[Samba] Problems Samba, Kerberos, Win2003
Thomas Stolz
tstolz at transtec.de
Sat Feb 17 15:32:24 GMT 2007
Hi,
We have got problems mapping the homes drives of our users.
We don't know how to fix it.
Files:
burz-nfs:/etc/samba # more /etc/krb5.conf
[libdefaults]
default_realm = TTDE.TRANSTEC.DE
dns_lookup_realm = false
dns_lookup_kdc = true
default_tkt_enctypes = RC4-HMAC des-cbc-crc des-cbc-md5
default_tgs_enctypes = RC4-HMAC des-cbc-crc des-cbc-md5
clockskew = 600
[realms]
TTDE.TRANSTEC.DE = {
kdc = 153.94.0.37
default_domain = TTDE.TRANSTEC.DE
admin_server = 153.94.0.37:749
}
[domain_realm]
.ttde.transtec.de = TTDE.TRANSTEC.DE
ttde.transtec.de = TTDE.TRANSTEC.DE
burz-nfs:/etc/samba # more /etc/samba/smb.conf
[global]
security = ADS
encrypt passwords = yes
netbios name = burz-nfs
realm = TTDE.TRANSTEC.DE
password server = xpsys1.ttde.transtec.de
workgroup = TRANSTEC
idmap uid = 10000-15000
idmap gid = 10000-15000
winbind separator = \
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
template homedir = /home/%D/%U
template shell = /bin/bash
client use spnego = yes
domain master = no
server string =
client schannel = no
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
follow symlinks = yes
wide links = yes
loglevel = 10
[backup]
comment = Backup
path = /srv/samba
browseable = yes
read only = no
guest ok = no
valid users = @TRANSTEC/SG-IT-Gods
create mask = 0770
directory mask = 0770
[homes]
comment = Home Directories
read only = No
#create mask = 0777
#security mask = 0777
#directory mask = 0777
#directory security mask = 777
#force create mode = 777
#force directory mode = 777
browseable = No
#valid users = %D/%U
#force user = root
force user = %U
#inherit acls = Yes
create mask = 0755
directory mask = 0755
writeable = yes
follow symlinks = yes
wide links = yes
Here the loglevel 10 File
[2007/02/17 16:27:31, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDLOWAT = 1
[2007/02/17 16:27:31, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVLOWAT = 1
[2007/02/17 16:27:31, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDTIMEO = 0
[2007/02/17 16:27:31, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVTIMEO = 0
[2007/02/17 16:27:31, 2] smbd/server.c:open_sockets_smbd(329)
waiting for a connection
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_KEEPALIVE = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_REUSEADDR = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_BROADCAST = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option TCP_NODELAY = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option IPTOS_LOWDELAY = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option IPTOS_THROUGHPUT = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDBUF = 16384
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVBUF = 16384
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDLOWAT = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVLOWAT = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDTIMEO = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVTIMEO = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_KEEPALIVE = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_REUSEADDR = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_BROADCAST = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option TCP_NODELAY = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option IPTOS_LOWDELAY = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option IPTOS_THROUGHPUT = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDBUF = 16384
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVBUF = 16384
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDLOWAT = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVLOWAT = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDTIMEO = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVTIMEO = 0
[2007/02/17 16:28:04, 6] param/loadparm.c:lp_file_list_changed(2707)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sat
Feb 17 16:20:22 2007
[2007/02/17 16:28:04, 3] smbd/oplock.c:init_oplocks(1345)
open_oplock_ipc: opening loopback UDP socket.
[2007/02/17 16:28:04, 10] lib/util_sock.c:open_socket_in(717)
bind succeeded on port 0
[2007/02/17 16:28:04, 3]
smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2007/02/17 16:28:04, 3] smbd/oplock.c:init_oplocks(1376)
open_oplock ipc: pid = 10805, global_oplock_port = 32824
[2007/02/17 16:28:04, 4] lib/time.c:get_serverzone(125)
Serverzone is -3600
[2007/02/17 16:28:04, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 133
[2007/02/17 16:28:04, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x85
[2007/02/17 16:28:04, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(464)
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(474)
size=133
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51283
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=0
smt_wct=0
smb_bcc=98
[2007/02/17 16:28:04, 10] lib/util.c:dump_data(1995)
[000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK
PROG
[010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0.
.LANMAN1
[020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows
for
[030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps
3.1a.
[040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0
02..LANM
[050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM
0.1
[060] 32 00 2.
[2007/02/17 16:28:04, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 10805) conn 0x0
[2007/02/17 16:28:04, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_nt_user_token(485)
NT user token: (NULL)
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_unix_user_token(506)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2007/02/17 16:28:04, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2007/02/17 16:28:04, 10] lib/util.c:set_remote_arch(1970)
set_remote_arch: Client arch is 'Win2K'
[2007/02/17 16:28:04, 6] param/loadparm.c:lp_file_list_changed(2707)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sat
Feb 17 16:20:22 2007
[2007/02/17 16:28:04, 5] smbd/connection.c:claim_connection(170)
claiming 0
[2007/02/17 16:28:04, 6] param/loadparm.c:lp_file_list_changed(2707)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sat
Feb 17 16:20:22 2007
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(555)
Selected protocol NT LM 0.12
[2007/02/17 16:28:04, 5] smbd/negprot.c:reply_negprot(561)
negprot index=5
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(464)
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(474)
size=171
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=0
smt_wct=17
smb_vwv[ 0]= 5 (0x5)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]= 256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 65 (0x41)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 256 (0x100)
smb_vwv[ 7]=13568 (0x3500)
smb_vwv[ 8]= 42 (0x2A)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=32995 (0x80E3)
smb_vwv[11]= 128 (0x80)
smb_vwv[12]=23130 (0x5A5A)
smb_vwv[13]=43063 (0xA837)
smb_vwv[14]=51026 (0xC752)
smb_vwv[15]=50177 (0xC401)
smb_vwv[16]=26367 (0x66FF)
smb_bcc=102
[2007/02/17 16:28:04, 10] lib/util.c:dump_data(1995)
[000] 62 75 72 7A 2D 6E 66 73 00 00 00 00 00 00 00 00 burz-nfs
........
[010] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 24 `T..+...
...J0H.$
[020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H.
.......*
[030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H......
..+.....
[040] 37 02 02 0A A3 20 30 1E A0 1C 1B 1A 62 75 72 7A 7.... 0.
....burz
[050] 2D 6E 66 73 24 40 54 54 44 45 2E 54 52 41 4E 53 -nfs$@TT
DE.TRANS
[060] 54 45 43 2E 44 45 TEC.DE
[2007/02/17 16:28:04, 6] lib/util_sock.c:write_socket(449)
write_socket(25,175)
[2007/02/17 16:28:04, 6] lib/util_sock.c:write_socket(452)
write_socket(25,175) wrote 175
[2007/02/17 16:28:04, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 1458
[2007/02/17 16:28:04, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x5b2
[2007/02/17 16:28:04, 3] smbd/process.c:process_smb(1091)
Transaction 1 of length 1462
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(464)
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(474)
size=1458
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=64
smt_wct=12
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 1458 (0x5B2)
smb_vwv[ 2]=16644 (0x4104)
smb_vwv[ 3]= 50 (0x32)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 1296 (0x510)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 212 (0xD4)
smb_vwv[11]=40960 (0xA000)
smb_bcc=1399
[2007/02/17 16:28:04, 10] lib/util.c:dump_data(1995)
[000] 60 82 05 0C 06 06 2B 06 01 05 05 02 A0 82 05 00 `.....+.
........
[010] 30 82 04 FC A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0"
..*.H...
[020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H
........
[030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 D2 04 82 +.....7.
........
[040] 04 CE 60 82 04 CA 06 09 2A 86 48 86 F7 12 01 02 ..`.....
*.H.....
[050] 02 01 00 6E 82 04 B9 30 82 04 B5 A0 03 02 01 05 ...n...0
........
[060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ ..
.....
[070] 03 DA 61 82 03 D6 30 82 03 D2 A0 03 02 01 05 A1 ..a...0.
........
[080] 12 1B 10 54 54 44 45 2E 54 52 41 4E 53 54 45 43 ...TTDE.
TRANSTEC
[090] 2E 44 45 A2 2C 30 2A A0 03 02 01 02 A1 23 30 21 .DE.,0*.
.....#0!
[0A0] 1B 04 63 69 66 73 1B 19 62 75 72 7A 2D 6E 66 73 ..cifs..
burz-nfs
[0B0] 2E 74 74 64 65 2E 74 72 61 6E 73 74 65 63 2E 64 .ttde.tr
anstec.d
[0C0] 65 A3 82 03 87 30 82 03 83 A0 03 02 01 17 A1 03 e....0..
........
[0D0] 02 01 03 A2 82 03 75 04 82 03 71 7D D3 35 F7 0F ......u.
..q}.5..
[0E0] F5 25 D0 8E 1B B4 70 5C DF 2E 7B AD 82 2C 43 3D .%....p\
..{..,C=
[0F0] 4A 37 B5 31 29 87 A2 4B 4D 63 5D 39 12 5F 72 FA J7.1)..K
Mc]9._r.
[100] 38 B9 0E 76 E1 2A 06 C1 FA E4 2B 7E 11 05 CD D4 8..v.*..
..+~....
[110] F4 99 8D 7A 7D E4 91 61 9B 74 1E 1E 40 ED 6B 2A ...z}..a
.t.. at .k*
[120] CD 23 40 A9 91 32 92 0C 83 9F BB D5 36 39 13 B3 .#@..2..
....69..
[130] E7 9C 22 40 CB 48 22 D7 A3 A4 8E 66 F2 BC 9F E4 .."@.H".
...f....
[140] FB 7F 68 87 90 5B 54 53 9B BC 09 1E E0 F9 DD 8E ..h..[TS
........
[150] F1 70 09 F0 AB AE F3 AE A3 22 74 2E B8 12 46 5D .p......
."t...F]
[160] 67 FF A6 18 E9 7A 8F A1 47 7E 2F 6A 55 DC 24 D9 g....z..
G~/jU.$.
[170] 77 4B CD 21 1D C2 4B A1 BF EF 37 ED C3 5D D9 C8 wK.!..K.
..7..]..
[180] 0E FB 5F 48 51 D4 D8 68 A5 8F B7 1F CC E9 B7 A7 .._HQ..h
........
[190] 2C 9F 09 E9 2A 6F AC B7 45 DA 4B F0 AD 06 0E 87 ,...*o..
E.K.....
[1A0] DB F0 50 B1 55 A9 7E CA 31 F1 0D B9 09 50 E5 1F ..P.U.~.
1....P..
[1B0] 4F 42 12 63 98 C1 CC FE AB 9B E0 7D 28 79 30 5A OB.c....
...}(y0Z
[1C0] BE 5D 8C 3F 45 63 12 70 2B 16 99 77 09 AA EC C3 .].?Ec.p
+..w....
[1D0] 60 05 52 81 38 36 A0 09 E3 67 8F 4E 62 92 D6 CA `.R.86..
.g.Nb...
[1E0] DA 20 7A 15 46 92 17 45 F4 CF 38 FF 0D 3C 73 8B . z.F..E
..8..<s.
[1F0] C6 E7 6C BB 9C 93 8A 78 58 33 A4 EA E5 6F 47 60 ..l....x
X3...oG`
[2007/02/17 16:28:04, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 10805) conn 0x0
[2007/02/17 16:28:04, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_nt_user_token(485)
NT user token: (NULL)
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_unix_user_token(506)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2007/02/17 16:28:04, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2007/02/17 16:28:04, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2007/02/17 16:28:04, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2007/02/17 16:28:04, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002
5.1] PrimaryDomain=[]
[2007/02/17 16:28:04, 10] lib/util.c:set_remote_arch(1970)
set_remote_arch: Client arch is 'WinXP'
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 48018 1 2 2
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 113554 1 2 2
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 3 6 1 4 1 311 2 2 10
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
Got secblob of size 1230
[2007/02/17 16:28:04, 10] passdb/secrets.c:secrets_named_mutex(702)
secrets_named_mutex: got mutex for replay cache mutex
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [18] failed to decrypt with error
Bad encryption type
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [17] failed to decrypt with error
Bad encryption type
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [16] failed to decrypt with error
Bad encryption type
[2007/02/17 16:28:04, 3]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [23] failed to decrypt with error
Decrypt integrity check failed
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [1] failed to decrypt with error
Bad encryption type
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [3] failed to decrypt with error
Bad encryption type
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [2] failed to decrypt with error
Bad encryption type
[2007/02/17 16:28:04, 10]
passdb/secrets.c:secrets_named_mutex_release(714)
secrets_named_mutex: released mutex for replay cache mutex
[2007/02/17 16:28:04, 3] libads/kerberos_verify.c:ads_verify_ticket(347)
ads_verify_ticket: krb5_rd_req with auth failed (Success)
[2007/02/17 16:28:04, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
Failed to verify incoming ticket!
[2007/02/17 16:28:04, 3] smbd/error.c:error_packet(129)
error packet at smbd/sesssetup.c(174) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(464)
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(474)
size=35
smb_com=0x73
smb_rcls=109
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=64
smt_wct=0
smb_bcc=0
[2007/02/17 16:28:04, 6] lib/util_sock.c:write_socket(449)
write_socket(25,39)
[2007/02/17 16:28:04, 6] lib/util_sock.c:write_socket(452)
write_socket(25,39) wrote 39
[2007/02/17 16:28:04, 10] lib/util_sock.c:read_socket_data(378)
read_socket_data: recv of 4 returned 0. Error = Success
[2007/02/17 16:28:04, 10] lib/util_sock.c:receive_smb_raw(556)
receive_smb_raw: length < 0!
[2007/02/17 16:28:04, 3] smbd/process.c:timeout_processing(1334)
timeout_processing: End of file from client (client has disconnected).
[2007/02/17 16:28:04, 5] lib/gencache.c:gencache_shutdown(88)
Closing cache file
[2007/02/17 16:28:04, 5] libsmb/namecache.c:namecache_shutdown(79)
namecache_shutdown: netbios namecache closed successfully.
[2007/02/17 16:28:04, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_nt_user_token(485)
NT user token: (NULL)
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_unix_user_token(506)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2007/02/17 16:28:04, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2007/02/17 16:28:04, 2] smbd/server.c:exit_server(609)
Closing connections
[2007/02/17 16:28:04, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2007/02/17 16:28:04, 5] smbd/oplock.c:receive_local_message(107)
receive_local_message: doing select with timeout of 1 ms
[2007/02/17 16:28:04, 3] smbd/server.c:exit_server(652)
Server exit (normal exit)
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_KEEPALIVE = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_REUSEADDR = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_BROADCAST = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option TCP_NODELAY = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option IPTOS_LOWDELAY = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option IPTOS_THROUGHPUT = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDBUF = 16384
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVBUF = 16384
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDLOWAT = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVLOWAT = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDTIMEO = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVTIMEO = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_KEEPALIVE = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_REUSEADDR = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_BROADCAST = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option TCP_NODELAY = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option IPTOS_LOWDELAY = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option IPTOS_THROUGHPUT = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDBUF = 16384
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVBUF = 16384
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDLOWAT = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVLOWAT = 1
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_SNDTIMEO = 0
[2007/02/17 16:28:04, 5] lib/util_sock.c:print_socket_options(147)
socket option SO_RCVTIMEO = 0
[2007/02/17 16:28:04, 6] param/loadparm.c:lp_file_list_changed(2707)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sat
Feb 17 16:20:22 2007
[2007/02/17 16:28:04, 3] smbd/oplock.c:init_oplocks(1345)
open_oplock_ipc: opening loopback UDP socket.
[2007/02/17 16:28:04, 10] lib/util_sock.c:open_socket_in(717)
bind succeeded on port 0
[2007/02/17 16:28:04, 3]
smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2007/02/17 16:28:04, 3] smbd/oplock.c:init_oplocks(1376)
open_oplock ipc: pid = 10806, global_oplock_port = 32824
[2007/02/17 16:28:04, 4] lib/time.c:get_serverzone(125)
Serverzone is -3600
[2007/02/17 16:28:04, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 133
[2007/02/17 16:28:04, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x85
[2007/02/17 16:28:04, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(464)
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(474)
size=133
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51283
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=0
smt_wct=0
smb_bcc=98
[2007/02/17 16:28:04, 10] lib/util.c:dump_data(1995)
[000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK
PROG
[010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0.
.LANMAN1
[020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows
for
[030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps
3.1a.
[040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0
02..LANM
[050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM
0.1
[060] 32 00 2.
[2007/02/17 16:28:04, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 10806) conn 0x0
[2007/02/17 16:28:04, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_nt_user_token(485)
NT user token: (NULL)
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_unix_user_token(506)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2007/02/17 16:28:04, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2007/02/17 16:28:04, 10] lib/util.c:set_remote_arch(1970)
set_remote_arch: Client arch is 'Win2K'
[2007/02/17 16:28:04, 6] param/loadparm.c:lp_file_list_changed(2707)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sat
Feb 17 16:20:22 2007
[2007/02/17 16:28:04, 5] smbd/connection.c:claim_connection(170)
claiming 0
[2007/02/17 16:28:04, 6] param/loadparm.c:lp_file_list_changed(2707)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sat
Feb 17 16:20:22 2007
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2007/02/17 16:28:04, 3] smbd/negprot.c:reply_negprot(555)
Selected protocol NT LM 0.12
[2007/02/17 16:28:04, 5] smbd/negprot.c:reply_negprot(561)
negprot index=5
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(464)
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(474)
size=171
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=0
smt_wct=17
smb_vwv[ 0]= 5 (0x5)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]= 256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 65 (0x41)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 256 (0x100)
smb_vwv[ 7]=13824 (0x3600)
smb_vwv[ 8]= 42 (0x2A)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=32995 (0x80E3)
smb_vwv[11]= 128 (0x80)
smb_vwv[12]=23130 (0x5A5A)
smb_vwv[13]=43063 (0xA837)
smb_vwv[14]=51026 (0xC752)
smb_vwv[15]=50177 (0xC401)
smb_vwv[16]=26367 (0x66FF)
smb_bcc=102
[2007/02/17 16:28:04, 10] lib/util.c:dump_data(1995)
[000] 62 75 72 7A 2D 6E 66 73 00 00 00 00 00 00 00 00 burz-nfs
........
[010] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 24 `T..+...
...J0H.$
[020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H.
.......*
[030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H......
..+.....
[040] 37 02 02 0A A3 20 30 1E A0 1C 1B 1A 62 75 72 7A 7.... 0.
....burz
[050] 2D 6E 66 73 24 40 54 54 44 45 2E 54 52 41 4E 53 -nfs$@TT
DE.TRANS
[060] 54 45 43 2E 44 45 TEC.DE
[2007/02/17 16:28:04, 6] lib/util_sock.c:write_socket(449)
write_socket(25,175)
[2007/02/17 16:28:04, 6] lib/util_sock.c:write_socket(452)
write_socket(25,175) wrote 175
[2007/02/17 16:28:04, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 1694
[2007/02/17 16:28:04, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x69e
[2007/02/17 16:28:04, 3] smbd/process.c:process_smb(1091)
Transaction 1 of length 1698
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(464)
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(474)
size=1694
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=64
smt_wct=12
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 1694 (0x69E)
smb_vwv[ 2]=16644 (0x4104)
smb_vwv[ 3]= 50 (0x32)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 1532 (0x5FC)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 212 (0xD4)
smb_vwv[11]=40960 (0xA000)
smb_bcc=1635
[2007/02/17 16:28:04, 10] lib/util.c:dump_data(1995)
[000] 60 82 05 F8 06 06 2B 06 01 05 05 02 A0 82 05 EC `.....+.
........
[010] 30 82 05 E8 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0"
..*.H...
[020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H
........
[030] 2B 06 01 04 01 82 37 02 02 0A A2 82 05 BE 04 82 +.....7.
........
[040] 05 BA 60 82 05 B6 06 09 2A 86 48 86 F7 12 01 02 ..`.....
*.H.....
[050] 02 01 00 6E 82 05 A5 30 82 05 A1 A0 03 02 01 05 ...n...0
........
[060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ ..
.....
[070] 04 C8 61 82 04 C4 30 82 04 C0 A0 03 02 01 05 A1 ..a...0.
........
[080] 12 1B 10 54 54 44 45 2E 54 52 41 4E 53 54 45 43 ...TTDE.
TRANSTEC
[090] 2E 44 45 A2 2C 30 2A A0 03 02 01 02 A1 23 30 21 .DE.,0*.
.....#0!
[0A0] 1B 04 63 69 66 73 1B 19 62 75 72 7A 2D 6E 66 73 ..cifs..
burz-nfs
[0B0] 2E 74 74 64 65 2E 74 72 61 6E 73 74 65 63 2E 64 .ttde.tr
anstec.d
[0C0] 65 A3 82 04 75 30 82 04 71 A0 03 02 01 17 A1 03 e...u0..
q.......
[0D0] 02 01 04 A2 82 04 63 04 82 04 5F 4C C0 88 E5 C8 ......c.
.._L....
[0E0] 87 73 21 E1 B6 EC 55 1E 47 EB 92 5A 45 8B BE 78 .s!...U.
G..ZE..x
[0F0] 42 F9 63 BA 4B 7C 3F 16 89 94 34 C8 58 DA A4 E0 B.c.K|?.
..4.X...
[100] AF 90 5B 80 A1 2E 72 00 4A 56 13 C1 CE 2C BB 0B ..[...r.
JV...,..
[110] 9C E4 F2 69 A7 C0 7B ED 7F 9E E2 E7 FE 0F BD 81 ...i..{.
........
[120] B5 4C 0D 97 D7 B9 E9 10 19 7F B9 67 5D E7 E8 0F .L......
...g]...
[130] F7 B8 38 90 24 B6 2E 06 43 45 34 4B 9F C5 C9 10 ..8.$...
CE4K....
[140] 85 F9 70 98 E5 1D EF 7C B1 77 35 A1 F8 6B E6 FC ..p....|
.w5..k..
[150] FF 52 1B 11 74 6F 1C 4E A6 67 70 67 C7 E3 1F CD .R..to.N
.gpg....
[160] 57 93 49 4F 6A 57 A1 7D 2D 7D DC E6 74 71 28 48 W.IOjW.}
-}..tq(H
[170] 2A 21 B6 84 28 7C 43 80 16 38 F6 93 36 AE 19 2E *!..(|C.
.8..6...
[180] 86 7C 0A E0 61 04 77 50 98 63 AD FD 4B 48 A8 40 .|..a.wP
.c..KH.@
[190] 1D 26 80 A2 4F 88 47 23 F7 0A 89 95 74 5D 8C C2 .&..O.G#
....t]..
[1A0] 6D EE 44 8A D2 90 83 EA F4 92 A6 A8 29 86 A7 30 m.D.....
....)..0
[1B0] D5 39 3E 6A C0 37 81 10 9F 95 33 A3 A7 3C A0 96 .9>j.7..
..3..<..
[1C0] 39 68 55 D5 65 E1 38 7B 11 70 47 5D 0D 74 95 CF 9hU.e.8{
.pG].t..
[1D0] 54 9E 61 52 51 0E 9A 72 A7 6C EE A7 6F 90 82 6F T.aRQ..r
.l..o..o
[1E0] D7 8D BF 0E 02 A2 D8 4C 98 F5 E6 0D DD BE C1 A2 .......L
........
[1F0] 5B 0B C3 C8 B8 D9 24 EF AF 9D 99 13 ED E1 37 B7 [.....$.
......7.
[2007/02/17 16:28:04, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 10806) conn 0x0
[2007/02/17 16:28:04, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_nt_user_token(485)
NT user token: (NULL)
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_unix_user_token(506)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2007/02/17 16:28:04, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2007/02/17 16:28:04, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2007/02/17 16:28:04, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2007/02/17 16:28:04, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002
5.1] PrimaryDomain=[]
[2007/02/17 16:28:04, 10] lib/util.c:set_remote_arch(1970)
set_remote_arch: Client arch is 'WinXP'
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 48018 1 2 2
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 113554 1 2 2
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 3 6 1 4 1 311 2 2 10
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
Got secblob of size 1466
[2007/02/17 16:28:04, 10] passdb/secrets.c:secrets_named_mutex(702)
secrets_named_mutex: got mutex for replay cache mutex
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [18] failed to decrypt with error
Bad encryption type
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [17] failed to decrypt with error
Bad encryption type
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
ads_secrets_verify_ticket: enc type [16] failed to decrypt with error
Bad encryption type
[2007/02/17 16:28:04, 10]
libads/kerberos_verify.c:ads_secrets_verify_ticket(228)
ads_secrets_verify_ticket: enc type [23] decrypted message !
[2007/02/17 16:28:04, 10]
passdb/secrets.c:secrets_named_mutex_release(714)
secrets_named_mutex: released mutex for replay cache mutex
[2007/02/17 16:28:04, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509)
Got KRB5 session key of length 16
[2007/02/17 16:28:04, 5] libads/authdata.c:decode_pac_data(592)
dump_pac_data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 pac_io_pac_data pac data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 num_buffers: 00000004
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0004 version: 00000000
[2007/02/17 16:28:04, 6] rpc_parse/parse_prs.c:prs_debug(82)
000008 pac_io_pac_info_hdr pac data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0008 type: 00000001
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c size: 000002d8
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 offset: 00000048
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0014 offsethi: 00000000
[2007/02/17 16:28:04, 6] rpc_parse/parse_prs.c:prs_debug(82)
000018 pac_io_pac_info_hdr pac data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0018 type: 0000000a
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
001c size: 00000016
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0020 offset: 00000320
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0024 offsethi: 00000000
[2007/02/17 16:28:04, 6] rpc_parse/parse_prs.c:prs_debug(82)
000028 pac_io_pac_info_hdr pac data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0028 type: 00000006
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
002c size: 00000014
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0030 offset: 00000338
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0034 offsethi: 00000000
[2007/02/17 16:28:04, 6] rpc_parse/parse_prs.c:prs_debug(82)
000038 pac_io_pac_info_hdr pac data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0038 type: 00000007
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
003c size: 00000014
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0040 offset: 00000350
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0044 offsethi: 00000000
[2007/02/17 16:28:04, 6] rpc_parse/parse_prs.c:prs_debug(82)
000048 pac_io_pac_info_hdr_ctr pac data
[2007/02/17 16:28:04, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(463)
PAC_TYPE_LOGON_INFO
[2007/02/17 16:28:04, 7] rpc_parse/parse_prs.c:prs_debug(82)
000048 pac_io_pac_logon_info pac data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0048 unknown: 00081001
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
004c unknown: cccccccc
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0050 bufferlen: 000002c8
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0054 bufferlenhi: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0058 pointer: 00020000
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
00005c smb_io_time logon_time
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
005c low : e1f4ca1a
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0060 high: 01c752a7
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
000064 smb_io_time logoff_time
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0064 low : ffffffff
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0068 high: 7fffffff
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
00006c smb_io_time kickoff_time
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
006c low : ffffffff
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0070 high: 7fffffff
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
000074 smb_io_time pass_last_set_time
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0074 low : f803717e
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0078 high: 01c65c9e
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
00007c smb_io_time pass_can_change_time
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
007c low : 226d317e
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0080 high: 01c65d68
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
000084 smb_io_time pass_must_change_time
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0084 low : ffffffff
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0088 high: 7fffffff
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
00008c smb_io_unihdr hdr_user_name
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
008c uni_str_len: 000c
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
008e uni_max_len: 000c
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0090 buffer : 00020004
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
000094 smb_io_unihdr hdr_full_name
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0094 uni_str_len: 0018
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0096 uni_max_len: 0018
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0098 buffer : 00020008
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
00009c smb_io_unihdr hdr_logon_script
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
009c uni_str_len: 0000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
009e uni_max_len: 0000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00a0 buffer : 0002000c
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0000a4 smb_io_unihdr hdr_profile_path
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00a4 uni_str_len: 0032
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00a6 uni_max_len: 0032
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00a8 buffer : 00020010
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0000ac smb_io_unihdr hdr_home_dir
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00ac uni_str_len: 0020
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00ae uni_max_len: 0020
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00b0 buffer : 00020014
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0000b4 smb_io_unihdr hdr_dir_drive
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00b4 uni_str_len: 0004
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00b6 uni_max_len: 0004
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00b8 buffer : 00020018
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00bc logon_count: 4253
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00be reserved12: 0000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00c0 user_rid: 00000870
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00c4 group_rid: 00000201
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00c8 group_count: 00000010
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00cc group_mem_ptr: 0002001c
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00d0 user_flags: 00000020
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00d4 reserved13.0: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00d8 reserved13.1: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00dc reserved13.2: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00e0 reserved13.3: 00000000
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0000e4 smb_io_unihdr hdr_dom_controller
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00e4 uni_str_len: 000c
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00e6 uni_max_len: 000e
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00e8 buffer : 00020020
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0000ec smb_io_unihdr hdr_dom_name
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00ec uni_str_len: 0010
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00ee uni_max_len: 0012
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00f0 buffer : 00020024
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00f4 ptr_dom_sid: 00020028
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00f8 reserved16.0: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00fc reserved16.1: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0100 reserved17: 00000210
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0104 reserved18.0: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0108 reserved18.1: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
010c reserved18.2: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0110 reserved18.3: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0114 reserved18.4: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0118 reserved18.5: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
011c reserved18.6: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0120 sid_count: 00000002
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0124 ptr_extra_sids: 0002002c
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0128 ptr_res_group_dom_sid: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
012c res_group_count: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0130 ptr_res_groups: 00000000
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
000134 smb_io_unistr2 uni_user_name
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0134 uni_max_len: 00000006
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0138 offset : 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
013c uni_str_len: 00000006
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
0140 buffer : t.s.t.o.l.z.
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
00014c smb_io_unistr2 uni_full_name
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
014c uni_max_len: 0000000c
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0150 offset : 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0154 uni_str_len: 0000000c
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
0158 buffer : T.h.o.m.a.s. .S.t.o.l.z.
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
000170 smb_io_unistr2 uni_logon_script
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0170 uni_max_len: 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0174 offset : 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0178 uni_str_len: 00000000
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
00017c smb_io_unistr2 uni_profile_path
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
017c uni_max_len: 00000019
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0180 offset : 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0184 uni_str_len: 00000019
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
0188 buffer :
\.\.x.p.s.y.s.2.\.p.r.o.f.i.l.e.s.$.\.t.s.t.o.l.z.
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0001ba smb_io_unistr2 uni_home_dir
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01bc uni_max_len: 00000010
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01c0 offset : 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01c4 uni_str_len: 00000010
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
01c8 buffer : \.\.x.p.s.y.s.2.\.t.s.t.o.l.z.$.
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0001e8 smb_io_unistr2 uni_dir_drive
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01e8 uni_max_len: 00000002
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01ec offset : 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01f0 uni_str_len: 00000002
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
01f4 buffer : Z.:.
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0001f8 pac_io_group_membership_array group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01f8 count: 00000010
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
0001fc pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01fc rid: 0000069c
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0200 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
000204 pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0204 rid: 00000200
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0208 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
00020c pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
020c rid: 00000728
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0210 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
000214 pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0214 rid: 00000672
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0218 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
00021c pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
021c rid: 00000acb
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0220 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
000224 pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0224 rid: 00000c0d
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0228 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
00022c pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
022c rid: 0000066b
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0230 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
000234 pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0234 rid: 000006fb
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0238 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
00023c pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
023c rid: 00000687
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0240 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
000244 pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0244 rid: 00000c17
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0248 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
00024c pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
024c rid: 00000201
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0250 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
000254 pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0254 rid: 00000c15
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0258 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
00025c pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
025c rid: 00000ade
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0260 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
000264 pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0264 rid: 00000bcd
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0268 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
00026c pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
026c rid: 00000207
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0270 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
000274 pac_io_group_membership group membership
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0274 rid: 00000b23
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0278 attrs: 00000007
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
00027c smb_io_unistr2 uni_dom_controller
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
027c uni_max_len: 00000007
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0280 offset : 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0284 uni_str_len: 00000006
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
0288 buffer : X.P.S.Y.S.2.
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
000294 smb_io_unistr2 uni_dom_name
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0294 uni_max_len: 00000009
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0298 offset : 00000000
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
029c uni_str_len: 00000008
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
02a0 buffer : T.R.A.N.S.T.E.C.
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0002b0 smb_io_dom_sid2 dom_sid
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
02b0 num_auths: 00000004
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
0002b4 smb_io_dom_sid sid
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02b4 sid_rev_num: 01
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02b5 num_auths : 04
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02b6 id_auth[0] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02b7 id_auth[1] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02b8 id_auth[2] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02b9 id_auth[3] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02ba id_auth[4] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02bb id_auth[5] : 05
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
02bc sub_auths : 00000015 acf58646 5d58f5d4
10918d6e
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
0002cc pac_io_krb_sid_and_attr_array extra_sids
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
02cc count: 00000002
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
0002d0 pac_io_krb_attrs extra_sids
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
02d0 sid_ptr: 00020030
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
02d4 attrs: 00000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
0002d8 pac_io_krb_attrs extra_sids
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
02d8 sid_ptr: 00020034
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
02dc attrs: 20000007
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
0002e0 pac_io_krb_sids extra_sids
[2007/02/17 16:28:04, 10] rpc_parse/parse_prs.c:prs_debug(82)
0002e0 smb_io_dom_sid2 sid
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
02e0 num_auths: 00000005
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02e4 sid_rev_num: 01
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02e5 num_auths : 05
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02e6 id_auth[0] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02e7 id_auth[1] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02e8 id_auth[2] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02e9 id_auth[3] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02ea id_auth[4] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
02eb id_auth[5] : 05
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
02ec sub_auths : 00000015 2d977f91
3c941f74 5bf604a2 000006ab
[2007/02/17 16:28:04, 9] rpc_parse/parse_prs.c:prs_debug(82)
000300 pac_io_krb_sids extra_sids
[2007/02/17 16:28:04, 10] rpc_parse/parse_prs.c:prs_debug(82)
000300 smb_io_dom_sid2 sid
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0300 num_auths: 00000005
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0304 sid_rev_num: 01
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0305 num_auths : 05
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0306 id_auth[0] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0307 id_auth[1] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0308 id_auth[2] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0309 id_auth[3] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
030a id_auth[4] : 00
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8(584)
030b id_auth[5] : 05
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
030c sub_auths : 00000015 acf58646
5d58f5d4 10918d6e 00000b99
[2007/02/17 16:28:04, 6] rpc_parse/parse_prs.c:prs_debug(82)
000320 pac_io_pac_info_hdr_ctr pac data
[2007/02/17 16:28:04, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(503)
PAC_TYPE_UNKNOWN_10
[2007/02/17 16:28:04, 7] rpc_parse/parse_prs.c:prs_debug(82)
000320 pac_io_unknown_type_10 pac data
[2007/02/17 16:28:04, 8] rpc_parse/parse_prs.c:prs_debug(82)
000320 smb_io_time unknown_time
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0320 low : e185b200
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0324 high: 01c752a7
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0328 len: 000c
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint16s(772)
032a name: t.s.t.o.l.z.
[2007/02/17 16:28:04, 6] rpc_parse/parse_prs.c:prs_debug(82)
000336 pac_io_pac_info_hdr_ctr pac data
[2007/02/17 16:28:04, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(476)
PAC_TYPE_SERVER_CHECKSUM
[2007/02/17 16:28:04, 7] rpc_parse/parse_prs.c:prs_debug(82)
000338 pac_io_pac_signature_data pac data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0338 type: ffffff76
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
033c signature: ed f3 f7 59 f3 ee 70 bd dc c5 36 a2 0a ce
e4 74
[2007/02/17 16:28:04, 6] rpc_parse/parse_prs.c:prs_debug(82)
00034c pac_io_pac_info_hdr_ctr pac data
[2007/02/17 16:28:04, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(449)
offset in header(x350) and data(x34c) do not match
[2007/02/17 16:28:04, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(489)
PAC_TYPE_PRIVSVR_CHECKSUM
[2007/02/17 16:28:04, 7] rpc_parse/parse_prs.c:prs_debug(82)
000350 pac_io_pac_signature_data pac data
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0350 type: ffffff76
[2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0354 signature: a1 5c 04 c6 2d e7 bc 7e 96 25 ef 14 d8 73
c7 d9
[2007/02/17 16:28:04, 3] smbd/sesssetup.c:reply_spnego_kerberos(179)
Ticket name is [tstolz at TTDE.TRANSTEC.DE]
[2007/02/17 16:28:04, 10] smbd/sesssetup.c:reply_spnego_kerberos(221)
Mapping [TTDE.TRANSTEC.DE] to short name
[2007/02/17 16:28:04, 10] smbd/sesssetup.c:reply_spnego_kerberos(234)
Mapped to [TRANSTEC]
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam(293)
Finding user TRANSTECwtstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(223)
Trying _Get_Pwnam(), username as lowercase is transtecwtstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(230)
Trying _Get_Pwnam(), username as given is TRANSTECwtstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(239)
Trying _Get_Pwnam(), username as uppercase is TRANSTECWTSTOLZ
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(247)
Checking combinations of 0 uppercase letters in transtecwtstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(251)
Get_Pwnam_internals didn't find user [TRANSTECwtstolz]!
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam(293)
Finding user tstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(223)
Trying _Get_Pwnam(), username as lowercase is tstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(239)
Trying _Get_Pwnam(), username as uppercase is TSTOLZ
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(247)
Checking combinations of 0 uppercase letters in tstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(251)
Get_Pwnam_internals didn't find user [tstolz]!
[2007/02/17 16:28:04, 10] auth/auth_util.c:auth_add_user_script(74)
auth_add_user_script: no 'add user script'. Asking winbindd
[2007/02/17 16:28:04, 5] auth/auth_util.c:auth_add_user_script(81)
auth_add_user_script: winbindd_create_user() failed
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam(293)
Finding user tstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(223)
Trying _Get_Pwnam(), username as lowercase is tstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(239)
Trying _Get_Pwnam(), username as uppercase is TSTOLZ
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(247)
Checking combinations of 0 uppercase letters in tstolz
[2007/02/17 16:28:04, 5] lib/username.c:Get_Pwnam_internals(251)
Get_Pwnam_internals didn't find user [tstolz]!
[2007/02/17 16:28:04, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username TRANSTECwtstolz is invalid on this system
[2007/02/17 16:28:04, 3] smbd/error.c:error_packet(105)
error string = No such file or directory
[2007/02/17 16:28:04, 3] smbd/error.c:error_packet(129)
error packet at smbd/sesssetup.c(255) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(464)
[2007/02/17 16:28:04, 5] lib/util.c:show_msg(474)
size=35
smb_com=0x73
smb_rcls=109
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=65279
smb_uid=0
smb_mid=64
smt_wct=0
smb_bcc=0
[2007/02/17 16:28:04, 6] lib/util_sock.c:write_socket(449)
write_socket(25,39)
[2007/02/17 16:28:04, 6] lib/util_sock.c:write_socket(452)
write_socket(25,39) wrote 39
[2007/02/17 16:28:04, 10] lib/util_sock.c:read_socket_data(378)
read_socket_data: recv of 4 returned 0. Error = Success
[2007/02/17 16:28:04, 10] lib/util_sock.c:receive_smb_raw(556)
receive_smb_raw: length < 0!
[2007/02/17 16:28:04, 3] smbd/process.c:timeout_processing(1334)
timeout_processing: End of file from client (client has disconnected).
[2007/02/17 16:28:04, 5] lib/gencache.c:gencache_shutdown(88)
Closing cache file
[2007/02/17 16:28:04, 5] libsmb/namecache.c:namecache_shutdown(79)
namecache_shutdown: netbios namecache closed successfully.
[2007/02/17 16:28:04, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_nt_user_token(485)
NT user token: (NULL)
[2007/02/17 16:28:04, 5] auth/auth_util.c:debug_unix_user_token(506)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2007/02/17 16:28:04, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2007/02/17 16:28:04, 2] smbd/server.c:exit_server(609)
Closing connections
[2007/02/17 16:28:04, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2007/02/17 16:28:04, 5] smbd/oplock.c:receive_local_message(107)
receive_local_message: doing select with timeout of 1 ms
[2007/02/17 16:28:04, 3] smbd/server.c:exit_server(652)
Server exit (normal exit)
Please help
Regards
Tom
_____________________________________________________________________
Vorstand: Ertu Uysal, Axel Queck
Vorsitzender des Aufsichtsrats: Bernhard Bruscha
Sitz der Gesellschaft: Tuebingen
Amtsgericht Stuttgart HRB 381299
Diese E-Mail enthaelt vertrauliche und/oder rechtlich geschuetzte
Informationen. Wenn Sie nicht der richtige Adressat sind oder diese
E-Mail irrtuemlich erhalten haben, informieren Sie bitte sofort den
Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie
die unbefugte Weitergabe dieser Mail ist nicht gestattet.
This e-mail may contain confidential and/or privileged information.
If you are not the intended recipient (or have received this e-mail
in error) please notify the sender immediately and destroy this
e-mail. Any unauthorized copying, disclosure or distribution of the
material in this e-mail is strictly forbidden.
More information about the samba
mailing list