[Samba] VFS ACL with SMB2

Adrian Berlin gato at rock.com
Fri Nov 23 05:44:53 MST 2012


 Hi!

Seems I cannot send attach to lists.samba.org

Debug file with level 10 below:



[2012/08/19 22:36:43.113369,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:43.113469,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:43.113567,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:43.113713,  5] smbd/uid.c:400(change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2012/08/19 22:36:43.113833,  5] lib/messages.c:332(messaging_deregister)
  Deregistering messaging pointer for type 784 - private_data=0xf84b6f78
[2012/08/19 22:36:43.113988, 10]
lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
  Locking key 49442F33313734322F31
[2012/08/19 22:36:43.114114, 10]
lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
  Allocated locked data 0x0xf84bc8b8
[2012/08/19 22:36:43.114222,  4] auth/pampass.c:483(smb_pam_start)
  smb_pam_start: PAM: Init user: test1
[2012/08/19 22:36:43.121149,  4] auth/pampass.c:492(smb_pam_start)
  smb_pam_start: PAM: setting rhost to: 192.168.250.25
[2012/08/19 22:36:43.121294,  4] auth/pampass.c:501(smb_pam_start)
  smb_pam_start: PAM: setting tty
[2012/08/19 22:36:43.121399,  4] auth/pampass.c:509(smb_pam_start)
  smb_pam_start: PAM: Init passed for user: test1
[2012/08/19 22:36:43.121501,  4]
auth/pampass.c:646(smb_internal_pam_session)
  smb_internal_pam_session: PAM: tty set to: smb/31742/13935
[2012/08/19 22:36:43.121928,  4] auth/pampass.c:465(smb_pam_end)
  smb_pam_end: PAM: PAM_END OK.
[2012/08/19 22:36:43.122158, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
  Unlocking key 49442F33313734322F31
[2012/08/19 22:36:43.122652,  3]
smbd/server_exit.c:181(exit_server_common)
  Server exit (termination signal)
[2012/08/19 22:36:45.914746,  3] param/loadparm.c:9572(lp_load_ex)
  lp_load_ex: refreshing parameters
[2012/08/19 22:36:45.914927,  3] param/loadparm.c:5192(init_globals)
  Initialising global parameters
[2012/08/19 22:36:45.915225,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf"
[2012/08/19 22:36:45.915343,  3] param/loadparm.c:8310(do_section)
  Processing section "[global]"
  doing parameter netbios name = dss24815
[2012/08/19 22:36:45.915494,  4]
param/loadparm.c:7561(handle_netbios_name)
  handle_netbios_name: set global_myname to: DSS24815
  doing parameter workgroup = WORKGROUP
  doing parameter server string = Data Storage Software
  doing parameter max protocol = SMB2
  doing parameter include = /tmp/etc/smb.security.conf
[2012/08/19 22:36:45.915888,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/tmp/etc/smb.security.conf"
  doing parameter security = USER
  doing parameter bind interfaces only = True
  doing parameter lock directory = /usr/local/samba/var/locks
  doing parameter usershare path = /usr/local/samba/var/locks/usershares
  doing parameter include = /tmp/etc/smb_use_spnego.conf
[2012/08/19 22:36:45.916461,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/tmp/etc/smb_use_spnego.conf"
  doing parameter use spnego = yes
[2012/08/19 22:36:45.916631,  1] param/loadparm.c:7992(lp_do_parameter)
  WARNING: The "use spnego" option is deprecated
  doing parameter include = /tmp/etc/smb_hide_apple_files.conf
[2012/08/19 22:36:45.916885,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/tmp/etc/smb_hide_apple_files.conf"
  doing parameter veto files =
/:2eFBCLockFolder/.FBCLockFolder/:2eFBCIndex/.FBCIndex/:2eDS_Store/.DS_Store/TheVolumeSettingsFolder/TheFindByContentFolder/Temporary
Items/Network Trash
Folder/.AppleDB/:2eVolumeIcon.icns/.VolumeIcon.icns/Icon\077/.AppleDouble/.AppleDesktop/desktop.ini/RECYCLER/
  doing parameter include = /tmp/etc/smb_use_antyvirus.conf
[2012/08/19 22:36:45.917284,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/tmp/etc/smb_use_antyvirus.conf"
  doing parameter include = /tmp/etc/smb.nis.conf
[2012/08/19 22:36:45.917539,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/tmp/etc/smb.nis.conf"
  doing parameter encrypt passwords = Yes
  doing parameter include = /tmp/etc/smb_domainlogons.conf
[2012/08/19 22:36:45.917835,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/tmp/etc/smb_domainlogons.conf"
  doing parameter domain logons = yes
  doing parameter include = /tmp/etc/smb_protocol.conf
[2012/08/19 22:36:45.918164,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/tmp/etc/smb_protocol.conf"
  doing parameter obey pam restrictions = Yes
  doing parameter passwd program = /usr/bin/passwd %u
  doing parameter passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
  doing parameter log level = 10
[2012/08/19 22:36:45.918486,  5]
../lib/util/debug.c:330(debug_dump_status)
  INFO: Current debug levels:
    all: 10
    tdb: 10
    printdrivers: 10
    lanman: 10
    smb: 10
    rpc_parse: 10
    rpc_srv: 10
    rpc_cli: 10
    passdb: 10
    sam: 10
    auth: 10
    winbind: 10
    vfs: 10
    idmap: 10
    quota: 10
    acls: 10
    locking: 10
    msdfs: 10
    dmapi: 10
    registry: 10
  doing parameter syslog = 0
  doing parameter log file = /var/log/samba/debug.log
  doing parameter max log size = 6000
  doing parameter socket options = TCP_NODELAY IPTOS_LOWDELAY
  doing parameter keep alive = 10
  doing parameter os level = 0
  doing parameter local master = no
  doing parameter preferred master = no
  doing parameter domain master = False
  doing parameter dns proxy = No
  doing parameter invalid users = root whell
  doing parameter deadtime = 0
  doing parameter create mask = 0777
  doing parameter directory mask = 0777
  doing parameter inherit permissions = yes
  doing parameter map acl inherit = yes
  doing parameter inherit acls = yes
  doing parameter locking = yes
  doing parameter admin users =
  doing parameter map hidden = no
  doing parameter map system = no
  doing parameter map archive = no
  doing parameter store dos attributes = yes
  doing parameter guest account = guest
  doing parameter map to guest = bad password
  doing parameter printable = no
  doing parameter restrict anonymous = yes
  doing parameter follow symlinks = yes
  doing parameter wide links = no
  doing parameter dos charset = CP852
[2012/08/19 22:36:45.921296,  5]
../lib/util/charset/codepoints.c:235(map_locale)
  Substituting charset 'ANSI_X3.4-1968' for LOCALE
  doing parameter display charset = UTF8
  doing parameter wins server =
  doing parameter pid directory = /tmp
  doing parameter force unknown acl user = yes
  doing parameter winbind separator = +
  doing parameter winbind enum users = yes
  doing parameter winbind enum groups = yes
  doing parameter template homedir = /home/winnt/%D/%U
  doing parameter template shell = /bin/bash
  doing parameter enable asu support = Yes
  doing parameter printcap cache time = 0
  doing parameter acl check permissions = Yes
  doing parameter dos filemode = Yes
  doing parameter acl map full control = Yes
  doing parameter inherit owner = No
  doing parameter include = /tmp/etc/smb.ldap.conf
[2012/08/19 22:36:45.922761,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/tmp/etc/smb.ldap.conf"
  doing parameter ldap admin dn = "cn=admin,dc=server,dc=nas"
  doing parameter ldap suffix = "dc=server,dc=nas"
  doing parameter passdb backend = ldapsam:ldap://127.0.0.1:389
  doing parameter ldap ssl = no
  doing parameter lanman auth = yes
  doing parameter client lanman auth = yes
  doing parameter client plaintext auth = yes
  doing parameter max stat cache size = 1024
  doing parameter smb encrypt = disabled
  doing parameter max protocol = SMB2
  doing parameter vfs objects = aio_fork
  doing parameter aio read size = 1
  doing parameter aio write size = 1
  doing parameter unix extensions = yes
  doing parameter include = /var/nasconf/included/smb.conf.all_resources
[2012/08/19 22:36:45.924053,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/var/nasconf/included/smb.conf.all_resources"
  doing parameter include = /var/nasconf/included/res/share1
[2012/08/19 22:36:45.924400,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/var/nasconf/included/res/share1"
[2012/08/19 22:36:45.924518,  2] param/loadparm.c:8327(do_section)
  Processing section "[share1]"
[2012/08/19 22:36:45.924727,  8] param/loadparm.c:6480(add_a_service)
  add_a_service: Creating snum = 0 for share1
[2012/08/19 22:36:45.924840, 10] param/loadparm.c:6518(hash_a_service)
  hash_a_service: creating servicehash
[2012/08/19 22:36:45.924942, 10] param/loadparm.c:6527(hash_a_service)
  hash_a_service: hashing index 0 for service name share1
  doing parameter path =
/volumes/d649Fh-UFys-45oC-RiX6-sg72-0mdv-3ZXA0c/share1
  doing parameter comment =
  doing parameter guest ok = No
  doing parameter read only = NO
  doing parameter browseable = YES
  doing parameter printable = No
  doing parameter valid users = "test1","test2"
  doing parameter case sensitive = no
  doing parameter default case = lower
  doing parameter preserve case = yes
  doing parameter short preserve case = yes
  doing parameter inherit owner = NO
  doing parameter inherit acls = YES
  doing parameter inherit permissions = YES
  doing parameter locking = YES
  doing parameter map acl inherit = YES
  doing parameter include = /var/nasconf/included/usr/guest.conf
[2012/08/19 22:36:45.926298,  2] param/loadparm.c:7690(handle_include)
  Can't find include file /var/nasconf/included/usr/guest.conf
  doing parameter include = /var/nasconf/samba/samba_extras.conf
[2012/08/19 22:36:45.926571,  2] param/loadparm.c:7690(handle_include)
  Can't find include file /var/nasconf/samba/samba_extras.conf
[2012/08/19 22:36:45.926676,  4] param/loadparm.c:9608(lp_load_ex)
  pm_process() returned Yes
[2012/08/19 22:36:45.926822,  7] param/loadparm.c:9834(lp_servicenumber)
  lp_servicenumber: couldn't find homes
[2012/08/19 22:36:45.927013,  8] param/loadparm.c:6480(add_a_service)
  add_a_service: Creating snum = 1 for IPC$
[2012/08/19 22:36:45.927142, 10] param/loadparm.c:6527(hash_a_service)
  hash_a_service: hashing index 1 for service name IPC$
[2012/08/19 22:36:45.927262,  3] param/loadparm.c:6630(lp_add_ipc)
  adding IPC service
[2012/08/19 22:36:45.927426,  8] param/loadparm.c:6480(add_a_service)
  add_a_service: Creating snum = 2 for ADMIN$
[2012/08/19 22:36:45.927530, 10] param/loadparm.c:6527(hash_a_service)
  hash_a_service: hashing index 2 for service name ADMIN$
[2012/08/19 22:36:45.927672,  3] param/loadparm.c:6630(lp_add_ipc)
  adding IPC service
[2012/08/19 22:36:45.927776, 10]
param/loadparm_server_role.c:101(set_server_role)
  set_server_role: role = ROLE_DOMAIN_BDC
[2012/08/19 22:36:45.927971,  6]
param/loadparm.c:7490(lp_file_list_changed)
  lp_file_list_changed()
  file /var/nasconf/samba/samba_extras.conf ->
/var/nasconf/samba/samba_extras.conf  last mod_time: Thu Jan  1 01:00:00
1970
 
  file /var/nasconf/included/usr/guest.conf ->
/var/nasconf/included/usr/guest.conf  last mod_time: Thu Jan  1 01:00:00
1970
 
  file /var/nasconf/included/res/share1 ->
/var/nasconf/included/res/share1  last mod_time: Sun Aug 19 22:27:55 2012
 
  file /var/nasconf/included/smb.conf.all_resources ->
/var/nasconf/included/smb.conf.all_resources  last mod_time: Sun Aug 19
22:27:55 2012
 
  file /tmp/etc/smb.ldap.conf -> /tmp/etc/smb.ldap.conf  last mod_time:
Sun Aug 19 01:18:04 2012
 
  file /tmp/etc/smb_protocol.conf -> /tmp/etc/smb_protocol.conf  last
mod_time: Sun Aug 19 22:36:45 2012
 
  file /tmp/etc/smb_domainlogons.conf -> /tmp/etc/smb_domainlogons.conf 
last mod_time: Sun Aug 19 22:36:45 2012
 
  file /tmp/etc/smb.nis.conf -> /tmp/etc/smb.nis.conf  last mod_time: Sun
Aug 19 01:18:33 2012
 
  file /tmp/etc/smb_use_antyvirus.conf ->
/tmp/etc/smb_use_antyvirus.conf  last mod_time: Sun Aug 19 01:18:04 2012
 
  file /tmp/etc/smb_hide_apple_files.conf ->
/tmp/etc/smb_hide_apple_files.conf  last mod_time: Sun Aug 19 22:36:45
2012
 
  file /tmp/etc/smb_use_spnego.conf -> /tmp/etc/smb_use_spnego.conf  last
mod_time: Sun Aug 19 22:36:45 2012
 
  file /tmp/etc/smb.security.conf -> /tmp/etc/smb.security.conf  last
mod_time: Sun Aug 19 01:18:33 2012
 
  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Aug
19 22:36:45 2012
 
[2012/08/19 22:36:45.930046,  2] lib/interface.c:341(add_interface)
  added interface eth1 ip=192.168.1.220 bcast=192.168.1.255
netmask=255.255.255.0
[2012/08/19 22:36:45.930229,  2] lib/interface.c:341(add_interface)
  added interface eth0 ip=192.168.248.15 bcast=192.168.255.255
netmask=255.255.240.0
[2012/08/19 22:36:45.930372,  3] smbd/server.c:1088(main)
  loaded services
[2012/08/19 22:36:45.930482,  5] lib/util.c:242(init_names)
  Netbios name list:-
  my_netbios_names[0]="DSS24815"
[2012/08/19 22:36:45.930846,  3] smbd/server.c:1120(main)
  Becoming a daemon.
[2012/08/19 22:36:45.931828,  8] ../lib/util/util.c:263(fcntl_lock)
  fcntl_lock 9 13 0 1 1
[2012/08/19 22:36:45.932077,  8] ../lib/util/util.c:298(fcntl_lock)
  fcntl_lock: Lock call successful
[2012/08/19 22:36:45.932879,  5]
passdb/pdb_interface.c:71(smb_register_passdb)
  Attempting to register passdb backend ldapsam
[2012/08/19 22:36:45.933033,  5]
passdb/pdb_interface.c:84(smb_register_passdb)
  Successfully added passdb backend 'ldapsam'
[2012/08/19 22:36:45.933139,  5]
passdb/pdb_interface.c:71(smb_register_passdb)
  Attempting to register passdb backend ldapsam_compat
[2012/08/19 22:36:45.933244,  5]
passdb/pdb_interface.c:84(smb_register_passdb)
  Successfully added passdb backend 'ldapsam_compat'
[2012/08/19 22:36:45.933349,  5]
passdb/pdb_interface.c:71(smb_register_passdb)
  Attempting to register passdb backend NDS_ldapsam
[2012/08/19 22:36:45.933451,  5]
passdb/pdb_interface.c:84(smb_register_passdb)
  Successfully added passdb backend 'NDS_ldapsam'
[2012/08/19 22:36:45.933552,  5]
passdb/pdb_interface.c:71(smb_register_passdb)
  Attempting to register passdb backend NDS_ldapsam_compat
[2012/08/19 22:36:45.933654,  5]
passdb/pdb_interface.c:84(smb_register_passdb)
  Successfully added passdb backend 'NDS_ldapsam_compat'
[2012/08/19 22:36:45.933762,  5]
passdb/pdb_interface.c:71(smb_register_passdb)
  Attempting to register passdb backend IPA_ldapsam
[2012/08/19 22:36:45.933865,  5]
passdb/pdb_interface.c:84(smb_register_passdb)
  Successfully added passdb backend 'IPA_ldapsam'
[2012/08/19 22:36:45.933968,  5]
passdb/pdb_interface.c:71(smb_register_passdb)
  Attempting to register passdb backend smbpasswd
[2012/08/19 22:36:45.934100,  5]
passdb/pdb_interface.c:84(smb_register_passdb)
  Successfully added passdb backend 'smbpasswd'
[2012/08/19 22:36:45.934205,  5]
passdb/pdb_interface.c:71(smb_register_passdb)
  Attempting to register passdb backend tdbsam
[2012/08/19 22:36:45.934307,  5]
passdb/pdb_interface.c:84(smb_register_passdb)
  Successfully added passdb backend 'tdbsam'
[2012/08/19 22:36:45.934409,  5]
passdb/pdb_interface.c:71(smb_register_passdb)
  Attempting to register passdb backend wbc_sam
[2012/08/19 22:36:45.934515,  5]
passdb/pdb_interface.c:84(smb_register_passdb)
  Successfully added passdb backend 'wbc_sam'
[2012/08/19 22:36:45.934616,  5]
passdb/pdb_interface.c:141(make_pdb_method_name)
  Attempting to find a passdb backend to match
ldapsam:ldap://127.0.0.1:389 (ldapsam)
[2012/08/19 22:36:45.934718,  5]
passdb/pdb_interface.c:162(make_pdb_method_name)
  Found pdb backend ldapsam
[2012/08/19 22:36:45.934865,  2]
lib/smbldap_util.c:278(smbldap_search_domain_info)
  smbldap_search_domain_info: Searching
for:[(&(objectClass=sambaDomain)(sambaDomainName=WORKGROUP))]
[2012/08/19 22:36:45.935020,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaDomain)(sambaDomainName=WORKGROUP))], scope => [2]
[2012/08/19 22:36:45.935450,  5] lib/smbldap.c:1341(smbldap_close)
  The connection to the LDAP server was closed
[2012/08/19 22:36:45.935588, 10] lib/smbldap.c:819(smb_ldap_setup_conn)
  smb_ldap_setup_connection: ldap://127.0.0.1:389
[2012/08/19 22:36:45.955767,  2]
lib/smbldap.c:1018(smbldap_open_connection)
  smbldap_open_connection: connection opened
[2012/08/19 22:36:45.956021, 10]
lib/smbldap.c:1194(smbldap_connect_system)
  ldap_connect_system: Binding to ldap server ldap://127.0.0.1:389 as
"cn=admin,dc=server,dc=nas"
[2012/08/19 22:36:45.957735,  3]
lib/smbldap.c:1240(smbldap_connect_system)
  ldap_connect_system: successful connection to the LDAP server
  ldap_connect_system: LDAP server does support paged results
[2012/08/19 22:36:45.957981,  4] lib/smbldap.c:1319(smbldap_open)
  The LDAP server is successfully connected
[2012/08/19 22:36:45.958921,  5]
passdb/pdb_interface.c:173(make_pdb_method_name)
  pdb backend ldapsam:ldap://127.0.0.1:389 has a valid init
[2012/08/19 22:36:45.962472, 10]
registry/reg_backend_db.c:526(regdb_init)
  regdb_init: registry db openend. refcount reset (1)
[2012/08/19 22:36:45.962645, 10]
registry/reg_cachehook.c:70(reghook_cache_init)
  reghook_cache_init: new tree with default ops 0xf77456c0 for key []
[2012/08/19 22:36:45.963325, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports]
[2012/08/19 22:36:45.963515, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Samba Printer Port] len[2]
[2012/08/19 22:36:45.963635, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2012/08/19 22:36:45.963793, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70]
[2012/08/19 22:36:45.963904, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2012/08/19 22:36:45.964054, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2012/08/19 22:36:45.964165, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2012/08/19 22:36:45.964279, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2012/08/19 22:36:45.964430, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2012/08/19 22:36:45.964569, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2012/08/19 22:36:45.964694, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf77457a0 for key
[\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers]
[2012/08/19 22:36:45.964801,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.964912, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node
[HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree
[2012/08/19 22:36:45.965015,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.965122, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf77456c0 for key
[\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2012/08/19 22:36:45.965225,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.965334, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Print\Printers] to tree
[2012/08/19 22:36:45.965437,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.965542, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf77456c0 for key
[\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports]
[2012/08/19 22:36:45.965644,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.965750, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Ports] to tree
[2012/08/19 22:36:45.965851,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.965957, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf77457e0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares]
[2012/08/19 22:36:45.966059,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.966166, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node
[HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree
[2012/08/19 22:36:45.966268,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.966373, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf7745760 for key
[\HKLM\SOFTWARE\Samba\smbconf]
[2012/08/19 22:36:45.966476,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.966581, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to
tree
[2012/08/19 22:36:45.966682,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.966788, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf7745820 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
[2012/08/19 22:36:45.966890,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.966997, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node
[HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree
[2012/08/19 22:36:45.967146,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.967258, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf7745860 for key
[\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions]
[2012/08/19 22:36:45.967362,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.967469, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node
[HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree
[2012/08/19 22:36:45.967573,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.967679, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf77458a0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
[2012/08/19 22:36:45.967783,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.967914, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node
[HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree
[2012/08/19 22:36:45.968019,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.968123, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf77458e0 for key [\HKPT]
[2012/08/19 22:36:45.968223,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.968326, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKPT] to tree
[2012/08/19 22:36:45.968437,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.968544, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf7745920 for key
[\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
[2012/08/19 22:36:45.968648,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.968752, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion] to tree
[2012/08/19 22:36:45.968853,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.968961, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf7745960 for key
[\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib]
[2012/08/19 22:36:45.969064,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:45.969169, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Perflib] to tree
[2012/08/19 22:36:45.969271,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:45.969371, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (1->0)
[2012/08/19 22:36:45.970006,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user WORKGROUP+root
[2012/08/19 22:36:45.970139,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is workgroup+root
[2012/08/19 22:36:45.972854,  5] lib/username.c:124(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as given is WORKGROUP+root
[2012/08/19 22:36:45.973688,  5] lib/username.c:134(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as uppercase is WORKGROUP+ROOT
[2012/08/19 22:36:45.974526,  5] lib/username.c:143(Get_Pwnam_internals)
  Checking combinations of 0 uppercase letters in workgroup+root
[2012/08/19 22:36:45.974713,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals didn't find user [WORKGROUP+root]!
[2012/08/19 22:36:45.974822,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user root
[2012/08/19 22:36:45.974922,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is root
[2012/08/19 22:36:45.975139,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [root]!
[2012/08/19 22:36:45.975367,  5] lib/gencache.c:68(gencache_init)
  Opening cache file at /usr/local/samba/var/locks/gencache.tdb
[2012/08/19 22:36:45.975732,  5] lib/gencache.c:111(gencache_init)
  Opening cache file at /usr/local/samba/var/locks/gencache_notrans.tdb
[2012/08/19 22:36:45.976227,  5] passdb/lookup_sid.c:1384(gid_to_sid)
  gid_to_sid: winbind failed to find a sid for gid 0
[2012/08/19 22:36:45.976369,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.976484,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.976589,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.976694,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.976797,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.977006,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(gidNumber=0))], scope => [2]
[2012/08/19 22:36:45.977708,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(gidNumber=0))
[2012/08/19 22:36:45.977918,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:45.978037, 10]
passdb/lookup_sid.c:1181(legacy_gid_to_sid)
  LEGACY: gid 0 -> sid S-1-22-2-0
[2012/08/19 22:36:45.978195,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(gidNumber=0))], scope => [2]
[2012/08/19 22:36:45.978830,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(gidNumber=0))
[2012/08/19 22:36:45.979017,  3]
passdb/lookup_sid.c:1754(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for root
[2012/08/19 22:36:45.979147, 10] passdb/lookup_sid.c:76(lookup_name)
  lookup_name: WORKGROUP\root => domain=[WORKGROUP], name=[root]
[2012/08/19 22:36:45.979251, 10] passdb/lookup_sid.c:77(lookup_name)
  lookup_name: flags = 0x073
[2012/08/19 22:36:45.979362,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.979469,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.979570,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.979672,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.979772,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.980016,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(uid=root)(objectclass=sambaSamAccount))], scope => [2]
[2012/08/19 22:36:45.980706,  4]
passdb/pdb_ldap.c:1581(ldapsam_getsampwnam)
  ldapsam_getsampwnam: Unable to locate user [root] count=0
[2012/08/19 22:36:45.980902,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:45.981016,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.981123,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.981224,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.981325,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.981425,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.981601,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(|(displayName=root)(cn=root)))], scope
=> [2]
[2012/08/19 22:36:45.982255,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(|(displayName=root)(cn=root)))
[2012/08/19 22:36:45.982457,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:45.982578, 10] passdb/lookup_sid.c:76(lookup_name)
  lookup_name: Unix User\root => domain=[Unix User], name=[root]
[2012/08/19 22:36:45.982682, 10] passdb/lookup_sid.c:77(lookup_name)
  lookup_name: flags = 0x073
[2012/08/19 22:36:45.982860,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user root
[2012/08/19 22:36:45.982969,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is root
[2012/08/19 22:36:45.983078,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [root]!
[2012/08/19 22:36:45.983189, 10] passdb/lookup_sid.c:1544(sid_to_uid)
  sid S-1-22-1-0 -> uid 0
[2012/08/19 22:36:45.983495, 10] lib/system_smbd.c:175(sys_getgrouplist)
  sys_getgrouplist: user [root]
[2012/08/19 22:36:45.985109,  5] passdb/lookup_sid.c:1384(gid_to_sid)
  gid_to_sid: winbind failed to find a sid for gid 89
[2012/08/19 22:36:45.985276,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.985388,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.985492,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.985595,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.985696,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.985873,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(gidNumber=89))], scope => [2]
[2012/08/19 22:36:45.986490,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(gidNumber=89))
[2012/08/19 22:36:45.986703,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:45.986818, 10]
passdb/lookup_sid.c:1181(legacy_gid_to_sid)
  LEGACY: gid 89 -> sid S-1-22-2-89
[2012/08/19 22:36:45.986940, 10]
auth/token_util.c:339(create_local_nt_token)
  Create local NT token for S-1-22-1-0
[2012/08/19 22:36:45.987183, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-544
[2012/08/19 22:36:45.987314,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.987424,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.987526,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.987627,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.987726,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.987900,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
[2012/08/19 22:36:45.988554,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
[2012/08/19 22:36:45.988759,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:45.988870, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-544
[2012/08/19 22:36:45.988981,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.989087,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.989188,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.989288,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.989387,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.989643, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-544
[2012/08/19 22:36:45.989771,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:45.989877,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:45.990010,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:45.990131,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.990233,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.990444,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
[2012/08/19 22:36:45.991106,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
[2012/08/19 22:36:45.991312,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.991421, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-544
[2012/08/19 22:36:45.991582,  5]
passdb/pdb_util.c:128(create_builtin_administrators)
  create_builtin_administrators: Failed to create Administrators
[2012/08/19 22:36:45.991698,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:45.991872, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-545
[2012/08/19 22:36:45.991985,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.992092,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.992193,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.992295,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.992396,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.992570,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
[2012/08/19 22:36:45.993208,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
[2012/08/19 22:36:45.993406,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:45.993514, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-545
[2012/08/19 22:36:45.993625,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.993729,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.993829,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.993930,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.994029,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.994273, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-545
[2012/08/19 22:36:45.994390,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:45.994495,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:45.994596,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:45.994697,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.994796,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.994967,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
[2012/08/19 22:36:45.995596,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
[2012/08/19 22:36:45.995825,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.995941, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-545
[2012/08/19 22:36:45.996077,  5]
passdb/pdb_util.c:99(create_builtin_users)
  create_builtin_users: Failed to create Users
[2012/08/19 22:36:45.996194,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:45.996300,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.996405,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.996506,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.996606,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.996706,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.996948,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectclass=sambaGroupMapping)(sambaGroupType=4)(|(sambaSIDList=S-1-22-1-0)(sambaSIDList=S-1-22-2-0)(sambaSIDList=S-1-22-2-89)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)))],
scope => [2]
[2012/08/19 22:36:45.997769,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:45.998203,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-22-1-0]
[2012/08/19 22:36:45.998348,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-22-2-0]
[2012/08/19 22:36:45.998487,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-22-2-89]
[2012/08/19 22:36:45.998612,  5]
lib/privileges.c:175(get_privileges_for_sids)
  get_privileges_for_sids: sid = S-1-1-0
  Privilege set: 0x0
[2012/08/19 22:36:45.998766,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-2]
[2012/08/19 22:36:45.998885,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-11]
[2012/08/19 22:36:45.999230, 10]
passdb/lookup_sid.c:1468(sids_to_unix_ids)
  wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE
[2012/08/19 22:36:45.999364,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.999476,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:45.999579,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:45.999683,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:45.999783,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:45.999962,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))], scope => [2]
[2012/08/19 22:36:46.000627,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))
[2012/08/19 22:36:46.000832,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.000956, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-1-0
[2012/08/19 22:36:46.001070, 10]
passdb/lookup_sid.c:1218(legacy_sid_to_uid)
  LEGACY: mapping failed for sid S-1-1-0
[2012/08/19 22:36:46.001181,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.001285,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.001387,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.001534,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.001643,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.001818,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))], scope => [2]
[2012/08/19 22:36:46.002465,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
[2012/08/19 22:36:46.002671,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.002783, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-2
[2012/08/19 22:36:46.002896, 10]
passdb/lookup_sid.c:1218(legacy_sid_to_uid)
  LEGACY: mapping failed for sid S-1-5-2
[2012/08/19 22:36:46.003007,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.003114,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.003216,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.003319,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.003422,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.003596,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-11))], scope => [2]
[2012/08/19 22:36:46.004226,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-11))
[2012/08/19 22:36:46.004432,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.004545, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-11
[2012/08/19 22:36:46.004657, 10]
passdb/lookup_sid.c:1218(legacy_sid_to_uid)
  LEGACY: mapping failed for sid S-1-5-11
[2012/08/19 22:36:46.004768, 10] auth/auth_util.c:505(create_local_token)
  Could not convert SID S-1-1-0 to gid, ignoring it
[2012/08/19 22:36:46.004874, 10] auth/auth_util.c:505(create_local_token)
  Could not convert SID S-1-5-2 to gid, ignoring it
[2012/08/19 22:36:46.004979, 10] auth/auth_util.c:505(create_local_token)
  Could not convert SID S-1-5-11 to gid, ignoring it
[2012/08/19 22:36:46.005091, 10]
../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (6):
    SID[  0]: S-1-22-1-0
    SID[  1]: S-1-22-2-0
    SID[  2]: S-1-22-2-89
    SID[  3]: S-1-1-0
    SID[  4]: S-1-5-2
    SID[  5]: S-1-5-11
   Privileges (0x               0):
   Rights (0x               0):
[2012/08/19 22:36:46.005517, 10]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 2 supplementary groups
  Group[  0]: 0
  Group[  1]: 89
[2012/08/19 22:36:46.006241,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user guest
[2012/08/19 22:36:46.006363,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is guest
[2012/08/19 22:36:46.006587,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [guest]!
[2012/08/19 22:36:46.006719,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user WORKGROUP+guest
[2012/08/19 22:36:46.006826,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is workgroup+guest
[2012/08/19 22:36:46.007574,  5] lib/username.c:124(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as given is WORKGROUP+guest
[2012/08/19 22:36:46.008409,  5] lib/username.c:134(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as uppercase is WORKGROUP+GUEST
[2012/08/19 22:36:46.009264,  5] lib/username.c:143(Get_Pwnam_internals)
  Checking combinations of 0 uppercase letters in workgroup+guest
[2012/08/19 22:36:46.009445,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals didn't find user [WORKGROUP+guest]!
[2012/08/19 22:36:46.009556,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user guest
[2012/08/19 22:36:46.009659,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is guest
[2012/08/19 22:36:46.009767,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [guest]!
[2012/08/19 22:36:46.009947,  5] passdb/lookup_sid.c:1384(gid_to_sid)
  gid_to_sid: winbind failed to find a sid for gid 65535
[2012/08/19 22:36:46.010057,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.010165,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.010267,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.010368,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.010470,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.010647,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(gidNumber=65535))], scope => [2]
[2012/08/19 22:36:46.011272,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(gidNumber=65535))
[2012/08/19 22:36:46.011470,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.011582, 10]
passdb/lookup_sid.c:1181(legacy_gid_to_sid)
  LEGACY: gid 65535 -> sid S-1-22-2-65535
[2012/08/19 22:36:46.011723,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(gidNumber=65535))], scope => [2]
[2012/08/19 22:36:46.012350,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(gidNumber=65535))
[2012/08/19 22:36:46.012541,  3]
passdb/lookup_sid.c:1754(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for guest
[2012/08/19 22:36:46.012657, 10]
auth/token_util.c:223(create_local_nt_token_from_info3)
  Create local NT token for guest
[2012/08/19 22:36:46.012845, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-544
[2012/08/19 22:36:46.012964,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.013072,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.013176,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.013278,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.013380,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.013561,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
[2012/08/19 22:36:46.014203,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
[2012/08/19 22:36:46.014409,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.014520, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-544
[2012/08/19 22:36:46.014631,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.014737,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.014877,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.014980,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.015079,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.015328, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-544
[2012/08/19 22:36:46.015446,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.015552,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:46.015654,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.015756,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.015855,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.016028,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
[2012/08/19 22:36:46.016682,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
[2012/08/19 22:36:46.016885,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.016995, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-544
[2012/08/19 22:36:46.017132,  5]
passdb/pdb_util.c:128(create_builtin_administrators)
  create_builtin_administrators: Failed to create Administrators
[2012/08/19 22:36:46.017252,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.017427, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-545
[2012/08/19 22:36:46.017542,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.017650,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.017753,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.017854,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.017955,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.018129,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
[2012/08/19 22:36:46.018785,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
[2012/08/19 22:36:46.018995,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.019107, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-545
[2012/08/19 22:36:46.019218,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.019324,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.019425,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.019527,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.019627,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.019874, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-545
[2012/08/19 22:36:46.020030,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.020138,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:46.020240,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.020341,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.020440,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.020613,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
[2012/08/19 22:36:46.021257,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
[2012/08/19 22:36:46.021457,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.021567, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-545
[2012/08/19 22:36:46.021704,  5]
passdb/pdb_util.c:99(create_builtin_users)
  create_builtin_users: Failed to create Users
[2012/08/19 22:36:46.021818,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.021925,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.022030,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.022133,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.022235,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.022335,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.022606,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectclass=sambaGroupMapping)(sambaGroupType=4)(|(sambaSIDList=S-1-5-21-1709156513-4229506078-2817319653-501)(sambaSIDList=S-1-5-21-1709156513-4229506078-2817319653-513)(sambaSIDList=S-1-5-21-1709156513-4229506078-2817319653-546)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)))],
scope => [2]
[2012/08/19 22:36:46.023460,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.023670,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID
[S-1-5-21-1709156513-4229506078-2817319653-501]
[2012/08/19 22:36:46.023805,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID
[S-1-5-21-1709156513-4229506078-2817319653-513]
[2012/08/19 22:36:46.023932,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID
[S-1-5-21-1709156513-4229506078-2817319653-546]
[2012/08/19 22:36:46.024060,  5]
lib/privileges.c:175(get_privileges_for_sids)
  get_privileges_for_sids: sid = S-1-1-0
  Privilege set: 0x0
[2012/08/19 22:36:46.024216,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-2]
[2012/08/19 22:36:46.024338,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-32-546]
[2012/08/19 22:36:46.024769, 10]
passdb/lookup_sid.c:1468(sids_to_unix_ids)
  wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE
[2012/08/19 22:36:46.024884,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.024993,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.025096,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.025198,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.025335,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.025499,  5]
passdb/pdb_interface.c:1606(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 501.
[2012/08/19 22:36:46.025607,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.025710,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:46.025811,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.025913,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.026012,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.026159,  6]
passdb/pdb_interface.c:401(pdb_getsampwsid)
  pdb_getsampwsid: Building guest account
[2012/08/19 22:36:46.026261,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user guest
[2012/08/19 22:36:46.026362,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is guest
[2012/08/19 22:36:46.026468,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [guest]!
[2012/08/19 22:36:46.026573, 10]
passdb/pdb_get_set.c:575(pdb_set_username)
  pdb_set_username: setting username guest, was
[2012/08/19 22:36:46.026690, 10]
passdb/pdb_get_set.c:644(pdb_set_fullname)
  pdb_set_full_name: setting full name guests, was
[2012/08/19 22:36:46.026795, 10] passdb/pdb_get_set.c:598(pdb_set_domain)
  pdb_set_domain: setting domain WORKGROUP, was
[2012/08/19 22:36:46.026902, 10]
passdb/pdb_get_set.c:500(pdb_set_user_sid)
  pdb_set_user_sid: setting user sid
S-1-5-21-1709156513-4229506078-2817319653-501
[2012/08/19 22:36:46.027013, 10]
passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
  pdb_set_user_sid_from_rid:
      setting user sid S-1-5-21-1709156513-4229506078-2817319653-501 from
rid 501
[2012/08/19 22:36:46.027183,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.027297,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user guest
[2012/08/19 22:36:46.027401,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is guest
[2012/08/19 22:36:46.027509,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [guest]!
[2012/08/19 22:36:46.027622,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.027728,  5]
passdb/lookup_sid.c:1269(legacy_sid_to_gid)
  LEGACY: sid S-1-5-21-1709156513-4229506078-2817319653-501 is a User,
expected a group
[2012/08/19 22:36:46.027843,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.027949,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.028052,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.028155,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.028257,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.028440,  5]
passdb/pdb_interface.c:1606(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 501.
[2012/08/19 22:36:46.028550,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.028655,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:46.028758,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.028860,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.028960,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.029138,  6]
passdb/pdb_interface.c:401(pdb_getsampwsid)
  pdb_getsampwsid: Building guest account
[2012/08/19 22:36:46.029246,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user guest
[2012/08/19 22:36:46.029346,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is guest
[2012/08/19 22:36:46.029451,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [guest]!
[2012/08/19 22:36:46.029553, 10]
passdb/pdb_get_set.c:575(pdb_set_username)
  pdb_set_username: setting username guest, was
[2012/08/19 22:36:46.029660, 10]
passdb/pdb_get_set.c:644(pdb_set_fullname)
  pdb_set_full_name: setting full name guests, was
[2012/08/19 22:36:46.029764, 10] passdb/pdb_get_set.c:598(pdb_set_domain)
  pdb_set_domain: setting domain WORKGROUP, was
[2012/08/19 22:36:46.029870, 10]
passdb/pdb_get_set.c:500(pdb_set_user_sid)
  pdb_set_user_sid: setting user sid
S-1-5-21-1709156513-4229506078-2817319653-501
[2012/08/19 22:36:46.029978, 10]
passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
  pdb_set_user_sid_from_rid:
      setting user sid S-1-5-21-1709156513-4229506078-2817319653-501 from
rid 501
[2012/08/19 22:36:46.030132,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.030241,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user guest
[2012/08/19 22:36:46.030342,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is guest
[2012/08/19 22:36:46.030448,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [guest]!
[2012/08/19 22:36:46.030563,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.030668, 10]
passdb/lookup_sid.c:1223(legacy_sid_to_uid)
  LEGACY: sid S-1-5-21-1709156513-4229506078-2817319653-501 -> uid 65535
[2012/08/19 22:36:46.030789,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.030897,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.031002,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.031104,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.031203,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.031355,  5]
passdb/pdb_interface.c:1606(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 513.
[2012/08/19 22:36:46.031462,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.031564,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:46.031665,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.031766,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.031864,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.032063,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-513)(objectclass=sambaSamAccount))],
scope => [2]
[2012/08/19 22:36:46.032812,  4]
passdb/pdb_ldap.c:1675(ldapsam_getsampwsid)
  ldapsam_getsampwsid: Unable to locate SID
[S-1-5-21-1709156513-4229506078-2817319653-513] count=0
[2012/08/19 22:36:46.033033,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-513))],
scope => [2]
[2012/08/19 22:36:46.033682,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-513))
[2012/08/19 22:36:46.033923,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.034038,  5]
passdb/pdb_interface.c:1668(lookup_global_sam_rid)
  Can't find a unix id for an unmapped group
[2012/08/19 22:36:46.034150,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.034257, 10]
passdb/lookup_sid.c:1280(legacy_sid_to_gid)
  LEGACY: mapping failed for sid
S-1-5-21-1709156513-4229506078-2817319653-513
[2012/08/19 22:36:46.034375,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.034482,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.034585,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.034688,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.034789,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.034940,  5]
passdb/pdb_interface.c:1606(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 513.
[2012/08/19 22:36:46.035048,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.035152,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:46.035253,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.035355,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.035454,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.035654,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-513)(objectclass=sambaSamAccount))],
scope => [2]
[2012/08/19 22:36:46.036392,  4]
passdb/pdb_ldap.c:1675(ldapsam_getsampwsid)
  ldapsam_getsampwsid: Unable to locate SID
[S-1-5-21-1709156513-4229506078-2817319653-513] count=0
[2012/08/19 22:36:46.036618,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-513))],
scope => [2]
[2012/08/19 22:36:46.037266,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-513))
[2012/08/19 22:36:46.037472,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.037582,  5]
passdb/pdb_interface.c:1668(lookup_global_sam_rid)
  Can't find a unix id for an unmapped group
[2012/08/19 22:36:46.037695,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.037799, 10]
passdb/lookup_sid.c:1218(legacy_sid_to_uid)
  LEGACY: mapping failed for sid
S-1-5-21-1709156513-4229506078-2817319653-513
[2012/08/19 22:36:46.037918,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.038025,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.038128,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.038231,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.038333,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.038484,  5]
passdb/pdb_interface.c:1606(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 546.
[2012/08/19 22:36:46.038625,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.038729,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:46.038830,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.038930,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.039029,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.039232,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-546)(objectclass=sambaSamAccount))],
scope => [2]
[2012/08/19 22:36:46.039970,  4]
passdb/pdb_ldap.c:1675(ldapsam_getsampwsid)
  ldapsam_getsampwsid: Unable to locate SID
[S-1-5-21-1709156513-4229506078-2817319653-546] count=0
[2012/08/19 22:36:46.040206,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-546))],
scope => [2]
[2012/08/19 22:36:46.040837,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-546))
[2012/08/19 22:36:46.041039,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.041148,  5]
passdb/pdb_interface.c:1668(lookup_global_sam_rid)
  Can't find a unix id for an unmapped group
[2012/08/19 22:36:46.041262,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.041366, 10]
passdb/lookup_sid.c:1280(legacy_sid_to_gid)
  LEGACY: mapping failed for sid
S-1-5-21-1709156513-4229506078-2817319653-546
[2012/08/19 22:36:46.041481,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.041586,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.041687,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.041788,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.041888,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.042041,  5]
passdb/pdb_interface.c:1606(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 546.
[2012/08/19 22:36:46.042148,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.042250,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:36:46.042351,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:36:46.042490,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.042600,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.042806,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-546)(objectclass=sambaSamAccount))],
scope => [2]
[2012/08/19 22:36:46.043544,  4]
passdb/pdb_ldap.c:1675(ldapsam_getsampwsid)
  ldapsam_getsampwsid: Unable to locate SID
[S-1-5-21-1709156513-4229506078-2817319653-546] count=0
[2012/08/19 22:36:46.043764,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-546))],
scope => [2]
[2012/08/19 22:36:46.044393,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-546))
[2012/08/19 22:36:46.044624,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.044739,  5]
passdb/pdb_interface.c:1668(lookup_global_sam_rid)
  Can't find a unix id for an unmapped group
[2012/08/19 22:36:46.044851,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.044956, 10]
passdb/lookup_sid.c:1218(legacy_sid_to_uid)
  LEGACY: mapping failed for sid
S-1-5-21-1709156513-4229506078-2817319653-546
[2012/08/19 22:36:46.045074,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.045179,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.045280,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.045381,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.045480,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.045654,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))], scope => [2]
[2012/08/19 22:36:46.046307,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))
[2012/08/19 22:36:46.046516,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.046629, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-1-0
[2012/08/19 22:36:46.046741, 10]
passdb/lookup_sid.c:1218(legacy_sid_to_uid)
  LEGACY: mapping failed for sid S-1-1-0
[2012/08/19 22:36:46.046852,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.046958,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.047060,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.047162,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.047262,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.047437,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))], scope => [2]
[2012/08/19 22:36:46.048079,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))
[2012/08/19 22:36:46.048286,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.048440, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-2
[2012/08/19 22:36:46.048555, 10]
passdb/lookup_sid.c:1218(legacy_sid_to_uid)
  LEGACY: mapping failed for sid S-1-5-2
[2012/08/19 22:36:46.048663,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.048769,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.048870,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.048972,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.049071,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.049249,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))], scope => [2]
[2012/08/19 22:36:46.049955,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))
[2012/08/19 22:36:46.050164,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.050276, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-546
[2012/08/19 22:36:46.050387, 10]
passdb/lookup_sid.c:1218(legacy_sid_to_uid)
  LEGACY: mapping failed for sid S-1-5-32-546
[2012/08/19 22:36:46.050495, 10] auth/auth_util.c:505(create_local_token)
  Could not convert SID S-1-5-21-1709156513-4229506078-2817319653-513 to
gid, ignoring it
[2012/08/19 22:36:46.050607, 10] auth/auth_util.c:505(create_local_token)
  Could not convert SID S-1-5-21-1709156513-4229506078-2817319653-546 to
gid, ignoring it
[2012/08/19 22:36:46.050716, 10] auth/auth_util.c:505(create_local_token)
  Could not convert SID S-1-1-0 to gid, ignoring it
[2012/08/19 22:36:46.050824, 10] auth/auth_util.c:505(create_local_token)
  Could not convert SID S-1-5-2 to gid, ignoring it
[2012/08/19 22:36:46.050953, 10] auth/auth_util.c:505(create_local_token)
  Could not convert SID S-1-5-32-546 to gid, ignoring it
[2012/08/19 22:36:46.051073, 10]
../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (7):
    SID[  0]: S-1-5-21-1709156513-4229506078-2817319653-501
    SID[  1]: S-1-5-21-1709156513-4229506078-2817319653-513
    SID[  2]: S-1-5-21-1709156513-4229506078-2817319653-546
    SID[  3]: S-1-1-0
    SID[  4]: S-1-5-2
    SID[  5]: S-1-5-32-546
    SID[  6]: S-1-22-1-65535
   Privileges (0x               0):
   Rights (0x               0):
[2012/08/19 22:36:46.051544, 10]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 65535
  Primary group is 65535 and contains 0 supplementary groups
[2012/08/19 22:36:46.052091,  3]
rpc_server/svcctl/srv_svcctl_reg.c:569(svcctl_init_winreg)
  Initialise the svcctl registry keys if needed.
[2012/08/19 22:36:46.052215,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.052324,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:36:46.052427,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:36:46.052530,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:36:46.052631,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:36:46.052973,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:36:46.053093, 10]
registry/reg_backend_db.c:602(regdb_open)
  regdb_open: registry db opened. refcount reset (1)
[2012/08/19 22:36:46.053233,  4]
rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p)
  Create pipe requested \winreg
[2012/08/19 22:36:46.053407, 10]
rpc_server/rpc_handles.c:116(init_pipe_handles)
  init_pipe_handle_list: created handle list for pipe \winreg
[2012/08/19 22:36:46.053520, 10]
rpc_server/rpc_handles.c:133(init_pipe_handles)
  init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg
[2012/08/19 22:36:46.053639,  4]
rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p)
  Created internal pipe \winreg (pipes_open=0)
[2012/08/19 22:36:46.053801,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          in: struct winreg_OpenHKLM
              system_name              : NULL
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
[2012/08/19 22:36:46.054431,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [HKLM]
[2012/08/19 22:36:46.054549, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (1->2)
[2012/08/19 22:36:46.054664, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM]
[2012/08/19 22:36:46.054767, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM]
[2012/08/19 22:36:46.054870, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.054969, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM]
[2012/08/19 22:36:46.055130,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.055365,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          out: struct winreg_OpenHKLM
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              result                   : WERR_OK
[2012/08/19 22:36:46.055875,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          in: struct winreg_OpenKey
              parent_handle            : *
                  parent_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              keyname: struct winreg_String
                  name_len                 : 0x0044 (68)
                  name_size                : 0x0044 (68)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services'
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
[2012/08/19 22:36:46.057046,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.057276,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.057385, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (2->3)
[2012/08/19 22:36:46.057495, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.057596, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.057699, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.057798, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.057948,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.058059, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.058172, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.058306, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.058414, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.058516, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.058667,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.058780, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.058893, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.058995, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.059101, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.059202, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.059377, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.059488, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.059602,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.059832,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          out: struct winreg_OpenKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
              result                   : WERR_OK
[2012/08/19 22:36:46.060269,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_QueryInfoKey: struct winreg_QueryInfoKey
          in: struct winreg_QueryInfoKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
              classname                : *
                  classname: struct winreg_String
                      name_len                 : 0x0000 (0)
                      name_size                : 0x0000 (0)
                      name                     : NULL
[2012/08/19 22:36:46.060850,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.061081, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0xf77456c0)
[2012/08/19 22:36:46.061190, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.061329, 10]
registry/reg_backend_db.c:1926(regdb_get_secdesc)
  regdb_get_secdesc: Getting secdesc of key
[HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.061474,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_QueryInfoKey: struct winreg_QueryInfoKey
          out: struct winreg_QueryInfoKey
              classname                : *
                  classname: struct winreg_String
                      name_len                 : 0x0000 (0)
                      name_size                : 0x0000 (0)
                      name                     : NULL
              num_subkeys              : *
                  num_subkeys              : 0x00000007 (7)
              max_subkeylen            : *
                  max_subkeylen            : 0x0000001c (28)
              max_classlen             : *
                  max_classlen             : 0x00000000 (0)
              num_values               : *
                  num_values               : 0x00000000 (0)
              max_valnamelen           : *
                  max_valnamelen           : 0x00000002 (2)
              max_valbufsize           : *
                  max_valbufsize           : 0x00000000 (0)
              secdescsize              : *
                  secdescsize              : 0x00000078 (120)
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2012/08/19 22:36:46.062638,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
              enum_index               : 0x00000000 (0)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2012/08/19 22:36:46.063633,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.063856,  8]
rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key
[HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.063965,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x001a (26)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'LanmanServer'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2012/08/19 22:36:46.064823,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
              enum_index               : 0x00000001 (1)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2012/08/19 22:36:46.065831,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.066056,  8]
rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key
[HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.066165,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0012 (18)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'Eventlog'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2012/08/19 22:36:46.067017,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
              enum_index               : 0x00000002 (2)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2012/08/19 22:36:46.067995,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.068217,  8]
rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key
[HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.068325,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x000c (12)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'Tcpip'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2012/08/19 22:36:46.069206,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
              enum_index               : 0x00000003 (3)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2012/08/19 22:36:46.070197,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.070424,  8]
rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key
[HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.070533,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0012 (18)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'Netlogon'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2012/08/19 22:36:46.071396,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
              enum_index               : 0x00000004 (4)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2012/08/19 22:36:46.072402,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.072628,  8]
rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key
[HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.072737,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0010 (16)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'Spooler'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2012/08/19 22:36:46.073584,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
              enum_index               : 0x00000005 (5)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2012/08/19 22:36:46.074557,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.074781,  8]
rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key
[HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.074888,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x001e (30)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'RemoteRegistry'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2012/08/19 22:36:46.075763,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          in: struct winreg_EnumKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
              enum_index               : 0x00000006 (6)
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : ''
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
[2012/08/19 22:36:46.076741,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.076964,  8]
rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey)
  _winreg_EnumKey: enumerating key
[HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.077074,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_EnumKey: struct winreg_EnumKey
          out: struct winreg_EnumKey
              name                     : *
                  name: struct winreg_StringBuf
                      length                   : 0x000a (10)
                      size                     : 0x001e (30)
                      name                     : *
                          name                     : 'WINS'
              keyclass                 : *
                  keyclass: struct winreg_StringBuf
                      length                   : 0x0000 (0)
                      size                     : 0x0002 (2)
                      name                     : *
                          name                     : ''
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2012/08/19 22:36:46.077951,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0054 (84)
                  name_size                : 0x0054 (84)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services\Spooler'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_ACTION_NONE (0)
[2012/08/19 22:36:46.079467,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.079704, 10]
rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name
'SYSTEM\CurrentControlSet\Services\Spooler'
[2012/08/19 22:36:46.079842,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.079955,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.080060,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.080168, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.080278, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.080380, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.080482, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.080580, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.080728,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.080850,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.080960, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.081070, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.081172, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.081276, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.081374, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.081521, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.081634,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.081738,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.081843, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.081953, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.082054, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.082159, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.082257, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.082432, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.082543,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Spooler]
[2012/08/19 22:36:46.082677, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.082791, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2012/08/19 22:36:46.082891, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2012/08/19 22:36:46.082997, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.083096, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2012/08/19 22:36:46.083242, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.083353,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.083569,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000003-0000-0000-3150-5e4e9d0e0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2012/08/19 22:36:46.084099,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000003-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x000c (12)
                  name_size                : 0x000c (12)
                  name                     : *
                      name                     : 'Start'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x02 (2)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.085013,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.085236,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start]
[2012/08/19 22:36:46.085346,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.085451, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0xf77456c0)
[2012/08/19 22:36:46.085555, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2012/08/19 22:36:46.085696, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Start] len[4]
[2012/08/19 22:36:46.085806, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[Type] len[4]
[2012/08/19 22:36:46.085912, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2012/08/19 22:36:46.086045, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2012/08/19 22:36:46.086154, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[4]: name[DisplayName] len[28]
[2012/08/19 22:36:46.086260, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[5]: name[ImagePath] len[66]
[2012/08/19 22:36:46.086365, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[6]: name[Description] len[106]
[2012/08/19 22:36:46.086470,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.086718,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000003-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x000a (10)
                  name_size                : 0x000a (10)
                  name                     : *
                      name                     : 'Type'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x10 (16)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.087621,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.087844,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type]
[2012/08/19 22:36:46.087953,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.088061,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.088296,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000003-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x001a (26)
                  name_size                : 0x001a (26)
                  name                     : *
                      name                     : 'ErrorControl'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.089189,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.089406,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl]
[2012/08/19 22:36:46.089542,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.089664,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.089925,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000003-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0016 (22)
                  name_size                : 0x0016 (22)
                  name                     : *
                      name                     : 'ObjectName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(24)
                      [0]                      : 0x4c (76)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6f (111)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x63 (99)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x61 (97)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6c (108)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x53 (83)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x79 (121)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x73 (115)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x74 (116)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x65 (101)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6d (109)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x00 (0)
                      [23]                     : 0x00 (0)
              size                     : 0x00000018 (24)
[2012/08/19 22:36:46.091809,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.092044,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName]
[2012/08/19 22:36:46.092156,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.092268,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.092540,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000003-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'DisplayName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(28)
                      [0]                      : 0x50 (80)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x72 (114)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x69 (105)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x6e (110)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x74 (116)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x20 (32)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x53 (83)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x70 (112)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x6f (111)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x6f (111)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6c (108)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x65 (101)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x72 (114)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
              size                     : 0x0000001c (28)
[2012/08/19 22:36:46.094557,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.094782,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName]
[2012/08/19 22:36:46.094893,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.095001,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.095246,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000003-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0014 (20)
                  name_size                : 0x0014 (20)
                  name                     : *
                      name                     : 'ImagePath'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(66)
                      [0]                      : 0x2f (47)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x75 (117)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x73 (115)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x72 (114)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x2f (47)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6c (108)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x6f (111)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x63 (99)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x61 (97)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x6c (108)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x2f (47)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x73 (115)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x61 (97)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x6d (109)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x62 (98)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x61 (97)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x2f (47)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x6c (108)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x69 (105)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x62 (98)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x2f (47)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x73 (115)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x76 (118)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x63 (99)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x63 (99)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x74 (116)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x6c (108)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x2f (47)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x73 (115)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x6d (109)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x62 (98)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x64 (100)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x00 (0)
                      [65]                     : 0x00 (0)
              size                     : 0x00000042 (66)
[2012/08/19 22:36:46.098972,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.099199,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath]
[2012/08/19 22:36:46.099310,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.099463,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.099777,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000003-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'Description'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(106)
                      [0]                      : 0x49 (73)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6e (110)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x74 (116)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x65 (101)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x72 (114)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6e (110)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x61 (97)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x6c (108)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x20 (32)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x73 (115)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x65 (101)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x72 (114)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x76 (118)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x69 (105)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x63 (99)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x65 (101)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x20 (32)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x66 (102)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x6f (111)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x72 (114)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x20 (32)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x73 (115)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x70 (112)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x6f (111)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x6f (111)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x6c (108)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x69 (105)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x6e (110)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x67 (103)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x20 (32)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x66 (102)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x69 (105)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x6c (108)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x65 (101)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x73 (115)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x20 (32)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x74 (116)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x6f (111)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x20 (32)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x70 (112)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x72 (114)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x69 (105)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x6e (110)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x74 (116)
                      [87]                     : 0x00 (0)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x64 (100)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x65 (101)
                      [93]                     : 0x00 (0)
                      [94]                     : 0x76 (118)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x69 (105)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x63 (99)
                      [99]                     : 0x00 (0)
                      [100]                    : 0x65 (101)
                      [101]                    : 0x00 (0)
                      [102]                    : 0x73 (115)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x00 (0)
                      [105]                    : 0x00 (0)
              size                     : 0x0000006a (106)
[2012/08/19 22:36:46.105247,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.105469,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description]
[2012/08/19 22:36:46.105580,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.105690,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.105932,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000003-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.106302,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.106526,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.106746,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.106853, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.106957,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.107390,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0066 (102)
                  name_size                : 0x0066 (102)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services\Spooler\Security'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
[2012/08/19 22:36:46.108878,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.109100, 10]
rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name
'SYSTEM\CurrentControlSet\Services\Spooler\Security'
[2012/08/19 22:36:46.109213,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.109320,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.109449,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.109557, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.109666, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.109766, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.109868, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.109965, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.110113,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.110222,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.110327, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.110436, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.110536, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.110639, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.110737, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.110900, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.111015,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.111119,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.111224, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.111334, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.111433, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.111537, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.111635, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.111810, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.111922,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.112027,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Spooler]
[2012/08/19 22:36:46.112132, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.112242, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2012/08/19 22:36:46.112342, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2012/08/19 22:36:46.112448, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.112547, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
[2012/08/19 22:36:46.112692, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.112802,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Security]
[2012/08/19 22:36:46.112908, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.113046, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2012/08/19 22:36:46.113151, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter
[\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2012/08/19 22:36:46.113257, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.113356, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2012/08/19 22:36:46.113490, 10]
registry/reg_backend_db.c:1656(regdb_fetch_keys_internal)
  regdb_fetch_keys: no subkeys found for key
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2012/08/19 22:36:46.113601, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.113710,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.113928,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000004-0000-0000-3150-5e4e9d0e0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2012/08/19 22:36:46.114466,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000004-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0012 (18)
                  name_size                : 0x0012 (18)
                  name                     : *
                      name                     : 'Security'
              type                     : REG_BINARY (3)
              data                     : *
                  data: ARRAY(120)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x04 (4)
                      [3]                      : 0x80 (128)
                      [4]                      : 0x00 (0)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x00 (0)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x00 (0)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x00 (0)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x00 (0)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x00 (0)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x14 (20)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x02 (2)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x64 (100)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x04 (4)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x00 (0)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x14 (20)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x8d (141)
                      [33]                     : 0x01 (1)
                      [34]                     : 0x02 (2)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x01 (1)
                      [37]                     : 0x01 (1)
                      [38]                     : 0x00 (0)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x00 (0)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x00 (0)
                      [43]                     : 0x01 (1)
                      [44]                     : 0x00 (0)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x00 (0)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x18 (24)
                      [51]                     : 0x00 (0)
                      [52]                     : 0xfd (253)
                      [53]                     : 0x01 (1)
                      [54]                     : 0x02 (2)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x01 (1)
                      [57]                     : 0x02 (2)
                      [58]                     : 0x00 (0)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x00 (0)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x00 (0)
                      [63]                     : 0x05 (5)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x00 (0)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x23 (35)
                      [69]                     : 0x02 (2)
                      [70]                     : 0x00 (0)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x18 (24)
                      [75]                     : 0x00 (0)
                      [76]                     : 0xff (255)
                      [77]                     : 0x01 (1)
                      [78]                     : 0x0f (15)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x01 (1)
                      [81]                     : 0x02 (2)
                      [82]                     : 0x00 (0)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x00 (0)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x05 (5)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x00 (0)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x25 (37)
                      [93]                     : 0x02 (2)
                      [94]                     : 0x00 (0)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x00 (0)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x18 (24)
                      [99]                     : 0x00 (0)
                      [100]                    : 0xff (255)
                      [101]                    : 0x01 (1)
                      [102]                    : 0x0f (15)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x01 (1)
                      [105]                    : 0x02 (2)
                      [106]                    : 0x00 (0)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x00 (0)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x00 (0)
                      [111]                    : 0x05 (5)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x00 (0)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x20 (32)
                      [117]                    : 0x02 (2)
                      [118]                    : 0x00 (0)
                      [119]                    : 0x00 (0)
              size                     : 0x00000078 (120)
[2012/08/19 22:36:46.120808,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.121069,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security]
[2012/08/19 22:36:46.121185,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.121291, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops
0xf77456c0)
[2012/08/19 22:36:46.121398, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
[2012/08/19 22:36:46.121545, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Security] len[120]
[2012/08/19 22:36:46.121655,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.121893,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000004-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.122231,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.122454,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.122672,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.122776, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.122881,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.123346,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0056 (86)
                  name_size                : 0x0056 (86)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services\NETLOGON'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_ACTION_NONE (0)
[2012/08/19 22:36:46.124880,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.125113, 10]
rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name
'SYSTEM\CurrentControlSet\Services\NETLOGON'
[2012/08/19 22:36:46.125225,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.125332,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.125436,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.125544, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.125654, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.125754, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.125857, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.125956, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.126104,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.126213,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.126320, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.126462, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.126567, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.126671, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.126770, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.126918, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.127033,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.127138,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.127242, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.127353, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.127452, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.127556, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.127653, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.127835, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.127946,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [NETLOGON]
[2012/08/19 22:36:46.128054, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.128165, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2012/08/19 22:36:46.128266, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2012/08/19 22:36:46.128371, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.128469, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2012/08/19 22:36:46.128621, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.128735,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.128955,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000005-0000-0000-3150-5e4e9d0e0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2012/08/19 22:36:46.129475,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000005-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x000c (12)
                  name_size                : 0x000c (12)
                  name                     : *
                      name                     : 'Start'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x02 (2)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.130408,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.130637,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start]
[2012/08/19 22:36:46.130747,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.130881, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0xf77456c0)
[2012/08/19 22:36:46.130989, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2012/08/19 22:36:46.131130, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Start] len[4]
[2012/08/19 22:36:46.131239, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[Type] len[4]
[2012/08/19 22:36:46.131346, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2012/08/19 22:36:46.131452, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2012/08/19 22:36:46.131558, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[4]: name[DisplayName] len[20]
[2012/08/19 22:36:46.131664, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[5]: name[ImagePath] len[66]
[2012/08/19 22:36:46.131774, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[6]: name[Description] len[164]
[2012/08/19 22:36:46.131918,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.132175,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000005-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x000a (10)
                  name_size                : 0x000a (10)
                  name                     : *
                      name                     : 'Type'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x10 (16)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.133079,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.133301,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type]
[2012/08/19 22:36:46.133443,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.133556,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.133796,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000005-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x001a (26)
                  name_size                : 0x001a (26)
                  name                     : *
                      name                     : 'ErrorControl'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.134686,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.134904,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl]
[2012/08/19 22:36:46.135013,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.135121,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.135363,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000005-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0016 (22)
                  name_size                : 0x0016 (22)
                  name                     : *
                      name                     : 'ObjectName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(24)
                      [0]                      : 0x4c (76)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6f (111)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x63 (99)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x61 (97)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6c (108)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x53 (83)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x79 (121)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x73 (115)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x74 (116)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x65 (101)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6d (109)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x00 (0)
                      [23]                     : 0x00 (0)
              size                     : 0x00000018 (24)
[2012/08/19 22:36:46.137194,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.137414,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName]
[2012/08/19 22:36:46.137525,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.137633,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.137891,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000005-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'DisplayName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(20)
                      [0]                      : 0x4e (78)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x65 (101)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x74 (116)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x20 (32)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x4c (76)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6f (111)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x67 (103)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x6f (111)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x6e (110)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
              size                     : 0x00000014 (20)
[2012/08/19 22:36:46.139510,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.139734,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName]
[2012/08/19 22:36:46.139846,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.139952,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.140222,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000005-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0014 (20)
                  name_size                : 0x0014 (20)
                  name                     : *
                      name                     : 'ImagePath'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(66)
                      [0]                      : 0x2f (47)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x75 (117)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x73 (115)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x72 (114)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x2f (47)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6c (108)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x6f (111)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x63 (99)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x61 (97)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x6c (108)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x2f (47)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x73 (115)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x61 (97)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x6d (109)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x62 (98)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x61 (97)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x2f (47)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x6c (108)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x69 (105)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x62 (98)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x2f (47)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x73 (115)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x76 (118)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x63 (99)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x63 (99)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x74 (116)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x6c (108)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x2f (47)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x73 (115)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x6d (109)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x62 (98)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x64 (100)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x00 (0)
                      [65]                     : 0x00 (0)
              size                     : 0x00000042 (66)
[2012/08/19 22:36:46.143968,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.144194,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath]
[2012/08/19 22:36:46.144305,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.144414,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.144660,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000005-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'Description'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(164)
                      [0]                      : 0x46 (70)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x69 (105)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x6c (108)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x65 (101)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x20 (32)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x73 (115)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x65 (101)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x72 (114)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x76 (118)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x69 (105)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x63 (99)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x65 (101)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x20 (32)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x70 (112)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x72 (114)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x6f (111)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x76 (118)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x69 (105)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x64 (100)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x69 (105)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x6e (110)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x67 (103)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x20 (32)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x61 (97)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x63 (99)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x63 (99)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x65 (101)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x73 (115)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x73 (115)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x20 (32)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x74 (116)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x6f (111)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x70 (112)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x6f (111)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x6c (108)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x69 (105)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x63 (99)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x79 (121)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x20 (32)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x61 (97)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x6e (110)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x64 (100)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x20 (32)
                      [87]                     : 0x00 (0)
                      [88]                     : 0x70 (112)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x72 (114)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x6f (111)
                      [93]                     : 0x00 (0)
                      [94]                     : 0x66 (102)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x69 (105)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x6c (108)
                      [99]                     : 0x00 (0)
                      [100]                    : 0x65 (101)
                      [101]                    : 0x00 (0)
                      [102]                    : 0x20 (32)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x64 (100)
                      [105]                    : 0x00 (0)
                      [106]                    : 0x61 (97)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x74 (116)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x61 (97)
                      [111]                    : 0x00 (0)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x28 (40)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x6e (110)
                      [117]                    : 0x00 (0)
                      [118]                    : 0x6f (111)
                      [119]                    : 0x00 (0)
                      [120]                    : 0x74 (116)
                      [121]                    : 0x00 (0)
                      [122]                    : 0x72 (114)
                      [123]                    : 0x00 (0)
                      [124]                    : 0x65 (101)
                      [125]                    : 0x00 (0)
                      [126]                    : 0x6d (109)
                      [127]                    : 0x00 (0)
                      [128]                    : 0x6f (111)
                      [129]                    : 0x00 (0)
                      [130]                    : 0x74 (116)
                      [131]                    : 0x00 (0)
                      [132]                    : 0x65 (101)
                      [133]                    : 0x00 (0)
                      [134]                    : 0x6c (108)
                      [135]                    : 0x00 (0)
                      [136]                    : 0x79 (121)
                      [137]                    : 0x00 (0)
                      [138]                    : 0x20 (32)
                      [139]                    : 0x00 (0)
                      [140]                    : 0x6d (109)
                      [141]                    : 0x00 (0)
                      [142]                    : 0x61 (97)
                      [143]                    : 0x00 (0)
                      [144]                    : 0x6e (110)
                      [145]                    : 0x00 (0)
                      [146]                    : 0x61 (97)
                      [147]                    : 0x00 (0)
                      [148]                    : 0x67 (103)
                      [149]                    : 0x00 (0)
                      [150]                    : 0x65 (101)
                      [151]                    : 0x00 (0)
                      [152]                    : 0x61 (97)
                      [153]                    : 0x00 (0)
                      [154]                    : 0x62 (98)
                      [155]                    : 0x00 (0)
                      [156]                    : 0x6c (108)
                      [157]                    : 0x00 (0)
                      [158]                    : 0x65 (101)
                      [159]                    : 0x00 (0)
                      [160]                    : 0x29 (41)
                      [161]                    : 0x00 (0)
                      [162]                    : 0x00 (0)
                      [163]                    : 0x00 (0)
              size                     : 0x000000a4 (164)
[2012/08/19 22:36:46.153316,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.153758,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description]
[2012/08/19 22:36:46.153996,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.154201,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.154558,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000005-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.154999,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.155308,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.155608,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.155749, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.155880,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.156443,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0068 (104)
                  name_size                : 0x0068 (104)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services\NETLOGON\Security'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
[2012/08/19 22:36:46.158638,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.159089, 10]
rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name
'SYSTEM\CurrentControlSet\Services\NETLOGON\Security'
[2012/08/19 22:36:46.159289,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.159464,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.159651,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.159777, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.159888, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.159990, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.160096, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.160197, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.160354,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.160467,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.160577, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.160690, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.160794, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.160917, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.161017, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.161166, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.161283,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.161392,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.161498, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.161612, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.161713, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.161821, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.161920, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.162104, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.162223,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.162331,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [NETLOGON]
[2012/08/19 22:36:46.162439, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.162553, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2012/08/19 22:36:46.162694, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2012/08/19 22:36:46.162808, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.162909, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
[2012/08/19 22:36:46.163067, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.163181,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Security]
[2012/08/19 22:36:46.163290, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.163404, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2012/08/19 22:36:46.163509, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter
[\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2012/08/19 22:36:46.163617, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.163719, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2012/08/19 22:36:46.163854, 10]
registry/reg_backend_db.c:1656(regdb_fetch_keys_internal)
  regdb_fetch_keys: no subkeys found for key
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2012/08/19 22:36:46.163969, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.164082,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.164308,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000006-0000-0000-3150-5e4e9d0e0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2012/08/19 22:36:46.164866,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000006-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0012 (18)
                  name_size                : 0x0012 (18)
                  name                     : *
                      name                     : 'Security'
              type                     : REG_BINARY (3)
              data                     : *
                  data: ARRAY(120)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x04 (4)
                      [3]                      : 0x80 (128)
                      [4]                      : 0x00 (0)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x00 (0)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x00 (0)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x00 (0)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x00 (0)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x00 (0)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x14 (20)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x02 (2)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x64 (100)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x04 (4)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x00 (0)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x14 (20)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x8d (141)
                      [33]                     : 0x01 (1)
                      [34]                     : 0x02 (2)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x01 (1)
                      [37]                     : 0x01 (1)
                      [38]                     : 0x00 (0)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x00 (0)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x00 (0)
                      [43]                     : 0x01 (1)
                      [44]                     : 0x00 (0)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x00 (0)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x18 (24)
                      [51]                     : 0x00 (0)
                      [52]                     : 0xfd (253)
                      [53]                     : 0x01 (1)
                      [54]                     : 0x02 (2)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x01 (1)
                      [57]                     : 0x02 (2)
                      [58]                     : 0x00 (0)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x00 (0)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x00 (0)
                      [63]                     : 0x05 (5)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x00 (0)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x23 (35)
                      [69]                     : 0x02 (2)
                      [70]                     : 0x00 (0)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x18 (24)
                      [75]                     : 0x00 (0)
                      [76]                     : 0xff (255)
                      [77]                     : 0x01 (1)
                      [78]                     : 0x0f (15)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x01 (1)
                      [81]                     : 0x02 (2)
                      [82]                     : 0x00 (0)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x00 (0)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x05 (5)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x00 (0)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x25 (37)
                      [93]                     : 0x02 (2)
                      [94]                     : 0x00 (0)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x00 (0)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x18 (24)
                      [99]                     : 0x00 (0)
                      [100]                    : 0xff (255)
                      [101]                    : 0x01 (1)
                      [102]                    : 0x0f (15)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x01 (1)
                      [105]                    : 0x02 (2)
                      [106]                    : 0x00 (0)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x00 (0)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x00 (0)
                      [111]                    : 0x05 (5)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x00 (0)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x20 (32)
                      [117]                    : 0x02 (2)
                      [118]                    : 0x00 (0)
                      [119]                    : 0x00 (0)
              size                     : 0x00000078 (120)
[2012/08/19 22:36:46.171175,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.171407,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security]
[2012/08/19 22:36:46.171524,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.171633, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops
0xf77456c0)
[2012/08/19 22:36:46.171743, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
[2012/08/19 22:36:46.171895, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Security] len[120]
[2012/08/19 22:36:46.172009,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.172250,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000006-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.172602,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.172860,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.173085,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.173190, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.173297,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.173745,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0062 (98)
                  name_size                : 0x0062 (98)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services\RemoteRegistry'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_ACTION_NONE (0)
[2012/08/19 22:36:46.175255,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.175481, 10]
rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name
'SYSTEM\CurrentControlSet\Services\RemoteRegistry'
[2012/08/19 22:36:46.175593,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.175701,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.175806,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.175913, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.176023, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.176123, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.176257, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.176360, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.176533,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.176650,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.176758, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.176871, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.176976, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.177081, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.177181, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.177330, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.177449,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.177557,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.177664, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.177775, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.177877, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.177983, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.178082, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.178287, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.178457,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [RemoteRegistry]
[2012/08/19 22:36:46.178616, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.178779, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2012/08/19 22:36:46.178917, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter
[\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2012/08/19 22:36:46.179075, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.179216, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2012/08/19 22:36:46.179481, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.179686,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.180021,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000007-0000-0000-3150-5e4e9d0e0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2012/08/19 22:36:46.180873,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000007-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x000c (12)
                  name_size                : 0x000c (12)
                  name                     : *
                      name                     : 'Start'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x02 (2)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.182186,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.182481,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start]
[2012/08/19 22:36:46.182608,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.182716, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0xf77456c0)
[2012/08/19 22:36:46.182826, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2012/08/19 22:36:46.183013, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Start] len[4]
[2012/08/19 22:36:46.183184, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[Type] len[4]
[2012/08/19 22:36:46.183337, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2012/08/19 22:36:46.183486, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2012/08/19 22:36:46.183630, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[4]: name[DisplayName] len[48]
[2012/08/19 22:36:46.183787, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[5]: name[ImagePath] len[66]
[2012/08/19 22:36:46.183937, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[6]: name[Description] len[126]
[2012/08/19 22:36:46.184110,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.184499,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000007-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x000a (10)
                  name_size                : 0x000a (10)
                  name                     : *
                      name                     : 'Type'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x10 (16)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.185811,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.186192,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type]
[2012/08/19 22:36:46.186376,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.186538,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.186918,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000007-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x001a (26)
                  name_size                : 0x001a (26)
                  name                     : *
                      name                     : 'ErrorControl'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.188034,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.188401,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl]
[2012/08/19 22:36:46.188565,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.188726,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.189103,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000007-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0016 (22)
                  name_size                : 0x0016 (22)
                  name                     : *
                      name                     : 'ObjectName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(24)
                      [0]                      : 0x4c (76)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6f (111)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x63 (99)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x61 (97)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6c (108)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x53 (83)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x79 (121)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x73 (115)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x74 (116)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x65 (101)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6d (109)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x00 (0)
                      [23]                     : 0x00 (0)
              size                     : 0x00000018 (24)
[2012/08/19 22:36:46.191718,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.192065,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName]
[2012/08/19 22:36:46.192204,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.192323,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.192614,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000007-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'DisplayName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(48)
                      [0]                      : 0x52 (82)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x65 (101)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x6d (109)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x6f (111)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x74 (116)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x65 (101)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x20 (32)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x52 (82)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x65 (101)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x67 (103)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x69 (105)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x73 (115)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x74 (116)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x72 (114)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x79 (121)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x20 (32)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x53 (83)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x65 (101)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x72 (114)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x76 (118)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x69 (105)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x63 (99)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x65 (101)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
              size                     : 0x00000030 (48)
[2012/08/19 22:36:46.195559,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.195790,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName]
[2012/08/19 22:36:46.195907,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.196065,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.196451,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000007-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0014 (20)
                  name_size                : 0x0014 (20)
                  name                     : *
                      name                     : 'ImagePath'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(66)
                      [0]                      : 0x2f (47)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x75 (117)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x73 (115)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x72 (114)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x2f (47)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6c (108)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x6f (111)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x63 (99)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x61 (97)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x6c (108)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x2f (47)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x73 (115)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x61 (97)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x6d (109)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x62 (98)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x61 (97)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x2f (47)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x6c (108)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x69 (105)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x62 (98)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x2f (47)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x73 (115)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x76 (118)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x63 (99)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x63 (99)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x74 (116)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x6c (108)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x2f (47)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x73 (115)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x6d (109)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x62 (98)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x64 (100)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x00 (0)
                      [65]                     : 0x00 (0)
              size                     : 0x00000042 (66)
[2012/08/19 22:36:46.201815,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.202169,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath]
[2012/08/19 22:36:46.202352,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.202526,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.202918,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000007-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'Description'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(126)
                      [0]                      : 0x49 (73)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6e (110)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x74 (116)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x65 (101)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x72 (114)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6e (110)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x61 (97)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x6c (108)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x20 (32)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x73 (115)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x65 (101)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x72 (114)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x76 (118)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x69 (105)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x63 (99)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x65 (101)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x20 (32)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x70 (112)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x72 (114)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x6f (111)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x76 (118)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x69 (105)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x64 (100)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x69 (105)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x6e (110)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x67 (103)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x20 (32)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x72 (114)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x65 (101)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x6d (109)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x6f (111)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x74 (116)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x65 (101)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x20 (32)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x61 (97)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x63 (99)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x63 (99)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x65 (101)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x73 (115)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x73 (115)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x20 (32)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x74 (116)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x6f (111)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x20 (32)
                      [87]                     : 0x00 (0)
                      [88]                     : 0x74 (116)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x68 (104)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x65 (101)
                      [93]                     : 0x00 (0)
                      [94]                     : 0x20 (32)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x53 (83)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x61 (97)
                      [99]                     : 0x00 (0)
                      [100]                    : 0x6d (109)
                      [101]                    : 0x00 (0)
                      [102]                    : 0x62 (98)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x61 (97)
                      [105]                    : 0x00 (0)
                      [106]                    : 0x20 (32)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x72 (114)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x65 (101)
                      [111]                    : 0x00 (0)
                      [112]                    : 0x67 (103)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x69 (105)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x73 (115)
                      [117]                    : 0x00 (0)
                      [118]                    : 0x74 (116)
                      [119]                    : 0x00 (0)
                      [120]                    : 0x72 (114)
                      [121]                    : 0x00 (0)
                      [122]                    : 0x79 (121)
                      [123]                    : 0x00 (0)
                      [124]                    : 0x00 (0)
                      [125]                    : 0x00 (0)
              size                     : 0x0000007e (126)
[2012/08/19 22:36:46.211798,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.212077,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description]
[2012/08/19 22:36:46.212197,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.212315,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.212576,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000007-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.212924,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.213150,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.213369,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.213477, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.213585,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.214027,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0074 (116)
                  name_size                : 0x0074 (116)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
[2012/08/19 22:36:46.215565,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.215797, 10]
rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name
'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security'
[2012/08/19 22:36:46.215910,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.216021,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.216127,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.216236, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.216348, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.216451, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.216555, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.216657, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.216812,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.216927,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.217035, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.217148, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.217249, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.217353, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.217452, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.217598, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.217709,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.217815,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.217920, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.218031, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.218153, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.218261, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.218360, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.218540, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.218655,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.218762,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [RemoteRegistry]
[2012/08/19 22:36:46.218898, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.219018, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2012/08/19 22:36:46.219120, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter
[\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2012/08/19 22:36:46.219227, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.219328, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
[2012/08/19 22:36:46.219479, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.219594,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Security]
[2012/08/19 22:36:46.219716, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.219850, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2012/08/19 22:36:46.219956, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter
[\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2012/08/19 22:36:46.220064, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.220166, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2012/08/19 22:36:46.220309, 10]
registry/reg_backend_db.c:1656(regdb_fetch_keys_internal)
  regdb_fetch_keys: no subkeys found for key
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2012/08/19 22:36:46.220422, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.220531,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.220755,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000008-0000-0000-3150-5e4e9d0e0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2012/08/19 22:36:46.221320,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000008-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0012 (18)
                  name_size                : 0x0012 (18)
                  name                     : *
                      name                     : 'Security'
              type                     : REG_BINARY (3)
              data                     : *
                  data: ARRAY(120)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x04 (4)
                      [3]                      : 0x80 (128)
                      [4]                      : 0x00 (0)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x00 (0)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x00 (0)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x00 (0)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x00 (0)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x00 (0)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x14 (20)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x02 (2)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x64 (100)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x04 (4)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x00 (0)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x14 (20)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x8d (141)
                      [33]                     : 0x01 (1)
                      [34]                     : 0x02 (2)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x01 (1)
                      [37]                     : 0x01 (1)
                      [38]                     : 0x00 (0)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x00 (0)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x00 (0)
                      [43]                     : 0x01 (1)
                      [44]                     : 0x00 (0)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x00 (0)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x18 (24)
                      [51]                     : 0x00 (0)
                      [52]                     : 0xfd (253)
                      [53]                     : 0x01 (1)
                      [54]                     : 0x02 (2)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x01 (1)
                      [57]                     : 0x02 (2)
                      [58]                     : 0x00 (0)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x00 (0)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x00 (0)
                      [63]                     : 0x05 (5)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x00 (0)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x23 (35)
                      [69]                     : 0x02 (2)
                      [70]                     : 0x00 (0)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x18 (24)
                      [75]                     : 0x00 (0)
                      [76]                     : 0xff (255)
                      [77]                     : 0x01 (1)
                      [78]                     : 0x0f (15)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x01 (1)
                      [81]                     : 0x02 (2)
                      [82]                     : 0x00 (0)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x00 (0)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x05 (5)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x00 (0)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x25 (37)
                      [93]                     : 0x02 (2)
                      [94]                     : 0x00 (0)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x00 (0)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x18 (24)
                      [99]                     : 0x00 (0)
                      [100]                    : 0xff (255)
                      [101]                    : 0x01 (1)
                      [102]                    : 0x0f (15)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x01 (1)
                      [105]                    : 0x02 (2)
                      [106]                    : 0x00 (0)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x00 (0)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x00 (0)
                      [111]                    : 0x05 (5)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x00 (0)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x20 (32)
                      [117]                    : 0x02 (2)
                      [118]                    : 0x00 (0)
                      [119]                    : 0x00 (0)
              size                     : 0x00000078 (120)
[2012/08/19 22:36:46.227572,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.227807,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security]
[2012/08/19 22:36:46.227923,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.228028, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops
0xf77456c0)
[2012/08/19 22:36:46.228135, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
[2012/08/19 22:36:46.228285, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Security] len[120]
[2012/08/19 22:36:46.228398,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.228631,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000008-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.229001,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.229227,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.229446,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.229549, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.229681,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.230144,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x004e (78)
                  name_size                : 0x004e (78)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services\WINS'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_ACTION_NONE (0)
[2012/08/19 22:36:46.231733,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.231974, 10]
rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name
'SYSTEM\CurrentControlSet\Services\WINS'
[2012/08/19 22:36:46.232090,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.232199,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.232306,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.232444, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.232561, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.232665, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.232769, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.232870, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.233026,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.233137,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.233247, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.233359, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.233460, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.233565, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.233663, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.233809, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.233922,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.234027,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.234132, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.234243, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.234344, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.234451, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.234550, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.234731, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.234843,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [WINS]
[2012/08/19 22:36:46.234948, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.235059, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2012/08/19 22:36:46.235159, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2012/08/19 22:36:46.235264, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.235363, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2012/08/19 22:36:46.235511, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.235625,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.235849,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000009-0000-0000-3150-5e4e9d0e0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2012/08/19 22:36:46.236418,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000009-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x000c (12)
                  name_size                : 0x000c (12)
                  name                     : *
                      name                     : 'Start'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x02 (2)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.237342,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.237567,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start]
[2012/08/19 22:36:46.237679,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.237784, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0xf77456c0)
[2012/08/19 22:36:46.237890, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2012/08/19 22:36:46.238037, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Start] len[4]
[2012/08/19 22:36:46.238150, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[Type] len[4]
[2012/08/19 22:36:46.238259, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[2]: name[ErrorControl] len[4]
[2012/08/19 22:36:46.238367, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[3]: name[ObjectName] len[24]
[2012/08/19 22:36:46.238476, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[4]: name[DisplayName] len[74]
[2012/08/19 22:36:46.238584, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[5]: name[ImagePath] len[66]
[2012/08/19 22:36:46.238691, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[6]: name[Description] len[178]
[2012/08/19 22:36:46.238798,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.239041,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000009-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x000a (10)
                  name_size                : 0x000a (10)
                  name                     : *
                      name                     : 'Type'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x10 (16)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.239986,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.240220,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type]
[2012/08/19 22:36:46.240335,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.240448,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.240693,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000009-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x001a (26)
                  name_size                : 0x001a (26)
                  name                     : *
                      name                     : 'ErrorControl'
              type                     : REG_DWORD (4)
              data                     : *
                  data: ARRAY(4)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x00 (0)
                      [3]                      : 0x00 (0)
              size                     : 0x00000004 (4)
[2012/08/19 22:36:46.241623,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.241851,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl]
[2012/08/19 22:36:46.241966,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.242079,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.242329,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000009-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0016 (22)
                  name_size                : 0x0016 (22)
                  name                     : *
                      name                     : 'ObjectName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(24)
                      [0]                      : 0x4c (76)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6f (111)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x63 (99)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x61 (97)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6c (108)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x53 (83)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x79 (121)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x73 (115)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x74 (116)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x65 (101)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x6d (109)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x00 (0)
                      [23]                     : 0x00 (0)
              size                     : 0x00000018 (24)
[2012/08/19 22:36:46.244160,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.244382,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName]
[2012/08/19 22:36:46.244494,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.244603,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.244860,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000009-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'DisplayName'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(74)
                      [0]                      : 0x57 (87)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x69 (105)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x6e (110)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x64 (100)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x6f (111)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x77 (119)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x73 (115)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x20 (32)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x49 (73)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x6e (110)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x74 (116)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x65 (101)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x72 (114)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x6e (110)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x65 (101)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x74 (116)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x20 (32)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x4e (78)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x61 (97)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x6d (109)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x65 (101)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x20 (32)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x53 (83)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x65 (101)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x72 (114)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x76 (118)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x69 (105)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x63 (99)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x65 (101)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x20 (32)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x28 (40)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x57 (87)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x49 (73)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x4e (78)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x53 (83)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x29 (41)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
              size                     : 0x0000004a (74)
[2012/08/19 22:36:46.249504,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.249871,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName]
[2012/08/19 22:36:46.250039,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.250158,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.250477,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000009-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0014 (20)
                  name_size                : 0x0014 (20)
                  name                     : *
                      name                     : 'ImagePath'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(66)
                      [0]                      : 0x2f (47)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x75 (117)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x73 (115)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x72 (114)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x2f (47)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6c (108)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x6f (111)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x63 (99)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x61 (97)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x6c (108)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x2f (47)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x73 (115)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x61 (97)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x6d (109)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x62 (98)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x61 (97)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x2f (47)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x6c (108)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x69 (105)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x62 (98)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x2f (47)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x73 (115)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x76 (118)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x63 (99)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x63 (99)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x74 (116)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x6c (108)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x2f (47)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x6e (110)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x6d (109)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x62 (98)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x64 (100)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x00 (0)
                      [65]                     : 0x00 (0)
              size                     : 0x00000042 (66)
[2012/08/19 22:36:46.254256,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.254485,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath]
[2012/08/19 22:36:46.254597,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.254707,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.254959,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000009-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0018 (24)
                  name_size                : 0x0018 (24)
                  name                     : *
                      name                     : 'Description'
              type                     : REG_SZ (1)
              data                     : *
                  data: ARRAY(178)
                      [0]                      : 0x49 (73)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x6e (110)
                      [3]                      : 0x00 (0)
                      [4]                      : 0x74 (116)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x65 (101)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x72 (114)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x6e (110)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x61 (97)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x6c (108)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x20 (32)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x73 (115)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x65 (101)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x72 (114)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x76 (118)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x69 (105)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x63 (99)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x65 (101)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x20 (32)
                      [33]                     : 0x00 (0)
                      [34]                     : 0x70 (112)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x72 (114)
                      [37]                     : 0x00 (0)
                      [38]                     : 0x6f (111)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x76 (118)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x69 (105)
                      [43]                     : 0x00 (0)
                      [44]                     : 0x64 (100)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x69 (105)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x6e (110)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x67 (103)
                      [51]                     : 0x00 (0)
                      [52]                     : 0x20 (32)
                      [53]                     : 0x00 (0)
                      [54]                     : 0x61 (97)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x20 (32)
                      [57]                     : 0x00 (0)
                      [58]                     : 0x4e (78)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x65 (101)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x74 (116)
                      [63]                     : 0x00 (0)
                      [64]                     : 0x42 (66)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x49 (73)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x4f (79)
                      [69]                     : 0x00 (0)
                      [70]                     : 0x53 (83)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x20 (32)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x70 (112)
                      [75]                     : 0x00 (0)
                      [76]                     : 0x6f (111)
                      [77]                     : 0x00 (0)
                      [78]                     : 0x69 (105)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x6e (110)
                      [81]                     : 0x00 (0)
                      [82]                     : 0x74 (116)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x2d (45)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x74 (116)
                      [87]                     : 0x00 (0)
                      [88]                     : 0x6f (111)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x2d (45)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x70 (112)
                      [93]                     : 0x00 (0)
                      [94]                     : 0x6f (111)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x69 (105)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x6e (110)
                      [99]                     : 0x00 (0)
                      [100]                    : 0x74 (116)
                      [101]                    : 0x00 (0)
                      [102]                    : 0x20 (32)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x6e (110)
                      [105]                    : 0x00 (0)
                      [106]                    : 0x61 (97)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x6d (109)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x65 (101)
                      [111]                    : 0x00 (0)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x73 (115)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x65 (101)
                      [117]                    : 0x00 (0)
                      [118]                    : 0x72 (114)
                      [119]                    : 0x00 (0)
                      [120]                    : 0x76 (118)
                      [121]                    : 0x00 (0)
                      [122]                    : 0x65 (101)
                      [123]                    : 0x00 (0)
                      [124]                    : 0x72 (114)
                      [125]                    : 0x00 (0)
                      [126]                    : 0x28 (40)
                      [127]                    : 0x00 (0)
                      [128]                    : 0x6e (110)
                      [129]                    : 0x00 (0)
                      [130]                    : 0x6f (111)
                      [131]                    : 0x00 (0)
                      [132]                    : 0x74 (116)
                      [133]                    : 0x00 (0)
                      [134]                    : 0x20 (32)
                      [135]                    : 0x00 (0)
                      [136]                    : 0x72 (114)
                      [137]                    : 0x00 (0)
                      [138]                    : 0x65 (101)
                      [139]                    : 0x00 (0)
                      [140]                    : 0x6d (109)
                      [141]                    : 0x00 (0)
                      [142]                    : 0x6f (111)
                      [143]                    : 0x00 (0)
                      [144]                    : 0x74 (116)
                      [145]                    : 0x00 (0)
                      [146]                    : 0x65 (101)
                      [147]                    : 0x00 (0)
                      [148]                    : 0x6c (108)
                      [149]                    : 0x00 (0)
                      [150]                    : 0x79 (121)
                      [151]                    : 0x00 (0)
                      [152]                    : 0x20 (32)
                      [153]                    : 0x00 (0)
                      [154]                    : 0x6d (109)
                      [155]                    : 0x00 (0)
                      [156]                    : 0x61 (97)
                      [157]                    : 0x00 (0)
                      [158]                    : 0x6e (110)
                      [159]                    : 0x00 (0)
                      [160]                    : 0x61 (97)
                      [161]                    : 0x00 (0)
                      [162]                    : 0x67 (103)
                      [163]                    : 0x00 (0)
                      [164]                    : 0x65 (101)
                      [165]                    : 0x00 (0)
                      [166]                    : 0x61 (97)
                      [167]                    : 0x00 (0)
                      [168]                    : 0x62 (98)
                      [169]                    : 0x00 (0)
                      [170]                    : 0x6c (108)
                      [171]                    : 0x00 (0)
                      [172]                    : 0x65 (101)
                      [173]                    : 0x00 (0)
                      [174]                    : 0x29 (41)
                      [175]                    : 0x00 (0)
                      [176]                    : 0x00 (0)
                      [177]                    : 0x00 (0)
              size                     : 0x000000b2 (178)
[2012/08/19 22:36:46.263794,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.264029,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description]
[2012/08/19 22:36:46.264143,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.264253,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.264493,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000009-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.264831,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.265049,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.265263,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.265368, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.265472,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.265907,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          in: struct winreg_CreateKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000001-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0060 (96)
                  name_size                : 0x0060 (96)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services\WINS\Security'
              keyclass: struct winreg_String
                  name_len                 : 0x0002 (2)
                  name_size                : 0x0002 (2)
                  name                     : *
                      name                     : ''
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
              secdesc                  : NULL
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
[2012/08/19 22:36:46.267427,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.267651, 10]
rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey)
  _winreg_CreateKey called with parent key 'HKLM' and subkey name
'SYSTEM\CurrentControlSet\Services\WINS\Security'
[2012/08/19 22:36:46.267763,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.267871,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.267976,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.268083, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.268192, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.268293, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.268396, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.268494, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.268644,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.268753,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.268860, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.268971, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.269071, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.269174, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.269273, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.269420, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.269532,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.269656,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.269769, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.269881, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.269982, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.270086, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.270213, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.270396, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.270511,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 2
[2012/08/19 22:36:46.270617,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [WINS]
[2012/08/19 22:36:46.270723, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.270851, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2012/08/19 22:36:46.270951, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2012/08/19 22:36:46.271057, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.271155, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\WINS]
[2012/08/19 22:36:46.271300, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.271408,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Security]
[2012/08/19 22:36:46.271516, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.271628, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2012/08/19 22:36:46.271728, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter
[\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2012/08/19 22:36:46.271833, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.271931, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2012/08/19 22:36:46.272063, 10]
registry/reg_backend_db.c:1656(regdb_fetch_keys_internal)
  regdb_fetch_keys: no subkeys found for key
[HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2012/08/19 22:36:46.272171, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.272280,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.272499,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CreateKey: struct winreg_CreateKey
          out: struct winreg_CreateKey
              new_handle               : *
                  new_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
0000000a-0000-0000-3150-5e4e9d0e0000
              action_taken             : *
                  action_taken             : REG_OPENED_EXISTING_KEY (2)
              result                   : WERR_OK
[2012/08/19 22:36:46.273032,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          in: struct winreg_SetValue
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
0000000a-0000-0000-3150-5e4e9d0e0000
              name: struct winreg_String
                  name_len                 : 0x0012 (18)
                  name_size                : 0x0012 (18)
                  name                     : *
                      name                     : 'Security'
              type                     : REG_BINARY (3)
              data                     : *
                  data: ARRAY(120)
                      [0]                      : 0x01 (1)
                      [1]                      : 0x00 (0)
                      [2]                      : 0x04 (4)
                      [3]                      : 0x80 (128)
                      [4]                      : 0x00 (0)
                      [5]                      : 0x00 (0)
                      [6]                      : 0x00 (0)
                      [7]                      : 0x00 (0)
                      [8]                      : 0x00 (0)
                      [9]                      : 0x00 (0)
                      [10]                     : 0x00 (0)
                      [11]                     : 0x00 (0)
                      [12]                     : 0x00 (0)
                      [13]                     : 0x00 (0)
                      [14]                     : 0x00 (0)
                      [15]                     : 0x00 (0)
                      [16]                     : 0x14 (20)
                      [17]                     : 0x00 (0)
                      [18]                     : 0x00 (0)
                      [19]                     : 0x00 (0)
                      [20]                     : 0x02 (2)
                      [21]                     : 0x00 (0)
                      [22]                     : 0x64 (100)
                      [23]                     : 0x00 (0)
                      [24]                     : 0x04 (4)
                      [25]                     : 0x00 (0)
                      [26]                     : 0x00 (0)
                      [27]                     : 0x00 (0)
                      [28]                     : 0x00 (0)
                      [29]                     : 0x00 (0)
                      [30]                     : 0x14 (20)
                      [31]                     : 0x00 (0)
                      [32]                     : 0x8d (141)
                      [33]                     : 0x01 (1)
                      [34]                     : 0x02 (2)
                      [35]                     : 0x00 (0)
                      [36]                     : 0x01 (1)
                      [37]                     : 0x01 (1)
                      [38]                     : 0x00 (0)
                      [39]                     : 0x00 (0)
                      [40]                     : 0x00 (0)
                      [41]                     : 0x00 (0)
                      [42]                     : 0x00 (0)
                      [43]                     : 0x01 (1)
                      [44]                     : 0x00 (0)
                      [45]                     : 0x00 (0)
                      [46]                     : 0x00 (0)
                      [47]                     : 0x00 (0)
                      [48]                     : 0x00 (0)
                      [49]                     : 0x00 (0)
                      [50]                     : 0x18 (24)
                      [51]                     : 0x00 (0)
                      [52]                     : 0xfd (253)
                      [53]                     : 0x01 (1)
                      [54]                     : 0x02 (2)
                      [55]                     : 0x00 (0)
                      [56]                     : 0x01 (1)
                      [57]                     : 0x02 (2)
                      [58]                     : 0x00 (0)
                      [59]                     : 0x00 (0)
                      [60]                     : 0x00 (0)
                      [61]                     : 0x00 (0)
                      [62]                     : 0x00 (0)
                      [63]                     : 0x05 (5)
                      [64]                     : 0x20 (32)
                      [65]                     : 0x00 (0)
                      [66]                     : 0x00 (0)
                      [67]                     : 0x00 (0)
                      [68]                     : 0x23 (35)
                      [69]                     : 0x02 (2)
                      [70]                     : 0x00 (0)
                      [71]                     : 0x00 (0)
                      [72]                     : 0x00 (0)
                      [73]                     : 0x00 (0)
                      [74]                     : 0x18 (24)
                      [75]                     : 0x00 (0)
                      [76]                     : 0xff (255)
                      [77]                     : 0x01 (1)
                      [78]                     : 0x0f (15)
                      [79]                     : 0x00 (0)
                      [80]                     : 0x01 (1)
                      [81]                     : 0x02 (2)
                      [82]                     : 0x00 (0)
                      [83]                     : 0x00 (0)
                      [84]                     : 0x00 (0)
                      [85]                     : 0x00 (0)
                      [86]                     : 0x00 (0)
                      [87]                     : 0x05 (5)
                      [88]                     : 0x20 (32)
                      [89]                     : 0x00 (0)
                      [90]                     : 0x00 (0)
                      [91]                     : 0x00 (0)
                      [92]                     : 0x25 (37)
                      [93]                     : 0x02 (2)
                      [94]                     : 0x00 (0)
                      [95]                     : 0x00 (0)
                      [96]                     : 0x00 (0)
                      [97]                     : 0x00 (0)
                      [98]                     : 0x18 (24)
                      [99]                     : 0x00 (0)
                      [100]                    : 0xff (255)
                      [101]                    : 0x01 (1)
                      [102]                    : 0x0f (15)
                      [103]                    : 0x00 (0)
                      [104]                    : 0x01 (1)
                      [105]                    : 0x02 (2)
                      [106]                    : 0x00 (0)
                      [107]                    : 0x00 (0)
                      [108]                    : 0x00 (0)
                      [109]                    : 0x00 (0)
                      [110]                    : 0x00 (0)
                      [111]                    : 0x05 (5)
                      [112]                    : 0x20 (32)
                      [113]                    : 0x00 (0)
                      [114]                    : 0x00 (0)
                      [115]                    : 0x00 (0)
                      [116]                    : 0x20 (32)
                      [117]                    : 0x02 (2)
                      [118]                    : 0x00 (0)
                      [119]                    : 0x00 (0)
              size                     : 0x00000078 (120)
[2012/08/19 22:36:46.279234,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.279458,  8]
rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue)
  _winreg_SetValue: Setting value for
[HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security]
[2012/08/19 22:36:46.279570,  5] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)
  tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start:
nesting 1
[2012/08/19 22:36:46.279688, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0xf77456c0)
[2012/08/19 22:36:46.279797, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
[2012/08/19 22:36:46.279942, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Security] len[120]
[2012/08/19 22:36:46.280079,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_SetValue: struct winreg_SetValue
          out: struct winreg_SetValue
              result                   : WERR_OK
[2012/08/19 22:36:46.280314,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
0000000a-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.280694,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.280943,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.281162,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.281266, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.281370,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.281784,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000002-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.282126,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.282352,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.282576,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.282683, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (3->2)
[2012/08/19 22:36:46.282787,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.283195, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (2->1)
[2012/08/19 22:36:46.283346,  3]
rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg)
  Initialise the eventlog registry keys if needed.
[2012/08/19 22:36:46.283456,  4]
rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p)
  Create pipe requested \winreg
[2012/08/19 22:36:46.283573, 10]
rpc_server/rpc_handles.c:133(init_pipe_handles)
  init_pipe_handle_list: pipe_handles ref count = 2 for pipe \winreg
[2012/08/19 22:36:46.283691,  4]
rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p)
  Created internal pipe \winreg (pipes_open=0)
[2012/08/19 22:36:46.283850,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          in: struct winreg_OpenHKLM
              system_name              : NULL
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
[2012/08/19 22:36:46.284441,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [HKLM]
[2012/08/19 22:36:46.284553, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (1->2)
[2012/08/19 22:36:46.284664, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM]
[2012/08/19 22:36:46.284767, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM]
[2012/08/19 22:36:46.284872, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.284977, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM]
[2012/08/19 22:36:46.285147,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[2] [0000] 00 00 00 00 0B 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.285381,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_OpenHKLM: struct winreg_OpenHKLM
          out: struct winreg_OpenHKLM
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
0000000b-0000-0000-3150-5e4e9d0e0000
              result                   : WERR_OK
[2012/08/19 22:36:46.285817,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          in: struct winreg_OpenKey
              parent_handle            : *
                  parent_handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
0000000b-0000-0000-3150-5e4e9d0e0000
              keyname: struct winreg_String
                  name_len                 : 0x0056 (86)
                  name_size                : 0x0056 (86)
                  name                     : *
                      name                     :
'SYSTEM\CurrentControlSet\Services\Eventlog'
              options                  : 0x00000000 (0)
                     0: REG_OPTION_VOLATILE     
                     0: REG_OPTION_CREATE_LINK  
                     0: REG_OPTION_BACKUP_RESTORE
                     0: REG_OPTION_OPEN_LINK    
              access_mask              : 0x02000000 (33554432)
                     0: KEY_QUERY_VALUE         
                     0: KEY_SET_VALUE           
                     0: KEY_CREATE_SUB_KEY      
                     0: KEY_ENUMERATE_SUB_KEYS  
                     0: KEY_NOTIFY              
                     0: KEY_CREATE_LINK         
                     0: KEY_WOW64_64KEY         
                     0: KEY_WOW64_32KEY         
[2012/08/19 22:36:46.286978,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.287211,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SYSTEM]
[2012/08/19 22:36:46.287323, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (2->3)
[2012/08/19 22:36:46.287435, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SYSTEM]
[2012/08/19 22:36:46.287571, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM]
[2012/08/19 22:36:46.287679, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.287780, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SYSTEM]
[2012/08/19 22:36:46.287946,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [CurrentControlSet]
[2012/08/19 22:36:46.288065, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.288180, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.288284, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.288391, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.288493, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet]
[2012/08/19 22:36:46.288655,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Services]
[2012/08/19 22:36:46.288787, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.288906, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.289011, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.289120, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.289225, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services]
[2012/08/19 22:36:46.289418,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Eventlog]
[2012/08/19 22:36:46.289534, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (5->6)
[2012/08/19 22:36:46.289666, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2012/08/19 22:36:46.289774, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2012/08/19 22:36:46.289883, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.289987, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key
[\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2012/08/19 22:36:46.290145, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (6->5)
[2012/08/19 22:36:46.290259, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.290365, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.290475,  4]
rpc_server/rpc_handles.c:197(create_rpc_handle_internal)
  Opened policy hnd[3] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.290702,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_OpenKey: struct winreg_OpenKey
          out: struct winreg_OpenKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
0000000c-0000-0000-3150-5e4e9d0e0000
              result                   : WERR_OK
[2012/08/19 22:36:46.291159,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_QueryInfoKey: struct winreg_QueryInfoKey
          in: struct winreg_QueryInfoKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
0000000c-0000-0000-3150-5e4e9d0e0000
              classname                : *
                  classname: struct winreg_String
                      name_len                 : 0x0000 (0)
                      name_size                : 0x0000 (0)
                      name                     : NULL
[2012/08/19 22:36:46.291760,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.291998, 10]
registry/reg_dispatcher.c:150(fetch_reg_values)
  fetch_reg_values called for key
'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0xf77456c0)
[2012/08/19 22:36:46.292108, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2012/08/19 22:36:46.292270, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2012/08/19 22:36:46.292384, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2012/08/19 22:36:46.292493, 10]
registry/reg_backend_db.c:1926(regdb_get_secdesc)
  regdb_get_secdesc: Getting secdesc of key
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2012/08/19 22:36:46.292652,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_QueryInfoKey: struct winreg_QueryInfoKey
          out: struct winreg_QueryInfoKey
              classname                : *
                  classname: struct winreg_String
                      name_len                 : 0x0000 (0)
                      name_size                : 0x0000 (0)
                      name                     : NULL
              num_subkeys              : *
                  num_subkeys              : 0x00000000 (0)
              max_subkeylen            : *
                  max_subkeylen            : 0x00000000 (0)
              max_classlen             : *
                  max_classlen             : 0x00000000 (0)
              num_values               : *
                  num_values               : 0x00000002 (2)
              max_valnamelen           : *
                  max_valnamelen           : 0x0000001a (26)
              max_valbufsize           : *
                  max_valbufsize           : 0x00000014 (20)
              secdescsize              : *
                  secdescsize              : 0x00000078 (120)
              last_changed_time        : *
                  last_changed_time        : NTTIME(0)
              result                   : WERR_OK
[2012/08/19 22:36:46.293793,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          in: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
0000000c-0000-0000-3150-5e4e9d0e0000
[2012/08/19 22:36:46.294137,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.294367,  4]
rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal)
  Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00   00 00 00 00 31 50
5E 4E   ........ ....1P^N
  [0010] 9D 0E 00 00                                       ....
[2012/08/19 22:36:46.294590,  3]
rpc_server/rpc_handles.c:281(close_policy_hnd)
  Closed policy
[2012/08/19 22:36:46.294697, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (3->2)
[2012/08/19 22:36:46.294804,  1]
../librpc/ndr/ndr.c:284(ndr_print_function_debug)
       winreg_CloseKey: struct winreg_CloseKey
          out: struct winreg_CloseKey
              handle                   : *
                  handle: struct policy_handle
                      handle_type              : 0x00000000 (0)
                      uuid                     :
00000000-0000-0000-0000-000000000000
              result                   : WERR_OK
[2012/08/19 22:36:46.295308,  3] printing/pcap.c:138(pcap_cache_reload)
  reloading printcap cache
[2012/08/19 22:36:46.295485, 10]
lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
  Locking key 5052494E5445524C4953
[2012/08/19 22:36:46.295636, 10]
lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
  Allocated locked data 0x0xf822f850
[2012/08/19 22:36:46.295945, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
  Unlocking key 5052494E5445524C4953
[2012/08/19 22:36:46.296240, 10]
lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
  Locking key 5052494E5445524C4953
[2012/08/19 22:36:46.296371, 10]
lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
  Allocated locked data 0x0xf822f850
[2012/08/19 22:36:46.296495, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
  Unlocking key 5052494E5445524C4953
[2012/08/19 22:36:46.296644,  3] printing/pcap.c:189(pcap_cache_reload)
  reload status: ok
[2012/08/19 22:36:46.296861,  7] param/loadparm.c:9834(lp_servicenumber)
  lp_servicenumber: couldn't find printers
[2012/08/19 22:36:46.296989, 10]
registry/reg_init_smbconf.c:41(registry_init_smbconf)
  registry_init_smbconf called
[2012/08/19 22:36:46.297092, 10]
registry/reg_backend_db.c:504(regdb_init)
  regdb_init: incrementing refcount (2->3)
[2012/08/19 22:36:46.297726, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports]
[2012/08/19 22:36:46.297887, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[Samba Printer Port] len[2]
[2012/08/19 22:36:46.298000, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers]
[2012/08/19 22:36:46.298157, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70]
[2012/08/19 22:36:46.298268, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2012/08/19 22:36:46.298420, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2012/08/19 22:36:46.298530, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2012/08/19 22:36:46.298638, 10]
registry/reg_backend_db.c:1789(regdb_fetch_values_internal)
  regdb_fetch_values: Looking for values of key
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2012/08/19 22:36:46.298789, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[0]: name[DisplayName] len[20]
[2012/08/19 22:36:46.298898, 10]
registry/reg_backend_db.c:1734(regdb_unpack_values)
  regdb_unpack_values: value[1]: name[ErrorControl] len[4]
[2012/08/19 22:36:46.299032, 10]
registry/reg_cachehook.c:94(reghook_cache_add)
  reghook_cache_add: Adding ops 0xf7745760 for key
[\HKLM\SOFTWARE\Samba\smbconf]
[2012/08/19 22:36:46.299137,  8] lib/adt_tree.c:215(pathtree_add)
  pathtree_add: Enter
[2012/08/19 22:36:46.299241, 10] lib/adt_tree.c:282(pathtree_add)
  pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to
tree
[2012/08/19 22:36:46.299341,  8] lib/adt_tree.c:284(pathtree_add)
  pathtree_add: Exit
[2012/08/19 22:36:46.299442, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (3->2)
[2012/08/19 22:36:46.299543, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (2->3)
[2012/08/19 22:36:46.299657,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [HKLM]
[2012/08/19 22:36:46.299797, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (3->4)
[2012/08/19 22:36:46.299909, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM]
[2012/08/19 22:36:46.300052, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM]
[2012/08/19 22:36:46.300165, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.300265, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM]
[2012/08/19 22:36:46.300426,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [SOFTWARE]
[2012/08/19 22:36:46.300540, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.300653, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE]
[2012/08/19 22:36:46.300753, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE]
[2012/08/19 22:36:46.300881, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.300985, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SOFTWARE]
[2012/08/19 22:36:46.301150,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [Samba]
[2012/08/19 22:36:46.301263, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (5->6)
[2012/08/19 22:36:46.301375, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba]
[2012/08/19 22:36:46.301476, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Samba]
[2012/08/19 22:36:46.301581, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.301682, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf77456c0 for key [\HKLM\SOFTWARE\Samba]
[2012/08/19 22:36:46.301844,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [smbconf]
[2012/08/19 22:36:46.301957, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (6->7)
[2012/08/19 22:36:46.302071, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SOFTWARE\Samba\smbconf]
[2012/08/19 22:36:46.302175, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf]
[2012/08/19 22:36:46.302280, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.302381, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf7745760 for key
[\HKLM\SOFTWARE\Samba\smbconf]
[2012/08/19 22:36:46.302576, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (7->6)
[2012/08/19 22:36:46.302756, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (6->5)
[2012/08/19 22:36:46.302915, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.303073,  5]
param/loadparm.c:7280(process_registry_service)
  process_registry_service: service name printers
[2012/08/19 22:36:46.303229,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [printers]
[2012/08/19 22:36:46.303379, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.303550, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SOFTWARE\Samba\smbconf\printers]
[2012/08/19 22:36:46.303708, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf\printers]
[2012/08/19 22:36:46.303873, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.304012, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf7745760 for key
[\HKLM\SOFTWARE\Samba\smbconf\printers]
[2012/08/19 22:36:46.304253, 10]
registry/reg_backend_db.c:1623(regdb_fetch_keys_internal)
  key [HKLM\SOFTWARE\Samba\smbconf\printers] not found
[2012/08/19 22:36:46.304426, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.304609,  7] param/loadparm.c:9834(lp_servicenumber)
  lp_servicenumber: couldn't find printers
[2012/08/19 22:36:46.304784,  7] param/loadparm.c:9834(lp_servicenumber)
  lp_servicenumber: couldn't find printers
[2012/08/19 22:36:46.304954,  7] param/loadparm.c:9834(lp_servicenumber)
  lp_servicenumber: couldn't find printers
[2012/08/19 22:36:46.305115, 10] smbd/server_reload.c:53(reload_printers)
  reloading printer services from pcap cache
[2012/08/19 22:36:46.305356,  7] param/loadparm.c:9834(lp_servicenumber)
  lp_servicenumber: couldn't find printers
[2012/08/19 22:36:46.305540,  5]
param/loadparm.c:7280(process_registry_service)
  process_registry_service: service name printers
[2012/08/19 22:36:46.305705,  7]
registry/reg_api.c:141(regkey_open_onelevel)
  regkey_open_onelevel: name = [printers]
[2012/08/19 22:36:46.305858, 10]
registry/reg_backend_db.c:583(regdb_open)
  regdb_open: incrementing refcount (4->5)
[2012/08/19 22:36:46.306022, 10]
registry/reg_cachehook.c:122(reghook_cache_find)
  reghook_cache_find: Searching for keyname
[\HKLM\SOFTWARE\Samba\smbconf\printers]
[2012/08/19 22:36:46.306217, 10] lib/adt_tree.c:367(pathtree_find)
  pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf\printers]
[2012/08/19 22:36:46.306351, 10] lib/adt_tree.c:440(pathtree_find)
  pathtree_find: Exit
[2012/08/19 22:36:46.306455, 10]
registry/reg_cachehook.c:127(reghook_cache_find)
  reghook_cache_find: found ops 0xf7745760 for key
[\HKLM\SOFTWARE\Samba\smbconf\printers]
[2012/08/19 22:36:46.306604, 10]
registry/reg_backend_db.c:1623(regdb_fetch_keys_internal)
  key [HKLM\SOFTWARE\Samba\smbconf\printers] not found
[2012/08/19 22:36:46.306716, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (5->4)
[2012/08/19 22:36:46.306837,  7] param/loadparm.c:9834(lp_servicenumber)
  lp_servicenumber: couldn't find printers
[2012/08/19 22:36:46.306951,  7] param/loadparm.c:9834(lp_servicenumber)
  lp_servicenumber: couldn't find printers
[2012/08/19 22:36:46.307069,  3]
printing/printing.c:1673(start_background_queue)
  start_background_queue: Starting background LPQ thread
[2012/08/19 22:36:46.308064,  3]
../lib/util/util_net.c:70(interpret_string_addr_internal)
  interpret_string_addr_internal: getaddrinfo failed for name :: [Address
family for hostname not supported]
[2012/08/19 22:36:46.308519,  3]
../lib/util/util_net.c:70(interpret_string_addr_internal)
  interpret_string_addr_internal: getaddrinfo failed for name :: [Address
family for hostname not supported]
[2012/08/19 22:36:46.308547,  5]
printing/printing.c:1696(start_background_queue)
  start_background_queue: background LPQ thread started
[2012/08/19 22:36:46.308979, 10] lib/util_sock.c:680(open_socket_in)
  bind succeeded on port 445
[2012/08/19 22:36:46.309212,  5]
lib/util_sock.c:165(print_socket_options)
  Socket options:
      SO_KEEPALIVE = 1
      SO_REUSEADDR = 1
[2012/08/19 22:36:46.309434, 10]
lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
      SO_BROADCAST = 0
  Locking key B90E0000FFFFFFFF
      TCP_NODELAY = 0
      TCP_KEEPCNT = 9
      TCP_KEEPIDLE = 7200
[2012/08/19 22:36:46.309668, 10]
lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
      TCP_KEEPINTVL = 75
  Allocated locked data 0x0xf822ec90
      IPTOS_LOWDELAY = 0
      IPTOS_THROUGHPUT = 0
      SO_SNDBUF = 16384
[2012/08/19 22:36:46.309878, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
      SO_RCVBUF = 87380
  Unlocking key B90E0000FFFFFFFF
      SO_SNDLOWAT = 1
      SO_RCVLOWAT = 1
      Could not test socket option SO_SNDTIMEO.
[2012/08/19 22:36:46.310057,  5]
printing/printing.c:1732(start_background_queue)
  start_background_queue: background LPQ thread waiting for messages
      Could not test socket option SO_RCVTIMEO.
      TCP_QUICKACK = 1
[2012/08/19 22:36:46.310283,  5]
lib/util_sock.c:165(print_socket_options)
  Socket options:
      SO_KEEPALIVE = 1
      SO_REUSEADDR = 1
      SO_BROADCAST = 0
      TCP_NODELAY = 1
      TCP_KEEPCNT = 9
      TCP_KEEPIDLE = 7200
      TCP_KEEPINTVL = 75
      IPTOS_LOWDELAY = 16
      IPTOS_THROUGHPUT = 16
      SO_SNDBUF = 16384
      SO_RCVBUF = 87380
      SO_SNDLOWAT = 1
      SO_RCVLOWAT = 1
      Could not test socket option SO_SNDTIMEO.
      Could not test socket option SO_RCVTIMEO.
      TCP_QUICKACK = 1
[2012/08/19 22:36:46.311255, 10] lib/util_sock.c:680(open_socket_in)
  bind succeeded on port 139
[2012/08/19 22:36:46.311423,  5]
lib/util_sock.c:165(print_socket_options)
  Socket options:
      SO_KEEPALIVE = 1
      SO_REUSEADDR = 1
      SO_BROADCAST = 0
      TCP_NODELAY = 0
      TCP_KEEPCNT = 9
      TCP_KEEPIDLE = 7200
      TCP_KEEPINTVL = 75
      IPTOS_LOWDELAY = 0
      IPTOS_THROUGHPUT = 0
      SO_SNDBUF = 16384
      SO_RCVBUF = 87380
      SO_SNDLOWAT = 1
      SO_RCVLOWAT = 1
      Could not test socket option SO_SNDTIMEO.
      Could not test socket option SO_RCVTIMEO.
      TCP_QUICKACK = 1
[2012/08/19 22:36:46.312157,  5]
lib/util_sock.c:165(print_socket_options)
  Socket options:
      SO_KEEPALIVE = 1
      SO_REUSEADDR = 1
      SO_BROADCAST = 0
      TCP_NODELAY = 1
      TCP_KEEPCNT = 9
      TCP_KEEPIDLE = 7200
      TCP_KEEPINTVL = 75
      IPTOS_LOWDELAY = 16
      IPTOS_THROUGHPUT = 16
      SO_SNDBUF = 16384
      SO_RCVBUF = 87380
      SO_SNDLOWAT = 1
      SO_RCVLOWAT = 1
      Could not test socket option SO_SNDTIMEO.
      Could not test socket option SO_RCVTIMEO.
      TCP_QUICKACK = 1
[2012/08/19 22:36:46.313085, 10]
lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
  Locking key 9D0E0000FFFFFFFF
[2012/08/19 22:36:46.313294, 10]
lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
  Allocated locked data 0x0xf82367c0
[2012/08/19 22:36:46.313497, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
  Unlocking key 9D0E0000FFFFFFFF
[2012/08/19 22:36:46.313718, 10] smbd/process.c:920(event_add_idle)
  event_add_idle: idle_evt(parent_housekeeping) 0xf8235f48
[2012/08/19 22:36:46.313894,  5] lib/messages.c:300(messaging_register)
  Overriding messaging pointer for type 1 - private_data=(nil)
[2012/08/19 22:36:46.314179, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (4->3)
[2012/08/19 22:36:46.314367, 10]
registry/reg_backend_db.c:619(regdb_close)
  regdb_close: decrementing refcount (3->2)
[2012/08/19 22:36:46.314523, 10]
rpc_server/rpc_handles.c:307(close_policy_by_pipe)
  close_policy_by_pipe: deleted handle list for pipe \winreg
[2012/08/19 22:36:46.314720,  2] smbd/server.c:842(smbd_parent_loop)
  waiting for connections
[2012/08/19 22:37:02.537092, 10]
lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
  Locking key 28100000FFFFFFFF
[2012/08/19 22:37:02.537376, 10]
lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
  Allocated locked data 0x0xf82320a0
[2012/08/19 22:37:02.537539, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
  Unlocking key 28100000FFFFFFFF
[2012/08/19 22:37:02.537702,  5]
lib/util_sock.c:165(print_socket_options)
  Socket options:
      SO_KEEPALIVE = 1
      SO_REUSEADDR = 1
      SO_BROADCAST = 0
      TCP_NODELAY = 1
      TCP_KEEPCNT = 9
      TCP_KEEPIDLE = 7200
      TCP_KEEPINTVL = 75
      IPTOS_LOWDELAY = 16
      IPTOS_THROUGHPUT = 16
      SO_SNDBUF = 16384
      SO_RCVBUF = 87380
      SO_SNDLOWAT = 1
      SO_RCVLOWAT = 1
      Could not test socket option SO_SNDTIMEO.
      Could not test socket option SO_RCVTIMEO.
      TCP_QUICKACK = 1
[2012/08/19 22:37:02.538507,  5]
lib/util_sock.c:165(print_socket_options)
  Socket options:
      SO_KEEPALIVE = 1
      SO_REUSEADDR = 1
      SO_BROADCAST = 0
      TCP_NODELAY = 1
      TCP_KEEPCNT = 9
      TCP_KEEPIDLE = 7200
      TCP_KEEPINTVL = 75
      IPTOS_LOWDELAY = 16
      IPTOS_THROUGHPUT = 16
      SO_SNDBUF = 16384
      SO_RCVBUF = 87380
      SO_SNDLOWAT = 1
      SO_RCVLOWAT = 1
      Could not test socket option SO_SNDTIMEO.
      Could not test socket option SO_RCVTIMEO.
      TCP_QUICKACK = 1
[2012/08/19 22:37:02.539553,  6]
param/loadparm.c:7490(lp_file_list_changed)
  lp_file_list_changed()
  file /var/nasconf/samba/samba_extras.conf ->
/var/nasconf/samba/samba_extras.conf  last mod_time: Thu Jan  1 01:00:00
1970
 
  file /var/nasconf/included/usr/guest.conf ->
/var/nasconf/included/usr/guest.conf  last mod_time: Thu Jan  1 01:00:00
1970
 
  file /var/nasconf/included/res/share1 ->
/var/nasconf/included/res/share1  last mod_time: Sun Aug 19 22:27:55 2012
 
  file /var/nasconf/included/smb.conf.all_resources ->
/var/nasconf/included/smb.conf.all_resources  last mod_time: Sun Aug 19
22:27:55 2012
 
  file /tmp/etc/smb.ldap.conf -> /tmp/etc/smb.ldap.conf  last mod_time:
Sun Aug 19 01:18:04 2012
 
  file /tmp/etc/smb_protocol.conf -> /tmp/etc/smb_protocol.conf  last
mod_time: Sun Aug 19 22:36:45 2012
 
  file /tmp/etc/smb_domainlogons.conf -> /tmp/etc/smb_domainlogons.conf 
last mod_time: Sun Aug 19 22:36:45 2012
 
  file /tmp/etc/smb.nis.conf -> /tmp/etc/smb.nis.conf  last mod_time: Sun
Aug 19 01:18:33 2012
 
  file /tmp/etc/smb_use_antyvirus.conf ->
/tmp/etc/smb_use_antyvirus.conf  last mod_time: Sun Aug 19 01:18:04 2012
 
  file /tmp/etc/smb_hide_apple_files.conf ->
/tmp/etc/smb_hide_apple_files.conf  last mod_time: Sun Aug 19 22:36:45
2012
 
  file /tmp/etc/smb_use_spnego.conf -> /tmp/etc/smb_use_spnego.conf  last
mod_time: Sun Aug 19 22:36:45 2012
 
  file /tmp/etc/smb.security.conf -> /tmp/etc/smb.security.conf  last
mod_time: Sun Aug 19 01:18:33 2012
 
  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Aug
19 22:36:45 2012
 
[2012/08/19 22:37:02.541134,  3] lib/access.c:338(allow_access)
  Allowed connection from 192.168.250.25 (192.168.250.25)
[2012/08/19 22:37:02.541242, 10] smbd/process.c:3019(smbd_process)
  Connection allowed from ipv4:192.168.250.25:62654 to
ipv4:192.168.248.15:445
[2012/08/19 22:37:02.541405,  3] smbd/oplock.c:922(init_oplocks)
  init_oplocks: initializing messages.
[2012/08/19 22:37:02.541669,  3]
smbd/oplock_linux.c:239(linux_init_kernel_oplocks)
  Linux kernel oplocks enabled
[2012/08/19 22:37:02.541793,  5] lib/messages.c:332(messaging_deregister)
  Deregistering messaging pointer for type 1 - private_data=(nil)
[2012/08/19 22:37:02.541926, 10] smbd/process.c:920(event_add_idle)
  event_add_idle: idle_evt(keepalive) 0xf821e888
[2012/08/19 22:37:02.542040, 10] smbd/process.c:920(event_add_idle)
  event_add_idle: idle_evt(deadtime) 0xf822f150
[2012/08/19 22:37:02.542154, 10] smbd/process.c:920(event_add_idle)
  event_add_idle: idle_evt(housekeeping) 0xf8228ea8
[2012/08/19 22:37:02.542387, 10]
lib/util_sock.c:519(read_smb_length_return_keepalive)
  got smb length of 104
[2012/08/19 22:37:02.542524,  6] smbd/process.c:1660(process_smb)
  got message type 0x0 of len 0x68
[2012/08/19 22:37:02.542632,  3] smbd/process.c:1662(process_smb)
  Transaction 0 of length 108 (0 toread)
[2012/08/19 22:37:02.542738, 10]
smbd/smb2_server.c:2619(smbd_smb2_first_negprot)
  smbd_smb2_first_negprot: packet length 108
[2012/08/19 22:37:02.542886, 10]
smbd/smb2_server.c:363(smb2_validate_sequence_number)
  smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap
[2012/08/19 22:37:02.542998, 10]
smbd/smb2_server.c:1330(smbd_smb2_request_dispatch)
  smbd_smb2_request_dispatch: opcode[SMB2_NEGPROT] mid = 0
[2012/08/19 22:37:02.543110,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.543220,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.543329,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.543502,  5] smbd/uid.c:400(change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2012/08/19 22:37:02.543616, 10] lib/util.c:1650(set_remote_arch)
  set_remote_arch: Client arch is 'Vista'
[2012/08/19 22:37:02.543805, 10]
smbd/smb2_server.c:1980(smbd_smb2_request_done_ex)
  smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64]
dyn[yes:42] at smbd/smb2_negprot.c:191
[2012/08/19 22:37:02.543928, 10]
smbd/smb2_server.c:618(smb2_set_operation_credit)
  smb2_set_operation_credit: requested 31, granted 1, current
possible/max 512/512, total granted/max/low/range 1/8192/1/1
  smbd_smb2_request_reply: sending...
      req->in.vector[0].iov_len = 4
      req->in.vector[1].iov_len = 64
      req->in.vector[2].iov_len = 36
      req->in.vector[3].iov_len = 4
      req->out.vector[0].iov_len = 4
      req->out.vector[1].iov_len = 64
      req->out.vector[2].iov_len = 64
      req->out.vector[3].iov_len = 42
[2012/08/19 22:37:02.545160, 10]
smbd/smb2_server.c:2686(smbd_smb2_request_incoming)
  smbd_smb2_request_incoming: idx[1] of 4 vectors
[2012/08/19 22:37:02.545334, 10]
smbd/smb2_server.c:363(smb2_validate_sequence_number)
  smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap
[2012/08/19 22:37:02.545445, 10]
smbd/smb2_server.c:1330(smbd_smb2_request_dispatch)
  smbd_smb2_request_dispatch: opcode[SMB2_SESSSETUP] mid = 1
[2012/08/19 22:37:02.545549,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.545650,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.545750,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.545906,  5] smbd/uid.c:400(change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2012/08/19 22:37:02.546129,  5]
smbd/sesssetup.c:607(parse_spnego_mechanisms)
  parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10
[2012/08/19 22:37:02.546742,  5]
auth/auth.c:489(make_auth_context_subsystem)
  Making default auth method list for DC, security=user, encrypt
passwords = yes
[2012/08/19 22:37:02.546888,  5] auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam
[2012/08/19 22:37:02.547003,  5] auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam'
[2012/08/19 22:37:02.547144,  5] auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam_ignoredomain
[2012/08/19 22:37:02.547252,  5] auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam_ignoredomain'
[2012/08/19 22:37:02.547357,  5] auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend unix
[2012/08/19 22:37:02.547461,  5] auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'unix'
[2012/08/19 22:37:02.547565,  5] auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend winbind
[2012/08/19 22:37:02.547671,  5] auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'winbind'
[2012/08/19 22:37:02.547772,  5] auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend wbc
[2012/08/19 22:37:02.547877,  5] auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'wbc'
[2012/08/19 22:37:02.547982,  5] auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend smbserver
[2012/08/19 22:37:02.548087,  5] auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'smbserver'
[2012/08/19 22:37:02.548193,  5] auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend trustdomain
[2012/08/19 22:37:02.548299,  5] auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'trustdomain'
[2012/08/19 22:37:02.548417,  5] auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend ntdomain
[2012/08/19 22:37:02.548531,  5] auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'ntdomain'
[2012/08/19 22:37:02.548640,  5] auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend guest
[2012/08/19 22:37:02.548746,  5] auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'guest'
[2012/08/19 22:37:02.548850,  5] auth/auth.c:385(load_auth_module)
  load_auth_module: Attempting to find an auth method to match guest
[2012/08/19 22:37:02.548955,  5] auth/auth.c:410(load_auth_module)
  load_auth_module: auth method guest has a valid init
[2012/08/19 22:37:02.549058,  5] auth/auth.c:385(load_auth_module)
  load_auth_module: Attempting to find an auth method to match sam
[2012/08/19 22:37:02.549162,  5] auth/auth.c:410(load_auth_module)
  load_auth_module: auth method sam has a valid init
[2012/08/19 22:37:02.549265,  5] auth/auth.c:385(load_auth_module)
  load_auth_module: Attempting to find an auth method to match
winbind:trustdomain
[2012/08/19 22:37:02.549413,  5] auth/auth.c:385(load_auth_module)
  load_auth_module: Attempting to find an auth method to match
trustdomain
[2012/08/19 22:37:02.549522,  5] auth/auth.c:410(load_auth_module)
  load_auth_module: auth method trustdomain has a valid init
[2012/08/19 22:37:02.549625,  5] auth/auth.c:410(load_auth_module)
  load_auth_module: auth method winbind has a valid init
[2012/08/19 22:37:02.549758,  3]
../libcli/auth/ntlmssp.c:34(debug_ntlmssp_flags)
  Got NTLMSSP neg_flags=0xe2088297
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_NEGOTIATE_OEM
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_SIGN
    NTLMSSP_NEGOTIATE_LM_KEY
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_NEGOTIATE_VERSION
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_KEY_EXCH
    NTLMSSP_NEGOTIATE_56
[2012/08/19 22:37:02.550941,  1] ../librpc/ndr/ndr.c:247(ndr_print_debug)
       negotiate: struct NEGOTIATE_MESSAGE
          Signature                : 'NTLMSSP'
          MessageType              : NtLmNegotiate (1)
          NegotiateFlags           : 0xe2088297 (3792208535)
                 1: NTLMSSP_NEGOTIATE_UNICODE
                 1: NTLMSSP_NEGOTIATE_OEM   
                 1: NTLMSSP_REQUEST_TARGET  
                 1: NTLMSSP_NEGOTIATE_SIGN  
                 0: NTLMSSP_NEGOTIATE_SEAL  
                 0: NTLMSSP_NEGOTIATE_DATAGRAM
                 1: NTLMSSP_NEGOTIATE_LM_KEY
                 0: NTLMSSP_NEGOTIATE_NETWARE
                 1: NTLMSSP_NEGOTIATE_NTLM  
                 0: NTLMSSP_NEGOTIATE_NT_ONLY
                 0: NTLMSSP_ANONYMOUS       
                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
                 0: NTLMSSP_TARGET_TYPE_DOMAIN
                 0: NTLMSSP_TARGET_TYPE_SERVER
                 0: NTLMSSP_TARGET_TYPE_SHARE
                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
                 0: NTLMSSP_NEGOTIATE_IDENTIFY
                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
                 0: NTLMSSP_NEGOTIATE_TARGET_INFO
                 1: NTLMSSP_NEGOTIATE_VERSION
                 1: NTLMSSP_NEGOTIATE_128   
                 1: NTLMSSP_NEGOTIATE_KEY_EXCH
                 1: NTLMSSP_NEGOTIATE_56    
          DomainNameLen            : 0x0000 (0)
          DomainNameMaxLen         : 0x0000 (0)
          DomainName               : NULL
          WorkstationLen           : 0x0000 (0)
          WorkstationMaxLen        : 0x0000 (0)
          Workstation              : NULL
          Version: struct ntlmssp_VERSION
              ProductMajorVersion      : NTLMSSP_WINDOWS_MAJOR_VERSION_6
(6)
              ProductMinorVersion      : NTLMSSP_WINDOWS_MINOR_VERSION_1
(1)
              ProductBuild             : 0x1db0 (7600)
              Reserved: ARRAY(3)
                  [0]                      : 0x00 (0)
                  [1]                      : 0x00 (0)
                  [2]                      : 0x00 (0)
              NTLMRevisionCurrent      : NTLMSSP_REVISION_W2K3 (15)
[2012/08/19 22:37:02.553009,  5] auth/auth.c:99(get_ntlm_challenge)
  auth_get_challenge: module guest did not want to specify a challenge
[2012/08/19 22:37:02.553126,  5] auth/auth.c:99(get_ntlm_challenge)
  auth_get_challenge: module sam did not want to specify a challenge
[2012/08/19 22:37:02.553230,  5] auth/auth.c:99(get_ntlm_challenge)
  auth_get_challenge: module winbind did not want to specify a challenge
[2012/08/19 22:37:02.553346,  5] auth/auth.c:134(get_ntlm_challenge)
  auth_context challenge created by random
[2012/08/19 22:37:02.553453,  5] auth/auth.c:135(get_ntlm_challenge)
  challenge is:
[2012/08/19 22:37:02.553552,  5] ../lib/util/util.c:415(dump_data)
  [0000] 79 4A EC D0 6D 67 BE 61                            yJ..mg.a
[2012/08/19 22:37:02.553771,  1] ../librpc/ndr/ndr.c:247(ndr_print_debug)
       challenge: struct CHALLENGE_MESSAGE
          Signature                : 'NTLMSSP'
          MessageType              : NtLmChallenge (0x2)
          TargetNameLen            : 0x0012 (18)
          TargetNameMaxLen         : 0x0012 (18)
          TargetName               : *
              TargetName               : 'WORKGROUP'
          NegotiateFlags           : 0xe2898295 (3800662677)
                 1: NTLMSSP_NEGOTIATE_UNICODE
                 0: NTLMSSP_NEGOTIATE_OEM   
                 1: NTLMSSP_REQUEST_TARGET  
                 1: NTLMSSP_NEGOTIATE_SIGN  
                 0: NTLMSSP_NEGOTIATE_SEAL  
                 0: NTLMSSP_NEGOTIATE_DATAGRAM
                 1: NTLMSSP_NEGOTIATE_LM_KEY
                 0: NTLMSSP_NEGOTIATE_NETWARE
                 1: NTLMSSP_NEGOTIATE_NTLM  
                 0: NTLMSSP_NEGOTIATE_NT_ONLY
                 0: NTLMSSP_ANONYMOUS       
                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
                 1: NTLMSSP_TARGET_TYPE_DOMAIN
                 0: NTLMSSP_TARGET_TYPE_SERVER
                 0: NTLMSSP_TARGET_TYPE_SHARE
                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
                 0: NTLMSSP_NEGOTIATE_IDENTIFY
                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
                 1: NTLMSSP_NEGOTIATE_TARGET_INFO
                 1: NTLMSSP_NEGOTIATE_VERSION
                 1: NTLMSSP_NEGOTIATE_128   
                 1: NTLMSSP_NEGOTIATE_KEY_EXCH
                 1: NTLMSSP_NEGOTIATE_56    
          ServerChallenge          : 794aecd06d67be61
          Reserved                 : 0000000000000000
          TargetInfoLen            : 0x0046 (70)
          TargetNameInfoMaxLen     : 0x0046 (70)
          TargetInfo               : *
              TargetInfo: struct AV_PAIR_LIST
                  count                    : 0x00000005 (5)
                  pair: ARRAY(5)
                      pair: struct AV_PAIR
                          AvId                     : MsvAvNbDomainName
(0x2)
                          AvLen                    : 0x0012 (18)
                          Value                    : union
ntlmssp_AvValue(case 0x2)
                          AvNbDomainName           : 'WORKGROUP'
                      pair: struct AV_PAIR
                          AvId                     : MsvAvNbComputerName
(0x1)
                          AvLen                    : 0x0010 (16)
                          Value                    : union
ntlmssp_AvValue(case 0x1)
                          AvNbComputerName         : 'DSS24815'
                      pair: struct AV_PAIR
                          AvId                     : MsvAvDnsDomainName
(0x4)
                          AvLen                    : 0x0000 (0)
                          Value                    : union
ntlmssp_AvValue(case 0x4)
                          AvDnsDomainName          : ''
                      pair: struct AV_PAIR
                          AvId                     : MsvAvDnsComputerName
(0x3)
                          AvLen                    : 0x0010 (16)
                          Value                    : union
ntlmssp_AvValue(case 0x3)
                          AvDnsComputerName        : 'dss24815'
                      pair: struct AV_PAIR
                          AvId                     : MsvAvEOL (0x0)
                          AvLen                    : 0x0000 (0)
                          Value                    : union
ntlmssp_AvValue(case 0x0)
          Version: struct ntlmssp_VERSION
              ProductMajorVersion      : NTLMSSP_WINDOWS_MAJOR_VERSION_6
(0x6)
              ProductMinorVersion      : NTLMSSP_WINDOWS_MINOR_VERSION_1
(0x1)
              ProductBuild             : 0x0000 (0)
              Reserved                 : 000000
              NTLMRevisionCurrent      : NTLMSSP_REVISION_W2K3 (0xF)
[2012/08/19 22:37:02.556983, 10]
smbd/smb2_server.c:1980(smbd_smb2_request_done_ex)
  smbd_smb2_request_done_ex: idx[1]
status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:175] at
smbd/smb2_sesssetup.c:119
[2012/08/19 22:37:02.557163, 10]
smbd/smb2_server.c:618(smb2_set_operation_credit)
  smb2_set_operation_credit: requested 31, granted 1, current
possible/max 512/512, total granted/max/low/range 1/8192/2/1
  smbd_smb2_request_reply: sending...
      req->in.vector[0].iov_len = 4
      req->in.vector[1].iov_len = 64
      req->in.vector[2].iov_len = 24
      req->in.vector[3].iov_len = 74
      req->out.vector[0].iov_len = 4
      req->out.vector[1].iov_len = 64
      req->out.vector[2].iov_len = 8
      req->out.vector[3].iov_len = 175
[2012/08/19 22:37:02.558136, 10]
smbd/smb2_server.c:2686(smbd_smb2_request_incoming)
  smbd_smb2_request_incoming: idx[1] of 4 vectors
[2012/08/19 22:37:02.558308, 10]
smbd/smb2_server.c:363(smb2_validate_sequence_number)
  smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap
[2012/08/19 22:37:02.558429, 10]
smbd/smb2_server.c:1330(smbd_smb2_request_dispatch)
  smbd_smb2_request_dispatch: opcode[SMB2_SESSSETUP] mid = 2
[2012/08/19 22:37:02.558537,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.558643,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.558745,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.558898,  5] smbd/uid.c:400(change_to_root_user)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2012/08/19 22:37:02.559107,  1] ../librpc/ndr/ndr.c:247(ndr_print_debug)
       authenticate: struct AUTHENTICATE_MESSAGE
          Signature                : 'NTLMSSP'
          MessageType              : NtLmAuthenticate (3)
          LmChallengeResponseLen   : 0x0018 (24)
          LmChallengeResponseMaxLen: 0x0018 (24)
          LmChallengeResponse      : *
              LmChallengeResponse      : union ntlmssp_LM_RESPONSE(case
24)
              v1: struct LM_RESPONSE
                  Response                 :
000000000000000000000000000000000000000000000000
          NtChallengeResponseLen   : 0x00e8 (232)
          NtChallengeResponseMaxLen: 0x00e8 (232)
          NtChallengeResponse      : *
              NtChallengeResponse      : union ntlmssp_NTLM_RESPONSE(case
232)
              v2: struct NTLMv2_RESPONSE
                  Response                 :
75eca5cbaac3ef671c18918a541530c6
                  Challenge: struct NTLMv2_CLIENT_CHALLENGE
                      RespType                 : 0x01 (1)
                      HiRespType               : 0x01 (1)
                      Reserved1                : 0x0000 (0)
                      Reserved2                : 0x00000000 (0)
                      TimeStamp                : Wed Nov 21 09:47:38 2012
CET
                      ChallengeFromClient      : 0fc7faa3bbbd42cd
                      Reserved3                : 0x00000000 (0)
                      AvPairs: struct AV_PAIR_LIST
                          count                    : 0x00000008 (8)
                          pair: ARRAY(8)
                              pair: struct AV_PAIR
                                  AvId                     :
MsvAvNbDomainName (0x2)
                                  AvLen                    : 0x0012 (18)
                                  Value                    : union
ntlmssp_AvValue(case 0x2)
                                  AvNbDomainName           : 'WORKGROUP'
                              pair: struct AV_PAIR
                                  AvId                     :
MsvAvNbComputerName (0x1)
                                  AvLen                    : 0x0010 (16)
                                  Value                    : union
ntlmssp_AvValue(case 0x1)
                                  AvNbComputerName         : 'DSS24815'
                              pair: struct AV_PAIR
                                  AvId                     :
MsvAvDnsDomainName (0x4)
                                  AvLen                    : 0x0000 (0)
                                  Value                    : union
ntlmssp_AvValue(case 0x4)
                                  AvDnsDomainName          : ''
                              pair: struct AV_PAIR
                                  AvId                     :
MsvAvDnsComputerName (0x3)
                                  AvLen                    : 0x0010 (16)
                                  Value                    : union
ntlmssp_AvValue(case 0x3)
                                  AvDnsComputerName        : 'dss24815'
                              pair: struct AV_PAIR
                                  AvId                     :
MsAvRestrictions (0x8)
                                  AvLen                    : 0x0030 (48)
                                  Value                    : union
ntlmssp_AvValue(case 0x8)
                                  AvRestrictions: struct
Restriction_Encoding
                                      Size                     :
0x00000030 (48)
                                      Z4                       :
0x00000000 (0)
                                      IntegrityLevel           :
0x00000000 (0)
                                      SubjectIntegrityLevel    :
0x00003000 (12288)
                                      MachineId                :
45efec59c8adfada6640745fccc9f2b38edf7d00e617f66af517ef51d2516ccd
                              pair: struct AV_PAIR
                                  AvId                     :
MsvChannelBindings (0xA)
                                  AvLen                    : 0x0010 (16)
                                  Value                    : union
ntlmssp_AvValue(case 0xA)
                                  ChannelBindings          :
00000000000000000000000000000000
                              pair: struct AV_PAIR
                                  AvId                     :
MsvAvTargetName (0x9)
                                  AvLen                    : 0x0026 (38)
                                  Value                    : union
ntlmssp_AvValue(case 0x9)
                                  AvTargetName             :
'cifs/192.168.248.15'
                              pair: struct AV_PAIR
                                  AvId                     : MsvAvEOL
(0x0)
                                  AvLen                    : 0x0000 (0)
                                  Value                    : union
ntlmssp_AvValue(case 0x0)
          DomainNameLen            : 0x001e (30)
          DomainNameMaxLen         : 0x001e (30)
          DomainName               : *
              DomainName               : 'WIN-3P810POPDOE'
          UserNameLen              : 0x000a (10)
          UserNameMaxLen           : 0x000a (10)
          UserName                 : *
              UserName                 : 'test1'
          WorkstationLen           : 0x001e (30)
          WorkstationMaxLen        : 0x001e (30)
          Workstation              : *
              Workstation              : 'WIN-3P810POPDOE'
          EncryptedRandomSessionKeyLen: 0x0010 (16)
          EncryptedRandomSessionKeyMaxLen: 0x0010 (16)
          EncryptedRandomSessionKey: *
              EncryptedRandomSessionKey: DATA_BLOB length=16
  [0000] D3 F4 6B 24 08 FE BB 45   85 EA 21 5C 9C 0B 89 F6   ..k$...E
..!\....
          NegotiateFlags           : 0xe2888215 (3800597013)
                 1: NTLMSSP_NEGOTIATE_UNICODE
                 0: NTLMSSP_NEGOTIATE_OEM   
                 1: NTLMSSP_REQUEST_TARGET  
                 1: NTLMSSP_NEGOTIATE_SIGN  
                 0: NTLMSSP_NEGOTIATE_SEAL  
                 0: NTLMSSP_NEGOTIATE_DATAGRAM
                 0: NTLMSSP_NEGOTIATE_LM_KEY
                 0: NTLMSSP_NEGOTIATE_NETWARE
                 1: NTLMSSP_NEGOTIATE_NTLM  
                 0: NTLMSSP_NEGOTIATE_NT_ONLY
                 0: NTLMSSP_ANONYMOUS       
                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
                 0: NTLMSSP_TARGET_TYPE_DOMAIN
                 0: NTLMSSP_TARGET_TYPE_SERVER
                 0: NTLMSSP_TARGET_TYPE_SHARE
                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
                 0: NTLMSSP_NEGOTIATE_IDENTIFY
                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
                 1: NTLMSSP_NEGOTIATE_TARGET_INFO
                 1: NTLMSSP_NEGOTIATE_VERSION
                 1: NTLMSSP_NEGOTIATE_128   
                 1: NTLMSSP_NEGOTIATE_KEY_EXCH
                 1: NTLMSSP_NEGOTIATE_56    
          Version: struct ntlmssp_VERSION
              ProductMajorVersion      : NTLMSSP_WINDOWS_MAJOR_VERSION_6
(6)
              ProductMinorVersion      : NTLMSSP_WINDOWS_MINOR_VERSION_1
(1)
              ProductBuild             : 0x1db0 (7600)
              Reserved: ARRAY(3)
                  [0]                      : 0x00 (0)
                  [1]                      : 0x00 (0)
                  [2]                      : 0x00 (0)
              NTLMRevisionCurrent      : NTLMSSP_REVISION_W2K3 (15)
[2012/08/19 22:37:02.564770,  3]
../libcli/auth/ntlmssp_server.c:348(ntlmssp_server_preauth)
  Got user=[test1] domain=[WIN-3P810POPDOE] workstation=[WIN-3P810POPDOE]
len1=24 len2=232
[2012/08/19 22:37:02.565013,  6]
param/loadparm.c:7490(lp_file_list_changed)
  lp_file_list_changed()
  file /var/nasconf/samba/samba_extras.conf ->
/var/nasconf/samba/samba_extras.conf  last mod_time: Thu Jan  1 01:00:00
1970
 
  file /var/nasconf/included/usr/guest.conf ->
/var/nasconf/included/usr/guest.conf  last mod_time: Thu Jan  1 01:00:00
1970
 
  file /var/nasconf/included/res/share1 ->
/var/nasconf/included/res/share1  last mod_time: Sun Aug 19 22:27:55 2012
 
  file /var/nasconf/included/smb.conf.all_resources ->
/var/nasconf/included/smb.conf.all_resources  last mod_time: Sun Aug 19
22:27:55 2012
 
  file /tmp/etc/smb.ldap.conf -> /tmp/etc/smb.ldap.conf  last mod_time:
Sun Aug 19 01:18:04 2012
 
  file /tmp/etc/smb_protocol.conf -> /tmp/etc/smb_protocol.conf  last
mod_time: Sun Aug 19 22:36:45 2012
 
  file /tmp/etc/smb_domainlogons.conf -> /tmp/etc/smb_domainlogons.conf 
last mod_time: Sun Aug 19 22:36:45 2012
 
  file /tmp/etc/smb.nis.conf -> /tmp/etc/smb.nis.conf  last mod_time: Sun
Aug 19 01:18:33 2012
 
  file /tmp/etc/smb_use_antyvirus.conf ->
/tmp/etc/smb_use_antyvirus.conf  last mod_time: Sun Aug 19 01:18:04 2012
 
  file /tmp/etc/smb_hide_apple_files.conf ->
/tmp/etc/smb_hide_apple_files.conf  last mod_time: Sun Aug 19 22:36:45
2012
 
  file /tmp/etc/smb_use_spnego.conf -> /tmp/etc/smb_use_spnego.conf  last
mod_time: Sun Aug 19 22:36:45 2012
 
  file /tmp/etc/smb.security.conf -> /tmp/etc/smb.security.conf  last
mod_time: Sun Aug 19 01:18:33 2012
 
  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Aug
19 22:36:45 2012
 
[2012/08/19 22:37:02.566496,  5] auth/auth_util.c:110(make_user_info_map)
  Mapping user [WIN-3P810POPDOE]\[test1] from workstation
[WIN-3P810POPDOE]
[2012/08/19 22:37:02.566607,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.566720,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.566828,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.566932,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.567034,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.567215,  5] auth/auth_util.c:1431(is_trusted_domain)
  is_trusted_domain: Checking for domain trust with [WIN-3P810POPDOE]
[2012/08/19 22:37:02.567331, 10]
passdb/pdb_ldap.c:6173(ldapsam_get_trusteddom_pw)
  ldapsam_get_trusteddom_pw called for domain WIN-3P810POPDOE
[2012/08/19 22:37:02.567470,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base =>
[sambaDomainName=WIN-3P810POPDOE,sambaDomainName=WORKGROUP,dc=server,dc=nas],
filter =>
[(&(objectClass=sambaTrustedDomainPassword)(sambaDomainName=WIN-3P810POPDOE))],
scope => [2]
[2012/08/19 22:37:02.568280,  5] lib/smbldap.c:1341(smbldap_close)
  The connection to the LDAP server was closed
[2012/08/19 22:37:02.568490, 10] lib/smbldap.c:819(smb_ldap_setup_conn)
  smb_ldap_setup_connection: ldap://127.0.0.1:389
[2012/08/19 22:37:02.568652,  2]
lib/smbldap.c:1018(smbldap_open_connection)
  smbldap_open_connection: connection opened
[2012/08/19 22:37:02.568758, 10]
lib/smbldap.c:1194(smbldap_connect_system)
  ldap_connect_system: Binding to ldap server ldap://127.0.0.1:389 as
"cn=admin,dc=server,dc=nas"
[2012/08/19 22:37:02.570188,  3]
lib/smbldap.c:1240(smbldap_connect_system)
  ldap_connect_system: successful connection to the LDAP server
  ldap_connect_system: LDAP server does support paged results
[2012/08/19 22:37:02.570439,  4] lib/smbldap.c:1319(smbldap_open)
  The LDAP server is successfully connected
[2012/08/19 22:37:02.571040, 10] lib/smbldap.c:1504(smbldap_search_ext)
  Failed search for base:
sambaDomainName=WIN-3P810POPDOE,sambaDomainName=WORKGROUP,dc=server,dc=nas,
error: 32 (No such object) ()
[2012/08/19 22:37:02.571288,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.571465,  5]
libsmb/trustdom_cache.c:160(trustdom_cache_fetch)
  no entry for trusted domain WIN-3P810POPDOE found.
[2012/08/19 22:37:02.571581,  5] auth/auth_util.c:131(make_user_info_map)
  Mapped domain from [WIN-3P810POPDOE] to [WORKGROUP] for user [test1]
from workstation [WIN-3P810POPDOE]
[2012/08/19 22:37:02.571689,  5] auth/user_info.c:59(make_user_info)
  attempting to make a user_info for test1 (test1)
[2012/08/19 22:37:02.571793,  5] auth/user_info.c:70(make_user_info)
  making strings for test1's user_info struct
[2012/08/19 22:37:02.571899,  5] auth/user_info.c:87(make_user_info)
  making blobs for test1's user_info struct
[2012/08/19 22:37:02.572002, 10] auth/user_info.c:123(make_user_info)
  made a user_info for test1 (test1)
[2012/08/19 22:37:02.572105,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user
[WIN-3P810POPDOE]\[test1]@[WIN-3P810POPDOE] with the new password
interface
[2012/08/19 22:37:02.572208,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  mapped user is:
[WORKGROUP]\[test1]@[WIN-3P810POPDOE]
[2012/08/19 22:37:02.572309, 10] auth/auth.c:231(check_ntlm_password)
  check_ntlm_password: auth_context challenge created by random
[2012/08/19 22:37:02.572409, 10] auth/auth.c:233(check_ntlm_password)
  challenge is:
[2012/08/19 22:37:02.572508,  5] ../lib/util/util.c:415(dump_data)
  [0000] 79 4A EC D0 6D 67 BE 61                            yJ..mg.a
[2012/08/19 22:37:02.572654, 10]
auth/auth_builtin.c:44(check_guest_security)
  Check auth for: [test1]
[2012/08/19 22:37:02.572755, 10] auth/auth.c:259(check_ntlm_password)
  check_ntlm_password: guest had nothing to say
[2012/08/19 22:37:02.572865, 10] auth/auth_sam.c:75(auth_samstrict_auth)
  Check auth for: [test1]
[2012/08/19 22:37:02.572966,  8] lib/util.c:1547(is_myname)
  is_myname("WORKGROUP") returns 0
[2012/08/19 22:37:02.573077,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.573181,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.573284,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.573388,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.573493,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.573719,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(uid=test1)(objectclass=sambaSamAccount))], scope => [2]
[2012/08/19 22:37:02.574801,  2]
passdb/pdb_ldap.c:553(init_sam_from_ldap)
  init_sam_from_ldap: Entry found for user: test1
[2012/08/19 22:37:02.575021, 10]
passdb/pdb_get_set.c:575(pdb_set_username)
  pdb_set_username: setting username test1, was
[2012/08/19 22:37:02.575147, 10] passdb/pdb_get_set.c:598(pdb_set_domain)
  pdb_set_domain: setting domain WORKGROUP, was
[2012/08/19 22:37:02.575252, 10]
passdb/pdb_get_set.c:621(pdb_set_nt_username)
  pdb_set_nt_username: setting nt username test1, was
[2012/08/19 22:37:02.575379, 10]
passdb/pdb_get_set.c:513(pdb_set_user_sid_from_string)
  pdb_set_user_sid_from_string: setting user sid
S-1-5-21-1709156513-4229506078-2817319653-1202
[2012/08/19 22:37:02.575503, 10]
passdb/pdb_get_set.c:500(pdb_set_user_sid)
  pdb_set_user_sid: setting user sid
S-1-5-21-1709156513-4229506078-2817319653-1202
[2012/08/19 22:37:02.575667, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaLogonTime does not exist
[2012/08/19 22:37:02.575797, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaLogoffTime does not exist
[2012/08/19 22:37:02.575921, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaKickoffTime does not exist
[2012/08/19 22:37:02.576086, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute displayName does not exist
[2012/08/19 22:37:02.576212, 10]
passdb/pdb_get_set.c:644(pdb_set_fullname)
  pdb_set_full_name: setting full name test1, was
[2012/08/19 22:37:02.576340, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaHomeDrive does not exist
[2012/08/19 22:37:02.576446, 10]
passdb/pdb_get_set.c:713(pdb_set_dir_drive)
  pdb_set_dir_drive: setting dir drive , was NULL
[2012/08/19 22:37:02.576570, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaHomePath does not exist
[2012/08/19 22:37:02.576679,  4] lib/substitute.c:527(automount_server)
  Home server: dss24815
[2012/08/19 22:37:02.576803, 10]
passdb/pdb_get_set.c:737(pdb_set_homedir)
  pdb_set_homedir: setting home dir \\dss24815\test1, was
[2012/08/19 22:37:02.576932, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaLogonScript does not exist
[2012/08/19 22:37:02.577042, 10]
passdb/pdb_get_set.c:667(pdb_set_logon_script)
  pdb_set_logon_script: setting logon script , was
[2012/08/19 22:37:02.577211, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaProfilePath does not exist
[2012/08/19 22:37:02.577322,  4] lib/substitute.c:527(automount_server)
  Home server: dss24815
[2012/08/19 22:37:02.577436, 10]
passdb/pdb_get_set.c:690(pdb_set_profile_path)
  pdb_set_profile_path: setting profile path \\dss24815\test1\profile,
was
[2012/08/19 22:37:02.577562, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute description does not exist
[2012/08/19 22:37:02.577687, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaUserWorkstations does not exist
[2012/08/19 22:37:02.577812, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaMungedDial does not exist
[2012/08/19 22:37:02.577977,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.578090,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.578196,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.578302,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.578418,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.578617, 10]
passdb/pdb_ldap.c:3966(ldapsam_get_account_policy_from_ldap)
  ldapsam_get_account_policy_from_ldap
[2012/08/19 22:37:02.578735,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base =>
[sambaDomainName=WORKGROUP,dc=server,dc=nas], filter =>
[(objectClass=sambaDomain)], scope => [0]
[2012/08/19 22:37:02.579373, 10]
passdb/account_pol.c:402(cache_account_policy_set)
  cache_account_policy_set: updating account pol cache
[2012/08/19 22:37:02.579598, 10]
lib/gencache.c:183(gencache_set_data_blob)
  Adding cache entry with key = ACCT_POL/password history and timeout =
Sun Aug 19 22:38:02 2012
   (60 seconds ahead)
[2012/08/19 22:37:02.758295,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.758660, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaBadPasswordCount does not exist
[2012/08/19 22:37:02.758885, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaBadPasswordTime does not exist
[2012/08/19 22:37:02.759085, 10]
lib/smbldap.c:308(smbldap_talloc_single_attribute)
  attribute sambaLogonHours does not exist
[2012/08/19 22:37:02.759522,  5]
passdb/login_cache.c:47(login_cache_init)
  Opening cache file at /usr/local/samba/var/locks/login_cache.tdb
[2012/08/19 22:37:02.759935,  7]
passdb/login_cache.c:91(login_cache_read)
  Looking up login cache for user test1
[2012/08/19 22:37:02.760127,  7]
passdb/login_cache.c:102(login_cache_read)
  No cache entry found
[2012/08/19 22:37:02.760278,  9]
passdb/pdb_ldap.c:1107(init_sam_from_ldap)
  No cache entry, bad count = 0, bad time = 0
[2012/08/19 22:37:02.760458,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user test1
[2012/08/19 22:37:02.760632,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is test1
[2012/08/19 22:37:02.763677,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [test1]!
[2012/08/19 22:37:02.764026,  5] passdb/lookup_sid.c:1384(gid_to_sid)
  gid_to_sid: winbind failed to find a sid for gid 101
[2012/08/19 22:37:02.764212,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.764357,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.764505,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.764648,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.764800,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.765067,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(gidNumber=101))], scope => [2]
[2012/08/19 22:37:02.766258,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 101
[2012/08/19 22:37:02.766586,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.766766, 10]
passdb/lookup_sid.c:1181(legacy_gid_to_sid)
  LEGACY: gid 101 -> sid S-1-5-21-1709156513-4229506078-2817319653-1203
[2012/08/19 22:37:02.766961, 10]
passdb/lookup_sid.c:1733(get_primary_group_sid)
  do lookup_sid(S-1-5-21-1709156513-4229506078-2817319653-1203) for group
of user test1
[2012/08/19 22:37:02.767138, 10] passdb/lookup_sid.c:964(lookup_sid)
  lookup_sid called for SID
'S-1-5-21-1709156513-4229506078-2817319653-1203'
[2012/08/19 22:37:02.767318, 10]
passdb/lookup_sid.c:721(check_dom_sid_to_level)
  Accepting SID S-1-5-21-1709156513-4229506078-2817319653 in level 1
[2012/08/19 22:37:02.767494, 10] passdb/lookup_sid.c:482(lookup_rids)
  lookup_rids called for domain sid
'S-1-5-21-1709156513-4229506078-2817319653'
[2012/08/19 22:37:02.767655,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.767801,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.767965,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.768112,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.768256,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.768487,  5]
passdb/pdb_interface.c:1606(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 1203.
[2012/08/19 22:37:02.768859,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.769030,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
[2012/08/19 22:37:02.769181,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.769327,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.769480,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.769815,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-1203)(objectclass=sambaSamAccount))],
scope => [2]
[2012/08/19 22:37:02.770746,  4]
passdb/pdb_ldap.c:1675(ldapsam_getsampwsid)
  ldapsam_getsampwsid: Unable to locate SID
[S-1-5-21-1709156513-4229506078-2817319653-1203] count=0
[2012/08/19 22:37:02.771013,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-1709156513-4229506078-2817319653-1203))],
scope => [2]
[2012/08/19 22:37:02.772132,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 101
[2012/08/19 22:37:02.772439,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.772610,  5]
passdb/pdb_interface.c:1727(pdb_default_lookup_rids)
  lookup_rids: users:2
[2012/08/19 22:37:02.772773,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.772927, 10] passdb/lookup_sid.c:999(lookup_sid)
  Sid S-1-5-21-1709156513-4229506078-2817319653-1203 ->
WORKGROUP\users(2)
[2012/08/19 22:37:02.773093,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.773235,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.773370,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.773506,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.773644,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.773934,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.774152, 10]
passdb/pdb_get_set.c:575(pdb_set_username)
  pdb_set_username: setting username test1, was
[2012/08/19 22:37:02.774293, 10] passdb/pdb_get_set.c:598(pdb_set_domain)
  pdb_set_domain: setting domain WORKGROUP, was
[2012/08/19 22:37:02.774428, 10]
passdb/pdb_get_set.c:621(pdb_set_nt_username)
  pdb_set_nt_username: setting nt username test1, was
[2012/08/19 22:37:02.774558, 10]
passdb/pdb_get_set.c:644(pdb_set_fullname)
  pdb_set_full_name: setting full name test1, was
[2012/08/19 22:37:02.774693,  4] lib/substitute.c:527(automount_server)
  Home server: dss24815
[2012/08/19 22:37:02.774842, 10]
passdb/pdb_get_set.c:737(pdb_set_homedir)
  pdb_set_homedir: setting home dir \\dss24815\test1, was
[2012/08/19 22:37:02.774976, 10]
passdb/pdb_get_set.c:713(pdb_set_dir_drive)
  pdb_set_dir_drive: setting dir drive , was NULL
[2012/08/19 22:37:02.775112, 10]
passdb/pdb_get_set.c:667(pdb_set_logon_script)
  pdb_set_logon_script: setting logon script , was
[2012/08/19 22:37:02.775248,  4] lib/substitute.c:527(automount_server)
  Home server: dss24815
[2012/08/19 22:37:02.775394, 10]
passdb/pdb_get_set.c:690(pdb_set_profile_path)
  pdb_set_profile_path: setting profile path \\dss24815\test1\profile,
was
[2012/08/19 22:37:02.775526, 10]
passdb/pdb_get_set.c:780(pdb_set_workstations)
  pdb_set_workstations: setting workstations , was
[2012/08/19 22:37:02.775662,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.775840,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.775976,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.776110,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.776240,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.776492,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.776631, 10]
passdb/pdb_get_set.c:500(pdb_set_user_sid)
  pdb_set_user_sid: setting user sid
S-1-5-21-1709156513-4229506078-2817319653-1202
[2012/08/19 22:37:02.776770, 10]
passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
  pdb_set_user_sid_from_rid:
      setting user sid S-1-5-21-1709156513-4229506078-2817319653-1202
from rid 1202
[2012/08/19 22:37:02.776973, 10]
passdb/pdb_get_set.c:562(pdb_set_group_sid)
  pdb_set_group_sid: setting group sid
S-1-5-21-1709156513-4229506078-2817319653-1203
[2012/08/19 22:37:02.777162,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.777338,  4]
../libcli/auth/ntlm_check.c:351(ntlm_password_check)
  ntlm_password_check: Checking NTLMv2 password with domain
[WIN-3P810POPDOE]
[2012/08/19 22:37:02.777562,  4] auth/check_samsec.c:183(sam_account_ok)
  sam_account_ok: Checking SMB password for user test1
[2012/08/19 22:37:02.777754,  5] auth/check_samsec.c:165(logon_hours_ok)
  logon_hours_ok: user test1 allowed to logon at this time (Sun Aug 19
20:37:02 2012
  )
[2012/08/19 22:37:02.777980,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.778132,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.778275,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.778443,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.778578,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.778780,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user test1
[2012/08/19 22:37:02.778923,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is test1
[2012/08/19 22:37:02.779079,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [test1]!
[2012/08/19 22:37:02.779243,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.779390,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.779532,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.779677,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.779845,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.780113, 10]
passdb/pdb_ldap.c:3966(ldapsam_get_account_policy_from_ldap)
  ldapsam_get_account_policy_from_ldap
[2012/08/19 22:37:02.780286,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base =>
[sambaDomainName=WORKGROUP,dc=server,dc=nas], filter =>
[(objectClass=sambaDomain)], scope => [0]
[2012/08/19 22:37:02.781203, 10]
passdb/account_pol.c:402(cache_account_policy_set)
  cache_account_policy_set: updating account pol cache
[2012/08/19 22:37:02.781457, 10]
lib/gencache.c:183(gencache_set_data_blob)
  Adding cache entry with key = ACCT_POL/minimum password age and timeout
= Sun Aug 19 22:38:02 2012
   (60 seconds ahead)
[2012/08/19 22:37:02.781776,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.782016,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user test1
[2012/08/19 22:37:02.782184,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is test1
[2012/08/19 22:37:02.782341,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [test1]!
[2012/08/19 22:37:02.782579, 10] lib/system_smbd.c:175(sys_getgrouplist)
  sys_getgrouplist: user [test1]
[2012/08/19 22:37:02.784766,  5]
auth/server_info_sam.c:120(make_server_info_sam)
  make_server_info_sam: made server info for user test1 -> test1
[2012/08/19 22:37:02.785019,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.785205,  3] auth/auth.c:268(check_ntlm_password)
  check_ntlm_password: sam authentication for user [test1] succeeded
[2012/08/19 22:37:02.785363,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.785515,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.785657,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.785802,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.785945,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.786182,  4] auth/pampass.c:483(smb_pam_start)
  smb_pam_start: PAM: Init user: test1
[2012/08/19 22:37:02.798227,  4] auth/pampass.c:492(smb_pam_start)
  smb_pam_start: PAM: setting rhost to: 192.168.250.25
[2012/08/19 22:37:02.798422,  4] auth/pampass.c:501(smb_pam_start)
  smb_pam_start: PAM: setting tty
[2012/08/19 22:37:02.798588,  4] auth/pampass.c:509(smb_pam_start)
  smb_pam_start: PAM: Init passed for user: test1
[2012/08/19 22:37:02.798748,  4] auth/pampass.c:567(smb_pam_account)
  smb_pam_account: PAM: Account Management for User: test1
[2012/08/19 22:37:02.804139,  4] auth/pampass.c:586(smb_pam_account)
  smb_pam_account: PAM: Account OK for User: test1
[2012/08/19 22:37:02.804791,  4] auth/pampass.c:465(smb_pam_end)
  smb_pam_end: PAM: PAM_END OK.
[2012/08/19 22:37:02.805058,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.805232,  5] auth/auth.c:296(check_ntlm_password)
  check_ntlm_password:  PAM Account for user [test1] succeeded
[2012/08/19 22:37:02.805391,  2] auth/auth.c:309(check_ntlm_password)
  check_ntlm_password:  authentication for user [test1] -> [test1] ->
[test1] succeeded
[2012/08/19 22:37:02.805563, 10]
auth/token_util.c:223(create_local_nt_token_from_info3)
  Create local NT token for test1
[2012/08/19 22:37:02.805867, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-544
[2012/08/19 22:37:02.806054,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.806205,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.806366,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.806511,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.806668,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.806926,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
[2012/08/19 22:37:02.808419,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
[2012/08/19 22:37:02.808700,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.808916, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-544
[2012/08/19 22:37:02.809168,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.809383,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.809575,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.809763,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.809934,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.810339, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-544
[2012/08/19 22:37:02.810570,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.810777,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.810966,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.811144,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.811318,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.811586,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2]
[2012/08/19 22:37:02.814226,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))
[2012/08/19 22:37:02.814518,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.814736, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-544
[2012/08/19 22:37:02.814984,  5]
passdb/pdb_util.c:128(create_builtin_administrators)
  create_builtin_administrators: Failed to create Administrators
[2012/08/19 22:37:02.815203,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.815527, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-545
[2012/08/19 22:37:02.815753,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.815955,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.816139,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.816321,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.816497,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.816782,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
[2012/08/19 22:37:02.817817,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
[2012/08/19 22:37:02.818110,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.818293, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-545
[2012/08/19 22:37:02.818462,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.818606,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.818749,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.818999,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.819146,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.819621, 10] passdb/lookup_sid.c:1628(sid_to_gid)
  winbind failed to find a gid for sid S-1-5-32-545
[2012/08/19 22:37:02.819838,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.820003,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.820143,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.820287,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.820426,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.820673,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2]
[2012/08/19 22:37:02.821704,  4] passdb/pdb_ldap.c:2543(ldapsam_getgroup)
  ldapsam_getgroup: Did not find group, filter was
(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))
[2012/08/19 22:37:02.822007,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.822219, 10]
passdb/lookup_sid.c:1253(legacy_sid_to_gid)
  LEGACY: mapping failed for sid S-1-5-32-545
[2012/08/19 22:37:02.822466,  5]
passdb/pdb_util.c:99(create_builtin_users)
  create_builtin_users: Failed to create Users
[2012/08/19 22:37:02.822664,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.822813,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.822945,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.823073,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.823204,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.823330,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.823660,  5] lib/smbldap.c:1439(smbldap_search_ext)
  smbldap_search_ext: base => [dc=server,dc=nas], filter =>
[(&(objectclass=sambaGroupMapping)(sambaGroupType=4)(|(sambaSIDList=S-1-5-21-1709156513-4229506078-2817319653-1202)(sambaSIDList=S-1-5-21-1709156513-4229506078-2817319653-1203)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)))],
scope => [2]
[2012/08/19 22:37:02.824760,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.825024,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID
[S-1-5-21-1709156513-4229506078-2817319653-1202]
[2012/08/19 22:37:02.825206,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID
[S-1-5-21-1709156513-4229506078-2817319653-1203]
[2012/08/19 22:37:02.825375,  5]
lib/privileges.c:175(get_privileges_for_sids)
  get_privileges_for_sids: sid = S-1-1-0
  Privilege set: 0x0
[2012/08/19 22:37:02.825572,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-2]
[2012/08/19 22:37:02.825724,  4] lib/privileges.c:97(get_privileges)
  get_privileges: No privileges assigned to SID [S-1-5-11]
[2012/08/19 22:37:02.826202, 10]
passdb/lookup_sid.c:1468(sids_to_unix_ids)
  wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE
[2012/08/19 22:37:02.826384,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.826558,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.826746,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.826926,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.827205,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.827481,  5]
passdb/pdb_interface.c:1606(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 1202.
[2012/08/19 22:37:02.827696,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.827886,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.828068,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.828250,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.828429,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.828689,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.828906,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
[2012/08/19 22:37:02.829095,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.829277,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.829454,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.829731,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.829902, 10]
passdb/pdb_get_set.c:575(pdb_set_username)
  pdb_set_username: setting username test1, was
[2012/08/19 22:37:02.830039, 10] passdb/pdb_get_set.c:598(pdb_set_domain)
  pdb_set_domain: setting domain WORKGROUP, was
[2012/08/19 22:37:02.830168, 10]
passdb/pdb_get_set.c:621(pdb_set_nt_username)
  pdb_set_nt_username: setting nt username test1, was
[2012/08/19 22:37:02.830297, 10]
passdb/pdb_get_set.c:644(pdb_set_fullname)
  pdb_set_full_name: setting full name test1, was
[2012/08/19 22:37:02.830432,  4] lib/substitute.c:527(automount_server)
  Home server: dss24815
[2012/08/19 22:37:02.830583, 10]
passdb/pdb_get_set.c:737(pdb_set_homedir)
  pdb_set_homedir: setting home dir \\dss24815\test1, was
[2012/08/19 22:37:02.830714, 10]
passdb/pdb_get_set.c:713(pdb_set_dir_drive)
  pdb_set_dir_drive: setting dir drive , was NULL
[2012/08/19 22:37:02.830849, 10]
passdb/pdb_get_set.c:667(pdb_set_logon_script)
  pdb_set_logon_script: setting logon script , was
[2012/08/19 22:37:02.830984,  4] lib/substitute.c:527(automount_server)
  Home server: dss24815
[2012/08/19 22:37:02.831134, 10]
passdb/pdb_get_set.c:690(pdb_set_profile_path)
  pdb_set_profile_path: setting profile path \\dss24815\test1\profile,
was
[2012/08/19 22:37:02.831276, 10]
passdb/pdb_get_set.c:780(pdb_set_workstations)
  pdb_set_workstations: setting workstations , was
[2012/08/19 22:37:02.831420,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.831558,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
[2012/08/19 22:37:02.831691,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.831823,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.831963,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.832278,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.832518, 10]
passdb/pdb_get_set.c:500(pdb_set_user_sid)
  pdb_set_user_sid: setting user sid
S-1-5-21-1709156513-4229506078-2817319653-1202
[2012/08/19 22:37:02.832734, 10]
passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
  pdb_set_user_sid_from_rid:
      setting user sid S-1-5-21-1709156513-4229506078-2817319653-1202
from rid 1202
[2012/08/19 22:37:02.833056, 10]
passdb/pdb_get_set.c:562(pdb_set_group_sid)
  pdb_set_group_sid: setting group sid
S-1-5-21-1709156513-4229506078-2817319653-1203
[2012/08/19 22:37:02.833318,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.833545,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user test1
[2012/08/19 22:37:02.833746,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is test1
[2012/08/19 22:37:02.833943,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [test1]!
[2012/08/19 22:37:02.834160,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/08/19 22:37:02.834359,  5]
passdb/lookup_sid.c:1269(legacy_sid_to_gid)
  LEGACY: sid S-1-5-21-1709156513-4229506078-2817319653-1202 is a User,
expected a group
[2012/08/19 22:37:02.834574,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.834768,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/08/19 22:37:02.834954,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/08/19 22:37:02.835102,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.835231,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.835427,  5]
passdb/pdb_interface.c:1606(lookup_global_sam_rid)
  lookup_global_sam_rid: looking up RID 1202.
[2012/08/19 22:37:02.835568,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.835700,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/08/19 22:37:02.835830,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.835963,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.836090,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.836293,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.836435,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
[2012/08/19 22:37:02.836564,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.836692,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.836818,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.837067,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.837335, 10]
passdb/pdb_get_set.c:575(pdb_set_username)
  pdb_set_username: setting username test1, was
[2012/08/19 22:37:02.837476, 10] passdb/pdb_get_set.c:598(pdb_set_domain)
  pdb_set_domain: setting domain WORKGROUP, was
[2012/08/19 22:37:02.837606, 10]
passdb/pdb_get_set.c:621(pdb_set_nt_username)
  pdb_set_nt_username: setting nt username test1, was
[2012/08/19 22:37:02.837736, 10]
passdb/pdb_get_set.c:644(pdb_set_fullname)
  pdb_set_full_name: setting full name test1, was
[2012/08/19 22:37:02.837871,  4] lib/substitute.c:527(automount_server)
  Home server: dss24815
[2012/08/19 22:37:02.838023, 10]
passdb/pdb_get_set.c:737(pdb_set_homedir)
  pdb_set_homedir: setting home dir \\dss24815\test1, was
[2012/08/19 22:37:02.838189, 10]
passdb/pdb_get_set.c:713(pdb_set_dir_drive)
  pdb_set_dir_drive: setting dir drive , was NULL
[2012/08/19 22:37:02.838391, 10]
passdb/pdb_get_set.c:667(pdb_set_logon_script)
  pdb_set_logon_script: setting logon script , was
[2012/08/19 22:37:02.838583,  4] lib/substitute.c:527(automount_server)
  Home server: dss24815
[2012/08/19 22:37:02.838795, 10]
passdb/pdb_get_set.c:690(pdb_set_profile_path)
  pdb_set_profile_path: setting profile path \\dss24815\test1\profile,
was
[2012/08/19 22:37:02.839056, 10]
passdb/pdb_get_set.c:780(pdb_set_workstations)
  pdb_set_workstations: setting workstations , was
[2012/08/19 22:37:02.839267,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.839467,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
[2012/08/19 22:37:02.839658,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
[2012/08/19 22:37:02.839845,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2012/08/19 22:37:02.840022,  5]
auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2012/08/19 22:37:02.840329,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/08/19 22:37:02.840564, 10]
passdb/pdb_get_set.c:500(pdb_set_user_sid)
  pdb_set_user_sid: setting user sid
S