[Samba] Win NT 4.0 clients give error C0000078 when login to Samba PDC

Thu Oct 23 23:50:39 GMT 2003

Hi all,

I've tried searching all over the net for any information about this
error but can't seem to find any. 

I've compiled Samba 2.2.8a on a RH Linux 7.3 box (kernel 2.4.18-3) with
lsapsam support against openldap 2.0.23-4. I'm also using pam_ldap such
that all authentication (unix + samba/windows) is done through LDAP,
which is working quite nicely. 

However, none of my NT 4.0 systems can log on to the PDC -- my 2K Pro
and XP Pro systems can (assuming the SignOrSeal registry hack is done),
but the NT systems will join the domain, but as soon as I enter the root
password  (or log in under any other account) I get a "The system cannot
log you on (C0000078)" which apparently means NT_STATUS_INVALID_SID.
Nothing shows up in the EventLog on these NT workstations. I've tried
flushing the NBT cache (with "c:\> nbtstat -RR") and one system is a
fresh NT install just for testing. I've also tried joining other domains
or setting them to be workgroup only and restarting a few times before
re-joining this domain to see if they're somehow caching old SIDs.

Any ideas? I'm ready to try just about anything at this point.
I've attached my smb.conf, ldapsam/smbpasswd entries, and log.

Regards,
Tico 

[root at gw-uk root]# /usr/local/samba/bin/testparm -x
Load smb config files from /usr/local/samba/lib/smb.conf
Processing section "[homes]"
Processing section "[netlogon]"
Processing section "[public]"
Loaded services file OK.
Press enter to see a dump of your service definitions

# Global parameters
[global]
        workgroup = POI
        netbios name = POI-US
        server string = "POI-USA file server"
        encrypt passwords = Yes
        log level = 3
        log file = /var/log/samba/%m.log
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
SO_SNDBUF=8192
        domain admin group = root, administrator, @smbadmin
        logon path =
        logon home =
        domain logons = Yes
        os level = 34
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        ldap server = 192.168.1.60
        ldap port = 389
        ldap suffix = "ou=accounts, ou=people, dc=pharm-olam, dc=com"
        ldap admin dn = "cn=Manager,dc=pharm-olam,dc=com"
        ldap ssl = no
        guest account = smbguest

[homes]
        read only = No
        create mask = 0600
        directory mask = 0700

[netlogon]
        path = /var/samba/netlogon
        locking = No

[public]
        path = /tmp
        read only = No
        guest ok = Yes

Here are the relevant user entries in the LDAPSAM (if need be I can dump
the entries directly out of LDAP):

root at gw-uk root]# /usr/local/samba/bin/pdbedit -v -u emach-nt-01$
ldap_connect_system: Binding to ldap server as
"cn=Manager,dc=pharm-olam,dc=com"
username:       EMACH-NT-01$
user ID/Group:  1311/1300
user RID/GRID:  3622/3601
Full Name:      EMACH-NT-01$
Home Directory:
HomeDir Drive:
Logon Script:
Profile Path:
[root at gw-uk root]# /usr/local/samba/bin/pdbedit -v -u root
ldap_connect_system: Binding to ldap server as
"cn=Manager,dc=pharm-olam,dc=com"
username:       root
user ID/Group:  0/0
user RID/GRID:  1000/512
Full Name:      root
Home Directory:
HomeDir Drive:
Logon Script:
Profile Path:

Below is a "tail -f /var/log/samba/emach-nt-01.log"

  Transaction 2 of length 131
[2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685)
  switch message SMBsesssetupX (pid 19365)
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/10/23 15:40:53, 3] smbd/reply.c:reply_sesssetup_and_X(879)
  Domain=[]  NativeOS=[Windows NT 1381] NativeLanMan=[]
[2003/10/23 15:40:53, 3] smbd/reply.c:reply_sesssetup_and_X(890)
  sesssetupX:name=[]
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:push_sec_ctx(296)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2003/10/23 15:40:53, 3] smbd/uid.c:push_conn_ctx(285)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:get_current_groups(172)
  get_current_groups: user is in 1 groups: 1100
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:get_current_groups(172)
  get_current_groups: user is in 1 groups: 1100
[2003/10/23 15:40:53, 3] smbd/password.c:register_vuid(336)
  uid 999 registered to name smbguest
[2003/10/23 15:40:53, 3] smbd/password.c:register_vuid(338)
  Clearing default real name
[2003/10/23 15:40:53, 3] smbd/password.c:register_vuid(340)
  User name: smbguest   Real name: smbguest
[2003/10/23 15:40:53, 3] smbd/process.c:chain_reply(991)
  Chained message
[2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685)
  switch message SMBtconX (pid 19365)
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/10/23 15:40:53, 3] smbd/password.c:authorise_login(854)
  authorise_login: ACCEPTED: guest account and guest ok (smbguest)
[2003/10/23 15:40:53, 3] smbd/service.c:make_connection(487)
  Connect path is /tmp
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:push_sec_ctx(296)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2003/10/23 15:40:53, 3] smbd/uid.c:push_conn_ctx(285)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:get_current_groups(172)
  get_current_groups: user is in 1 groups: 1100
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:get_current_groups(172)
  get_current_groups: user is in 1 groups: 1100
[2003/10/23 15:40:53, 3] smbd/uid.c:fetch_sid_from_uid_cache(590)
  fetch sid from uid cache 999 ->
S-1-5-21-3756293304-439759695-3178546228-2998
[2003/10/23 15:40:53, 3] smbd/uid.c:fetch_sid_from_gid_cache(666)
  fetch sid from gid cache 1100 ->
S-1-5-21-3756293304-439759695-3178546228-3201[2003/10/23 15:40:53, 3]
lib/util_seaccess.c:se_access_check(269)
  se_access_check: user sid is
S-1-5-21-3756293304-439759695-3178546228-2998
[2003/10/23 15:40:53, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-5-21-3756293304-439759695-3178546228-3201
[2003/10/23 15:40:53, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-1-0
[2003/10/23 15:40:53, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-5-2
[2003/10/23 15:40:53, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-5-32-546
[2003/10/23 15:40:53, 3] smbd/vfs.c:vfs_init_default(123)
  Initialising default vfs hooks
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (999, 1100) - sec_ctx_stack_ndx = 0
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(334)
  1 user groups:
  1100
[2003/10/23 15:40:53, 3] smbd/vfs.c:vfs_ChDir(574)
  vfs_ChDir to /tmp
[2003/10/23 15:40:53, 3] smbd/service.c:make_connection(636)
  emach-nt-01 (192.168.1.211) connect to service IPC$ as user smbguest
(uid=999, gid=1100) (pid 19365)
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/10/23 15:40:53, 3] smbd/reply.c:reply_tcon_and_X(394)
  tconX service=ipc$ user=smbguest
[2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846)
  Transaction 3 of length 95
[2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685)
  switch message SMBntcreateX (pid 19365)
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (999, 1100) - sec_ctx_stack_ndx = 0
[2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(334)
  1 user groups:
  1100
[2003/10/23 15:40:53, 3] smbd/nttrans.c:nt_open_pipe(559)
  nt_open_pipe: Known pipe lsarpc opening.
[2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846)
  Transaction 4 of length 152
[2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:40:53, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=72 params=0 setup=2
[2003/10/23 15:40:53, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:40:53, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 7770)api_pipe_bind_req:
\PIPE\lsarpc -> \PIPE\lsass
[2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846)
  Transaction 5 of length 168
[2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:40:53, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=88 params=0 setup=2
[2003/10/23 15:40:53, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:40:53, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 7770)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\lsarpc
[2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30576 rpc command: LSA_OPENPOLICY2
[2003/10/23 15:40:53, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 18
[2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846)
  Transaction 6 of length 132
[2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:40:53, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=52 params=0 setup=2
[2003/10/23 15:40:53, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:40:53, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 7770)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\lsarpc
[2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30576 rpc command: LSA_ENUMTRUSTDOM
[2003/10/23 15:40:53, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 0
[2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846)
  Transaction 7 of length 124
[2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:40:53, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=44 params=0 setup=2
[2003/10/23 15:40:53, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:40:53, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 7770)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\lsarpc
[2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30576 rpc command: LSA_CLOSE
[2003/10/23 15:40:53, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(197)
  Closed policy
[2003/10/23 15:40:53, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 0
[2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846)
  Transaction 8 of length 46
[2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685)
  switch message SMBclose (pid 19365)
[2003/10/23 15:41:11, 3] smbd/process.c:process_smb(846)
  Transaction 9 of length 97
[2003/10/23 15:41:11, 3] smbd/process.c:switch_message(685)
  switch message SMBntcreateX (pid 19365)
[2003/10/23 15:41:11, 3] smbd/nttrans.c:nt_open_pipe(559)
  nt_open_pipe: Known pipe NETLOGON opening.
[2003/10/23 15:41:11, 3] smbd/process.c:process_smb(846)
  Transaction 10 of length 152
[2003/10/23 15:41:11, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:11, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=72 params=0 setup=2
[2003/10/23 15:41:11, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:11, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7771)api_pipe_bind_req:
\PIPE\NETLOGON -> \PIPE\lsass
[2003/10/23 15:41:11, 3] smbd/process.c:process_smb(846)
  Transaction 11 of length 364
[2003/10/23 15:41:11, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:11, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=284 params=0 setup=2
[2003/10/23 15:41:11, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:11, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7771)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:41:11, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\NETLOGON
[2003/10/23 15:41:11, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30577 rpc command: NET_SAMLOGON
[2003/10/23 15:41:11, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 656
[2003/10/23 15:41:11, 3] smbd/process.c:process_smb(846)
  Transaction 12 of length 46
[2003/10/23 15:41:11, 3] smbd/process.c:switch_message(685)
  switch message SMBclose (pid 19365)
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 13 of length 95
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBntcreateX (pid 19365)
[2003/10/23 15:41:20, 3] smbd/nttrans.c:nt_open_pipe(559)
  nt_open_pipe: Known pipe lsarpc opening.
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 14 of length 152
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=72 params=0 setup=2
[2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 7772)api_pipe_bind_req:
\PIPE\lsarpc -> \PIPE\lsass
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 15 of length 168
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=88 params=0 setup=2
[2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 7772)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\lsarpc
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30578 rpc command: LSA_OPENPOLICY2
[2003/10/23 15:41:20, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 18
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 16 of length 132
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=52 params=0 setup=2
[2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 7772)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\lsarpc
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30578 rpc command: LSA_ENUMTRUSTDOM
[2003/10/23 15:41:20, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 0
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 17 of length 124
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=44 params=0 setup=2
[2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "lsarpc" (pnum 7772)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\lsarpc
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30578 rpc command: LSA_CLOSE
[2003/10/23 15:41:20, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(197)
  Closed policy
[2003/10/23 15:41:20, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 0
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 18 of length 46
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBclose (pid 19365)
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 19 of length 97
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBntcreateX (pid 19365)
[2003/10/23 15:41:20, 3] smbd/nttrans.c:nt_open_pipe(559)
  nt_open_pipe: Known pipe NETLOGON opening.
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 20 of length 152
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=72 params=0 setup=2
[2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7773)api_pipe_bind_req:
\PIPE\NETLOGON -> \PIPE\lsass
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 21 of length 184
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=104 params=0 setup=2
[2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7773)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\NETLOGON
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30579 rpc command: NET_REQCHAL
[2003/10/23 15:41:20, 3] smbd/sec_ctx.c:push_sec_ctx(296)
  push_sec_ctx(999, 1100) : sec_ctx_stack_ndx = 1
[2003/10/23 15:41:20, 3] smbd/uid.c:push_conn_ctx(285)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/10/23 15:41:20, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_open_connection(217)
  ldap_open_connection: connection opened
[2003/10/23 15:41:20, 0] passdb/pdb_ldap.c:ldap_connect_system(315)
  ldap_connect_system: Binding to ldap server as
"cn=Manager,dc=pharm-olam,dc=com"
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_connect_system(331)
  ldap_connect_system: succesful connection to the LDAP server
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_search_one_user(343)
  ldap_search_one_user: searching
for:[(&(uid=emach-nt-01$)(objectclass=sambaAccount))]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [uid] = [EMACH-NT-01$]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576)
  Entry found for user: EMACH-NT-01$
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [pwdLastSet] = [1066938672]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [logonTime] = [0]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [logoffTime] = [2147483647]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [kickoffTime] = [2147483647]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [pwdCanChange] = [0]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [pwdMustChange] = [2147483647]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [cn] = [EMACH-NT-01$]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [homeDrive] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [smbHome] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [scriptPath] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [profilePath] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [description] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [userWorkstations] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [rid] = [3622]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [primaryGroupID] = [3601]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [lmPassword] =
[0E3730B32E3C58C12F839336D7EE2783]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [ntPassword] =
[0E3730B32E3C58C12F839336D7EE2783]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [acctFlags] = [[W          ]]
[2003/10/23 15:41:20, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
  pop_sec_ctx (999, 1100) - sec_ctx_stack_ndx = 0
[2003/10/23 15:41:20, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 42
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 22 of length 228
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=148 params=0 setup=2
[2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7773)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\NETLOGON
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30579 rpc command: NET_AUTH2
[2003/10/23 15:41:20, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 68
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 23 of length 364
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=284 params=0 setup=2
[2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7773)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\NETLOGON
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30579 rpc command: NET_SAMLOGON
[2003/10/23 15:41:20, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(605)
  SAM Logon (Interactive). Domain:[POI].  User:[root]
[2003/10/23 15:41:20, 3] smbd/sec_ctx.c:push_sec_ctx(296)
  push_sec_ctx(999, 1100) : sec_ctx_stack_ndx = 1
[2003/10/23 15:41:20, 3] smbd/uid.c:push_conn_ctx(285)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/10/23 15:41:20, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_open_connection(217)
  ldap_open_connection: connection opened
[2003/10/23 15:41:20, 0] passdb/pdb_ldap.c:ldap_connect_system(315)
  ldap_connect_system: Binding to ldap server as
"cn=Manager,dc=pharm-olam,dc=com"
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_connect_system(331)
  ldap_connect_system: succesful connection to the LDAP server
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_search_one_user(343)
  ldap_search_one_user: searching
for:[(&(uid=root)(objectclass=sambaAccount))]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [uid] = [root]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576)
  Entry found for user: root
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [pwdLastSet] = [0]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [logonTime] = [0]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [logoffTime] = [0]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [kickoffTime] = [0]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [pwdCanChange] = [0]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [pwdMustChange] = [0]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [cn] = [root]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [homeDrive] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [smbHome] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [scriptPath] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [profilePath] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [description] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [userWorkstations] = [<does not exist>]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [rid] = [1000]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [primaryGroupID] = [512]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [lmPassword] =
[624AAC413795CDC1FF17365FAF1FFE89]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [ntPassword] =
[3B1B47E42E0463276E3DED6CEF349F93]
[2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [acctFlags] = [[UX         ]]
[2003/10/23 15:41:20, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
  pop_sec_ctx (999, 1100) - sec_ctx_stack_ndx = 0
[2003/10/23 15:41:20, 3] smbd/sec_ctx.c:push_sec_ctx(296)
  push_sec_ctx(999, 1100) : sec_ctx_stack_ndx = 1
[2003/10/23 15:41:20, 3] smbd/uid.c:push_conn_ctx(285)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/10/23 15:41:20, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/10/23 15:41:20, 3] smbd/sec_ctx.c:pop_sec_ctx(435)
  pop_sec_ctx (999, 1100) - sec_ctx_stack_ndx = 0
[2003/10/23 15:41:20, 3]
rpc_server/srv_util.c:get_domain_user_groups(187)
  domain group access  513/7  granted
[2003/10/23 15:41:20, 3]
rpc_server/srv_util.c:get_domain_user_groups(194)
  domain admin group access  512/7  granted
[2003/10/23 15:41:20, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 4792
[2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846)
  Transaction 24 of length 362
[2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans (pid 19365)
[2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519)
  trans <\PIPE\> data=282 params=0 setup=2
[2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7773)free_pipe_context:
destroying talloc pool of size 0
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165)
  Doing \PIPE\NETLOGON
[2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197)
  api_rpcTNP: pipe 30579 rpc command: NET_SAMLOGOFF
[2003/10/23 15:41:20, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(444)
  free_pipe_context: destroying talloc pool of size 232
[2003/10/23 15:42:20, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/10/23 15:43:20, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/10/23 15:44:20, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0