[Samba] Clear text authentication impossible???
Beschorner Daniel
Daniel.Beschorner at facton.de
Wed Oct 22 22:51:21 GMT 2003
Ok, here it comes. Samba PDC is called "server", Exchange got the fantastic
name "exchange", domain is "i-bn".
I changed the password to "p.a.s.s.w.o.r.d" and "PASSWORD" at both
occurrences, originally it was lower case, too.
Daniel
-----Ursprüngliche Nachricht-----
Von: Jeremy Allison [mailto:jra at samba.org]
Gesendet: Mittwoch, 22. Oktober 2003 21:16
An: Beschorner Daniel
Cc: 'samba at lists.samba.org'
Betreff: Re: [Samba] Clear text authentication impossible???
On Wed, Oct 22, 2003 at 03:27:31PM +0200, Beschorner Daniel wrote:
> We have an Exchange 5.5 server in our Samba 3 domain und want to have POP3
> access with clear text authentication from clients.
> But no kind of credentials is accepted.
>
> It did a level 10 log on the Samba server and found my clear text password
> in the log (in nt_chal_resp and lm_chal_resp fields) during
authentication.
>
> Is it possible that Samba can't handle the clear-text pass-through from
> POP3-Client per Exchange server and takes it for NTLMv2 challenge????
Can you post the debug level 10 log please (obfuscate all passwords of
course :-).
Jeremy.
-------------- next part --------------
[2003/10/22 14:55:29, 5] lib/debug.c:debug_dump_status(359)
INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
[2003/10/22 14:55:41, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 400
[2003/10/22 14:55:41, 6] smbd/process.c:process_smb(889)
got message type 0x0 of len 0x190
[2003/10/22 14:55:41, 3] smbd/process.c:process_smb(890)
Transaction 78 of length 404
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(456)
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(466)
size=400
smb_com=0x2f
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=4992
smt_wct=14
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]=57054 (0xDEDE)
smb_vwv[ 2]=29711 (0x740F)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]=65535 (0xFFFF)
smb_vwv[ 6]=65535 (0xFFFF)
smb_vwv[ 7]= 8 (0x8)
smb_vwv[ 8]= 336 (0x150)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 336 (0x150)
smb_vwv[11]= 64 (0x40)
smb_vwv[12]= 0 (0x0)
smb_vwv[13]= 0 (0x0)
smb_bcc=337
[2003/10/22 14:55:41, 10] lib/util.c:dump_data(1825)
[000] EE 05 00 00 03 10 00 00 00 50 01 20 00 05 00 00 Œ....... .P. ....
[010] 00 0E 01 00 00 00 00 02 00 92 0D 4E EE C7 0D 98 ........ ...NŒ€..
[020] 8A 34 38 32 F5 C7 17 DC 82 B5 58 F0 72 A1 C2 4D .482õ€.š .æXðrÂM
[030] 09 51 64 72 38 80 38 43 44 2A 1C 63 19 5F 2F 96 .Qdr8.8C D*.c._/.
[040] C3 62 11 84 4A C2 94 E7 42 E1 DF B7 F1 B1 1F 7F Ãb..JÂ.‡ B áú¤ñ..
[050] 08 ED DE C2 A3 8B AF 25 9C E6 C4 45 9D 30 88 8D .¡ÞÂœ.»% .‘ŽE.0..
[060] 6D 7D 0C 57 09 90 1B 12 45 73 6A F1 09 DF 74 4D m}.W.... Esj¤.átM
[070] 54 8E 61 A1 77 48 A9 25 23 DA 47 C5 9A E9 41 CC T.awH©% #ÚG.‚AÌ
[080] AE 86 D6 A4 2B 8C 5A 88 AD 38 1F D0 EA C7 36 3E ½.™±+.Z. í8.Ј€6>
[090] AB 23 09 0F 54 96 68 5A FC 58 52 FC AB 55 0D 9D ®#..T.hZ XR®U..
[0A0] 02 EC B8 FC 1A B3 0D AB 97 14 48 00 8C 59 49 E6 .¸.³.® ..H..YI‘
[0B0] 1C E3 99 43 89 1D 2E DB A0 46 FA 11 6B 82 C4 3F .ã.C...Û ÿF£.k.Ž?
[0C0] E0 03 DA E7 04 35 DE 31 A0 FB 1A DA 14 BE 48 D3
.Ú‡.5Þ1 ÿ–.Ú.¾HÓ
[0D0] 74 E3 AF 92 BB F9 24 0A D3 47 D4 B6 7F BB D6 BE tã».¯—$. ÓGÔ.¯™¾
[0E0] 20 D8 A0 BA 7F 86 E2 2C 1A 8B 0A 19 86 A7 E0 98 Øÿ§..ƒ, .....
.
[0F0] B4 C8 25 06 AE 61 B3 3C C2 26 BB 17 FD EA D8 73 ´È%.½a³< Â&¯.²ˆØs
[100] CD B6 F7 9A B1 64 7C CF CA 00 07 25 05 72 69 C2 Íö.ñd|Ï Ê..%.riÂ
[110] 06 CF 8D C4 78 88 E8 8C 4C C6 0D 5B 0A 54 49 3A .Ï.Žx.Š. L’.[.TI:
[120] F9 A6 4E 96 81 5C 27 60 2F 44 06 02 00 20 74 09 —¼N..\'` /D... t.
[130] 00 77 00 7A 00 FF FF 00 00 7F 2D FB 2C A7 0F 4B .w.z.˜˜. ..-–,.K
[140] BE 1C A8 2B 05 F1 20 D7 B5 9F 17 31 1E 97 0D 3C ¾.¿+.¤ × æ..1...<
[150] EC
[2003/10/22 14:55:41, 3] smbd/process.c:switch_message(685)
switch message SMBwriteX (pid 16801)
[2003/10/22 14:55:41, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2003/10/22 14:55:41, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1151)
search for pipe pnum=740f
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
pipe name NETLOGON pnum=740f (pipes_open=2)
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
pipe name NETLOGON pnum=740d (pipes_open=2)
[2003/10/22 14:55:41, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
write_to_pipe: 740f name: NETLOGON open: Yes len: 336
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 336
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(778)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 336
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 336, len_needed_to_complete_hdr = 16, receive_len = 0
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 16
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 320
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(778)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 320
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0000 major : 05
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0001 minor : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0002 pkt_type : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0003 flags : 03
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0004 pack_type0: 10
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0005 pack_type1: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0006 pack_type2: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0007 pack_type3: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0008 frag_len : 0150
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
000a auth_len : 0020
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
000c call_id : 00000005
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 0
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
write_to_pipe: data_left = 320
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(778)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 320, incoming data = 320
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr_req req
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0000 alloc_hint: 0000010e
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0004 context_id: 0000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0006 opnum : 0002
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe.c:api_pipe_netsec_process(1324)
data 272 auth 32
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000118 smb_io_rpc_hdr_auth hdr_auth
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0118 auth_type : 44
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0119 auth_level : 06
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
011a padding : 02
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
011b reserved : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
011c auth_context : 00097420
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000120 smb_io_rpc_auth_netsec_chk
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0120 sig : 77 00 7a 00 ff ff 00 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0128 seq_num: 7f 2d fb 2c a7 0f 4b be
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0130 packet_digest: 1c a8 2b 05 f1 20 d7 b5
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0138 confounder: 9f 17 31 1e 97 0d 3c ec
[2003/10/22 14:55:41, 10] rpc_parse/parse_prs.c:netsec_decode(1540)
SCHANNEL: netsec_encode seq_num=2 data_len=272
[2003/10/22 14:55:41, 10] rpc_parse/parse_prs.c:netsec_decode(1560)
SCHANNEL: netsec_decode seq_num=2 data_len=272
[2003/10/22 14:55:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe.c:api_pipe_request(1462)
Requested \PIPE\NETLOGON
[2003/10/22 14:55:41, 4] rpc_server/srv_pipe.c:api_rpcTNP(1496)
api_rpcTNP: NETLOGON op 0x2 - api_rpcTNP: rpc command: NET_SAMLOGON
[2003/10/22 14:55:41, 6] rpc_server/srv_pipe.c:api_rpcTNP(1522)
api_rpc_cmds[4].fn == 0x80f1290
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 net_io_q_sam_logon
[2003/10/22 14:55:41, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_sam_info
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_clnt_info2
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_clnt_srv
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0000 undoc_buffer : 000e8f90
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
000004 smb_io_unistr2 unistr2
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0004 uni_max_len: 00000009
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0008 offset : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
000c uni_str_len: 00000009
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
0010 buffer : \.\.S.E.R.V.E.R...
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0024 undoc_buffer2: 000aa92c
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
000028 smb_io_unistr2 unistr2
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0028 uni_max_len: 00000009
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
002c offset : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0030 uni_str_len: 00000009
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
0034 buffer : E.X.C.H.A.N.G.E...
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0048 ptr_cred: 007cf508
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
00004c smb_io_cred
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
00004c smb_io_chal
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
004c data: 9f 8f e0 6d 4e 31 cb 0a
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
000054 smb_io_utime
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0054 time: 3f967d62
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0058 ptr_rtn_cred : 007cf514
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
00005c smb_io_cred
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
00005c smb_io_chal
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
005c data: 01 00 00 00 a0 a8 0a 00
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
000064 smb_io_utime
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0064 time: 007cfa2c
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0068 logon_level : 0002
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
00006a smb_io_sam_info logon_info
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
006a switch_value : 0002
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
00006c net_io_id_info2
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
006c ptr_id_info2: 007cfa2c
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
000070 smb_io_unihdr unihdr
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0070 uni_str_len: 0000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0072 uni_max_len: 0000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0074 buffer : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0078 param_ctrl: 00000002
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
00007c smb_io_logon_id
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
007c low : 0070bdd8
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0080 high: 00000000
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
000084 smb_io_unihdr unihdr
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0084 uni_str_len: 0008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0086 uni_max_len: 0008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0088 buffer : 000e53c0
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
00008c smb_io_unihdr unihdr
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
008c uni_str_len: 0010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
008e uni_max_len: 0010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0090 buffer : 000e53c8
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0094 lm_chal: 00 00 00 00 00 00 00 00
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
00009c smb_io_strhdr hdr_nt_chal_resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
009c str_str_len: 0010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
009e str_max_len: 0010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00a0 buffer : 000e53da
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
0000a4 smb_io_strhdr hdr_lm_chal_resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
00a4 str_str_len: 0008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
00a6 str_max_len: 0008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00a8 buffer : 000e53ea
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
0000ac smb_io_unistr2 - NULL uni_domain_name
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
0000ac smb_io_unistr2 uni_user_name
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00ac uni_max_len: 00000004
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00b0 offset : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00b4 uni_str_len: 00000004
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
00b8 buffer : r.o.o.t.
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
0000c0 smb_io_unistr2 uni_wksta_name
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00c0 uni_max_len: 00000008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00c4 offset : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00c8 uni_str_len: 00000008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
00cc buffer : E.X.C.H.A.N.G.E.
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
0000dc smb_io_string2 nt_chal_resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00dc str_max_len: 00000010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00e0 offset : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00e4 str_str_len: 00000010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_string2(961)
00e8 buffer : p.a.s.s.w.o.r.d.
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
0000f8 smb_io_string2 lm_chal_resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00f8 str_max_len: 00000008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
00fc offset : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0100 str_str_len: 00000008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_string2(961)
0104 buffer : PASSWORD
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
010c validation_level: 0003
[2003/10/22 14:55:41, 5] libsmb/credentials.c:deal_with_creds(182)
deal_with_creds: 182
[2003/10/22 14:55:41, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(92)
sess_key : E287D959B18DB76A
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(93)
stor_cred: BC690237C5249ACD
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(94)
timestamp: 3f967d62
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(95)
timecred : 1EE79876C5249ACD
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 9F8FE06D4E31CB0A
[2003/10/22 14:55:41, 4] libsmb/credentials.c:cred_assert(121)
cred_assert
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_assert(123)
challenge : 9F8FE06D4E31CB0A
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_assert(124)
calculated: 9F8FE06D4E31CB0A
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_assert(128)
credentials check ok
[2003/10/22 14:55:41, 5] libsmb/credentials.c:deal_with_creds(198)
deal_with_creds: new_cred[0]=7698e71f
[2003/10/22 14:55:41, 5] libsmb/credentials.c:deal_with_creds(203)
deal_with_creds: new_clnt_time=3f967d63
[2003/10/22 14:55:41, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(92)
sess_key : E287D959B18DB76A
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(93)
stor_cred: BC690237C5249ACD
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(94)
timestamp: 3f967d63
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(95)
timecred : 1FE79876C5249ACD
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 807BFEFC879C7031
[2003/10/22 14:55:41, 5] libsmb/credentials.c:deal_with_creds(209)
deal_with_creds: clnt_cred=BC690237C5249ACD
[2003/10/22 14:55:41, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(577)
SAM Logon (Network). Domain:[I-BN]. User:[root at EXCHANGE] Requested Domain:[]
[2003/10/22 14:55:41, 5] rpc_server/srv_netlog_nt.c:_net_sam_logon(600)
Attempting validation level 2 for unmapped username root.
[2003/10/22 14:55:41, 5] auth/auth.c:make_auth_context_subsystem(463)
Making default auth method list for DC, security=user, encrypt passwords = yes
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(370)
load_auth_module: Attempting to find an auth method to match guest
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(395)
load_auth_module: auth method guest has a valid init
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(370)
load_auth_module: Attempting to find an auth method to match sam
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(395)
load_auth_module: auth method sam has a valid init
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(370)
load_auth_module: Attempting to find an auth method to match winbind:trustdomain
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(370)
load_auth_module: Attempting to find an auth method to match trustdomain
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(395)
load_auth_module: auth method trustdomain has a valid init
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(395)
load_auth_module: auth method winbind has a valid init
[2003/10/22 14:55:41, 5] auth/auth_util.c:make_user_info_map(216)
make_user_info_map: Mapping user []\[root] from workstation [EXCHANGE]
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1
[2003/10/22 14:55:41, 3] smbd/uid.c:push_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/10/22 14:55:41, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2003/10/22 14:55:41, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2003/10/22 14:55:41, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password(299)
secrets_fetch failed!
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0
[2003/10/22 14:55:41, 10] lib/gencache.c:gencache_get(286)
Cache entry with key = TDOM/I-BN couldn't be found
[2003/10/22 14:55:41, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(172)
no entry for trusted domain I-BN found.
[2003/10/22 14:55:41, 5] auth/auth_util.c:make_user_info(132)
attempting to make a user_info for root (root)
[2003/10/22 14:55:41, 5] auth/auth_util.c:make_user_info(142)
making strings for root's user_info struct
[2003/10/22 14:55:41, 5] auth/auth_util.c:make_user_info(184)
making blobs for root's user_info struct
[2003/10/22 14:55:41, 10] auth/auth_util.c:make_user_info(193)
made an encrypted user_info for root (root)
[2003/10/22 14:55:41, 3] auth/auth.c:check_ntlm_password(216)
check_ntlm_password: Checking password for unmapped user []\[root]@[EXCHANGE] with the new password interface
[2003/10/22 14:55:41, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: mapped user is: [I-BN]\[root]@[EXCHANGE]
[2003/10/22 14:55:41, 10] auth/auth.c:check_ntlm_password(228)
check_ntlm_password: auth_context challenge created by fixed
[2003/10/22 14:55:41, 10] auth/auth.c:check_ntlm_password(230)
challenge is:
[2003/10/22 14:55:41, 5] lib/util.c:dump_data(1825)
[000] 00 00 00 00 00 00 00 00 ........
[2003/10/22 14:55:41, 10] auth/auth.c:check_ntlm_password(256)
check_ntlm_password: guest had nothing to say
[2003/10/22 14:55:41, 8] lib/util.c:is_myname(1677)
is_myname("I-BN") returns 0
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1
[2003/10/22 14:55:41, 3] smbd/uid.c:push_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/10/22 14:55:41, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2003/10/22 14:55:41, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2003/10/22 14:55:41, 2] lib/smbldap.c:smbldap_search_suffix(1066)
smbldap_search_suffix: searching for:[(&(uid=root)(objectclass=sambaSamAccount))]
[2003/10/22 14:55:41, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
init_sam_from_ldap: Entry found for user: root
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_username(593)
pdb_set_username: setting username root, was
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 11 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_domain(620)
pdb_set_domain: setting domain I-BN, was
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_nt_username(647)
pdb_set_nt_username: setting nt username root, was
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 14 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_user_sid_from_string(533)
pdb_set_user_sid_from_string: setting user sid S-1-5-21-598206826-3982707997-2769875126-1000
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_user_sid(520)
pdb_set_user_sid: setting user sid S-1-5-21-598206826-3982707997-2769875126-1000
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 17 -> now SET
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [sambaPrimaryGroupSID] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_group_sid(556)
pdb_set_group_sid: setting group sid S-1-5-21-598206826-3982707997-2769875126-513
[2003/10/22 14:55:41, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
pdb_set_group_sid_from_rid:
setting group sid S-1-5-21-598206826-3982707997-2769875126-513 from rid 513
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 20 -> now SET
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [sambaLogonTime] = [<does not exist>]
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [sambaLogoffTime] = [<does not exist>]
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [sambaKickoffTime] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 8 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 9 -> now SET
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [displayName] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_fullname(674)
pdb_set_full_name: setting full name root, was
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 12 -> now SET
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [sambaHomeDrive] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(755)
pdb_set_dir_drive: setting dir drive , was NULL
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [sambaHomePath] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_homedir(782)
pdb_set_homedir: setting home dir , was
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [sambaLogonScript] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_logon_script(701)
pdb_set_logon_script: setting logon script user.cmd, was
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [sambaProfilePath] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_profile_path(728)
pdb_set_profile_path: setting profile path \\server\Profiles\root, was
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [description] = [<does not exist>]
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
smbldap_get_single_attribute: [sambaUserWorkstations] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 31 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 32 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 19 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 15 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 16 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 25 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
element 26 -> now SET
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0
[2003/10/22 14:55:41, 4] auth/auth_sam.c:sam_password_ok(182)
sam_password_ok: Checking NTLMv2 password with domain []
[2003/10/22 14:55:41, 0] auth/auth_sam.c:smb_pwd_check_ntlmv2(105)
smb_pwd_check_ntlmv2: incorrect password length (16)
[2003/10/22 14:55:41, 4] auth/auth_sam.c:sam_password_ok(191)
sam_password_ok: Checking NTLMv2 password without a domain
[2003/10/22 14:55:41, 0] auth/auth_sam.c:smb_pwd_check_ntlmv2(105)
smb_pwd_check_ntlmv2: incorrect password length (16)
[2003/10/22 14:55:41, 3] auth/auth_sam.c:sam_password_ok(199)
sam_password_ok: NTLMv2 password check failed
[2003/10/22 14:55:41, 5] auth/auth.c:check_ntlm_password(268)
check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_WRONG_PASSWORD
[2003/10/22 14:55:41, 3] auth/auth_winbind.c:check_winbind_security(79)
check_winbind_security: Not using winbind, requested domain was for this SAM.
[2003/10/22 14:55:41, 10] auth/auth.c:check_ntlm_password(256)
check_ntlm_password: winbind had nothing to say
[2003/10/22 14:55:41, 2] auth/auth.c:check_ntlm_password(309)
check_ntlm_password: Authentication for user [root] -> [root] FAILED with error NT_STATUS_WRONG_PASSWORD
[2003/10/22 14:55:41, 5] auth/auth_util.c:free_user_info(1196)
attempting to free (and zero) a user_info structure
[2003/10/22 14:55:41, 10] auth/auth_util.c:free_user_info(1199)
structure was created for root
[2003/10/22 14:55:41, 5] rpc_server/srv_netlog_nt.c:_net_sam_logon(661)
_net_sam_logon: check_password returned status NT_STATUS_WRONG_PASSWORD
[2003/10/22 14:55:41, 5] auth/auth_util.c:free_server_info(1221)
attempting to free (and zero) a server_info structure
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 net_io_r_sam_logon
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0000 buffer_creds: 00000001
[2003/10/22 14:55:41, 6] rpc_parse/parse_prs.c:prs_debug(82)
000004 smb_io_cred
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
000004 smb_io_chal
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0004 data: 80 7b fe fc 87 9c 70 31
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
00000c smb_io_utime
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
000c time: 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0010 switch_value: 0003
[2003/10/22 14:55:41, 6] rpc_parse/parse_prs.c:prs_debug(82)
000014 net_io_user_info3
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0014 ptr_user_info : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0018 auth_resp : 00000001
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_ntstatus(665)
001c status : NT_STATUS_WRONG_PASSWORD
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe.c:api_rpcTNP(1543)
api_rpcTNP: called NETLOGON successfully
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe.c:api_rpcTNP(1554)
api_rpcTNP: rpc input buffer underflow (parse error?)
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
010e : 00 00 44 06 02 00 20 74 09 00
[2003/10/22 14:55:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 660
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 320
[2003/10/22 14:55:41, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=740f nwritten=336
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(456)
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(466)
size=47
smb_com=0x2f
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=4992
smt_wct=6
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 336 (0x150)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_bcc=0
[2003/10/22 14:55:41, 6] lib/util_sock.c:write_socket(407)
write_socket(5,51)
[2003/10/22 14:55:41, 6] lib/util_sock.c:write_socket(410)
write_socket(5,51) wrote 51
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_idle_fn(1094)
ldap connection not idle...
[2003/10/22 14:55:41, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 59
[2003/10/22 14:55:41, 6] smbd/process.c:process_smb(889)
got message type 0x0 of len 0x3b
[2003/10/22 14:55:41, 3] smbd/process.c:process_smb(890)
Transaction 79 of length 63
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(456)
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(466)
size=59
smb_com=0x2e
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=5056
smt_wct=12
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]=57054 (0xDEDE)
smb_vwv[ 2]=29711 (0x740F)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 1024 (0x400)
smb_vwv[ 6]= 1024 (0x400)
smb_vwv[ 7]=65535 (0xFFFF)
smb_vwv[ 8]=65535 (0xFFFF)
smb_vwv[ 9]= 1024 (0x400)
smb_vwv[10]= 0 (0x0)
smb_vwv[11]= 0 (0x0)
smb_bcc=0
[2003/10/22 14:55:41, 3] smbd/process.c:switch_message(685)
switch message SMBreadX (pid 16801)
[2003/10/22 14:55:41, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2003/10/22 14:55:41, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1151)
search for pipe pnum=740f
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
pipe name NETLOGON pnum=740f (pipes_open=2)
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
pipe name NETLOGON pnum=740d (pipes_open=2)
[2003/10/22 14:55:41, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
read_from_pipe: 740f name: NETLOGON len: 1024
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
read_from_pipe: NETLOGON: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 32.
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0000 major : 05
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0001 minor : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0002 pkt_type : 02
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0003 flags : 03
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0004 pack_type0: 10
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0005 pack_type1: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0006 pack_type2: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0007 pack_type3: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0008 frag_len : 0060
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
000a auth_len : 0020
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
000c call_id : 00000005
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
0010 alloc_hint: 00000020
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
0014 context_id: 0000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0016 cancel_ct : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0017 reserved : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000038 smb_io_rpc_hdr_auth hdr_auth
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0038 auth_type : 44
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
0039 auth_level : 06
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
003a padding : 08
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
003b reserved : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
003c auth_context : 00000001
[2003/10/22 14:55:41, 10] rpc_parse/parse_prs.c:netsec_encode(1463)
SCHANNEL: netsec_encode seq_num=3 data_len=32
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
000040 smb_io_rpc_auth_netsec_chk
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0040 sig : 77 00 7a 00 ff ff 00 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0048 seq_num: cd cb c7 ef ca 0d a0 22
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0050 packet_digest: eb 70 9e 56 ef 3f ad 0e
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
0058 confounder: f8 2d 00 93 ee ed 7a 97
[2003/10/22 14:55:41, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=740f min=1024 max=1024 nread=96
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(456)
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(466)
size=155
smb_com=0x2e
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=5056
smt_wct=12
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 96 (0x60)
smb_vwv[ 6]= 59 (0x3B)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 0 (0x0)
smb_vwv[11]= 0 (0x0)
smb_bcc=96
[2003/10/22 14:55:41, 10] lib/util.c:dump_data(1825)
[000] 05 00 02 03 10 00 00 00 60 00 20 00 05 00 00 00 ........ `. .....
[010] 20 00 00 00 00 00 00 00 86 E2 37 79 E5 F8 16 F7 ....... .ƒ7y†°.ö
[020] ED 82 15 14 17 AE 7B 9B ED 5A 9E 53 18 DA F5 76 ¡....½{. ¡Z.S.Úõv
[030] 7A A6 37 F7 D1 CB BF 68 44 06 08 00 01 00 00 00 z¼7ö¥Ë¨h D.......
[040] 77 00 7A 00 FF FF 00 00 CD CB C7 EF CA 0D A0 22 w.z.˜˜.. ÍË€‹Ê.ÿ"
[050] EB 70 9E 56 EF 3F AD 0E F8 2D 00 93 EE ED 7A 97 ‰p.V‹?í. °-..Œ¡z.
[2003/10/22 14:55:41, 6] lib/util_sock.c:write_socket(407)
write_socket(5,159)
[2003/10/22 14:55:41, 6] lib/util_sock.c:write_socket(410)
write_socket(5,159) wrote 159
More information about the samba
mailing list