[Samba] winbind problem
Robert Penz
robert.penz at outertech.com
Wed Jun 8 07:58:40 GMT 2005
Hi!
I'm running suse 9.2 on the client and debian sarge on the server. I'm
trying to authenticate users via the smb domain. It worked some weeks but
after some weeks not using it, it was brocken. I've no idea why.
I get following if I call:
# wbinfo -u
Error looking up domain users
and in the log file ist following:
[2005/06/08 08:49:10, 0] rpc_parse/parse_prs.c:prs_mem_get(537)
prs_mem_get: reading data of size 4194534 would overrun buffer.
I've turned to debug log to 10 and get following, what got broken? and how
to fix it?
[2005/06/08 08:42:16, 6] nsswitch/winbindd.c:new_connection(356)
accepted socket 19
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
client_read: read 1824 bytes. Need 0 more for a full request.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:process_request(321)
process_request: request fn INTERFACE_VERSION
[2005/06/08 08:42:16, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(261)
[ 4374]: request interface version
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(524)
client_write: wrote 1300 bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
client_read: read 1824 bytes. Need 0 more for a full request.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:process_request(321)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2005/06/08 08:42:16, 3]
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
[ 4374]: request location of privileged pipe
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(524)
client_write: wrote 1300 bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(569)
client_write: need to write 35 extra data bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(524)
client_write: wrote 35 bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(558)
client_write: client_write: complete response written.
[2005/06/08 08:42:16, 6] nsswitch/winbindd.c:new_connection(356)
accepted socket 21
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
client_read: read 0 bytes. Need 1824 more for a full request.
[2005/06/08 08:42:16, 5] nsswitch/winbindd.c:winbind_client_read(477)
read failed on sock 19, pid 4374: EOF
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
client_read: read 1824 bytes. Need 0 more for a full request.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:process_request(321)
process_request: request fn LIST_USERS
[2005/06/08 08:42:16, 3] nsswitch/winbindd_user.c:winbindd_list_users(587)
[ 4374]: list users
[2005/06/08 08:42:16, 10] nsswitch/winbindd_cache.c:fetch_cache_seqnum(287)
fetch_cache_seqnum: timeout [HITT][4294967295 @ 1118212550]
[2005/06/08 08:42:16, 10] nsswitch/winbindd_rpc.c:sequence_number(817)
rpc: fetch sequence_number for HITT
[2005/06/08 08:42:16, 10] rpc_client/cli_samr.c:cli_samr_open_domain(186)
cli_samr_open_domain with sid S-1-5-21-1475990760-112971085-4177168692
[2005/06/08 08:42:16, 5] rpc_parse/parse_samr.c:init_samr_q_open_domain(250)
samr_init_samr_q_open_domain
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_q_open_domain
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_pol_hnd pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: 38 a1 a6 42 46 39 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0014 flags: 02000000
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
000018 smb_io_dom_sid2 sid
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0018 num_auths: 00000004
[2005/06/08 08:42:16, 7] rpc_parse/parse_prs.c:prs_debug(82)
00001c smb_io_dom_sid sid
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
001c sid_rev_num: 01
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
001d num_auths : 04
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
001e id_auth[0] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
001f id_auth[1] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0020 id_auth[2] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0021 id_auth[3] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0022 id_auth[4] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0023 id_auth[5] : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
0024 sub_auths : 00000015 57f9d4e8 06bbcd4d f8fa8934
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000038 smb_io_rpc_hdr_auth hdr_auth
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0038 auth_type : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0039 auth_level : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
003a padding : 04
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
003b reserved : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
003c auth_context : 00000001
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1034)
SCHANNEL seq_num=8
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_encode(1472)
SCHANNEL: netsec_encode seq_num=8 data_len=56
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000040 smb_io_rpc_auth_netsec_chk
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0040 sig : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0048 seq_num: 9d 5d 4c 39 3d 6a 72 7a
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0050 packet_digest: e2 bf 44 8c 92 22 bf 55
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0058 confounder: 9a 37 ce db 47 28 0d 9b
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
create_rpc_request: opnum: 0x7 data_len: 0x78
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
create_rpc_request: data_len: 78 auth_len: 20 alloc_hint: 40
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0078
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000013
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_req hdr_req
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000040
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0016 opnum : 0007
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
rpc_api_pipe: fnum:707f
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
size=202
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=1
smb_pid=4369
smb_uid=100
smb_mid=14
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 120 (0x78)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 4280 (0x10B8)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 120 (0x78)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=28799 (0x707F)
smb_bcc=135
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 00 03 10 00 00 00 78 00 20 00 13 00 00 00 40 .......x . .....@
[020] 00 00 00 00 00 07 00 00 00 00 00 01 00 00 00 00 ........ ........
[030] 00 00 00 38 A1 A6 42 46 39 00 00 00 00 00 02 04 ...8..BF 9.......
[040] 00 00 00 01 04 00 00 00 00 00 05 15 00 00 00 E8 ........ ........
[050] D4 F9 57 4D CD BB 06 34 89 FA F8 00 00 00 00 44 ..WM...4 .......D
[060] 05 04 00 01 00 00 00 77 00 FF FF FF FF 00 00 9D .......w ........
[070] 5D 4C 39 3D 6A 72 7A E2 BF 44 8C 92 22 BF 55 9A ]L9=jrz. .D..".U.
[080] 37 CE DB 47 28 0D 9B 7..G(..
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(449)
write_socket(18,206)
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(452)
write_socket(18,206) wrote 206
[2005/06/08 08:42:16, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 144
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
size=144
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=4369
smb_uid=100
smb_mid=14
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 88 (0x58)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 88 (0x58)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=89
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
[000] 00 05 00 02 03 10 00 00 00 58 00 20 00 13 00 00 ........ .X. ....
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........
[020] 00 00 00 00 00 BA A2 A6 42 46 39 00 00 00 00 00 ........ BF9.....
[030] 00 44 05 00 00 01 00 00 00 77 00 FF FF FF FF 00 .D...... .w......
[040] 00 1E 36 EE 2E 18 1C 21 08 DF 8D 3B 9D 8B 94 77 ..6....! ...;...w
[050] F3 BD 4C 9C 43 4A 74 F6 10 ..L.CJt. .
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
size=144
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=4369
smb_uid=100
smb_mid=14
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 88 (0x58)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 88 (0x58)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=89
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
[000] 00 05 00 02 03 10 00 00 00 58 00 20 00 13 00 00 ........ .X. ....
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 03 00 00 ........ ........
[020] 00 00 00 00 00 BA A2 A6 42 46 39 00 00 00 00 00 ........ BF9.....
[030] 00 44 05 00 00 01 00 00 00 77 00 FF FF FF FF 00 .D...... .w......
[040] 00 1E 36 EE 2E 18 1C 21 08 DF 8D 3B 9D 8B 94 77 ..6....! ...;...w
[050] F3 BD 4C 9C 43 4A 74 F6 10 ..L.CJt. .
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
rpc_check_hdr: rdata->data_size = 88
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr rpc_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 02
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0058
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000013
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000018
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0016 cancel_ct : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0017 reserved : 00
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
rpc_api_pipe: len left: 0 smbtrans read: 88
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
rpc_auth_pipe: pkt_type: 2 len: 88 auth_len: 32 NTLMSSP No schannel Yes
sign Yes seal No
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
rpc_auth_pipe: packet:
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr_auth auth_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 auth_type : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 auth_level : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 padding : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 reserved : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 auth_context : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0008 sig : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0010 seq_num: 1e 36 ee 2e 18 1c 21 08
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0018 packet_digest: df 8d 3b 9d 8b 94 77 f3
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0020 confounder: bd 4c 9c 43 4a 74 f6 10
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1549)
SCHANNEL: netsec_encode seq_num=9 data_len=24
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1569)
SCHANNEL: netsec_decode seq_num=9 data_len=24
[2005/06/08 08:42:16, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
rpc_api_pipe: fragment first and last both set
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000018 samr_io_r_open_domain
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
000018 smb_io_pol_hnd domain_pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0018 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
001c data2: 00000003
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0020 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0022 data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0024 data5: ba a2 a6 42 46 39 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
002c status: NT_STATUS_OK
[2005/06/08 08:42:16, 10]
rpc_client/cli_samr.c:cli_samr_query_dom_info(1372)
cli_samr_query_dom_info
[2005/06/08 08:42:16, 5]
rpc_parse/parse_samr.c:init_samr_q_query_dom_info(468)
samr_init_samr_q_query_dom_info
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_q_query_dom_info
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_pol_hnd domain_pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000003
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: ba a2 a6 42 46 39 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 switch_value: 0002
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000018 smb_io_rpc_hdr_auth hdr_auth
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0018 auth_type : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0019 auth_level : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
001a padding : 02
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
001b reserved : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
001c auth_context : 00000001
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1034)
SCHANNEL seq_num=10
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_encode(1472)
SCHANNEL: netsec_encode seq_num=10 data_len=24
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000020 smb_io_rpc_auth_netsec_chk
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0020 sig : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0028 seq_num: 7d 15 9a ff be b2 fa be
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0030 packet_digest: 75 c1 c9 63 7d 05 62 c6
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0038 confounder: 5f 8f 74 f2 40 c8 16 e2
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
create_rpc_request: opnum: 0x8 data_len: 0x58
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
create_rpc_request: data_len: 58 auth_len: 20 alloc_hint: 20
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0058
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000014
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_req hdr_req
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0016 opnum : 0008
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
rpc_api_pipe: fnum:707f
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
size=170
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=1
smb_pid=4369
smb_uid=100
smb_mid=15
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 88 (0x58)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 4280 (0x10B8)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 88 (0x58)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=28799 (0x707F)
smb_bcc=103
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 00 03 10 00 00 00 58 00 20 00 14 00 00 00 20 .......X . .....
[020] 00 00 00 00 00 08 00 00 00 00 00 03 00 00 00 00 ........ ........
[030] 00 00 00 BA A2 A6 42 46 39 00 00 02 00 00 00 44 ......BF 9......D
[040] 05 02 00 01 00 00 00 77 00 FF FF FF FF 00 00 7D .......w .......}
[050] 15 9A FF BE B2 FA BE 75 C1 C9 63 7D 05 62 C6 5F .......u ..c}.b._
[060] 8F 74 F2 40 C8 16 E2 .t. at ...
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(449)
write_socket(18,174)
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(452)
write_socket(18,174) wrote 174
[2005/06/08 08:42:16, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 324
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
size=324
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=4369
smb_uid=100
smb_mid=15
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 268 (0x10C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 268 (0x10C)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=269
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
[000] 00 05 00 02 03 10 00 00 00 0C 01 20 00 14 00 00 ........ ... ....
[010] 00 CC 00 00 00 00 00 00 00 01 00 00 00 02 00 00 ........ ........
[020] 00 00 00 00 00 00 00 00 80 46 00 46 00 01 00 00 ........ .F.F....
[030] 00 08 00 08 00 01 00 00 00 0A 00 0A 00 01 00 00 ........ ........
[040] 00 BA A2 A6 42 00 00 00 00 01 00 00 00 03 00 00 ....B... ........
[050] 00 01 00 00 00 1F 00 00 00 04 00 00 00 00 00 00 ........ ........
[060] 00 23 00 00 00 00 00 00 00 23 00 00 00 68 00 61 .#...... .#...h.a
[070] 00 64 00 65 00 73 00 20 00 73 00 65 00 72 00 76 .d.e.s. .s.e.r.v
[080] 00 65 00 72 00 20 00 28 00 53 00 61 00 6D 00 62 .e.r. .( .S.a.m.b
[090] 00 61 00 20 00 33 00 2E 00 30 00 2E 00 31 00 34 .a. .3.. .0...1.4
[0A0] 00 61 00 2D 00 44 00 65 00 62 00 69 00 61 00 6E .a.-.D.e .b.i.a.n
[0B0] 00 29 00 00 00 04 00 00 00 00 00 00 00 04 00 00 .)...... ........
[0C0] 00 48 00 49 00 54 00 54 00 05 00 00 00 00 00 00 .H.I.T.T ........
[0D0] 00 05 00 00 00 48 00 41 00 44 00 45 00 53 00 00 .....H.A .D.E.S..
[0E0] 00 00 00 00 00 44 05 00 00 01 00 00 00 77 00 FF .....D.. .....w..
[0F0] FF FF FF 00 00 7D 77 E5 B6 BD 44 D7 8E D4 91 FC .....}w. ..D.....
[100] A6 D7 E1 BE 62 AE 15 DB 30 49 40 39 D8 ....b... 0I at 9.
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
size=324
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=4369
smb_uid=100
smb_mid=15
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 268 (0x10C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 268 (0x10C)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=269
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
[000] 00 05 00 02 03 10 00 00 00 0C 01 20 00 14 00 00 ........ ... ....
[010] 00 CC 00 00 00 00 00 00 00 01 00 00 00 02 00 00 ........ ........
[020] 00 00 00 00 00 00 00 00 80 46 00 46 00 01 00 00 ........ .F.F....
[030] 00 08 00 08 00 01 00 00 00 0A 00 0A 00 01 00 00 ........ ........
[040] 00 BA A2 A6 42 00 00 00 00 01 00 00 00 03 00 00 ....B... ........
[050] 00 01 00 00 00 1F 00 00 00 04 00 00 00 00 00 00 ........ ........
[060] 00 23 00 00 00 00 00 00 00 23 00 00 00 68 00 61 .#...... .#...h.a
[070] 00 64 00 65 00 73 00 20 00 73 00 65 00 72 00 76 .d.e.s. .s.e.r.v
[080] 00 65 00 72 00 20 00 28 00 53 00 61 00 6D 00 62 .e.r. .( .S.a.m.b
[090] 00 61 00 20 00 33 00 2E 00 30 00 2E 00 31 00 34 .a. .3.. .0...1.4
[0A0] 00 61 00 2D 00 44 00 65 00 62 00 69 00 61 00 6E .a.-.D.e .b.i.a.n
[0B0] 00 29 00 00 00 04 00 00 00 00 00 00 00 04 00 00 .)...... ........
[0C0] 00 48 00 49 00 54 00 54 00 05 00 00 00 00 00 00 .H.I.T.T ........
[0D0] 00 05 00 00 00 48 00 41 00 44 00 45 00 53 00 00 .....H.A .D.E.S..
[0E0] 00 00 00 00 00 44 05 00 00 01 00 00 00 77 00 FF .....D.. .....w..
[0F0] FF FF FF 00 00 7D 77 E5 B6 BD 44 D7 8E D4 91 FC .....}w. ..D.....
[100] A6 D7 E1 BE 62 AE 15 DB 30 49 40 39 D8 ....b... 0I at 9.
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
rpc_check_hdr: rdata->data_size = 268
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr rpc_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 02
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 010c
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000014
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 000000cc
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0016 cancel_ct : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0017 reserved : 00
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
rpc_api_pipe: len left: 0 smbtrans read: 268
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
rpc_auth_pipe: pkt_type: 2 len: 268 auth_len: 32 NTLMSSP No schannel Yes
sign Yes seal No
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
rpc_auth_pipe: packet:
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr_auth auth_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 auth_type : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 auth_level : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 padding : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 reserved : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 auth_context : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0008 sig : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0010 seq_num: 7d 77 e5 b6 bd 44 d7 8e
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0018 packet_digest: d4 91 fc a6 d7 e1 be 62
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0020 confounder: ae 15 db 30 49 40 39 d8
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1549)
SCHANNEL: netsec_encode seq_num=11 data_len=204
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1569)
SCHANNEL: netsec_decode seq_num=11 data_len=204
[2005/06/08 08:42:16, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
rpc_api_pipe: fragment first and last both set
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000018 samr_io_r_query_dom_info
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0018 ptr_0 : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
001c switch_value: 0002
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
000020 sam_io_unk_info2 unk_inf2
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0020 unknown_0: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0024 unknown_1: 80000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0028 unknown_2: 00460046
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
002c ptr_0: 00000001
[2005/06/08 08:42:16, 7] rpc_parse/parse_prs.c:prs_debug(82)
000030 smb_io_unihdr hdr_domain
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0030 uni_str_len: 0008
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0032 uni_max_len: 0008
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0034 buffer : 00000001
[2005/06/08 08:42:16, 7] rpc_parse/parse_prs.c:prs_debug(82)
000038 smb_io_unihdr hdr_server
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0038 uni_str_len: 000a
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
003a uni_max_len: 000a
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
003c buffer : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0040 seq_num : 42a6a2ba
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0044 unknown_3 : 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0048 unknown_4 : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
004c unknown_5 : 00000003
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0050 unknown_6 : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0054 num_domain_usrs : 0000001f
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0058 num_domain_grps: 00000004
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
005c num_local_grps: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0060 unknown: 23 00 00 00 00 00 00 00 23 00 00 00
[2005/06/08 08:42:16, 7] rpc_parse/parse_prs.c:prs_debug(82)
00006c smb_io_unistr2 uni_domain
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
006c uni_max_len: 00610068
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0070 offset : 00650064
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0074 uni_str_len: 00200073
[2005/06/08 08:42:16, 0] rpc_parse/parse_prs.c:prs_mem_get(537)
prs_mem_get: reading data of size 4194534 would overrun buffer.
[2005/06/08 08:42:16, 10] nsswitch/winbindd_rpc.c:sequence_number(866)
domain_sequence_number: failed to get sequence number (4294967295) for
domain HITT
[2005/06/08 08:42:16, 10] rpc_client/cli_samr.c:cli_samr_close(136)
cli_samr_close
[2005/06/08 08:42:16, 5] rpc_parse/parse_samr.c:init_samr_q_close_hnd(40)
init_samr_q_close_hnd
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 samr_io_q_close_hnd
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_pol_hnd pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 data2: 00000003
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
000c data5: ba a2 a6 42 46 39 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000018 smb_io_rpc_hdr_auth hdr_auth
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0018 auth_type : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0019 auth_level : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
001a padding : 04
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
001b reserved : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
001c auth_context : 00000001
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1034)
SCHANNEL seq_num=12
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_encode(1472)
SCHANNEL: netsec_encode seq_num=12 data_len=24
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000020 smb_io_rpc_auth_netsec_chk
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0020 sig : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0028 seq_num: 1e 36 ee 2b 98 1c 21 08
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0030 packet_digest: df 8d 3b 9d 8b 94 77 f3
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0038 confounder: 19 ff 5c 1d 7a a3 17 c4
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
create_rpc_request: opnum: 0x1 data_len: 0x58
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
create_rpc_request: data_len: 58 auth_len: 20 alloc_hint: 20
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0058
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000015
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_req hdr_req
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0016 opnum : 0001
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
rpc_api_pipe: fnum:707f
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
size=170
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=1
smb_pid=4369
smb_uid=100
smb_mid=16
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 88 (0x58)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 4280 (0x10B8)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 88 (0x58)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=28799 (0x707F)
smb_bcc=103
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 00 03 10 00 00 00 58 00 20 00 15 00 00 00 20 .......X . .....
[020] 00 00 00 00 00 01 00 00 00 00 00 03 00 00 00 00 ........ ........
[030] 00 00 00 BA A2 A6 42 46 39 00 00 00 00 00 00 44 ......BF 9......D
[040] 05 04 00 01 00 00 00 77 00 FF FF FF FF 00 00 1E .......w ........
[050] 36 EE 2B 98 1C 21 08 DF 8D 3B 9D 8B 94 77 F3 19 6.+..!.. .;...w..
[060] FF 5C 1D 7A A3 17 C4 .\.z...
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(449)
write_socket(18,174)
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(452)
write_socket(18,174) wrote 174
[2005/06/08 08:42:16, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 144
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
size=144
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=4369
smb_uid=100
smb_mid=16
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 88 (0x58)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 88 (0x58)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=89
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
[000] 00 05 00 02 03 10 00 00 00 58 00 20 00 15 00 00 ........ .X. ....
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[030] 00 44 05 00 00 01 00 00 00 77 00 FF FF FF FF 00 .D...... .w......
[040] 00 62 3D 18 4F 54 EA 80 FA C9 FD 55 52 95 89 58 .b=.OT.. ...UR..X
[050] D0 B4 28 4C 8B 7D 16 3A 6C ..(L.}.: l
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
size=144
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=4369
smb_uid=100
smb_mid=16
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 88 (0x58)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 88 (0x58)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=89
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
[000] 00 05 00 02 03 10 00 00 00 58 00 20 00 15 00 00 ........ .X. ....
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........
[030] 00 44 05 00 00 01 00 00 00 77 00 FF FF FF FF 00 .D...... .w......
[040] 00 62 3D 18 4F 54 EA 80 FA C9 FD 55 52 95 89 58 .b=.OT.. ...UR..X
[050] D0 B4 28 4C 8B 7D 16 3A 6C ..(L.}.: l
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
rpc_check_hdr: rdata->data_size = 88
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr rpc_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 02
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0058
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000015
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000018
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0016 cancel_ct : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0017 reserved : 00
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
rpc_api_pipe: len left: 0 smbtrans read: 88
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
rpc_auth_pipe: pkt_type: 2 len: 88 auth_len: 32 NTLMSSP No schannel Yes
sign Yes seal No
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
rpc_auth_pipe: packet:
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr_auth auth_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 auth_type : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 auth_level : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 padding : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 reserved : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 auth_context : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0008 sig : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0010 seq_num: 62 3d 18 4f 54 ea 80 fa
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0018 packet_digest: c9 fd 55 52 95 89 58 d0
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0020 confounder: b4 28 4c 8b 7d 16 3a 6c
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1549)
SCHANNEL: netsec_encode seq_num=13 data_len=24
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1569)
SCHANNEL: netsec_decode seq_num=13 data_len=24
[2005/06/08 08:42:16, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
rpc_api_pipe: fragment first and last both set
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
000018 samr_io_r_close_hnd
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
000018 smb_io_pol_hnd pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0018 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
001c data2: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0020 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0022 data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0024 data5: 00 00 00 00 00 00 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
002c status: NT_STATUS_OK
[2005/06/08 08:42:16, 10] nsswitch/winbindd_cache.c:store_cache_seqnum(325)
store_cache_seqnum: success [HITT][4294967295 @ 1118212936]
[2005/06/08 08:42:16, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(386)
refresh_sequence_number: HITT seq number is now -1
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(524)
client_write: wrote 1300 bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
client_read: read 0 bytes. Need 1824 more for a full request.
[2005/06/08 08:42:16, 5] nsswitch/winbindd.c:winbind_client_read(477)
read failed on sock 21, pid 4374: EOF
More information about the samba
mailing list