[Samba] logon problems, with ldap & samba 3.0

Jan Otto j.delege at chello.nl
Mon Sep 8 20:47:10 GMT 2003


Deja.com with samba groups looks like they don't take me serious...very confusing, then i post
my message here hope that someone here can help me. I know that my mail is very long and also my
log file but sometime it's necessary voor a good problem solving.
I am playing for a few weeks now with linux as a complete newbie (redhat 9.0) with Ldap and Samba 3.0rc1. 
Problem, i have joined the windows workstation (BNC5) at the domain "xenon-systems.lan" with samba, 
that goes Oke. But when i want to logon with a user "pietjepuk" in my ldap database at the domain, 
windows 2000 Pro said; "The system could nog log you in".  I have logged, samba at level 10, so sorry 
for the huge log file i send with this message, still hope you want to take a look at this file. 
For sure i send my smb.conf, and two entry's of my ldap database, the one for user "Pietjepuk" and 
the machine account "BNC5".  Maybe i have made some stupid configuration mistakes here, but i am stucked 
for a moment with this problem, i don't know where to look now. If you need more configuration info to 
analyze this problem (like the samba tools configuration, i have used) mail me.

My smb.conf file;

SMB.CONF

[global]                                                                            
workgroup = xenon-systems
netbios name = janotto12
server string = LDAP-Samba Server
guest account = nobody                                                                              
log file = /var/log/samba/log.%m
max log size = 50
security = user
log level = 10101010101010101010
hosts allow = 192.168.1.15
admin users = root Administrator
encrypt passwords = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = yes
os level = 64
domain master = yes
preferred master = yes
domain logons = yes
name resolve order = host lmhosts wins bcast
ldap server = localhost
ldap admin dn = cn=Manager,dc=xenon-systems,dc=lan
ldap ssl = off
passdb backend = ldapsam:ldap://JanOtto:389
ldap delete dn = no
ldap suffix = dc=xenon-systems,dc=lan
ldap group suffix = ou=Group
ldap user suffix = ou=People
ldap machine suffix = ou=machine
ldap passwd sync = no
ldap trust ids = no
 dns proxy = no
[netlogon]
     path = /usr/local/samba/lib/netlogon
     guest ok = yes
     read only = yes
     write list = ntadmin
[profiles]
     path = /export/smb/ntprofile
     read only = no
     create mask = 0600
     directory mask = 0700


My ldap database enty's

# pietjepuk, People, xenon-systems, lan
dn: uid=pietjepuk,ou=People,dc=xenon-systems,dc=lan
cn: pietjepuk
sn: pietjepuk
uid: pietjepuk
uidNumber: 1002
gidNumber: 100
homeDirectory: /home//pietjepuk
loginShell: /bin/bash
description: System User
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: sambaSAMAccount
objectClass: organizationalPerson
objectClass: top
objectClass: shadowAccount
sambaPwdLastSet: 1061988901
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 1061988901
sambaPwdMustChange: 1063803301
displayName: System User
sambaAcctFlags: [U          ]
sambaSID: S-1-5-21-3925117408-4120281639-4000504131-3004
sambaPrimaryGroupSID: S-1-5-21-3925117408-4120281639-4000504131-1201
sambaHomeDrive: D:
sambaHomePath: \\PDC-SRV\homes
sambaProfilePath: \\PDC-SRV\profiles\pietjepuk
sambaLogonScript: pietjepuk.cmd
sambaLMPassword: A0BEBA4E6AF90B6B4D0E222EE9C73E37
sambaNTPassword: E44C940239C9060A669CE8741D69CF72
gecos: pietjepuk
userPassword:: e2NyeXB0fVVwUnpRc0RpQkkzbmM=
shadowLastChange: 12303


# BNC5$, machine, xenon-systems, lan
dn: uid=BNC5$,ou=machine,dc=xenon-systems,dc=lan
objectClass: top
objectClass: posixAccount
objectClass: sambaSamAccount
cn: BNC5$
uid: BNC5$
uidNumber: 1005
gidNumber: 553
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
sambaSID: S-1-5-21-2952444217-1520760294-1954335297-3010
sambaPrimaryGroupSID: S-1-5-21-2952444217-1520760294-1954335297-2107
displayName: BNC5$
sambaAcctFlags: [W          ]
sambaPwdCanChange: 1062411688
sambaPwdMustChange: 1064226088
sambaLMPassword: 17407D39E46F4EAA8E8E51AC5A81EE4A
sambaNTPassword: 174FD546AC808130341FACD614F04BE7
sambaPwdLastSet: 1062411688


And the huge logfile............sorry 

2003/09/08 10:03:37, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password(299)
  secrets_fetch failed!
[2003/09/08 10:03:37, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2003/09/08 10:03:37, 10] lib/gencache.c:gencache_get(285)
  Cache entry with key = TDOM/XENON-SYSTEMS couldn't be found
[2003/09/08 10:03:37, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(172)
  no entry for trusted domain XENON-SYSTEMS found.
[2003/09/08 10:03:37, 5] auth/auth_util.c:make_user_info(132)
  attempting to make a user_info for pietjepuk (pietjepuk)
[2003/09/08 10:03:37, 5] auth/auth_util.c:make_user_info(142)
  making strings for pietjepuk's user_info struct
[2003/09/08 10:03:37, 5] auth/auth_util.c:make_user_info(184)
  making blobs for pietjepuk's user_info struct
[2003/09/08 10:03:37, 10] auth/auth_util.c:make_user_info(193)
  made an encrypted user_info for pietjepuk (pietjepuk)
[2003/09/08 10:03:37, 3] auth/auth.c:check_ntlm_password(216)
  check_ntlm_password:  Checking password for unmapped user [XENON-SYSTEMS]\[pietjepuk]@[BNC5] with the new password interface
[2003/09/08 10:03:37, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  mapped user is: [XENON-SYSTEMS]\[pietjepuk]@[BNC5]
[2003/09/08 10:03:37, 10] auth/auth.c:check_ntlm_password(228)
  check_ntlm_password: auth_context challenge created by random
[2003/09/08 10:03:37, 10] auth/auth.c:check_ntlm_password(230)
  challenge is: 
[2003/09/08 10:03:37, 5] lib/util.c:dump_data(1887)
  [000] F1 EC 48 DC 32 89 FA A9                           ..H.2... 
[2003/09/08 10:03:37, 10] auth/auth.c:check_ntlm_password(256)
  check_ntlm_password: guest had nothing to say
[2003/09/08 10:03:37, 8] lib/util.c:is_myname(1739)
  is_myname("XENON-SYSTEMS") returns 0
[2003/09/08 10:03:37, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2003/09/08 10:03:37, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2003/09/08 10:03:37, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/09/08 10:03:37, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2003/09/08 10:03:37, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2003/09/08 10:03:37, 2] lib/smbldap.c:smbldap_search_suffix(1068)
  smbldap_search_suffix: searching for:[(&(uid=pietjepuk)(objectclass=sambaSamAccount))]
[2003/09/08 10:03:37, 11] lib/smbldap.c:smbldap_open(822)
  smbldap_open: already connected to the LDAP server
[2003/09/08 10:03:39, 2] passdb/pdb_ldap.c:init_sam_from_ldap(457)
  Entry found for user: pietjepuk
[2003/09/08 10:03:39, 5] lib/username.c:Get_Pwnam(288)
  Finding user pietjepuk
[2003/09/08 10:03:39, 5] lib/username.c:Get_Pwnam_internals(223)
  Trying _Get_Pwnam(), username as lowercase is pietjepuk
[2003/09/08 10:03:39, 5] lib/username.c:Get_Pwnam_internals(251)
  Get_Pwnam_internals did find user [pietjepuk]!
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_username(585)
  pdb_set_username: setting username pietjepuk, was 
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 11 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_domain(612)
  pdb_set_domain: setting domain XENON-SYSTEMS, was 
[2003/09/08 10:03:39, 11] passdb/pdb_get_set.c:pdb_set_init_flags(497)
  element 13 -> now DEFAULT
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_nt_username(639)
  pdb_set_nt_username: setting nt username pietjepuk, was 
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 14 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_user_sid_from_string(525)
  pdb_set_user_sid_from_string: setting user sid S-1-5-21-3925117408-4120281639-4000504131-3004
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_user_sid(512)
  pdb_set_user_sid: setting user sid S-1-5-21-3925117408-4120281639-4000504131-3004
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 17 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_group_sid_from_string(560)
  pdb_set_group_sid_from_string: setting group sid S-1-5-21-3925117408-4120281639-4000504131-1201
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_group_sid(548)
  pdb_set_group_sid: setting group sid S-1-5-21-3925117408-4120281639-4000504131-1201
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 18 -> now SET
[2003/09/08 10:03:39, 11] passdb/pdb_get_set.c:pdb_get_init_flags(189)
  element 17: SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 20 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 5 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 6 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 7 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 8 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 9 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_fullname(666)
  pdb_set_full_name: setting full name System User, was 
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 12 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(747)
  pdb_set_dir_drive: setting dir drive D:, was NULL
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 3 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_homedir(774)
  pdb_set_homedir: setting home dir \\PDC-SRV\homes, was 
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 1 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_logon_script(693)
  pdb_set_logon_script: setting logon script pietjepuk.cmd, was 
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 4 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_profile_path(720)
  pdb_set_profile_path: setting profile path \\PDC-SRV\profiles\pietjepuk, was 
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 2 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 22 -> now SET
[2003/09/08 10:03:39, 10] lib/smbldap.c:smbldap_get_single_attribute(298)
  smbldap_get_single_attribute: [sambaUserWorkstations] = [<does not exist>]
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 30 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 31 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 19 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 15 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 16 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 25 -> now SET
[2003/09/08 10:03:39, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 26 -> now SET
[2003/09/08 10:03:39, 11] passdb/pdb_get_set.c:pdb_set_init_flags(474)
  element 32 -> now CHANGED
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2003/09/08 10:03:39, 11] passdb/pdb_get_set.c:pdb_get_init_flags(189)
  element 31: SET
[2003/09/08 10:03:39, 4] auth/auth_sam.c:sam_password_ok(218)
  sam_password_ok: Checking NT MD4 password
[2003/09/08 10:03:39, 4] auth/auth_sam.c:sam_account_ok(324)
  sam_account_ok: Checking SMB password for user pietjepuk
[2003/09/08 10:03:39, 10] lib/system_smbd.c:sys_getgrouplist(113)
  sys_getgrouplist: user [pietjepuk]
[2003/09/08 10:03:39, 10] lib/system_smbd.c:sys_getgrouplist(122)
  sys_getgrouplist(): disabled winbindd for group lookup [user == pietjepuk]
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2003/09/08 10:03:39, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/09/08 10:03:39, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2003/09/08 10:03:39, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2003/09/08 10:03:39, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 1002
  Primary group is 100 and contains 2 supplementary groups
  Group[  0]: 100
  Group[  1]: 100
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2003/09/08 10:03:39, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/09/08 10:03:39, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2003/09/08 10:03:39, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2003/09/08 10:03:39, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1631)
  ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=100))]
[2003/09/08 10:03:39, 11] lib/smbldap.c:smbldap_open(822)
  smbldap_open: already connected to the LDAP server
[2003/09/08 10:03:39, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1782)
  Did not find group
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2003/09/08 10:03:39, 10] passdb/passdb.c:local_gid_to_sid(1190)
  local_gid_to_sid: Fall back to algorithmic mapping: 100 -> S-1-5-21-2952444217-1520760294-1954335297-1201
[2003/09/08 10:03:39, 10] smbd/uid.c:gid_to_sid(780)
  gid_to_sid: local 100 -> S-1-5-21-2952444217-1520760294-1954335297-1201
[2003/09/08 10:03:39, 3] smbd/uid.c:fetch_sid_from_gid_cache(651)
  fetch sid from gid cache 100 -> S-1-5-21-2952444217-1520760294-1954335297-1201
[2003/09/08 10:03:39, 10] auth/auth_util.c:debug_nt_user_token(491)
  NT user token of user S-1-5-21-3925117408-4120281639-4000504131-3004
  contains 6 SIDs
  SID[  0]: S-1-5-21-3925117408-4120281639-4000504131-3004
  SID[  1]: S-1-5-21-3925117408-4120281639-4000504131-1201
  SID[  2]: S-1-1-0
  SID[  3]: S-1-5-2
  SID[  4]: S-1-5-11
  SID[  5]: S-1-5-21-2952444217-1520760294-1954335297-1201
[2003/09/08 10:03:39, 5] auth/auth_util.c:make_server_info_sam(838)
  make_server_info_sam: made server info for user pietjepuk -> pietjepuk
[2003/09/08 10:03:39, 3] auth/auth.c:check_ntlm_password(265)
  check_ntlm_password: sam authentication for user [pietjepuk] succeeded
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2003/09/08 10:03:39, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/09/08 10:03:39, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2003/09/08 10:03:39, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2003/09/08 10:03:39, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2003/09/08 10:03:39, 5] auth/auth.c:check_ntlm_password(289)
  check_ntlm_password:  PAM Account for user [pietjepuk] succeeded
[2003/09/08 10:03:39, 2] auth/auth.c:check_ntlm_password(302)
  check_ntlm_password:  authentication for user [pietjepuk] -> [pietjepuk] -> [pietjepuk] succeeded
[2003/09/08 10:03:39, 5] auth/auth_util.c:free_user_info(1185)
  attempting to free (and zero) a user_info structure
[2003/09/08 10:03:39, 10] auth/auth_util.c:free_user_info(1188)
  structure was created for pietjepuk
[2003/09/08 10:03:39, 5] rpc_server/srv_netlog_nt.c:_net_sam_logon(661)
  _net_sam_logon: check_password returned status NT_STATUS_OK
[2003/09/08 10:03:39, 4] rpc_parse/parse_net.c:init_dom_sid2s(868)
  init_dom_sid2s: 
[2003/09/08 10:03:39, 5] auth/auth_util.c:free_server_info(1210)
  attempting to free (and zero) a server_info structure
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000000 net_io_r_sam_logon 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      0000 buffer_creds: 00000001
[2003/09/08 10:03:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
      000004 smb_io_cred 
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000004 smb_io_chal 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
              0004 data: 01 40 3b b4 46 3d 49 d2 
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          00000c smb_io_utime 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              000c time: 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
      0010 switch_value: 0003
[2003/09/08 10:03:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
      000014 net_io_user_info3 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          0014 ptr_user_info : 00000001
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000018 smb_io_time logon time
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0018 low : 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              001c high: 00000000
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000020 smb_io_time logoff time
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0020 low : ffffffff
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0024 high: 7fffffff
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000028 smb_io_time kickoff time
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0028 low : ffffffff
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              002c high: 7fffffff
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000030 smb_io_time last set time
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0030 low : 6d3d4080
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0034 high: 01c36c9a
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000038 smb_io_time can change time
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0038 low : 6d3d4080
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              003c high: 01c36c9a
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000040 smb_io_time must change time
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0040 low : e7ea0080
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0044 high: 01c37d1a
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000048 smb_io_unihdr hdr_user_name
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              0048 uni_str_len: 0012
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              004a uni_max_len: 0012
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              004c buffer     : 00000001
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000050 smb_io_unihdr hdr_full_name
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              0050 uni_str_len: 0016
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              0052 uni_max_len: 0016
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0054 buffer     : 00000001
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000058 smb_io_unihdr hdr_logon_script
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              0058 uni_str_len: 001a
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              005a uni_max_len: 001a
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              005c buffer     : 00000001
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000060 smb_io_unihdr hdr_profile_path
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              0060 uni_str_len: 0038
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              0062 uni_max_len: 0038
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0064 buffer     : 00000001
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000068 smb_io_unihdr hdr_home_dir
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              0068 uni_str_len: 001e
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              006a uni_max_len: 001e
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              006c buffer     : 00000001
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000070 smb_io_unihdr hdr_dir_drive
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              0070 uni_str_len: 0004
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              0072 uni_max_len: 0004
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0074 buffer     : 00000001
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
          0078 logon_count   : 0000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
          007a bad_pw_count  : 0000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          007c user_rid      : 00000bbc
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          0080 group_rid     : 000004b1
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          0084 num_groups    : 00000001
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          0088 buffer_groups : 00000001
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          008c user_flgs     : 00000020
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
          0090 user_sess_key: b6 5a e1 c0 b5 55 bc 05 ec 25 dc 9e 6b 29 0a 4d 
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          0000a0 smb_io_unihdr hdr_logon_srv
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              00a0 uni_str_len: 0012
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              00a2 uni_max_len: 0012
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              00a4 buffer     : 00000001
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          0000a8 smb_io_unihdr hdr_logon_dom
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              00a8 uni_str_len: 001a
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
              00aa uni_max_len: 001a
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              00ac buffer     : 00000001
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          00b0 buffer_dom_id : 00000001
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
          00b4 padding       : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          00dc num_other_sids: 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          00e0 buffer_other_sids: 00000000
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          0000e4 smb_io_unistr2 uni_user_name
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              00e4 uni_max_len: 00000009
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              00e8 undoc      : 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              00ec uni_str_len: 00000009
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
              00f0 buffer     : p.i.e.t.j.e.p.u.k.
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000102 smb_io_unistr2 uni_full_name
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0104 uni_max_len: 0000000b
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0108 undoc      : 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              010c uni_str_len: 0000000b
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
              0110 buffer     : S.y.s.t.e.m. .U.s.e.r.
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000126 smb_io_unistr2 uni_logon_script
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0128 uni_max_len: 0000000d
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              012c undoc      : 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0130 uni_str_len: 0000000d
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
              0134 buffer     : p.i.e.t.j.e.p.u.k...c.m.d.
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          00014e smb_io_unistr2 uni_profile_path
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0150 uni_max_len: 0000001c
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0154 undoc      : 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0158 uni_str_len: 0000001c
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
              015c buffer     : \.\.P.D.C.-.S.R.V.\.p.r.o.f.i.l.e.s.\.p.i.e.t.j.e.p.u.k.
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000194 smb_io_unistr2 uni_home_dir
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0194 uni_max_len: 0000000f
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0198 undoc      : 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              019c uni_str_len: 0000000f
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
              01a0 buffer     : \.\.P.D.C.-.S.R.V.\.h.o.m.e.s.
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          0001be smb_io_unistr2 uni_dir_drive
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              01c0 uni_max_len: 00000002
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              01c4 undoc      : 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              01c8 uni_str_len: 00000002
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
              01cc buffer     : D.:.
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          01d0 num_groups2   : 00000001
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          0001d4 smb_io_gid 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              01d4 g_rid: 000004b1
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              01d8 attr : 00000007
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          0001dc smb_io_unistr2 uni_logon_srv
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              01dc uni_max_len: 00000009
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              01e0 undoc      : 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              01e4 uni_str_len: 00000009
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
              01e8 buffer     : J.A.N.O.T.T.O.1.2.
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          0001fa smb_io_unistr2 uni_logon_dom
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              01fc uni_max_len: 0000000d
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0200 undoc      : 00000000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0204 uni_str_len: 0000000d
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
              0208 buffer     : X.E.N.O.N.-.S.Y.S.T.E.M.S.
[2003/09/08 10:03:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000222 smb_io_dom_sid2 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0224 num_auths: 00000004
[2003/09/08 10:03:39, 8] rpc_parse/parse_prs.c:prs_debug(81)
              000228 smb_io_dom_sid sid
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
                  0228 sid_rev_num: 01
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
                  0229 num_auths  : 04
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
                  022a id_auth[0] : 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
                  022b id_auth[1] : 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
                  022c id_auth[2] : 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
                  022d id_auth[3] : 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
                  022e id_auth[4] : 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
                  022f id_auth[5] : 05
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32s(861)
                  0230 sub_auths : 00000015 e9f489e0 f5968227 ee72d943 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      0240 auth_resp   : 00000001
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664)
      0244 status      : NT_STATUS_OK
[2003/09/08 10:03:39, 0] rpc_parse/parse_prs.c:prs_dump_region(67)
  created /tmp/out_NETLOGON_2.19.prs
[2003/09/08 10:03:39, 5] rpc_server/srv_pipe.c:api_rpcTNP(1535)
  api_rpcTNP: called NETLOGON successfully
[2003/09/08 10:03:39, 10] rpc_server/srv_pipe.c:api_rpcTNP(1546)
  api_rpcTNP: rpc input buffer underflow (parse error?)
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
  010e : 00 00 8a e3 13 71 02 f4 36 71 01 40 04 00 01 00 00 00 44 06 00 00 48 50 09 00 
[2003/09/08 10:03:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
  free_pipe_context: destroying talloc pool of size 4816
[2003/09/08 10:03:39, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 336
[2003/09/08 10:03:39, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
  writeX-IPC pnum=7244 nwritten=352
[2003/09/08 10:03:39, 5] lib/util.c:show_msg(456)
[2003/09/08 10:03:39, 5] lib/util.c:show_msg(466)
  size=47
  smb_com=0x2f
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=2
  smb_pid=65279
  smb_uid=101
  smb_mid=2368
  smt_wct=6
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=  352 (0x160)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_bcc=0
[2003/09/08 10:03:39, 6] lib/util_sock.c:write_socket(407)
  write_socket(5,51)
[2003/09/08 10:03:39, 6] lib/util_sock.c:write_socket(410)
  write_socket(5,51) wrote 51
[2003/09/08 10:03:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
  got smb length of 59
[2003/09/08 10:03:39, 6] smbd/process.c:process_smb(889)
  got message type 0x0 of len 0x3b
[2003/09/08 10:03:39, 3] smbd/process.c:process_smb(890)
  Transaction 39 of length 63
[2003/09/08 10:03:39, 5] lib/util.c:show_msg(456)
[2003/09/08 10:03:39, 5] lib/util.c:show_msg(466)
  size=59
  smb_com=0x2e
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=65279
  smb_uid=101
  smb_mid=2432
  smt_wct=12
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=57054 (0xDEDE)
  smb_vwv[ 2]=29252 (0x7244)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]= 1024 (0x400)
  smb_vwv[ 6]= 1024 (0x400)
  smb_vwv[ 7]=65535 (0xFFFF)
  smb_vwv[ 8]=65535 (0xFFFF)
  smb_vwv[ 9]= 1024 (0x400)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=    0 (0x0)
  smb_bcc=0
[2003/09/08 10:03:39, 3] smbd/process.c:switch_message(685)
  switch message SMBreadX (pid 1408)
[2003/09/08 10:03:39, 4] smbd/uid.c:change_to_user(122)
  change_to_user: Skipping user change - already user
[2003/09/08 10:03:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1151)
  search for pipe pnum=7244
[2003/09/08 10:03:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
  pipe name NETLOGON pnum=7244 (pipes_open=2)
[2003/09/08 10:03:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
  pipe name NETLOGON pnum=7242 (pipes_open=2)
[2003/09/08 10:03:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
  read_from_pipe: 7244 name: NETLOGON len: 1024
[2003/09/08 10:03:39, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
  read_from_pipe: NETLOGON: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 584.
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000000 smb_io_rpc_hdr hdr
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0000 major     : 05
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0001 minor     : 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0002 pkt_type  : 02
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0003 flags     : 03
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0004 pack_type0: 10
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0005 pack_type1: 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0006 pack_type2: 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0007 pack_type3: 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
      0008 frag_len  : 0288
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
      000a auth_len  : 0020
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      000c call_id   : 00000004
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000010 smb_io_rpc_hdr_resp resp
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      0010 alloc_hint: 00000248
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
      0014 context_id: 0000
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0016 cancel_ct : 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0017 reserved  : 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000260 smb_io_rpc_hdr_auth hdr_auth
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0260 auth_type    : 44
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0261 auth_level   : 06
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0262 padding      : 08
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0263 reserved     : 00
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      0264 auth_context : 00000001
[2003/09/08 10:03:39, 10] rpc_parse/parse_prs.c:netsec_encode(1476)
  SCHANNEL: netsec_encode seq_num=1 data_len=584
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000268 smb_io_rpc_auth_netsec_chk 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
      0268 sig  : 77 00 7a 00 ff ff 00 00 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
      0270 seq_num: 85 8b a4 a0 4e 09 f6 33 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
      0278 packet_digest: 5a ae 29 1d 38 4d 22 cb 
[2003/09/08 10:03:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
      0280 data8: d9 27 a5 4a 72 f8 d7 64 
[2003/09/08 10:03:39, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
  readX-IPC pnum=7244 min=1024 max=1024 nread=648
[2003/09/08 10:03:39, 5] lib/util.c:show_msg(456)
[2003/09/08 10:03:39, 5] lib/util.c:show_msg(466)
 [2003/09/08 10:03:39, 6] lib/util_sock.c:write_socket(407)
  write_socket(5,711)
[2003/09/08 10:03:39, 6] lib/util_sock.c:write_socket(410)
  write_socket(5,711) wrote 711
[2003/09/08 10:04:07, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
  got smb length of 41
[2003/09/08 10:04:07, 6] smbd/process.c:process_smb(889)
  got message type 0x0 of len 0x29
[2003/09/08 10:04:07, 3] smbd/process.c:process_smb(890)
  Transaction 40 of length 45
[2003/09/08 10:04:07, 5] lib/util.c:show_msg(456)
[2003/09/08 10:04:07, 5] lib/util.c:show_msg(466)
  size=41
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=65279
  smb_uid=101
  smb_mid=2496
  smt_wct=3
  smb_vwv[ 0]=29250 (0x7242)
  smb_vwv[ 1]=65535 (0xFFFF)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_bcc=0
[2003/09/08 10:04:07, 3] smbd/process.c:switch_message(685)
  switch message SMBclose (pid 1408)
[2003/09/08 10:04:07, 0] smbd/process.c:smb_dump(640)
  created /tmp/SMBclose.71.req len 45
[2003/09/08 10:04:07, 4] smbd/uid.c:change_to_user(122)
  change_to_user: Skipping user change - already user
[2003/09/08 10:04:07, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1151)
  search for pipe pnum=7242
[2003/09/08 10:04:07, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
  pipe name NETLOGON pnum=7244 (pipes_open=2)
[2003/09/08 10:04:07, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
  pipe name NETLOGON pnum=7242 (pipes_open=2)
[2003/09/08 10:04:07, 5] smbd/pipes.c:reply_pipe_close(258)
  reply_pipe_close: pnum:7242
[2003/09/08 10:04:07, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
  closed pipe name NETLOGON pnum=7242 (pipes_open=1)
[2003/09/08 10:04:07, 0] smbd/process.c:smb_dump(640)
  created /tmp/SMBclose.71.resp len 39
[2003/09/08 10:04:07, 5] lib/util.c:show_msg(456)
[2003/09/08 10:04:07, 5] lib/util.c:show_msg(466)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=2
  smb_pid=65279
  smb_uid=101
  smb_mid=2496
  smt_wct=0
  smb_bcc=0
[2003/09/08 10:04:07, 6] lib/util_sock.c:write_socket(407)
  write_socket(5,39)
[2003/09/08 10:04:07, 6] lib/util_sock.c:write_socket(410)
  write_socket(5,39) wrote 39


More information about the samba mailing list