[Samba] Samba/LDAP XP Authentication Weirdness
Chris McKeever
cgmckeever at prupref.com
Thu Jul 10 19:57:38 GMT 2003
update -
I turned cachedlogoncount to 0 via the registry and now no one can log in...
while this sounds bad, I think at least it helps me try to figure out what
is going on.
now, with this information, any suggestions?
> -----Original Message-----
> From: _Chris McKeever_ [mailto:tech-mail at prupref.com]
> Sent: Thursday, July 10, 2003 2:03 PM
> To: 'samba at lists.samba.org'
> Subject: RE: [Samba] Samba/LDAP XP Authentication Weirdness
>
>
> some more logs (sorry, these buggers are big and comparing
> them is making me
> cross-eyed)
>
> > -----Original Message-----
> > From: _Chris McKeever_
> > Sent: Thursday, July 10, 2003 1:25 PM
> > To: _Chris McKeever_; samba at lists.samba.org
> > Subject: RE: [Samba] Samba/LDAP XP Authentication Weirdness
> >
> >
> > logs below:
> >
> > -- Jason Williams Wrote:
> >
> > Weird stuff happening eh?
> >
> > Just to get a few things out of the way, the user that is
> > having problems
> > logging on, they have an account on the PDC?
> >
> > ---> all done through ldap, logs show authenticating user
> > fine (below)
> >
> > The machine account will be there since it has already
> > connected to the
> > PDC.
> >
> > ---> machine account is in the LDAP
> >
> > The original user works, but when you create a new user on
> the XP box
> > and try and log on, you get errors right?
> >
> > ---> I am not creating a new user, just trying to log in (as
> > I did with the first user that works). I did however try to
> > add that user to the list of power users and that didnt help either.
> >
> > Anything the logs say?
> >
> > ---> see comments below
> >
> >
> > > -----Original Message-----
> > > From: _Chris McKeever_ [mailto:tech-mail at prupref.com]
> >
> > >
> > >
> > > Samba 2.2.8a, RH7.3
> > >
> > > I have successfully connected machines running XP to the
> > > samba controlled
> > > domain.
> > >
> > > There are 3 XP machines, each with only one user designated
> > > as a power user
> > > (ie domain\username power user). Each can log into any
> of the three
> > > machines without a problem.
> > >
> > > Now I am trying to log a different person into any of these
> > > machines and I
> > > get the message "System Could Not Log You On".
> > >
> > > I can log into any of these machines with the administrator
> > > or my account
> > > (neither of which are set up in the local users - other than
> > > computername\administrator).
> > >
> > > Any ideas of what is going on? Did I miss something? I
> > > thought that with
> > > domain logins that any user can log into the XP machine as
> > > long as they are
> > > set-up correctly via samba, which they are since they can
> > > access resources
> > > from windows 98 machines to samba shares.
> > >
> > > Thanks
> >
> > From the logs it seems like the user is authenticating fine
> > against ldap/samba:
> >
> > problem user:
> >
> > [2003/07/10 12:46:59, 3]
> > rpc_server/srv_netlog_nt.c:_net_sam_logon(605)
> > SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[jearhart]
> > [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:push_sec_ctx(296)
> > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> > [2003/07/10 12:46:59, 3] smbd/uid.c:push_conn_ctx(285)
> > push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> > [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:set_sec_ctx(328)
> > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> > [2003/07/10 12:46:59, 5] passdb/pdb_ldap.c:ldap_open_connection(122)
> > ldap_open_connection: starting...
> > [2003/07/10 12:46:59, 10]
> passdb/pdb_ldap.c:ldap_open_connection(148)
> > Initializing connection to winnetka.prupref.com on port 389
> > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(186)
> > StartTLS issued: using a TLS connection
> > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(217)
> > ldap_open_connection: connection opened
> > [2003/07/10 12:46:59, 0] passdb/pdb_ldap.c:ldap_connect_system(315)
> > ldap_connect_system: Binding to ldap server as
> > "cn=root,dc=prupref,dc=com"
> > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_connect_system(331)
> > ldap_connect_system: succesful connection to the LDAP server
> > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_search_one_user(343)
> > ldap_search_one_user: searching
> > for:[(&(uid=jearhart)(objectclass=sambaAccount))]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [uid] = [jearhart]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576)
> > Entry found for user: jearhart
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [pwdLastSet] = [1057792387]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [logonTime] = [0]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [logoffTime] = [2147483647]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [kickoffTime] = [2147483647]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [pwdCanChange] = [0]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [pwdMustChange] = [2147483647]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [cn] = [Jeff Earhart]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [homeDrive] = [<does not exist>]
> > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626)
> > homeDrive fell back to
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [smbHome] = [<does not exist>]
> > [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183)
> > Home server: prupref-winn
> > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635)
> > smbHome fell back to \\prupref-winn\jearhart
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [scriptPath] = [<does not exist>]
> > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644)
> > scriptPath fell back to
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [profilePath] = [<does not exist>]
> > [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183)
> > Home server: prupref-winn
> > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653)
> > profilePath fell back to \\prupref-winn\jearhart\profile
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [description] = [<does not exist>]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [userWorkstations] = [<does not exist>]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [rid] = [87124]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [primaryGroupID] = [3005]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [lmPassword] = [B9AD96875]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [ntPassword] = [77A7A]
> > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [acctFlags] = [[UX ]]
> > [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
> > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> > [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:push_sec_ctx(296)
> > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> > [2003/07/10 12:47:00, 3] smbd/uid.c:push_conn_ctx(285)
> > push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> >
> > ** this is where the strange part is
> >
> > 2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340)
> > split_domain_name:name 'jearhart' split into domain
> > :'PRUPREF-WINN' and user :'jearhart'
> > [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(160)
> > init_lsa_rid2s: looking up name jearhart
> > [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(457)
> > lookup_name: winbind lookup for jearhart failed - trying local
> > [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(486)
> > lookup_name: (local) jearhart -> SID
> > S-1-5-21-2263616378-1746176118-2189425910-87124 (type 1)
> > [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(164)
> > init_lsa_rid2s: found
> > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60)
> > 000000 lsa_io_r_lookup_names
> > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> > 0000 ptr_dom_ref: 00000001
> > [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60)
> > 000004 lsa_io_dom_r_ref
> > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> > 0004 num_ref_doms_1: 00000001
> > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> >
> >
> > Here are logs from the successfull user:
> >
> > 2003/07/10 12:42:54, 3]
> rpc_server/srv_netlog_nt.c:_net_sam_logon(605)
> > SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[mbarnes]
> > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296)
> > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> > [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285)
> > push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328)
> > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:ldap_open_connection(122)
> > ldap_open_connection: starting...
> > [2003/07/10 12:42:54, 10]
> passdb/pdb_ldap.c:ldap_open_connection(148)
> > Initializing connection to winnetka.prupref.com on port 389
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(186)
> > StartTLS issued: using a TLS connection
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(217)
> > ldap_open_connection: connection opened
> > [2003/07/10 12:42:54, 0] passdb/pdb_ldap.c:ldap_connect_system(315)
> > ldap_connect_system: Binding to ldap server as
> > "cn=root,dc=prupref,dc=com"
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_connect_system(331)
> > ldap_connect_system: succesful connection to the LDAP server
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_search_one_user(343)
> > ldap_search_one_user: searching
> > for:[(&(uid=mbarnes)(objectclass=sambaAccount))]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [uid] = [mbarnes]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576)
> > Entry found for user: mbarnes
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [pwdLastSet] = [1052162872]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [logonTime] = [0]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [logoffTime] = [2147483647]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [kickoffTime] = [2147483647]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [pwdCanChange] = [0]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [pwdMustChange] = [2147483647]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [cn] = [Michael Barnes]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [homeDrive] = [<does not exist>]
> > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626)
> > homeDrive fell back to
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [smbHome] = [<does not exist>]
> > [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183)
> > Home server: prupref-winn
> > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635)
> > smbHome fell back to \\prupref-winn\mbarnes
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [scriptPath] = [<does not exist>]
> > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644)
> > scriptPath fell back to
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [profilePath] = [<does not exist>]
> > [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183)
> > Home server: prupref-winn
> > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653)
> > profilePath fell back to \\prupref-winn\mbarnes\profile
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [description] = [<does not exist>]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435)
> > get_single_attribute: [userWorkstations] = [<does not exist>]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [rid] = [6722]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [primaryGroupID] = [3005]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [lmPassword] = [3DEC2A3]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [ntPassword] = [A87AD606]
> > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441)
> > get_single_attribute: [acctFlags] = [[UX ]]
> > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
> > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296)
> > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
> > [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285)
> > push_conn_ctx(100) : conn_ctx_stack_ndx = 0
> > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328)
> > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
> > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456)
> > user_in_list: checking user mbarnes in list
> > [2003/07/10 12:42:54, 3]
> > rpc_server/srv_util.c:get_domain_user_groups(187)
> > domain group access 513/7 granted
> > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456)
> > user_in_list: checking user mbarnes in list root @domain-admins
> > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460)
> > user_in_list: checking user |mbarnes| against |root|
> > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460)
> > user_in_list: checking user |mbarnes| against |@domain-admins|
> > [2003/07/10 12:42:54, 5] lib/username.c:user_in_netgroup_list(298)
> > Unable to get default yp domain
> > [2003/07/10 12:42:54, 10]
> lib/username.c:user_in_unix_group_list(392)
> > user_in_unix_group_list: checking user mbarnes in group
> > domain-admins
> > [2003/07/10 12:42:54, 10]
> lib/username.c:user_in_unix_group_list(413)
> > user_in_unix_group_list: checking user mbarnes against
> > member jearhart
> > [2003/07/10 12:42:54, 10]
> lib/username.c:user_in_unix_group_list(413)
> > user_in_unix_group_list: checking user mbarnes against
> > member cfusion
> > [2003/07/10 12:42:54, 10]
> lib/username.c:user_in_unix_group_list(413)
> > user_in_unix_group_list: checking user mbarnes against
> > member administrator
> > [2003/07/10 12:42:54, 10]
> lib/username.c:user_in_unix_group_list(413)
> > user_in_unix_group_list: checking user mbarnes against
> > member mfalanga
> > [2003/07/10 12:42:54, 10]
> lib/username.c:user_in_unix_group_list(413)
> > user_in_unix_group_list: checking user mbarnes against
> > member cgmckeever
> > [2003/07/10 12:42:54, 4] rpc_server/srv_util.c:make_dom_gids(90)
> > make_dom_gids: 513/7
> > [2003/07/10 12:42:54, 5] rpc_server/srv_util.c:make_dom_gids(149)
> > group id: 513 attr: 7
> > [2003/07/10 12:42:54, 4] rpc_parse/parse_net.c:init_dom_sid2s(813)
> > init_dom_sid2s:
> >
> > ** The part about domain splitting is not there
> >
> >
> > if you need other parts of the logs, please let me know.
> >
> > Thanks
>
> I notice some discrepecny starting here (which the domain
> splitting shortyl
> follows):
>
> User that doesnt work:
>
> 2003/07/10 12:47:00, 10] lib/util.c:dump_data(1541)
> [000] 5C 50 49 50 45 5C 00 00 00 05 00 00 03 10 00 00
> \PIPE\.. ........
> [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
> [010] 00 68 00 00 00 02 00 00 00 50 00 00 00 00 00 0E
> .h...... .P......
> [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
> [020] 00 00 00 00 00 02 00 00 00 00 00 00 00 94 A6 0D
> ........ ........
> [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
> [030] 3F 1A 08 00 00 01 00 00 00 01 00 00 00 10 00 12
> ?....... ........
> [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
> [040] 00 38 83 0C 00 09 00 00 00 00 00 00 00 08 00 00
> .8...... ........
> [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
> [050] 00 6A 00 65 00 61 00 72 00 68 00 61 00 72 00 74
> .j.e.a.r .h.a.r.t
> [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
> [060] 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00
> ........ ........
> [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549)
> [070] 00 .
> [2003/07/10 12:47:00, 3] smbd/process.c:switch_message(685)
> switch message SMBtrans (pid 2074)
> [2003/07/10 12:47:00, 4] smbd/uid.c:change_to_user(119)
> change_to_user: Skipping user change - already user
> [2003/07/10 12:47:00, 3] smbd/ipc.c:reply_trans(519)
> trans <\PIPE\> data=104 params=0 setup=2
> [2003/07/10 12:47:00, 5] smbd/ipc.c:reply_trans(539)
> calling named_pipe
> [2003/07/10 12:47:00, 3] smbd/ipc.c:named_pipe(334)
> named pipe command on <> name
> [2003/07/10 12:47:00, 5] smbd/ipc.c:api_fd_reply(275)
> api_fd_reply
> [2003/07/10 12:47:00, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990)
> search for pipe pnum=768b
> [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993)
> pipe name lsarpc pnum=768b (pipes_open=2)
> [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993)
> pipe name NETLOGON pnum=7689 (pipes_open=2)
> [2003/07/10 12:47:00, 3] smbd/ipc.c:api_fd_reply(296)
> Got API command 0x26 on pipe "lsarpc" (pnum
> 768b)api_fd_reply: p:0x82344d0
> max_trans_reply: 1024
> [2003/07/10 12:47:00, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752)
> write_to_pipe: 768b name: lsarpc open: Yes len: 104
> [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1541)
> [000] 05 00 00 03 10 00 00 00 68 00 00 00 02 00 00 00
> ........ h.......
> [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
> [010] 50 00 00 00 00 00 0E 00 00 00 00 00 02 00 00 00
> P....... ........
> [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
> [020] 00 00 00 00 94 A6 0D 3F 1A 08 00 00 01 00 00 00
> .......? ........
> [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
> [030] 01 00 00 00 10 00 12 00 38 83 0C 00 09 00 00 00
> ........ 8.......
> [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
> [040] 00 00 00 00 08 00 00 00 6A 00 65 00 61 00 72 00
> ........ j.e.a.r.
> [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
> [050] 68 00 61 00 72 00 74 00 00 00 00 00 00 00 00 00
> h.a.r.t. ........
> [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549)
> [060] 02 00 00 00 00 00 00 00 ........
> [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
> write_to_pipe: data_left = 104
> [2003/07/10 12:47:00, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
> process_incoming_data: Start: pdu_received_len = 0,
> pdu_needed_len = 0,
> incoming data = 104
> [2003/07/10 12:47:00, 10]
> rpc_server/srv_pipe_hnd.c:fill_rpc_header(299)
> fill_rpc_header: data_to_copy = 104,
> len_needed_to_complete_hdr = 16,
> receive_len = 0
> [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
> write_to_pipe: data_used = 16
> [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
> write_to_pipe: data_left = 88
> [2003/07/10 12:47:00, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
> process_incoming_data: Start: pdu_received_len = 16,
> pdu_needed_len = 0,
> incoming data = 88
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 smb_io_rpc_hdr
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0000 major : 05
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0001 minor : 00
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0002 pkt_type : 00
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0003 flags : 03
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0004 pack_type0: 10
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0005 pack_type1: 00
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0006 pack_type2: 00
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0007 pack_type3: 00
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0008 frag_len : 0068
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 000a auth_len : 0000
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 000c call_id : 00000002
> [2003/07/10 12:47:00, 5]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387)
> unmarshall_rpc_header: using little-endian RPC
> [2003/07/10 12:47:00, 10]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416)
> unmarshall_rpc_header: type = 0, flags = 3
> [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
> write_to_pipe: data_used = 0
> [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
> write_to_pipe: data_left = 88
> [2003/07/10 12:47:00, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
> process_incoming_data: Start: pdu_received_len = 0,
> pdu_needed_len = 88,
> incoming data = 88
> [2003/07/10 12:47:00, 10]
> rpc_server/srv_pipe_hnd.c:process_complete_pdu(619)
> process_complete_pdu: processing packet type 0
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 smb_io_rpc_hdr_req req
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0000 alloc_hint: 00000050
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0004 context_id: 0000
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0006 opnum : 000e
> [2003/07/10 12:47:00, 3]
> rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
> free_pipe_context: destroying talloc pool of size 0
> [2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
> Doing \PIPE\lsarpc
> [2003/07/10 12:47:00, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190)
> api_rpcTNP: api_ntlsa_rpc op 0xe - created
> /tmp/in_api_ntlsa_rpc_14.1.prs
> [2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
> api_rpcTNP: pipe 30347 rpc command: LSA_LOOKUPNAMES
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 lsa_io_q_lookup_names
> [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 smb_io_pol_hnd
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0000 data1: 00000000
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0004 data2: 00000002
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0008 data3: 0000
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 000a data4: 0000
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8s(675)
> 000c data5: 94 a6 0d 3f 1a 08 00 00
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0014 num_entries : 00000001
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0018 num_entries2 : 00000001
> [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60)
> 00001c smb_io_unihdr hdr_name
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 001c uni_str_len: 0010
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 001e uni_max_len: 0012
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0020 buffer : 000c8338
> [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60)
> 000024 smb_io_unistr2 dom_name
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0024 uni_max_len: 00000009
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0028 undoc : 00000000
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 002c uni_str_len: 00000008
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760)
> 0030 buffer : j.e.a.r.h.a.r.t.
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0040 num_trans_entries : 00000000
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0044 ptr_trans_sids : 00000000
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0048 lookup_level : 00000002
> [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 004c mapped_count : 00000000
> [2003/07/10 12:47:00, 4]
> rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160)
> Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00
> 00 94 A6 0D 3F
> ........ .......?
> [2003/07/10 12:47:00, 4] lib/util.c:dump_data(1549)
> [010] 1A 08 00 00 ....
> [2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340)
> split_domain_name:name 'jearhart' split into domain
> :'PRUPREF-WINN' and
> user :'jearhart
>
>
> USer that works:
>
> 2003/07/10 12:42:56, 10] lib/util.c:dump_data(1541)
> [000] 5C 50 49 50 45 5C 00 00 00 05 00 00 03 10 00 00
> \PIPE\.. ........
> [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549)
> [010] 00 2E 00 00 00 02 00 00 00 16 00 00 00 00 00 07
> ........ ........
> [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549)
> [020] 00 00 00 00 00 02 00 00 00 00 00 00 00 A0 A5 0D
> ........ ........
> [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549)
> [030] 3F 02 08 00 00 05 00 ?......
> [2003/07/10 12:42:56, 3] smbd/process.c:switch_message(685)
> switch message SMBtrans (pid 2050)
> [2003/07/10 12:42:56, 4] smbd/uid.c:change_to_user(119)
> change_to_user: Skipping user change - already user
> [2003/07/10 12:42:56, 3] smbd/ipc.c:reply_trans(519)
> trans <\PIPE\> data=46 params=0 setup=2
> [2003/07/10 12:42:56, 5] smbd/ipc.c:reply_trans(539)
> calling named_pipe
> [2003/07/10 12:42:56, 3] smbd/ipc.c:named_pipe(334)
> named pipe command on <> name
> [2003/07/10 12:42:56, 5] smbd/ipc.c:api_fd_reply(275)
> api_fd_reply
> [2003/07/10 12:42:56, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990)
> search for pipe pnum=75a2
> [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993)
> pipe name lsarpc pnum=75a2 (pipes_open=2)
> [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993)
> pipe name NETLOGON pnum=75a0 (pipes_open=2)
> [2003/07/10 12:42:56, 3] smbd/ipc.c:api_fd_reply(296)
> Got API command 0x26 on pipe "lsarpc" (pnum
> 75a2)api_fd_reply: p:0x82566d0
> max_trans_reply: 1024
> [2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752)
> write_to_pipe: 75a2 name: lsarpc open: Yes len: 46
> [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1541)
> [000] 05 00 00 03 10 00 00 00 2E 00 00 00 02 00 00 00
> ........ ........
> [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549)
> [010] 16 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00
> ........ ........
> [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549)
> [020] 00 00 00 00 A0 A5 0D 3F 02 08 00 00 05 00
> .......? ......
> [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
> write_to_pipe: data_left = 46
> [2003/07/10 12:42:56, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
> process_incoming_data: Start: pdu_received_len = 0,
> pdu_needed_len = 0,
> incoming data = 46
> [2003/07/10 12:42:56, 10]
> rpc_server/srv_pipe_hnd.c:fill_rpc_header(299)
> fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16,
> receive_len = 0
> [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
> write_to_pipe: data_used = 16
> [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
> write_to_pipe: data_left = 30
> [2003/07/10 12:42:56, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
> process_incoming_data: Start: pdu_received_len = 16,
> pdu_needed_len = 0,
> incoming data = 30
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 smb_io_rpc_hdr
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0000 major : 05
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0001 minor : 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0002 pkt_type : 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0003 flags : 03
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0004 pack_type0: 10
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0005 pack_type1: 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0006 pack_type2: 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0007 pack_type3: 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0008 frag_len : 002e
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 000a auth_len : 0000
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 000c call_id : 00000002
> [2003/07/10 12:42:56, 5]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387)
> unmarshall_rpc_header: using little-endian RPC
> [2003/07/10 12:42:56, 10]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416)
> unmarshall_rpc_header: type = 0, flags = 3
> [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
> write_to_pipe: data_used = 0
> [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762)
> write_to_pipe: data_left = 30
> [2003/07/10 12:42:56, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(674)
> process_incoming_data: Start: pdu_received_len = 0,
> pdu_needed_len = 30,
> incoming data = 30
> [2003/07/10 12:42:56, 10]
> rpc_server/srv_pipe_hnd.c:process_complete_pdu(619)
> process_complete_pdu: processing packet type 0
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 smb_io_rpc_hdr_req req
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0000 alloc_hint: 00000016
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0004 context_id: 0000
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0006 opnum : 0007
> [2003/07/10 12:42:56, 3]
> rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
> free_pipe_context: destroying talloc pool of size 0
> [2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
> Doing \PIPE\lsarpc
> [2003/07/10 12:42:56, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190)
> api_rpcTNP: api_ntlsa_rpc op 0x7 - created
> /tmp/in_api_ntlsa_rpc_7.5.prs
> [2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
> api_rpcTNP: pipe 30114 rpc command: LSA_QUERYINFOPOLICY
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 lsa_io_q_query
> [2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 smb_io_pol_hnd
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0000 data1: 00000000
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0004 data2: 00000002
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0008 data3: 0000
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 000a data4: 0000
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8s(675)
> 000c data5: a0 a5 0d 3f 02 08 00 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0014 info_class: 0005
> [2003/07/10 12:42:56, 4]
> rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160)
> Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00
> 00 A0 A5 0D 3F
> ........ .......?
> [2003/07/10 12:42:56, 4] lib/util.c:dump_data(1549)
> [010] 02 08 00 00 ....
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 lsa_io_r_query
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0000 undoc_buffer: 22000000
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0004 info_class: 0005
> [2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60)
> 000008 lsa_io_dom_query
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0008 uni_dom_max_len: 0016
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 000a uni_dom_str_len: 0018
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 000c buffer_dom_name: 00000001
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0010 buffer_dom_sid : 00000001
> [2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60)
> 000014 smb_io_unistr2 unistr2
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0014 uni_max_len: 0000000c
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0018 undoc : 00000000
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 001c uni_str_len: 0000000b
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760)
> 0020 buffer : P.R.U.P.R.E.F...C.O.M.
> [2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60)
> 000038 smb_io_dom_sid2
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0038 num_auths: 00000004
> [2003/07/10 12:42:56, 8] rpc_parse/parse_prs.c:prs_debug(60)
> 00003c smb_io_dom_sid sid
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 003c sid_rev_num: 01
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 003d num_auths : 04
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 003e id_auth[0] : 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 003f id_auth[1] : 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0040 id_auth[2] : 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0041 id_auth[3] : 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0042 id_auth[4] : 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0043 id_auth[5] : 05
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32s(815)
> 0044 sub_auths : 00000015 86ec0b7a 68148876
> 827ffcf6
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_ntstatus(617)
> 0054 status: NT_STATUS_OK
> [2003/07/10 12:42:56, 0] rpc_parse/parse_prs.c:prs_dump(46)
> created /tmp/out_api_ntlsa_rpc_7.5.prs
> [2003/07/10 12:42:56, 5] rpc_server/srv_pipe.c:api_rpcTNP(1235)
> api_rpcTNP: called api_ntlsa_rpc successfully
> [2003/07/10 12:42:56, 3]
> rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
> free_pipe_context: destroying talloc pool of size 512
> [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766)
> write_to_pipe: data_used = 30
> [2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(799)
> read_from_pipe: 75a2 name: lsarpc len: 1024
> [2003/07/10 12:42:56, 10]
> rpc_server/srv_pipe_hnd.c:read_from_pipe(844)
> read_from_pipe: lsarpc: fault_state = 0 : data_sent_length = 0,
> prs_offset(&p->out_data.rdata) = 88.
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
> 000000 smb_io_rpc_hdr hdr
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0000 major : 05
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0001 minor : 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0002 pkt_type : 02
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0003 flags : 03
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0004 pack_type0: 10
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0005 pack_type1: 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0006 pack_type2: 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0007 pack_type3: 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0008 frag_len : 0070
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 000a auth_len : 0000
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 000c call_id : 00000002
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60)
> 000010 smb_io_rpc_hdr_resp resp
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588)
> 0010 alloc_hint: 00000058
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559)
> 0014 context_id: 0000
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0016 cancel_ct : 00
> [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530)
> 0017 reserved : 00
> [2003/07/10 12:42:56, 5] smbd/ipc.c:copy_trans_params_and_data(62)
> copy_trans_params_and_data: params[0..0] data[0..112]
> [2003/07/10 12:42:56, 5] lib/util.c:show_msg(268)
> size=168
> smb_com=0x25
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=136
> smb_flg2=1
> [2003/07/10 12:42:56, 5] lib/util.c:show_msg(276)
> smb_tid=2
> smb_pid=528
> smb_uid=101
>
>
> >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions: http://lists.samba.org/mailman/listinfo/samba
> > >
> >
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba
>
More information about the samba
mailing list