> 
> The machine account will be there since it has already 
> connected to the 
> PDC. 
> 
>  ---> machine account is in the LDAP
> 
> The original user works, but when you create a new user on the XP box 
> and try and log on, you get errors right?
> 
>  ---> I am not creating a new user, just trying to log in (as 
> I did with the first user that works).  I did however try to 
> add that user to the list of power users and that didnt help either.
> 
> Anything the logs say?
> 
> ---> see comments below
> 
> 
> > -----Original Message-----
> > From: _Chris McKeever_ [mailto:tech-mail at prupref.com]
> 
> > 
> > 
> > Samba 2.2.8a, RH7.3
> > 
> > I have successfully connected machines running XP to the 
> > samba controlled
> > domain.  
> > 
> > There are 3 XP machines, each with only one user designated 
> > as a power user
> > (ie domain\username power user).  Each can log into any of the three
> > machines without a problem.
> > 
> > Now I am trying to log a different person into any of these 
> > machines and I
> > get the message "System Could Not Log You On".  
> > 
> > I can log into any of these machines with the administrator 
> > or my account
> > (neither of which are set up in the local users - other than
> > computername\administrator).
> > 
> > Any ideas of what is going on?  Did I miss something?  I 
> > thought that with
> > domain logins that any user can log into the XP machine as 
> > long as they are
> > set-up correctly via samba, which they are since they can 
> > access resources
> > from windows 98 machines to samba shares.
> > 
> > Thanks
> 
> From the logs it seems like the user is authenticating fine 
> against ldap/samba:
> 
> problem user:
> 
> [2003/07/10 12:46:59, 3] 
> rpc_server/srv_netlog_nt.c:_net_sam_logon(605)
>   SAM Logon (Interactive). Domain:[PRUPREF.COM].  User:[jearhart]
> [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:push_sec_ctx(296)
>   push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2003/07/10 12:46:59, 3] smbd/uid.c:push_conn_ctx(285)
>   push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:set_sec_ctx(328)
>   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2003/07/10 12:46:59, 5] passdb/pdb_ldap.c:ldap_open_connection(122)
>   ldap_open_connection: starting...
> [2003/07/10 12:46:59, 10] passdb/pdb_ldap.c:ldap_open_connection(148)
>   Initializing connection to winnetka.prupref.com on port 389
> [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(186)
>   StartTLS issued: using a TLS connection
> [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(217)
>   ldap_open_connection: connection opened
> [2003/07/10 12:46:59, 0] passdb/pdb_ldap.c:ldap_connect_system(315)
>   ldap_connect_system: Binding to ldap server as 
> "cn=root,dc=prupref,dc=com"
> [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_connect_system(331)
>   ldap_connect_system: succesful connection to the LDAP server
> [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_search_one_user(343)
>   ldap_search_one_user: searching 
> for:[(&(uid=jearhart)(objectclass=sambaAccount))]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [uid] = [jearhart]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576)
>   Entry found for user: jearhart
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [pwdLastSet] = [1057792387]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [logonTime] = [0]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [logoffTime] = [2147483647]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [kickoffTime] = [2147483647]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [pwdCanChange] = [0]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [pwdMustChange] = [2147483647]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [cn] = [Jeff Earhart]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [homeDrive] = [<does not exist>]
> [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626)
>   homeDrive fell back to 
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [smbHome] = [<does not exist>]
> [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183)
>   Home server: prupref-winn
> [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635)
>   smbHome fell back to \\prupref-winn\jearhart
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [scriptPath] = [<does not exist>]
> [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644)
>   scriptPath fell back to 
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [profilePath] = [<does not exist>]
> [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183)
>   Home server: prupref-winn
> [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653)
>   profilePath fell back to \\prupref-winn\jearhart\profile
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [description] = [<does not exist>]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [userWorkstations] = [<does not exist>]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [rid] = [87124]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [primaryGroupID] = [3005]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [lmPassword] = [B9AD96875]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [ntPassword] = [77A7A]
> [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [acctFlags] = [[UX         ]]
> [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
>   pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:push_sec_ctx(296)
>   push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2003/07/10 12:47:00, 3] smbd/uid.c:push_conn_ctx(285)
>   push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> 
> ** this is where the strange part is
> 
> 2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340)
>   split_domain_name:name 'jearhart' split into domain 
> :'PRUPREF-WINN' and user :'jearhart'
> [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(160)
>   init_lsa_rid2s: looking up name jearhart
> [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(457)
>   lookup_name: winbind lookup for jearhart failed - trying local
> [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(486)
>   lookup_name: (local) jearhart -> SID 
> S-1-5-21-2263616378-1746176118-2189425910-87124 (type 1)
> [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(164)
>   init_lsa_rid2s: found
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60)
>   000000 lsa_io_r_lookup_names 
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
>       0000 ptr_dom_ref: 00000001
> [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60)
>       000004 lsa_io_dom_r_ref 
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
>           0004 num_ref_doms_1: 00000001
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 
> 
> Here are logs from the successfull user:
> 
> 2003/07/10 12:42:54, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(605)
>   SAM Logon (Interactive). Domain:[PRUPREF.COM].  User:[mbarnes]
> [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296)
>   push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285)
>   push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328)
>   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:ldap_open_connection(122)
>   ldap_open_connection: starting...
> [2003/07/10 12:42:54, 10] passdb/pdb_ldap.c:ldap_open_connection(148)
>   Initializing connection to winnetka.prupref.com on port 389
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(186)
>   StartTLS issued: using a TLS connection
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(217)
>   ldap_open_connection: connection opened
> [2003/07/10 12:42:54, 0] passdb/pdb_ldap.c:ldap_connect_system(315)
>   ldap_connect_system: Binding to ldap server as 
> "cn=root,dc=prupref,dc=com"
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_connect_system(331)
>   ldap_connect_system: succesful connection to the LDAP server
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_search_one_user(343)
>   ldap_search_one_user: searching 
> for:[(&(uid=mbarnes)(objectclass=sambaAccount))]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [uid] = [mbarnes]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576)
>   Entry found for user: mbarnes
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [pwdLastSet] = [1052162872]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [logonTime] = [0]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [logoffTime] = [2147483647]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [kickoffTime] = [2147483647]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [pwdCanChange] = [0]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [pwdMustChange] = [2147483647]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [cn] = [Michael Barnes]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [homeDrive] = [<does not exist>]
> [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626)
>   homeDrive fell back to 
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [smbHome] = [<does not exist>]
> [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183)
>   Home server: prupref-winn
> [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635)
>   smbHome fell back to \\prupref-winn\mbarnes
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [scriptPath] = [<does not exist>]
> [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644)
>   scriptPath fell back to 
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [profilePath] = [<does not exist>]
> [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183)
>   Home server: prupref-winn
> [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653)
>   profilePath fell back to \\prupref-winn\mbarnes\profile
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [description] = [<does not exist>]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
>   get_single_attribute: [userWorkstations] = [<does not exist>]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [rid] = [6722]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [primaryGroupID] = [3005]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [lmPassword] = [3DEC2A3]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [ntPassword] = [A87AD606]
> [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
>   get_single_attribute: [acctFlags] = [[UX         ]]
> [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
>   pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296)
>   push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285)
>   push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328)
>   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
>   pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456)
>   user_in_list: checking user mbarnes in list 
> [2003/07/10 12:42:54, 3] 
> rpc_server/srv_util.c:get_domain_user_groups(187)
>   domain group access  513/7  granted
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456)
>   user_in_list: checking user mbarnes in list root @domain-admins
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460)
>   user_in_list: checking user |mbarnes| against |root|
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460)
>   user_in_list: checking user |mbarnes| against |@domain-admins|
> [2003/07/10 12:42:54, 5] lib/username.c:user_in_netgroup_list(298)
>   Unable to get default yp domain
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(392)
>   user_in_unix_group_list: checking user mbarnes in group 
> domain-admins
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413)
>   user_in_unix_group_list: checking user mbarnes against 
> member jearhart
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413)
>   user_in_unix_group_list: checking user mbarnes against 
> member cfusion
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413)
>   user_in_unix_group_list: checking user mbarnes against 
> member administrator
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413)
>   user_in_unix_group_list: checking user mbarnes against 
> member mfalanga
> [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413)
>   user_in_unix_group_list: checking user mbarnes against 
> member cgmckeever
> [2003/07/10 12:42:54, 4] rpc_server/srv_util.c:make_dom_gids(90)
>   make_dom_gids:  513/7 
> [2003/07/10 12:42:54, 5] rpc_server/srv_util.c:make_dom_gids(149)
>   group id: 513 attr: 7
> [2003/07/10 12:42:54, 4] rpc_parse/parse_net.c:init_dom_sid2s(813)
>   init_dom_sid2s: 
> 
> ** The part about domain splitting is not there
> 
> 
> if you need other parts of the logs, please let me know.
> 
> Thanks

I notice some discrepecny starting here (which the domain splitting shortyl
follows):

User that doesnt work:

2003/07/10 12:47:00, 10] lib/util.c:dump_data(1541)
  [000] 5C 50 49 50 45 5C 00 00  00 05 00 00 03 10 00 00  \PIPE\.. ........
[2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
  [010] 00 68 00 00 00 02 00 00  00 50 00 00 00 00 00 0E  .h...... .P......
[2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
  [020] 00 00 00 00 00 02 00 00  00 00 00 00 00 94 A6 0D  ........ ........
[2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
  [030] 3F 1A 08 00 00 01 00 00  00 01 00 00 00 10 00 12  ?....... ........
[2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
  [040] 00 38 83 0C 00 09 00 00  00 00 00 00 00 08 00 00  .8...... ........
[2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
  [050] 00 6A 00 65 00 61 00 72  00 68 00 61 00 72 00 74  .j.e.a.r .h.a.r.t
[2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
  [060] 00 00 00 00 00 00 00 00  00 02 00 00 00 00 00 00  ........ ........
[2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
  [070] 00                                                . 
[2003/07/10 12:47:00, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 2074)
[2003/07/10 12:47:00, 4] smbd/uid.c:change_to_user(119)
  change_to_user: Skipping user change - already user
[2003/07/10 12:47:00, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=104 params=0 setup=2
[2003/07/10 12:47:00, 5] smbd/ipc.c:reply_trans(539)
  calling named_pipe
[2003/07/10 12:47:00, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/07/10 12:47:00, 5] smbd/ipc.c:api_fd_reply(275)
  api_fd_reply
[2003/07/10 12:47:00, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990)
  search for pipe pnum=768b
[2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993)
  pipe name lsarpc pnum=768b (pipes_open=2)
[2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993)
  pipe name NETLOGON pnum=7689 (pipes_open=2)
[2003/07/10 12:47:00, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 768b)api_fd_reply: p:0x82344d0
max_trans_reply: 1024
[2003/07/10 12:47:00, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752)
  write_to_pipe: 768b name: lsarpc open: Yes len: 104
[2003/07/10 12:47:00, 50] lib/util.c:dump_data(1541)
  [000] 05 00 00 03 10 00 00 00  68 00 00 00 02 00 00 00  ........ h.......
[2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
  [010] 50 00 00 00 00 00 0E 00  00 00 00 00 02 00 00 00  P....... ........
[2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
  [020] 00 00 00 00 94 A6 0D 3F  1A 08 00 00 01 00 00 00  .......? ........
[2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
  [030] 01 00 00 00 10 00 12 00  38 83 0C 00 09 00 00 00  ........ 8.......
[2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
  [040] 00 00 00 00 08 00 00 00  6A 00 65 00 61 00 72 00  ........ j.e.a.r.
[2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
  [050] 68 00 61 00 72 00 74 00  00 00 00 00 00 00 00 00  h.a.r.t. ........
[2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
  [060] 02 00 00 00 00 00 00 00                           ........ 
[2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
  write_to_pipe: data_left = 104
[2003/07/10 12:47:00, 10]
rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0,
incoming data = 104
[2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(299)
  fill_rpc_header: data_to_copy = 104, len_needed_to_complete_hdr = 16,
receive_len = 0
[2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
  write_to_pipe: data_used = 16
[2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
  write_to_pipe: data_left = 88
[2003/07/10 12:47:00, 10]
rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0,
incoming data = 88
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000000 smb_io_rpc_hdr 
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0000 major     : 05
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0001 minor     : 00
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0002 pkt_type  : 00
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0003 flags     : 03
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0004 pack_type0: 10
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0005 pack_type1: 00
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0006 pack_type2: 00
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0007 pack_type3: 00
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0008 frag_len  : 0068
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      000a auth_len  : 0000
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      000c call_id   : 00000002
[2003/07/10 12:47:00, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387)
  unmarshall_rpc_header: using little-endian RPC
[2003/07/10 12:47:00, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416)
  unmarshall_rpc_header: type = 0, flags = 3
[2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
  write_to_pipe: data_used = 0
[2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
  write_to_pipe: data_left = 88
[2003/07/10 12:47:00, 10]
rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 88,
incoming data = 88
[2003/07/10 12:47:00, 10]
rpc_server/srv_pipe_hnd.c:process_complete_pdu(619)
  process_complete_pdu: processing packet type 0
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000000 smb_io_rpc_hdr_req req
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      0000 alloc_hint: 00000050
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0004 context_id: 0000
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0006 opnum     : 000e
[2003/07/10 12:47:00, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 0
[2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\lsarpc
[2003/07/10 12:47:00, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190)
  api_rpcTNP: api_ntlsa_rpc op 0xe - created /tmp/in_api_ntlsa_rpc_14.1.prs
[2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30347 rpc command: LSA_LOOKUPNAMES
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000000 lsa_io_q_lookup_names 
[2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60)
      000000 smb_io_pol_hnd 
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          0000 data1: 00000000
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          0004 data2: 00000002
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
          0008 data3: 0000
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
          000a data4: 0000
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8s(675)
          000c data5: 94 a6 0d 3f 1a 08 00 00 
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      0014 num_entries    : 00000001
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      0018 num_entries2   : 00000001
[2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60)
      00001c smb_io_unihdr hdr_name
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
          001c uni_str_len: 0010
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
          001e uni_max_len: 0012
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          0020 buffer     : 000c8338
[2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60)
      000024 smb_io_unistr2 dom_name
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          0024 uni_max_len: 00000009
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          0028 undoc      : 00000000
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          002c uni_str_len: 00000008
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760)
          0030 buffer     : j.e.a.r.h.a.r.t.
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      0040 num_trans_entries : 00000000
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      0044 ptr_trans_sids : 00000000
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      0048 lookup_level   : 00000002
[2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      004c mapped_count   : 00000000
[2003/07/10 12:47:00, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160)
  Found policy hnd[0] [000] 00 00 00 00 02 00 00 00  00 00 00 00 94 A6 0D 3F
........ .......?
[2003/07/10 12:47:00, 4] lib/util.c:dump_data(1549)
  [010] 1A 08 00 00                                       .... 
[2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340)
  split_domain_name:name 'jearhart' split into domain :'PRUPREF-WINN' and
user :'jearhart


USer that works:

2003/07/10 12:42:56, 10] lib/util.c:dump_data(1541)
  [000] 5C 50 49 50 45 5C 00 00  00 05 00 00 03 10 00 00  \PIPE\.. ........
[2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549)
  [010] 00 2E 00 00 00 02 00 00  00 16 00 00 00 00 00 07  ........ ........
[2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549)
  [020] 00 00 00 00 00 02 00 00  00 00 00 00 00 A0 A5 0D  ........ ........
[2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549)
  [030] 3F 02 08 00 00 05 00                              ?...... 
[2003/07/10 12:42:56, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 2050)
[2003/07/10 12:42:56, 4] smbd/uid.c:change_to_user(119)
  change_to_user: Skipping user change - already user
[2003/07/10 12:42:56, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=46 params=0 setup=2
[2003/07/10 12:42:56, 5] smbd/ipc.c:reply_trans(539)
  calling named_pipe
[2003/07/10 12:42:56, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/07/10 12:42:56, 5] smbd/ipc.c:api_fd_reply(275)
  api_fd_reply
[2003/07/10 12:42:56, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990)
  search for pipe pnum=75a2
[2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993)
  pipe name lsarpc pnum=75a2 (pipes_open=2)
[2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993)
  pipe name NETLOGON pnum=75a0 (pipes_open=2)
[2003/07/10 12:42:56, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 75a2)api_fd_reply: p:0x82566d0
max_trans_reply: 1024
[2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752)
  write_to_pipe: 75a2 name: lsarpc open: Yes len: 46
[2003/07/10 12:42:56, 50] lib/util.c:dump_data(1541)
  [000] 05 00 00 03 10 00 00 00  2E 00 00 00 02 00 00 00  ........ ........
[2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549)
  [010] 16 00 00 00 00 00 07 00  00 00 00 00 02 00 00 00  ........ ........
[2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549)
  [020] 00 00 00 00 A0 A5 0D 3F  02 08 00 00 05 00        .......? ......
[2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
  write_to_pipe: data_left = 46
[2003/07/10 12:42:56, 10]
rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0,
incoming data = 46
[2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(299)
  fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16,
receive_len = 0
[2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
  write_to_pipe: data_used = 16
[2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
  write_to_pipe: data_left = 30
[2003/07/10 12:42:56, 10]
rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0,
incoming data = 30
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000000 smb_io_rpc_hdr 
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0000 major     : 05
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0001 minor     : 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0002 pkt_type  : 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0003 flags     : 03
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0004 pack_type0: 10
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0005 pack_type1: 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0006 pack_type2: 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0007 pack_type3: 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0008 frag_len  : 002e
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      000a auth_len  : 0000
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      000c call_id   : 00000002
[2003/07/10 12:42:56, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387)
  unmarshall_rpc_header: using little-endian RPC
[2003/07/10 12:42:56, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416)
  unmarshall_rpc_header: type = 0, flags = 3
[2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
  write_to_pipe: data_used = 0
[2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
  write_to_pipe: data_left = 30
[2003/07/10 12:42:56, 10]
rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 30,
incoming data = 30
[2003/07/10 12:42:56, 10]
rpc_server/srv_pipe_hnd.c:process_complete_pdu(619)
  process_complete_pdu: processing packet type 0
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000000 smb_io_rpc_hdr_req req
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      0000 alloc_hint: 00000016
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0004 context_id: 0000
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0006 opnum     : 0007
[2003/07/10 12:42:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 0
[2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\lsarpc
[2003/07/10 12:42:56, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190)
  api_rpcTNP: api_ntlsa_rpc op 0x7 - created /tmp/in_api_ntlsa_rpc_7.5.prs
[2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30114 rpc command: LSA_QUERYINFOPOLICY
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000000 lsa_io_q_query 
[2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60)
      000000 smb_io_pol_hnd 
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          0000 data1: 00000000
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          0004 data2: 00000002
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
          0008 data3: 0000
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
          000a data4: 0000
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8s(675)
          000c data5: a0 a5 0d 3f 02 08 00 00 
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0014 info_class: 0005
[2003/07/10 12:42:56, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160)
  Found policy hnd[0] [000] 00 00 00 00 02 00 00 00  00 00 00 00 A0 A5 0D 3F
........ .......?
[2003/07/10 12:42:56, 4] lib/util.c:dump_data(1549)
  [010] 02 08 00 00                                       .... 
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000000 lsa_io_r_query 
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      0000 undoc_buffer: 22000000
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0004 info_class: 0005
[2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60)
      000008 lsa_io_dom_query 
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
          0008 uni_dom_max_len: 0016
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
          000a uni_dom_str_len: 0018
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          000c buffer_dom_name: 00000001
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          0010 buffer_dom_sid : 00000001
[2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60)
          000014 smb_io_unistr2 unistr2
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
              0014 uni_max_len: 0000000c
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
              0018 undoc      : 00000000
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
              001c uni_str_len: 0000000b
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760)
              0020 buffer     : P.R.U.P.R.E.F...C.O.M.
[2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60)
          000038 smb_io_dom_sid2 
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
              0038 num_auths: 00000004
[2003/07/10 12:42:56, 8] rpc_parse/parse_prs.c:prs_debug(60)
              00003c smb_io_dom_sid sid
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
                  003c sid_rev_num: 01
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
                  003d num_auths  : 04
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
                  003e id_auth[0] : 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
                  003f id_auth[1] : 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
                  0040 id_auth[2] : 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
                  0041 id_auth[3] : 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
                  0042 id_auth[4] : 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
                  0043 id_auth[5] : 05
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32s(815)
                  0044 sub_auths : 00000015 86ec0b7a 68148876 827ffcf6 
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_ntstatus(617)
      0054 status: NT_STATUS_OK
[2003/07/10 12:42:56, 0] rpc_parse/parse_prs.c:prs_dump(46)
  created /tmp/out_api_ntlsa_rpc_7.5.prs
[2003/07/10 12:42:56, 5] rpc_server/srv_pipe.c:api_rpcTNP(1235)
  api_rpcTNP: called api_ntlsa_rpc successfully
[2003/07/10 12:42:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 512
[2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
  write_to_pipe: data_used = 30
[2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(799)
  read_from_pipe: 75a2 name: lsarpc len: 1024
[2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:read_from_pipe(844)
  read_from_pipe: lsarpc: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 88.
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000000 smb_io_rpc_hdr hdr
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0000 major     : 05
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0001 minor     : 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0002 pkt_type  : 02
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0003 flags     : 03
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0004 pack_type0: 10
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0005 pack_type1: 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0006 pack_type2: 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0007 pack_type3: 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0008 frag_len  : 0070
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      000a auth_len  : 0000
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      000c call_id   : 00000002
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000010 smb_io_rpc_hdr_resp resp
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
      0010 alloc_hint: 00000058
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
      0014 context_id: 0000
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0016 cancel_ct : 00
[2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
      0017 reserved  : 00
[2003/07/10 12:42:56, 5] smbd/ipc.c:copy_trans_params_and_data(62)
  copy_trans_params_and_data: params[0..0] data[0..112]
[2003/07/10 12:42:56, 5] lib/util.c:show_msg(268)
  size=168
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=1
[2003/07/10 12:42:56, 5] lib/util.c:show_msg(276)
  smb_tid=2
  smb_pid=528
  smb_uid=101


> 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
> 



More information about the samba mailing list