[Samba] Re: Auth problems 3.0.13
Misty Stanley-Jones
misty at borkholder.com
Mon Apr 4 15:03:01 GMT 2005
More info from scanning the rest of the debug output:
[2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
[000] EE 05 00 00 03 10 00 00 00 94 00 00 00 03 00 00 ........ ........
[010] 00 7C 00 00 00 00 00 11 00 00 00 00 00 03 00 00 .|...... ........
[020] 00 00 00 00 00 11 4C 51 42 A8 62 00 00 2A 00 2A ......LQ B.b..*.*
[030] 00 04 7A E5 76 15 00 00 00 00 00 00 00 15 00 00 ..z.v... ........
[040] 00 52 00 65 00 66 00 75 00 73 00 65 00 50 00 61 .R.e.f.u .s.e.P.a
[050] 00 73 00 73 00 77 00 6F 00 72 00 64 00 43 00 68 .s.s.w.o .r.d.C.h
[060] 00 61 00 6E 00 67 00 65 00 00 00 53 00 64 F5 F5 .a.n.g.e ...S.d..
[070] 02 94 F5 F5 02 94 F5 F5 02 04 00 00 00 00 00 00 ........ ........
[080] 00 00 00 00 00 5C F5 F5 02 04 00 00 00 54 F5 F5 .....\.. .....T..
[090] 02 00 00 00 00 .....
[2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
0028 buffer : R.e.f.u.s.e.P.a.s.s.w.o.r.d.C.h.a.n.g.e...
[2005/04/04 09:15:46, 3] smbd/connection.c:yield_connection(76)
yield_connection: tdb_delete for name failed with error Record does not
exist.
On Monday 04 April 2005 09:41 am, you wrote:
> Hi all,
>
> In upgrading from 3.0.11-pre1 to 3.0.13 I corrupted something, and I now
> have the following symptoms:
>
> 1. Users can log into my domain just fine, even root user.
> 2. Member servers are able to query the PDC with "smbclient -L' command
> 3. PDC is unable to query itself with 'smbclient -L -U <anyuser>' but
> 'smbclient -L -U%' (anonymous) works
> 4. Unable to join any machine to the domain -- I get "Access Denied" error
> message.
>
> I'm using OpenLDAP backend. I have verified that the bind DN in
> secrets.tdb and the password are both correct.
>
> Here is some info:
>
> Excerpts from smb.conf:
> passdb backend = ldapsam:ldap://192.168.1.101
> ldap suffix = dc=borkholder,dc=com
> ldap admin dn = cn=Manager,dc=borkholder,dc=com
> ldap group suffix = ou=Groups
> ldap user suffix = ou=People
> ldap machine suffix = ou=Computers
> ldap idmap suffix = ou=People
> ldap ssl = no
> ldap passwd sync = yes
> ldap delete dn = No
> # It seems with recent changes in behavior of smbldap-tools the following
> # should be changed to 'smbldap-usermod'
> add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
> add user script = /usr/local/smbldap-useradd -m "%u"
> add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
> add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
> delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u"
> "%g" set primary group script = /usr/local/sbin/smbldap-usermod -g "%g"
> "%u"
>
> Samba level 10 debug:
> [2005/04/04 09:15:45, 6] param/loadparm.c:lp_file_list_changed(2707)
> lp_file_list_changed()
> file /usr/local/samba/lib/special.smb -> /usr/local/samba/lib/special.smb
> last mod_time: Wed Jan 26 16:18:40 2005
>
> file /usr/local/samba/lib/bhpro.smb -> /usr/local/samba/lib/bhpro.smb
> last mod_time: Mon Mar 14 10:04:30 2005
>
> file /usr/local/samba/lib/printers.smb ->
> /usr/local/samba/lib/printers.smb last mod_time: Wed Jan 26 08:36:49 2005
>
> file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last
> mod_time: Mon Apr 4 09:11:21 2005
>
> [2005/04/04 09:15:45, 5] smbd/reply.c:reply_special(283)
> init msg_type=0x81 msg_flags=0x0
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,4)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,4) wrote 4
> [2005/04/04 09:15:45, 10] lib/util_sock.c:read_socket_data(378)
> read_socket_data: recv of 4 returned 0. Error = Success
> [2005/04/04 09:15:45, 10] lib/util_sock.c:receive_smb_raw(556)
> receive_smb_raw: length < 0!
> [2005/04/04 09:15:45, 3] smbd/process.c:timeout_processing(1334)
> timeout_processing: End of file from client (client has disconnected).
> [2005/04/04 09:15:45, 5] lib/gencache.c:gencache_shutdown(88)
> Closing cache file
> [2005/04/04 09:15:45, 5] libsmb/namecache.c:namecache_shutdown(79)
> namecache_shutdown: netbios namecache closed successfully.
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] smbd/uid.c:change_to_root_user(296)
> change_to_root_user: now uid=(0,0) gid=(0,0)
> [2005/04/04 09:15:45, 2] smbd/server.c:exit_server(609)
> Closing connections
> [2005/04/04 09:15:45, 3] smbd/connection.c:yield_connection(69)
> Yielding connection to
> [2005/04/04 09:15:45, 3] smbd/connection.c:yield_connection(76)
> yield_connection: tdb_delete for name failed with error Record does not
> exist.
> [2005/04/04 09:15:45, 5] smbd/oplock.c:receive_local_message(107)
> receive_local_message: doing select with timeout of 1 ms
> [2005/04/04 09:15:45, 3] smbd/server.c:exit_server(652)
> Server exit (normal exit)
> [2005/04/04 09:15:45, 6] param/loadparm.c:lp_file_list_changed(2707)
> lp_file_list_changed()
> file /usr/local/samba/lib/special.smb -> /usr/local/samba/lib/special.smb
> last mod_time: Wed Jan 26 16:18:40 2005
>
> file /usr/local/samba/lib/bhpro.smb -> /usr/local/samba/lib/bhpro.smb
> last mod_time: Mon Mar 14 10:04:30 2005
>
> file /usr/local/samba/lib/printers.smb ->
> /usr/local/samba/lib/printers.smb last mod_time: Wed Jan 26 08:36:49 2005
>
> file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last
> mod_time: Mon Apr 4 09:11:21 2005
>
> [2005/04/04 09:15:45, 4] lib/username.c:map_username(132)
> Scanning username map /usr/local/samba/lib/smbusers
> [2005/04/04 09:15:45, 10] lib/username.c:user_in_list(529)
> user_in_list: checking user root in list
> [2005/04/04 09:15:45, 10] lib/username.c:user_in_list(533)
> user_in_list: checking user |root| against |administrator|
> [2005/04/04 09:15:45, 5] auth/auth_util.c:make_user_info_map(224)
> make_user_info_map: Mapping user [CORP]\[root] from workstation
> [XPNORTON] [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] auth/auth_util.c:is_trusted_domain(1560)
> is_trusted_domain: Checking for domain trust with [CORP] <-----
> ?? [2005/04/04 09:15:45, 5]
> passdb/secrets.c:secrets_fetch_trusted_domain_password(334)
> secrets_fetch failed!
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 10] lib/gencache.c:gencache_get(285)
> Cache entry with key = TDOM/CORP couldn't be found
> [2005/04/04 09:15:45, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184)
> no entry for trusted domain CORP found.
> [2005/04/04 09:15:45, 5] auth/auth_util.c:make_user_info(132)
> attempting to make a user_info for root (root)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:make_user_info(142)
> making strings for root's user_info struct
> [2005/04/04 09:15:45, 5] auth/auth_util.c:make_user_info(184)
> making blobs for root's user_info struct
> [2005/04/04 09:15:45, 10] auth/auth_util.c:make_user_info(200)
> made an encrypted user_info for root (root)
> [2005/04/04 09:15:45, 3] auth/auth.c:check_ntlm_password(219)
> check_ntlm_password: Checking password for unmapped user
> [CORP]\[root]@[XPNORTON] with the new password interface
> [2005/04/04 09:15:45, 3] auth/auth.c:check_ntlm_password(222)
> check_ntlm_password: mapped user is: [CORP]\[root]@[XPNORTON]
> [2005/04/04 09:15:45, 10] auth/auth.c:check_ntlm_password(231)
> check_ntlm_password: auth_context challenge created by NTLMSSP callback
> (NTLM2)
> [2005/04/04 09:15:45, 10] auth/auth.c:check_ntlm_password(233)
> challenge is:
> [2005/04/04 09:15:45, 5] lib/util.c:dump_data(1995)
> [000] CD 6E 7B C9 69 E8 DF 47 .n{.i..G
> [2005/04/04 09:15:45, 10] auth/auth.c:check_ntlm_password(259)
> "xpnorton.debug" 21604L, 943034C 103,2
> check_ntlm_password: guest had nothing to say
> [2005/04/04 09:15:45, 8] lib/util.c:is_myname(1815)
> is_myname("CORP") returns 0
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] lib/smbldap.c:smbldap_search(1038)
> smbldap_search: base => [dc=borkholder,dc=com], filter => [(&(uid=root)
> (objectclass=sambaSamAccount))], scope => [2]
> [2005/04/04 09:15:45, 5] lib/smbldap.c:smbldap_close(949)
> The connection to the LDAP server was closed
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_open_connection(596)
> smbldap_open_connection: ldap://192.168.1.101
> [2005/04/04 09:15:45, 2] lib/smbldap.c:smbldap_open_connection(692)
> smbldap_open_connection: connection opened
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_connect_system(824)
> ldap_connect_system: Binding to ldap server ldap://192.168.1.101 as
> "cn=Manager,dc=borkholder,dc=com"
> [2005/04/04 09:15:45, 3] lib/smbldap.c:smbldap_connect_system(866)
> ldap_connect_system: succesful connection to the LDAP server <-- we
> connect ldap_connect_system: LDAP server does support paged results
> [2005/04/04 09:15:45, 4] lib/smbldap.c:smbldap_open(929)
> The LDAP server is succesfully connected
> [2005/04/04 09:15:45, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
> init_sam_from_ldap: Entry found for user: root
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_username(617)
> pdb_set_username: setting username root, was
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_domain(644)
> pdb_set_domain: setting domain CORP, was
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671)
> pdb_set_nt_username: setting nt username root, was
> [2005/04/04 09:15:45, 10]
> passdb/pdb_get_set.c:pdb_set_user_sid_from_string(557)
> pdb_set_user_sid_from_string: setting user sid
> S-1-5-21-725326080-1709766072-2910717368-500
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544)
> pdb_set_user_sid: setting user sid
> S-1-5-21-725326080-1709766072-2910717368-500
> [2005/04/04 09:15:45, 10]
> passdb/pdb_get_set.c:pdb_set_group_sid_from_string(592)
> pdb_set_group_sid_from_string: setting group sid
> S-1-5-21-725326080-1709766072-2910717368-513
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580)
> pdb_set_group_sid: setting group sid
> S-1-5-21-725326080-1709766072-2910717368-513
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [displayName] = [<does not exist>]
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_fullname(698)
> pdb_set_full_name: setting full name root, was
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [sambaHomeDrive] = [<does not exist>]
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779)
> pdb_set_dir_drive: setting dir drive H:, was NULL
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [sambaHomePath] = [<does not exist>]
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_homedir(806)
> pdb_set_homedir: setting home dir \\corpsrv\root, was
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [sambaLogonScript] = [<does not exist>]
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725)
> pdb_set_logon_script: setting logon script logon.bat, was
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [sambaProfilePath] = [<does not exist>]
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
> pdb_set_profile_path: setting profile path \\corpsrv\profiles\root\WinXP,
> was
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [description] = [<does not exist>]
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [sambaUserWorkstations] = [<does not
> exist>] [2005/04/04 09:15:45, 10]
> lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [sambaMungedDial] = [<does not exist>]
> [2005/04/04 09:15:45, 10] lib/account_pol.c:account_policy_get(210)
> account_policy_get: password history:0
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [sambaBadPasswordCount] = [<does not
> exist>] [2005/04/04 09:15:45, 10]
> lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [sambaBadPasswordTime] = [<does not exist>]
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [sambaLogonHours] = [<does not exist>]
> [2005/04/04 09:15:45, 5] passdb/login_cache.c:login_cache_init(41) Opening
> cache file at /usr/local/samba/var/locks/login_cache.tdb [2005/04/04
> 09:15:45, 7] passdb/login_cache.c:login_cache_read(83) Looking up login
> cache for user root
> [2005/04/04 09:15:45, 7] passdb/login_cache.c:login_cache_read(97)
> No cache entry found
> [2005/04/04 09:15:45, 9] passdb/pdb_ldap.c:init_sam_from_ldap(852)
> No cache entry, bad count = 0, bad time = 0
> [2005/04/04 09:15:45, 10] lib/account_pol.c:account_policy_get(210)
> account_policy_get: password history:0
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_username(617)
> pdb_set_username: setting username root, was
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_domain(644)
> pdb_set_domain: setting domain CORP, was
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_nt_username(671)
> pdb_set_nt_username: setting nt username root, was
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_fullname(698)
> pdb_set_full_name: setting full name root, was
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_homedir(806)
> pdb_set_homedir: setting home dir \\corpsrv\root, was
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779)
> pdb_set_dir_drive: setting dir drive H:, was NULL
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725)
> pdb_set_logon_script: setting logon script logon.bat, was
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
> pdb_set_profile_path: setting profile path \\corpsrv\profiles\root\WinXP,
> was
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_workstations(885)
> pdb_set_workstations: setting workstations , was
> [2005/04/04 09:15:45, 10] lib/account_pol.c:account_policy_get(210)
> account_policy_get: password history:0
> [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544)
> pdb_set_user_sid: setting user sid
> S-1-5-21-725326080-1709766072-2910717368-500
> [2005/04/04 09:15:45, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
> pdb_set_user_sid_from_rid:
> setting user sid S-1-5-21-725326080-1709766072-2910717368-500 from rid
> 500 [2005/04/04 09:15:45, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580)
> pdb_set_group_sid: setting group sid
> S-1-5-21-725326080-1709766072-2910717368-513
> [2005/04/04 09:15:45, 10]
> passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
> pdb_set_group_sid_from_rid:
> setting group sid S-1-5-21-725326080-1709766072-2910717368-513 from rid
> 513
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 9] passdb/passdb.c:pdb_update_autolock_flag(2350)
> pdb_update_autolock_flag: Account root not autolocked, no check needed
> [2005/04/04 09:15:45, 4] libsmb/ntlm_check.c:ntlm_password_check(326)
> ntlm_password_check: Checking NT MD4 password
> [2005/04/04 09:15:45, 4] auth/auth_sam.c:sam_account_ok(119)
> sam_account_ok: Checking SMB password for user root
> [2005/04/04 09:15:45, 5] auth/auth_sam.c:logon_hours_ok(101)
> logon_hours_ok: user root allowed to logon at this time (Mon Apr 4
> 09:15:45 2005
> )
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 10] lib/system_smbd.c:sys_getgrouplist(116)
> sys_getgrouplist: user [root]
> [2005/04/04 09:15:45, 10] lib/system_smbd.c:sys_getgrouplist(125)
> sys_getgrouplist(): disabled winbindd for group lookup [user == root]
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 8] lib/util_getent.c:remove_duplicate_gids(330)
> remove_duplicate_gids: Enter 7 gids
> [2005/04/04 09:15:45, 8] lib/util_getent.c:remove_duplicate_gids(348)
> remove_duplicate_gids: Exit 6 gids
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] lib/smbldap.c:smbldap_search(1038)
> smbldap_search: base => [ou=Groups,dc=borkholder,dc=com], filter =>
> [(&(objectClass=s
> ambaGroupMapping)(gidNumber=0))], scope => [2]
> [2005/04/04 09:15:45, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2106)
> ldapsam_getgroup: Did not find group
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 10] passdb/passdb.c:local_gid_to_sid(1267)
> local_gid_to_sid: Fall back to algorithmic mapping: 0 -> S-0-0
> [2005/04/04 09:15:45, 8] passdb/passdb.c:algorithmic_gid_to_sid(1233)
> algorithmic_gid_to_sid: falling back to RID algorithm
> [2005/04/04 09:15:45, 10] passdb/passdb.c:algorithmic_gid_to_sid(1237)
> algorithmic_gid_to_sid: gid (0) -> SID
> S-1-5-21-725326080-1709766072-2910717368-1001
> .
> [2005/04/04 09:15:45, 10] passdb/lookup_sid.c:gid_to_sid(372)
> gid_to_sid: local 0 -> S-1-5-21-725326080-1709766072-2910717368-1001
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] lib/smbldap.c:smbldap_search(1038)
> smbldap_search: base => [ou=Groups,dc=borkholder,dc=com], filter =>
> [(&(objectClass=sambaGroupMapping)(gidNumber=3))], scope => [2]
> [2005/04/04 09:15:45, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2106)
> ldapsam_getgroup: Did not find group
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 10] passdb/passdb.c:local_gid_to_sid(1267)
> local_gid_to_sid: Fall back to algorithmic mapping: 3 -> S-0-0
> [2005/04/04 09:15:45, 8] passdb/passdb.c:algorithmic_gid_to_sid(1233)
> algorithmic_gid_to_sid: falling back to RID algorithm
> [2005/04/04 09:15:45, 10] passdb/passdb.c:algorithmic_gid_to_sid(1237)
> algorithmic_gid_to_sid: gid (3) -> SID
> S-1-5-21-725326080-1709766072-2910717368-1007.
> [2005/04/04 09:15:45, 10] passdb/lookup_sid.c:gid_to_sid(372)
> gid_to_sid: local 3 -> S-1-5-21-725326080-1709766072-2910717368-1007
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] lib/smbldap.c:smbldap_search(1038)
> smbldap_search: base => [ou=Groups,dc=borkholder,dc=com], filter =>
> [(&(objectClass=sambaGroupMapping)(gidNumber=512))], scope => [2]
> [2005/04/04 09:15:45, 2] passdb/pdb_ldap.c:init_group_from_ldap(2000)
> init_group_from_ldap: Entry found for group: 512
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 10] passdb/passdb.c:local_gid_to_sid(1278)
> local_gid_to_sid: gid (512) -> SID
> S-1-5-21-725326080-1709766072-2910717368-512.
> [2005/04/04 09:15:45, 10] passdb/lookup_sid.c:gid_to_sid(372)
> gid_to_sid: local 512 -> S-1-5-21-725326080-1709766072-2910717368-512
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] lib/smbldap.c:smbldap_search(1038)
> smbldap_search: base => [ou=Groups,dc=borkholder,dc=com], filter =>
> [(&(objectClass=sambaGroupMapping)(gidNumber=513))], scope => [2]
> [2005/04/04 09:15:45, 2] passdb/pdb_ldap.c:init_group_from_ldap(2000)
> init_group_from_ldap: Entry found for group: 513
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 10] passdb/passdb.c:local_gid_to_sid(1278)
> local_gid_to_sid: gid (513) -> SID
> S-1-5-21-725326080-1709766072-2910717368-513.
> [2005/04/04 09:15:45, 10] passdb/lookup_sid.c:gid_to_sid(372)
> gid_to_sid: local 513 -> S-1-5-21-725326080-1709766072-2910717368-513
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] lib/smbldap.c:smbldap_search(1038)
> smbldap_search: base => [ou=Groups,dc=borkholder,dc=com], filter =>
> [(&(objectClass=sambaGroupMapping)(gidNumber=1020))], scope => [2]
> [2005/04/04 09:15:45, 2] passdb/pdb_ldap.c:init_group_from_ldap(2000)
> init_group_from_ldap: Entry found for group: 1020
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [description] = [<does not exist>]
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 10] passdb/passdb.c:local_gid_to_sid(1278)
> local_gid_to_sid: gid (1020) -> SID
> S-1-5-21-725326080-1709766072-2910717368-3041.
> [2005/04/04 09:15:45, 10] passdb/lookup_sid.c:gid_to_sid(372)
> gid_to_sid: local 1020 -> S-1-5-21-725326080-1709766072-2910717368-3041
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] lib/smbldap.c:smbldap_search(1038)
> smbldap_search: base => [ou=Groups,dc=borkholder,dc=com], filter =>
> [(&(objectClass=sambaGroupMapping)(gidNumber=1021))], scope => [2]
> [2005/04/04 09:15:45, 2] passdb/pdb_ldap.c:init_group_from_ldap(2000)
> init_group_from_ldap: Entry found for group: 1021
> [2005/04/04 09:15:45, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
> smbldap_get_single_attribute: [description] = [<does not exist>]
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 10] passdb/passdb.c:local_gid_to_sid(1278)
> local_gid_to_sid: gid (1021) -> SID
> S-1-5-21-725326080-1709766072-2910717368-3043.
> [2005/04/04 09:15:45, 10] passdb/lookup_sid.c:gid_to_sid(372)
> gid_to_sid: local 1021 -> S-1-5-21-725326080-1709766072-2910717368-3043
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 10] auth/auth_util.c:debug_nt_user_token(490)
> NT user token of user S-1-5-21-725326080-1709766072-2910717368-500
> contains 10 SIDs
> SID[ 0]: S-1-5-21-725326080-1709766072-2910717368-500
> SID[ 1]: S-1-5-21-725326080-1709766072-2910717368-513
> SID[ 2]: S-1-1-0
> SID[ 3]: S-1-5-2
> SID[ 4]: S-1-5-11
> SID[ 5]: S-1-5-21-725326080-1709766072-2910717368-1001
> SID[ 6]: S-1-5-21-725326080-1709766072-2910717368-1007
> SID[ 7]: S-1-5-21-725326080-1709766072-2910717368-512
> SID[ 8]: S-1-5-21-725326080-1709766072-2910717368-3041
> SID[ 9]: S-1-5-21-725326080-1709766072-2910717368-3043
> SE_PRIV 0x0 0x0 0x0 0x0
> [2005/04/04 09:15:45, 5] auth/auth_util.c:make_server_info_sam(862)
> make_server_info_sam: made server info for user root -> root
> [2005/04/04 09:15:45, 3] auth/auth.c:check_ntlm_password(268)
> check_ntlm_password: sam authentication for user [root] succeeded
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 3] smbd/uid.c:push_conn_ctx(365)
> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 5] auth/auth.c:check_ntlm_password(292)
> check_ntlm_password: PAM Account for user [root] succeeded
> [2005/04/04 09:15:45, 2] auth/auth.c:check_ntlm_password(305)
> check_ntlm_password: authentication for user [root] -> [root] -> [root]
> succeeded
> [2005/04/04 09:15:45, 5] auth/auth_util.c:free_user_info(1380)
> attempting to free (and zero) a user_info structure
> [2005/04/04 09:15:45, 10] auth/auth_util.c:free_user_info(1383)
> structure was created for root
> [2005/04/04 09:15:45, 10]
> auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117) Got NT session key of
> length 16
> [2005/04/04 09:15:45, 10]
> auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123) Got LM session key of
> length 16
> [2005/04/04 09:15:45, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(669)
> ntlmssp_server_auth: Created NTLM2 session key.
> [2005/04/04 09:15:45, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
> NTLMSSP Sign/Seal - Initialising with flags:
> [2005/04/04 09:15:45, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
> Got NTLMSSP neg_flags=0x60088215
> NTLMSSP_NEGOTIATE_UNICODE
> NTLMSSP_REQUEST_TARGET
> NTLMSSP_NEGOTIATE_SIGN
> NTLMSSP_NEGOTIATE_NTLM
> NTLMSSP_NEGOTIATE_ALWAYS_SIGN
> NTLMSSP_NEGOTIATE_NTLM2
> NTLMSSP_NEGOTIATE_128
> NTLMSSP_NEGOTIATE_KEY_EXCH
> [2005/04/04 09:15:45, 10] smbd/password.c:register_vuid(158)
> register_vuid: allocated vuid = 100
> [2005/04/04 09:15:45, 10] lib/util_pw.c:getpwnam_alloc(98)
> Got root from pwnam_cache
> [2005/04/04 09:15:45, 10] smbd/password.c:register_vuid(220)
> register_vuid: (0,0) root root CORP guest=0
> [2005/04/04 09:15:45, 3] smbd/password.c:register_vuid(222)
> User name: root Real name: root
> [2005/04/04 09:15:45, 3] smbd/password.c:register_vuid(241)
> UNIX uid 0 is UNIX user root, and will be vuid 100
> [2005/04/04 09:15:45, 7] param/loadparm.c:lp_servicenumber(4048)
> lp_servicenumber: couldn't find root
> [2005/04/04 09:15:45, 3] smbd/password.c:register_vuid(270)
> Adding homes service for user 'root' using home directory: '/root'
> [2005/04/04 09:15:45, 8] param/loadparm.c:add_a_service(2319)
> add_a_service: Creating snum = 35 for root
> [2005/04/04 09:15:45, 3] param/loadparm.c:lp_add_home(2360)
> adding home's share [root] for user 'root' at '/root'
> [2005/04/04 09:15:45, 6] param/loadparm.c:lp_file_list_changed(2707)
> lp_file_list_changed()
> file /usr/local/samba/lib/special.smb -> /usr/local/samba/lib/special.smb
> last mod_time: Wed Jan 26 16:18:40 2005
>
> file /usr/local/samba/lib/bhpro.smb -> /usr/local/samba/lib/bhpro.smb
> last mod_time: Mon Mar 14 10:04:30 2005
>
> file /usr/local/samba/lib/printers.smb ->
> /usr/local/samba/lib/printers.smb last mod_time: Wed Jan 26 08:36:49 2005
>
> file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last
> mod_time: Mon Apr 4 09:11:21 2005
>
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,102)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,102) wrote 102
> [2005/04/04 09:15:45, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(505)
> got smb length of 80
> [2005/04/04 09:15:45, 6] smbd/process.c:process_smb(1090)
> got message type 0x0 of len 0x50
> [2005/04/04 09:15:45, 3] smbd/process.c:process_smb(1091)
> Transaction 3 of length 84
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=80
> smb_com=0x75
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=24
> smb_flg2=51207
> smb_tid=0
> smb_pid=65279
> smb_uid=100
> smb_mid=192
> smt_wct=4
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]= 80 (0x50)
> smb_vwv[ 2]= 8 (0x8)
> smb_vwv[ 3]= 1 (0x1)
> smb_bcc=37
> [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
> [000] 00 5C 00 5C 00 43 00 4F 00 52 00 50 00 53 00 52 .\.\.C.O .R.P.S.R
> [010] 00 56 00 5C 00 49 00 50 00 43 00 24 00 00 00 3F .V.\.I.P .C.$...?
> [020] 3F 3F 3F 3F 00 ????.
> [2005/04/04 09:15:45, 3] smbd/process.c:switch_message(886)
> switch message SMBtconX (pid 25256) conn 0x0
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] smbd/uid.c:change_to_root_user(296)
> change_to_root_user: now uid=(0,0) gid=(0,0)
> [2005/04/04 09:15:45, 4] smbd/reply.c:reply_tcon_and_X(407)
> Client requested device type [?????] for share [IPC$]
> [2005/04/04 09:15:45, 5] smbd/service.c:make_connection(807)
> making a connection to 'normal' service ipc$
> [2005/04/04 09:15:45, 5] lib/username.c:Get_Pwnam(293)
> Finding user root
> [2005/04/04 09:15:45, 5] lib/username.c:Get_Pwnam_internals(223)
> Trying _Get_Pwnam(), username as lowercase is root
> [2005/04/04 09:15:45, 10] lib/util_pw.c:getpwnam_alloc(98)
> Got root from pwnam_cache
> [2005/04/04 09:15:45, 5] lib/username.c:Get_Pwnam_internals(251)
> Get_Pwnam_internals did find user [root]!
> [2005/04/04 09:15:45, 3] smbd/service.c:make_connection_snum(479)
> Connect path is '/tmp' for service [IPC$]
> [2005/04/04 09:15:45, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
> get_share_security: using default secdesc for IPC$
> [2005/04/04 09:15:45, 10] lib/util_seaccess.c:se_map_generic(176)
> se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
> [2005/04/04 09:15:45, 10] lib/util_seaccess.c:se_access_check(234)
> se_access_check: requested access 0x00000002, for NT token with 10
> entries and first sid S-1-5-21-725326080-1709766072-2910717368-500.
> [2005/04/04 09:15:45, 3] lib/util_seaccess.c:se_access_check(251)
> [2005/04/04 09:15:45, 3] lib/util_seaccess.c:se_access_check(252)
> se_access_check: user sid is S-1-5-21-725326080-1709766072-2910717368-500
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-513
> [2005/04/04 09:15:45, 3] lib/util_seaccess.c:se_access_check(251)
> [2005/04/04 09:15:45, 3] lib/util_seaccess.c:se_access_check(252)
> se_access_check: user sid is S-1-5-21-725326080-1709766072-2910717368-500
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-513
> se_access_check: also S-1-1-0
> se_access_check: also S-1-5-2
> se_access_check: also S-1-5-11
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-1001
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-1007
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-512
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-3041
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-3043
> se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask =
> 101f01ff, current desired = 2
> [2005/04/04 09:15:45, 5] lib/util_seaccess.c:se_access_check(309)
> se_access_check: access (2) granted.
> [2005/04/04 09:15:45, 3] smbd/vfs.c:vfs_init_default(206)
> Initialising default vfs hooks
> [2005/04/04 09:15:45, 5] smbd/connection.c:claim_connection(170)
> claiming IPC$ 0
> [2005/04/04 09:15:45, 10] smbd/uid.c:is_share_read_only_for_user(99)
> is_share_read_only_for_user: share IPC$ is read-only for unix user root
> [2005/04/04 09:15:45, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
> get_share_security: using default secdesc for IPC$
> [2005/04/04 09:15:45, 10] lib/util_seaccess.c:se_map_generic(176)
> se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
> [2005/04/04 09:15:45, 10] lib/util_seaccess.c:se_access_check(234)
> se_access_check: access (2) granted.
> [2005/04/04 09:15:45, 3] smbd/vfs.c:vfs_init_default(206)
> Initialising default vfs hooks
> [2005/04/04 09:15:45, 5] smbd/connection.c:claim_connection(170)
> claiming IPC$ 0
> [2005/04/04 09:15:45, 10] smbd/uid.c:is_share_read_only_for_user(99)
> is_share_read_only_for_user: share IPC$ is read-only for unix user root
> [2005/04/04 09:15:45, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
> get_share_security: using default secdesc for IPC$
> [2005/04/04 09:15:45, 10] lib/util_seaccess.c:se_map_generic(176)
> se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
> [2005/04/04 09:15:45, 10] lib/util_seaccess.c:se_access_check(234)
> se_access_check: requested access 0x00000001, for NT token with 10
> entries and first
> sid S-1-5-21-725326080-1709766072-2910717368-500.
> [2005/04/04 09:15:45, 3] lib/util_seaccess.c:se_access_check(251)
> [2005/04/04 09:15:45, 3] lib/util_seaccess.c:se_access_check(252)
> se_access_check: user sid is S-1-5-21-725326080-1709766072-2910717368-500
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-513
> se_access_check: also S-1-1-0
> se_access_check: also S-1-5-2
> se_access_check: also S-1-5-11
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-1001
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-1007
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-512
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-3041
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-3043
> se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask =
> 101f01ff, current desired = 1
> [2005/04/04 09:15:45, 5] lib/util_seaccess.c:se_access_check(309)
> se_access_check: access (1) granted.
> [2005/04/04 09:15:45, 10] lib/username.c:user_in_list(529)
> user_in_list: checking user root in list
> [2005/04/04 09:15:45, 10] lib/username.c:user_in_list(533)
> user_in_list: checking user |root| against |root|
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(490)
> NT user token of user S-1-5-21-725326080-1709766072-2910717368-500
> contains 10 SIDs
> SID[ 0]: S-1-5-21-725326080-1709766072-2910717368-500
> SID[ 1]: S-1-5-21-725326080-1709766072-2910717368-513
> SID[ 2]: S-1-1-0
> SID[ 3]: S-1-5-2
> SID[ 4]: S-1-5-11
> SID[ 5]: S-1-5-21-725326080-1709766072-2910717368-1001
> SID[ 6]: S-1-5-21-725326080-1709766072-2910717368-1007
> SID[ 7]: S-1-5-21-725326080-1709766072-2910717368-512
> SID[ 8]: S-1-5-21-725326080-1709766072-2910717368-3041
> SID[ 9]: S-1-5-21-725326080-1709766072-2910717368-3043
> SE_PRIV 0x0 0x0 0x0 0x0
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 6 supplementary groups
> Group[ 0]: 0
> Group[ 1]: 3
> Group[ 2]: 512
> Group[ 3]: 513
> Group[ 4]: 1020
> Group[ 5]: 1021
> [2005/04/04 09:15:45, 5] smbd/uid.c:change_to_user(281)
> change_to_user uid=(0,0) gid=(0,0)
> [2005/04/04 09:15:45, 3] smbd/service.c:make_connection_snum(642)
> xpnorton (192.168.1.106) connect to service IPC$ initially as user root
> (uid=0, gid=0) (pid 25256)
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(485)
> NT user token: (NULL)
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 0 supplementary groups
> [2005/04/04 09:15:45, 5] smbd/uid.c:change_to_root_user(296)
> change_to_root_user: now uid=(0,0) gid=(0,0)
> [2005/04/04 09:15:45, 3] smbd/reply.c:reply_tcon_and_X(455)
> tconX service=IPC$
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=48
> smb_com=0x75
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=136
> smb_flg2=51201
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=192
> smt_wct=3
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]= 0 (0x0)
> smb_vwv[ 2]= 1 (0x1)
> smb_bcc=7
> [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
> [000] 49 50 43 00 00 00 00 IPC....
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,52)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,52) wrote 52
> [2005/04/04 09:15:45, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(505)
> got smb length of 100
> [2005/04/04 09:15:45, 6] smbd/process.c:process_smb(1090)
> got message type 0x0 of len 0x64
> [2005/04/04 09:15:45, 3] smbd/process.c:process_smb(1091)
> Transaction 4 of length 104
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=100
> smb_com=0xa2
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=24
> smb_flg2=51207
> smb_tid=1
> smb_pid=824
> smb_uid=100
> smb_mid=256
> smt_wct=24
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]=57054 (0xDEDE)
> smb_vwv[ 2]= 3584 (0xE00)
> smb_vwv[ 3]= 5632 (0x1600)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 0 (0x0)
> smb_vwv[ 6]= 0 (0x0)
> smb_vwv[ 7]=40704 (0x9F00)
> smb_vwv[ 8]= 513 (0x201)
> smb_vwv[ 9]= 0 (0x0)
> smb_vwv[10]= 0 (0x0)
> smb_vwv[11]= 0 (0x0)
> smb_vwv[12]= 0 (0x0)
> smb_vwv[13]= 0 (0x0)
> smb_vwv[14]= 0 (0x0)
> smb_vwv[15]= 768 (0x300)
> smb_vwv[16]= 0 (0x0)
> smb_vwv[17]= 256 (0x100)
> smb_vwv[18]= 0 (0x0)
> smb_vwv[19]=16384 (0x4000)
> smb_vwv[20]= 0 (0x0)
> smb_vwv[21]= 512 (0x200)
> smb_vwv[22]= 0 (0x0)
> smb_vwv[23]= 768 (0x300)
> smb_bcc=17
> [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
> [000] 00 5C 00 6C 00 73 00 61 00 72 00 70 00 63 00 00 .\.l.s.a .r.p.c..
> [010] 00 .
> [2005/04/04 09:15:45, 3] smbd/process.c:switch_message(886)
> switch message SMBntcreateX (pid 25256) conn 0x832b378
> [2005/04/04 09:15:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_nt_user_token(490)
> NT user token of user S-1-5-21-725326080-1709766072-2910717368-500
> contains 10 SIDs
> SID[ 0]: S-1-5-21-725326080-1709766072-2910717368-500
> SID[ 1]: S-1-5-21-725326080-1709766072-2910717368-513
> SID[ 2]: S-1-1-0
> SID[ 3]: S-1-5-2
> SID[ 4]: S-1-5-11
> SID[ 5]: S-1-5-21-725326080-1709766072-2910717368-1001
> SID[ 6]: S-1-5-21-725326080-1709766072-2910717368-1007
> SID[ 7]: S-1-5-21-725326080-1709766072-2910717368-512
> SID[ 8]: S-1-5-21-725326080-1709766072-2910717368-3041
> SID[ 9]: S-1-5-21-725326080-1709766072-2910717368-3043
> SE_PRIV 0x0 0x0 0x0 0x0
> [2005/04/04 09:15:45, 5] auth/auth_util.c:debug_unix_user_token(506)
> UNIX token of user 0
> Primary group is 0 and contains 6 supplementary groups
> Group[ 0]: 0
> Group[ 1]: 3
> Group[ 2]: 512
> Group[ 3]: 513
> Group[ 4]: 1020
> Group[ 5]: 1021
> [2005/04/04 09:15:45, 5] smbd/uid.c:change_to_user(281)
> change_to_user uid=(0,0) gid=(0,0)
> [2005/04/04 09:15:45, 4] smbd/vfs.c:vfs_ChDir(660)
> vfs_ChDir to /tmp
> [2005/04/04 09:15:45, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
> reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes =
> 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40
> root_dir_fid = 0x0
> [2005/04/04 09:15:45, 4] smbd/nttrans.c:nt_open_pipe(497)
> nt_open_pipe: Opening pipe \lsarpc.
> [2005/04/04 09:15:45, 3] smbd/nttrans.c:nt_open_pipe(514)
> nt_open_pipe: Known pipe lsarpc opening.
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178)
> Open pipe requested lsarpc (pipes_open=0)
> [2005/04/04 09:15:45, 4]
> rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278)
> Create pipe requested lsarpc
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles:
> created handle list for pipe lsarpc
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles:
> pipe_handles ref count = 1 for pipe lsarpc
> [2005/04/04 09:15:45, 4]
> rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370)
> Created internal pipe lsarpc (pipes_open=0)
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257)
> Opened pipe lsarpc with handle 76b9 (pipes_open=1)
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263)
> open pipes: name lsarpc pnum=76b9
> [2005/04/04 09:15:45, 5] smbd/nttrans.c:do_ntcreate_pipe_open(562)
> do_ntcreate_pipe_open: open pipe = \lsarpc
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=103
> smb_com=0xa2
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=136
> smb_flg2=51201
> smb_tid=1
> smb_pid=824
> smb_uid=100
> smb_mid=256
> smt_wct=34
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]= 0 (0x0)
> smb_vwv[ 2]=47360 (0xB900)
> smb_vwv[ 3]= 374 (0x176)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 0 (0x0)
> smb_vwv[ 6]= 0 (0x0)
> smb_vwv[ 7]= 0 (0x0)
> smb_vwv[ 8]= 0 (0x0)
> smb_vwv[ 9]= 0 (0x0)
> smb_vwv[10]= 0 (0x0)
> smb_vwv[11]= 0 (0x0)
> smb_vwv[12]= 0 (0x0)
> smb_vwv[13]= 0 (0x0)
> smb_vwv[14]= 0 (0x0)
> smb_vwv[15]= 0 (0x0)
> smb_vwv[16]= 0 (0x0)
> smb_vwv[17]= 0 (0x0)
> smb_vwv[18]= 0 (0x0)
> smb_vwv[19]= 0 (0x0)
> smb_vwv[20]= 0 (0x0)
> smb_vwv[21]=32768 (0x8000)
> smb_vwv[22]= 0 (0x0)
> smb_vwv[23]= 0 (0x0)
> smb_vwv[24]= 0 (0x0)
> smb_vwv[25]= 0 (0x0)
> smb_vwv[26]= 0 (0x0)
> smb_vwv[27]= 0 (0x0)
> smb_vwv[28]= 0 (0x0)
> smb_vwv[29]= 0 (0x0)
> smb_vwv[30]= 0 (0x0)
> smb_vwv[31]= 512 (0x200)
> smb_vwv[32]=65280 (0xFF00)
> smb_vwv[33]= 5 (0x5)
> smb_bcc=0
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,107)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,107) wrote 107
> [2005/04/04 09:15:45, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(505)
> got smb length of 136
> [2005/04/04 09:15:45, 6] smbd/process.c:process_smb(1090)
> got message type 0x0 of len 0x88
> [2005/04/04 09:15:45, 3] smbd/process.c:process_smb(1091)
> Transaction 5 of length 140
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=136
> smb_com=0x2f
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=24
> smb_flg2=51207
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=320
> smt_wct=14
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]=57054 (0xDEDE)
> smb_vwv[ 2]=30393 (0x76B9)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]=65535 (0xFFFF)
> smb_vwv[ 6]=65535 (0xFFFF)
> smb_vwv[ 7]= 8 (0x8)
> smb_vwv[ 8]= 72 (0x48)
> smb_vwv[ 9]= 0 (0x0)
> smb_vwv[10]= 72 (0x48)
> smb_vwv[11]= 64 (0x40)
> smb_vwv[12]= 0 (0x0)
> smb_vwv[13]= 0 (0x0)
> smb_bcc=73
> [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
> [000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H......
> [010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........
> [020] 00 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 .xW4.4.. ....#Eg.
> [030] AB 00 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........
> [040] 00 2B 10 48 60 02 00 00 00 .+.H`... .
> [2005/04/04 09:15:45, 3] smbd/process.c:switch_message(886)
> switch message SMBwriteX (pid 25256) conn 0x832b378
> [2005/04/04 09:15:45, 4] smbd/uid.c:change_to_user(194)
> change_to_user: Skipping user change - already user
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
> search for pipe pnum=76b9
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
> pipe name lsarpc pnum=76b9 (pipes_open=1)
> [2005/04/04 09:15:45, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
> write_to_pipe: 76b9 name: lsarpc open: Yes len: 72
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
> write_to_pipe: data_left = 72
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data:
> Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
> [2005/04/04 09:15:45, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
> fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16,
> receive_len = 0
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> write_to_pipe: data_used = 16
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
> write_to_pipe: data_left = 56
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data:
> Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0000 major : 05
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0001 minor : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0002 pkt_type : 0b
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0003 flags : 03
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0004 pack_type0: 10
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0005 pack_type1: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0006 pack_type2: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0007 pack_type3: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0008 frag_len : 0048
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 000a auth_len : 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 000c call_id : 00000001
> [2005/04/04 09:15:45, 5]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header:
> using little-endian RPC
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515) unmarshall_rpc_header:
> type = 11, flags = 3
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> write_to_pipe: data_used = 0
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
> write_to_pipe: data_left = 56
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data:
> Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_complete_pdu(720) process_complete_pdu:
> processing packet type 11
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(876)
> api_pipe_bind_req: decode request. 876
> [2005/04/04 09:15:45, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
> api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr_rb
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr_bba
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0000 max_tsize: 10b8
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0002 max_rsize: 10b8
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0004 assoc_gid: 00000000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0008 num_elements: 00000001
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 000c context_id : 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 000e num_syntaxes: 01
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 00000f smb_io_rpc_iface
> [2005/04/04 09:15:45, 7] rpc_parse/parse_prs.c:prs_debug(82)
> 000010 smb_io_uuid uuid
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0010 data : 12345778
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0014 data : 1234
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0016 data : abcd
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
> 0018 data : ef 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
> 001a data : 01 23 45 67 89 ab
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0020 version: 00000000
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 000024 smb_io_rpc_iface
> [2005/04/04 09:15:45, 7] rpc_parse/parse_prs.c:prs_debug(82)
> 000024 smb_io_uuid uuid
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0024 data : 8a885d04
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0028 data : 1ceb
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 002a data : 11c9
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
> 002c data : 9f e8
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
> 002e data : 08 00 2b 10 48 60
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0034 version: 00000002
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1017)
> api_pipe_bind_req: make response. 1017
> [2005/04/04 09:15:45, 3] rpc_server/srv_pipe.c:check_bind_req(762)
> check_bind_req for \PIPE\lsarpc
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr_ba
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr_bba
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0000 max_tsize: 10b8
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0002 max_rsize: 10b8
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0004 assoc_gid: 000053f0
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 000008 smb_io_rpc_addr_str
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0008 len: 000c
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
> 000a str: \PIPE\lsass.
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 000016 smb_io_rpc_results
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0018 num_results: 01
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 001c result : 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 001e reason : 0000
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 000020 smb_io_rpc_iface
> [2005/04/04 09:15:45, 7] rpc_parse/parse_prs.c:prs_debug(82)
> 000020 smb_io_uuid uuid
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0020 data : 8a885d04
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0024 data : 1ceb
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0026 data : 11c9
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
> 0028 data : 9f e8
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
> 002a data : 08 00 2b 10 48 60
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0030 version: 00000002
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0000 major : 05
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0001 minor : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0002 pkt_type : 0c
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0003 flags : 03
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0004 pack_type0: 10
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0005 pack_type1: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0006 pack_type2: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0007 pack_type3: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0008 frag_len : 0044
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 000a auth_len : 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 000c call_id : 00000001
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> write_to_pipe: data_used = 56
> [2005/04/04 09:15:45, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
> writeX-IPC pnum=76b9 nwritten=72
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=47
> smb_com=0x2f
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=136
> smb_flg2=51201
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=320
> smt_wct=6
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]= 0 (0x0)
> smb_vwv[ 2]= 72 (0x48)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 0 (0x0)
> smb_bcc=0
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,51)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,51) wrote 51
> [2005/04/04 09:15:45, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(505)
> got smb length of 59
> [2005/04/04 09:15:45, 6] smbd/process.c:process_smb(1090)
> got message type 0x0 of len 0x3b
> [2005/04/04 09:15:45, 3] smbd/process.c:process_smb(1091)
> Transaction 6 of length 63
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=59
> smb_com=0x2e
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=24
> smb_flg2=51207
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=384
> smt_wct=12
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]=57054 (0xDEDE)
> smb_vwv[ 2]=30393 (0x76B9)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 1024 (0x400)
> smb_vwv[ 6]= 1024 (0x400)
> smb_vwv[ 7]=65535 (0xFFFF)
> smb_vwv[ 8]=65535 (0xFFFF)
> smb_vwv[ 9]= 1024 (0x400)
> smb_vwv[10]= 0 (0x0)
> smb_vwv[11]= 0 (0x0)
> smb_bcc=0
> [2005/04/04 09:15:45, 3] smbd/process.c:switch_message(886)
> switch message SMBreadX (pid 25256) conn 0x832b378
> [2005/04/04 09:15:45, 4] smbd/uid.c:change_to_user(194)
> change_to_user: Skipping user change - already user
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
> search for pipe pnum=76b9
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
> pipe name lsarpc pnum=76b9 (pipes_open=1)
> [2005/04/04 09:15:45, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
> read_from_pipe: 76b9 name: lsarpc len: 1024
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(968)
> read_from_pipe: lsarpc: current_pdu_len = 68, current_pdu_sent = 0
> returning 68 bytes.
> [2005/04/04 09:15:45, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
> readX-IPC pnum=76b9 min=1024 max=1024 nread=68
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=127
> smb_com=0x2e
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=136
> smb_flg2=51201
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=384
> smt_wct=12
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]= 0 (0x0)
> smb_vwv[ 2]= 0 (0x0)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 68 (0x44)
> smb_vwv[ 6]= 59 (0x3B)
> smb_vwv[ 7]= 0 (0x0)
> smb_vwv[ 8]= 0 (0x0)
> smb_vwv[ 9]= 0 (0x0)
> smb_vwv[10]= 0 (0x0)
> smb_vwv[11]= 0 (0x0)
> smb_bcc=68
> [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
> [000] 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 00 ........ D.......
> [010] B8 10 B8 10 F0 53 00 00 0C 00 5C 50 49 50 45 5C .....S.. ..\PIPE\
> [020] 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 00 lsass... ........
> [030] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H`
> [040] 02 00 00 00 ....
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,131)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,131) wrote 131
> [2005/04/04 09:15:45, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(505)
> got smb length of 152
> [2005/04/04 09:15:45, 6] smbd/process.c:process_smb(1090)
> got message type 0x0 of len 0x98
> [2005/04/04 09:15:45, 3] smbd/process.c:process_smb(1091)
> Transaction 7 of length 156
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=152
> smb_com=0x2f
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=24
> smb_flg2=51207
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=448
> smt_wct=14
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]=57054 (0xDEDE)
> smb_vwv[ 2]=30393 (0x76B9)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]=65535 (0xFFFF)
> smb_vwv[ 6]=65535 (0xFFFF)
> smb_vwv[ 7]= 8 (0x8)
> smb_vwv[ 8]= 88 (0x58)
> smb_vwv[ 9]= 0 (0x0)
> smb_vwv[10]= 88 (0x58)
> smb_vwv[11]= 64 (0x40)
> smb_vwv[12]= 0 (0x0)
> smb_vwv[13]= 0 (0x0)
> smb_bcc=89
> [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
> [000] EE 05 00 00 03 10 00 00 00 58 00 00 00 01 00 00 ........ .X......
> [010] 00 40 00 00 00 00 00 2C 00 90 BB 32 02 0A 00 00 . at ....., ...2....
> [020] 00 00 00 00 00 0A 00 00 00 5C 00 5C 00 43 00 4F ........ .\.\.C.O
> [030] 00 52 00 50 00 53 00 52 00 56 00 00 00 18 00 00 .R.P.S.R .V......
> [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
> [050] 00 00 00 00 00 00 00 00 02 ........ .
> [2005/04/04 09:15:45, 3] smbd/process.c:switch_message(886)
> switch message SMBwriteX (pid 25256) conn 0x832b378
> [2005/04/04 09:15:45, 4] smbd/uid.c:change_to_user(194)
> change_to_user: Skipping user change - already user
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
> search for pipe pnum=76b9
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
> pipe name lsarpc pnum=76b9 (pipes_open=1)
> [2005/04/04 09:15:45, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
> write_to_pipe: 76b9 name: lsarpc open: Yes len: 88
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
> write_to_pipe: data_left = 88
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data:
> Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 88
> [2005/04/04 09:15:45, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
> fill_rpc_header: data_to_copy = 88, len_needed_to_complete_hdr = 16,
> receive_len = 0
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> write_to_pipe: data_used = 16
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
> write_to_pipe: data_left = 72
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data:
> Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 72
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0000 major : 05
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0001 minor : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0002 pkt_type : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0003 flags : 03
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0004 pack_type0: 10
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0005 pack_type1: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0006 pack_type2: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0007 pack_type3: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0008 frag_len : 0058
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 000a auth_len : 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 000c call_id : 00000001
> [2005/04/04 09:15:45, 5]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header:
> using little-endian RPC
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515) unmarshall_rpc_header:
> type = 0, flags = 3
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> write_to_pipe: data_used = 0
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
> write_to_pipe: data_left = 72
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data:
> Start: pdu_received_len = 0, pdu_needed_len = 72, incoming dat
> a = 72
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_complete_pdu(720) process_complete_pdu:
> processing packet type 0
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr_req req
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0000 alloc_hint: 00000040
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0004 context_id: 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0006 opnum : 002c
> [2005/04/04 09:15:45, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
> free_pipe_context: destroying talloc pool of size 0
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
> Requested \PIPE\lsarpc
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
> api_rpcTNP: lsarpc op 0x2c - api_rpcTNP: rpc command: LSA_OPENPOLICY2
> [2005/04/04 09:15:45, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
> api_rpc_cmds[0].fn == 0x80fc000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 lsa_io_q_open_pol2
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0000 ptr : 0232bb90
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 000004 smb_io_unistr2
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0004 uni_max_len: 0000000a
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0008 offset : 00000000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 000c uni_str_len: 0000000a
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
> 0010 buffer : \.\.C.O.R.P.S.R.V...
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 000024 lsa_io_obj_attr
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0024 len : 00000018
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 002c ptr_obj_name: 00000000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0030 attributes : 00000000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0034 ptr_sec_desc: 00000000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0038 ptr_sec_qos : 00000000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 003c des_access: 02000000
> [2005/04/04 09:15:45, 10] lib/util_seaccess.c:se_access_check(234)
> se_access_check: requested access 0x02000000, for NT token with 10
> entries and first sid S-1-5-21-725326080-1709766072-2910717368-500.
> [2005/04/04 09:15:45, 3] lib/util_seaccess.c:se_access_check(251)
> [2005/04/04 09:15:45, 3] lib/util_seaccess.c:se_access_check(252)
> se_access_check: user sid is S-1-5-21-725326080-1709766072-2910717368-500
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-513
> se_access_check: also S-1-1-0
> se_access_check: also S-1-5-2
> se_access_check: also S-1-5-11
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-1001
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-1007
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-512
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-3041
> se_access_check: also S-1-5-21-725326080-1709766072-2910717368-3043
> [2005/04/04 09:15:45, 4] rpc_server/srv_lsa_hnd.c:create_policy_hnd(142)
> Opened policy hnd[1] [000] 00 00 00 00 01 00 00 00 00 00 00 00 11 4C 51
> 42 ........ .....LQB
> [010] A8 62 00 00 .b..
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 lsa_io_r_open_pol2
> [2005/04/04 09:15:45, 6] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_pol_hnd
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0000 data1: 00000000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0004 data2: 00000001
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0008 data3: 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 000a data4: 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
> 000c data5: 11 4c 51 42 a8 62 00 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
> 0014 status: NT_STATUS_OK
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
> api_rpcTNP: called lsarpc successfully
> [2005/04/04 09:15:45, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
> free_pipe_context: destroying talloc pool of size 820
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> write_to_pipe: data_used = 72
> [2005/04/04 09:15:45, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
> writeX-IPC pnum=76b9 nwritten=88
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=47
> smb_com=0x2f
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=136
> smb_flg2=51201
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=448
> smt_wct=6
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]= 0 (0x0)
> smb_vwv[ 2]= 88 (0x58)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 0 (0x0)
> smb_bcc=0
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,51)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,51) wrote 51
> [2005/04/04 09:15:45, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(505)
> got smb length of 59
> [2005/04/04 09:15:45, 6] smbd/process.c:process_smb(1090)
> got message type 0x0 of len 0x3b
> [2005/04/04 09:15:45, 3] smbd/process.c:process_smb(1091)
> Transaction 8 of length 63
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=59
> smb_com=0x2e
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=24
> smb_flg2=51207
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=512
> smt_wct=12
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]=57054 (0xDEDE)
> smb_vwv[ 2]=30393 (0x76B9)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 1024 (0x400)
> smb_vwv[ 6]= 1024 (0x400)
> smb_vwv[ 7]=65535 (0xFFFF)
> smb_vwv[ 8]=65535 (0xFFFF)
> smb_vwv[ 9]= 1024 (0x400)
> smb_vwv[10]= 0 (0x0)
> smb_vwv[11]= 0 (0x0)
> smb_bcc=0
> [2005/04/04 09:15:45, 3] smbd/process.c:switch_message(886)
> switch message SMBreadX (pid 25256) conn 0x832b378
> [2005/04/04 09:15:45, 4] smbd/uid.c:change_to_user(194)
> change_to_user: Skipping user change - already user
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
> search for pipe pnum=76b9
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
> pipe name lsarpc pnum=76b9 (pipes_open=1)
> [2005/04/04 09:15:45, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
> read_from_pipe: 76b9 name: lsarpc len: 1024
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
> read_from_pipe: lsarpc: fault_state = 0 : data_sent_length = 0,
> prs_offset(&p->out_data.rdata) = 24.
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr hdr
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0000 major : 05
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0001 minor : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0002 pkt_type : 02
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0003 flags : 03
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0004 pack_type0: 10
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0005 pack_type1: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0006 pack_type2: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0007 pack_type3: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0008 frag_len : 0030
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 000a auth_len : 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 000c call_id : 00000001
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000010 smb_io_rpc_hdr_resp resp
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0010 alloc_hint: 00000018
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0014 context_id: 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0016 cancel_ct : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0017 reserved : 00
> [2005/04/04 09:15:45, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
> readX-IPC pnum=76b9 min=1024 max=1024 nread=48
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=107
> smb_com=0x2e
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=136
> smb_flg2=51201
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=512
> smt_wct=12
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]= 0 (0x0)
> smb_vwv[ 2]= 0 (0x0)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 48 (0x30)
> smb_vwv[ 6]= 59 (0x3B)
> smb_vwv[ 7]= 0 (0x0)
> smb_vwv[ 8]= 0 (0x0)
> smb_vwv[ 9]= 0 (0x0)
> smb_vwv[10]= 0 (0x0)
> smb_vwv[11]= 0 (0x0)
> smb_bcc=48
> [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
> [000] 05 00 02 03 10 00 00 00 30 00 00 00 01 00 00 00 ........ 0.......
> [010] 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ........ ........
> [020] 00 00 00 00 11 4C 51 42 A8 62 00 00 00 00 00 00 .....LQB .b......
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,111)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,111) wrote 111
> [2005/04/04 09:15:45, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(505)
> got smb length of 110
> [2005/04/04 09:15:45, 6] smbd/process.c:process_smb(1090)
> got message type 0x0 of len 0x6e
> [2005/04/04 09:15:45, 3] smbd/process.c:process_smb(1091)
> Transaction 9 of length 114
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=110
> smb_com=0x2f
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=24
> smb_flg2=51207
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=577
> smt_wct=14
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]=57054 (0xDEDE)
> smb_vwv[ 2]=30393 (0x76B9)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]=65535 (0xFFFF)
> smb_vwv[ 6]=65535 (0xFFFF)
> smb_vwv[ 7]= 8 (0x8)
> smb_vwv[ 8]= 46 (0x2E)
> smb_vwv[ 9]= 0 (0x0)
> smb_vwv[10]= 46 (0x2E)
> smb_vwv[11]= 64 (0x40)
> smb_vwv[12]= 0 (0x0)
> smb_vwv[13]= 0 (0x0)
> smb_bcc=47
> [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
> [000] EE 05 00 00 03 10 00 00 00 2E 00 00 00 02 00 00 ........ ........
> [010] 00 16 00 00 00 00 00 2E 00 00 00 00 00 01 00 00 ........ ........
> [020] 00 00 00 00 00 11 4C 51 42 A8 62 00 00 0C 00 ......LQ B.b....
> [2005/04/04 09:15:45, 3] smbd/process.c:switch_message(886)
> switch message SMBwriteX (pid 25256) conn 0x832b378
> [2005/04/04 09:15:45, 4] smbd/uid.c:change_to_user(194)
> change_to_user: Skipping user change - already user
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
> search for pipe pnum=76b9
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
> pipe name lsarpc pnum=76b9 (pipes_open=1)
> [2005/04/04 09:15:45, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
> write_to_pipe: 76b9 name: lsarpc open: Yes len: 46
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
> write_to_pipe: data_left = 46
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data:
> Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 46
> [2005/04/04 09:15:45, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
> fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16,
> receive_len = 0
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> write_to_pipe: data_used = 16
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
> write_to_pipe: data_left = 30
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data:
> Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 30
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0000 major : 05
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0001 minor : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0002 pkt_type : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0003 flags : 03
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0004 pack_type0: 10
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0005 pack_type1: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0006 pack_type2: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0007 pack_type3: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0008 frag_len : 002e
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 000a auth_len : 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 000c call_id : 00000002
> [2005/04/04 09:15:45, 5]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header:
> using little-endian RPC
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515) unmarshall_rpc_header:
> type = 0, flags = 3
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> write_to_pipe: data_used = 0
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
> write_to_pipe: data_left = 30
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data:
> Start: pdu_received_len = 0, pdu_needed_len = 30, incoming data = 30
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:process_complete_pdu(720) process_complete_pdu:
> processing packet type 0
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr_req req
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0000 alloc_hint: 00000016
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0004 context_id: 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0006 opnum : 002e
> [2005/04/04 09:15:45, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
> free_pipe_context: destroying talloc pool of size 0
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
> Requested \PIPE\lsarpc
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
> api_rpcTNP: lsarpc op 0x2e - unknown
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000000 smb_io_rpc_hdr
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0000 major : 05
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0001 minor : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0002 pkt_type : 03
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0003 flags : 23
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0004 pack_type0: 10
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0005 pack_type1: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0006 pack_type2: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0007 pack_type3: 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0008 frag_len : 0020
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 000a auth_len : 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 000c call_id : 00000002
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000010 smb_io_rpc_hdr_resp resp
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 0010 alloc_hint: 00000000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint16(613)
> 0014 context_id: 0000
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0016 cancel_ct : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint8(584)
> 0017 reserved : 00
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
> 000018 smb_io_rpc_hdr_fault fault
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
> 0018 status : NT code 0x1c010002
> [2005/04/04 09:15:45, 5] rpc_parse/parse_prs.c:prs_uint32(642)
> 001c reserved: 00000000
> [2005/04/04 09:15:45, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
> free_pipe_context: destroying talloc pool of size 0
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
> write_to_pipe: data_used = 30
> [2005/04/04 09:15:45, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
> writeX-IPC pnum=76b9 nwritten=46
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=47
> smb_com=0x2f
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=136
> smb_flg2=51201
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=577
> smt_wct=6
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]= 0 (0x0)
> smb_vwv[ 2]= 46 (0x2E)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 0 (0x0)
> smb_bcc=0
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,51)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,51) wrote 51
> [2005/04/04 09:15:45, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(505)
> got smb length of 59
> [2005/04/04 09:15:45, 6] smbd/process.c:process_smb(1090)
> got message type 0x0 of len 0x3b
> [2005/04/04 09:15:45, 3] smbd/process.c:process_smb(1091)
> Transaction 10 of length 63
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=59
> smb_com=0x2e
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=24
> smb_flg2=51207
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=641
> smt_wct=12
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]=57054 (0xDEDE)
> smb_vwv[ 2]=30393 (0x76B9)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 1024 (0x400)
> smb_vwv[ 6]= 1024 (0x400)
> smb_vwv[ 7]=65535 (0xFFFF)
> smb_vwv[ 8]=65535 (0xFFFF)
> smb_vwv[ 9]= 1024 (0x400)
> smb_vwv[10]= 0 (0x0)
> smb_vwv[11]= 0 (0x0)
> smb_bcc=0
> [2005/04/04 09:15:45, 3] smbd/process.c:switch_message(886)
> switch message SMBreadX (pid 25256) conn 0x832b378
> [2005/04/04 09:15:45, 4] smbd/uid.c:change_to_user(194)
> change_to_user: Skipping user change - already user
> [2005/04/04 09:15:45, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
> search for pipe pnum=76b9
> [2005/04/04 09:15:45, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
> pipe name lsarpc pnum=76b9 (pipes_open=1)
> [2005/04/04 09:15:45, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
> read_from_pipe: 76b9 name: lsarpc len: 1024
> [2005/04/04 09:15:45, 10]
> rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(968)
> read_from_pipe: lsarpc: current_pdu_len = 32, current_pdu_sent = 0
> returning 32 bytes.
> [2005/04/04 09:15:45, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
> readX-IPC pnum=76b9 min=1024 max=1024 nread=32
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(474)
> size=91
> smb_com=0x2e
> smb_rcls=0
> smb_reh=0
> smb_err=0
> smb_flg=136
> smb_flg2=51201
> smb_tid=1
> smb_pid=65279
> smb_uid=100
> smb_mid=641
> smt_wct=12
> smb_vwv[ 0]= 255 (0xFF)
> smb_vwv[ 1]= 0 (0x0)
> smb_vwv[ 2]= 0 (0x0)
> smb_vwv[ 3]= 0 (0x0)
> smb_vwv[ 4]= 0 (0x0)
> smb_vwv[ 5]= 32 (0x20)
> smb_vwv[ 6]= 59 (0x3B)
> smb_vwv[ 7]= 0 (0x0)
> smb_vwv[ 8]= 0 (0x0)
> smb_vwv[ 9]= 0 (0x0)
> smb_vwv[10]= 0 (0x0)
> smb_vwv[11]= 0 (0x0)
> smb_bcc=32
> [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995)
> [000] 05 00 03 23 10 00 00 00 20 00 00 00 02 00 00 00 ...#.... .......
> [010] 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 00 ........ ........
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(449)
> write_socket(5,95)
> [2005/04/04 09:15:45, 6] lib/util_sock.c:write_socket(452)
> write_socket(5,95) wrote 95
> [2005/04/04 09:15:45, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(505)
> got smb length of 110
> [2005/04/04 09:15:45, 6] smbd/process.c:process_smb(1090)
> got message type 0x0 of len 0x6e
> [2005/04/04 09:15:45, 3] smbd/process.c:process_smb(1091)
> Transaction 11 of length 114
> [2005/04/04 09:15:45, 5] lib/util.c:show_msg(464)
>
> I thought i would just paste one second's worth of debug but even that is
> too long. I don't even know what most of the debugging is. I'll stop
> there and if anyone would like the complete debug log I will mail it to you
> compressed.
>
> Thanks for any help!
>
> Misty
More information about the samba
mailing list