How to test samba LDAP parameters with openldap tools, eg ldapsearch?
Jan Andersen
jan at comind.io
Wed Apr 12 12:37:57 UTC 2023
Hi Rowland,
I noticed something odd about the logs: it seems smbd generates one both
for the workstation's name and one for its IP address - I didn't attach
the latter, so here it is. It seems to have more detail.
Jan
On 12/04/2023 12:06, Rowland Penny via samba-technical wrote:
>
>
> On 12/04/2023 11:39, Jan Andersen wrote:
>> Hi Rowland,
>>
>> Thank you for replying. I wiped the existing logs, changed the smbd
>> service to include '-d 10' and restarted, so I would have logs without
>> too much noise - please find them attached along with smb.conf
>>
>>
>
> You appear to be running Samba as a standalone server with an ldap
> backend, are you aware that such a setup is two parameters away from
> being a PDC ? If you comment out 'server role = standalone server' and
> add 'domain logons = yes', it becomes a PDC and a PDC (from 4.8.0)
> requires winbind to be running.
>
> Rowland
>
>
-------------- next part --------------
[2023/04/05 09:29:52.569516, 2] ../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/05 09:29:52.569611, 2] ../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [COMIND]\[testuser] at [Wed, 05 Apr 2023 09:29:52.569595 UTC] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JAN] remote host [ipv4:192.168.50.106:50540] mapped to [COMIND]\[testuser]. local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-05T09:29:52.569681+0000", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:50540", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "COMIND", "clientAccount": "testuser", "workstation": "JAN", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "testuser", "mappedDomain": "COMIND", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 2469}}
[2023/04/05 09:29:52.569983, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[homes]"
[2023/04/05 09:29:52.570027, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[public]"
[2023/04/05 09:29:52.570072, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[engineering]"
[2023/04/05 09:29:52.570117, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[qara]"
[2023/04/05 09:30:26.018098, 2] ../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/05 09:30:26.018184, 2] ../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [COMIND]\[testuser] at [Wed, 05 Apr 2023 09:30:26.018168 UTC] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JAN] remote host [ipv4:192.168.50.106:50544] mapped to [COMIND]\[testuser]. local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-05T09:30:26.018261+0000", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:50544", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "COMIND", "clientAccount": "testuser", "workstation": "JAN", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "testuser", "mappedDomain": "COMIND", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1856}}
[2023/04/05 09:30:26.018575, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[homes]"
[2023/04/05 09:30:26.018622, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[public]"
[2023/04/05 09:30:26.018666, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[engineering]"
[2023/04/05 09:30:26.018711, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[qara]"
[2023/04/05 10:11:11.217949, 2] ../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/05 10:11:11.218016, 2] ../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [COMIND]\[testuser] at [Wed, 05 Apr 2023 10:11:11.218001 UTC] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JAN] remote host [ipv4:192.168.50.106:50692] mapped to [COMIND]\[testuser]. local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-05T10:11:11.218086+0000", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:50692", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "COMIND", "clientAccount": "testuser", "workstation": "JAN", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "testuser", "mappedDomain": "COMIND", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1891}}
[2023/04/05 10:11:11.218380, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[homes]"
[2023/04/05 10:11:11.218423, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[public]"
[2023/04/05 10:11:11.218468, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[engineering]"
[2023/04/05 10:11:11.218512, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[qara]"
[2023/04/05 12:29:57.141132, 3] ../../source3/smbd/oplock.c:1427(init_oplocks)
init_oplocks: initializing messages.
[2023/04/05 12:29:57.141465, 3] ../../source3/smbd/process.c:1956(process_smb)
Transaction 0 of length 204 (0 toread)
[2023/04/05 12:29:57.141616, 3] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot)
Selected protocol SMB3_11
[2023/04/05 12:29:57.143035, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2023/04/05 12:29:57.143055, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2023/04/05 12:29:57.143062, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2023/04/05 12:29:57.143070, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'spnego' registered
[2023/04/05 12:29:57.143076, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'schannel' registered
[2023/04/05 12:29:57.143082, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2023/04/05 12:29:57.143088, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2023/04/05 12:29:57.143093, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp' registered
[2023/04/05 12:29:57.143099, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2023/04/05 12:29:57.143105, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_basic' registered
[2023/04/05 12:29:57.143111, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_ntlm' registered
[2023/04/05 12:29:57.143116, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_negotiate' registered
[2023/04/05 12:29:57.143124, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'krb5' registered
[2023/04/05 12:29:57.143129, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2023/04/05 12:30:05.831583, 3] ../../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
[2023/04/05 12:30:05.832491, 3] ../../auth/ntlmssp/ntlmssp_server.c:509(ntlmssp_server_preauth)
Got user=[testuser] domain=[COMIND] workstation=[JAN] len1=24 len2=204
[2023/04/05 12:30:05.832554, 3] ../../source3/auth/auth.c:200(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [COMIND]\[testuser]@[JAN] with the new password interface
[2023/04/05 12:30:05.832563, 3] ../../source3/auth/auth.c:203(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [COMIND]\[testuser]@[JAN]
[2023/04/05 12:30:05.833151, 3] ../../source3/auth/check_samsec.c:398(check_sam_security)
check_sam_security: Couldn't find user 'testuser' in passdb.
[2023/04/05 12:30:05.833163, 2] ../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/05 12:30:05.833204, 2] ../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [COMIND]\[testuser] at [Wed, 05 Apr 2023 12:30:05.833189 UTC] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JAN] remote host [ipv4:192.168.50.106:51264] mapped to [COMIND]\[testuser]. local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-05T12:30:05.833291+0000", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:51264", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "COMIND", "clientAccount": "testuser", "workstation": "JAN", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "testuser", "mappedDomain": "COMIND", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1939}}
[2023/04/05 12:30:05.833328, 3] ../../source3/auth/auth_util.c:2295(do_map_to_guest_server_info)
No such user testuser [COMIND] - using guest account
[2023/04/05 12:30:05.833344, 3] ../../source3/param/loadparm.c:3945(lp_load_ex)
lp_load_ex: refreshing parameters
[2023/04/05 12:30:05.833393, 3] ../../source3/param/loadparm.c:551(init_globals)
Initialising global parameters
[2023/04/05 12:30:05.833472, 3] ../../source3/param/loadparm.c:2847(lp_do_section)
Processing section "[global]"
[2023/04/05 12:30:05.833633, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[homes]"
[2023/04/05 12:30:05.833675, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[public]"
[2023/04/05 12:30:05.833719, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[engineering]"
[2023/04/05 12:30:05.833763, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[qara]"
[2023/04/05 12:30:05.833806, 3] ../../source3/param/loadparm.c:1648(lp_add_ipc)
adding IPC service
[2023/04/05 12:31:58.186822, 3] ../../source3/smbd/oplock.c:1427(init_oplocks)
init_oplocks: initializing messages.
[2023/04/05 12:31:58.186884, 3] ../../source3/smbd/process.c:1956(process_smb)
Transaction 0 of length 204 (0 toread)
[2023/04/05 12:31:58.187045, 3] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot)
Selected protocol SMB3_11
[2023/04/05 12:31:58.188514, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2023/04/05 12:31:58.188535, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2023/04/05 12:31:58.188542, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2023/04/05 12:31:58.188551, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'spnego' registered
[2023/04/05 12:31:58.188557, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'schannel' registered
[2023/04/05 12:31:58.188563, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2023/04/05 12:31:58.188569, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2023/04/05 12:31:58.188574, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp' registered
[2023/04/05 12:31:58.188580, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2023/04/05 12:31:58.188595, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_basic' registered
[2023/04/05 12:31:58.188601, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_ntlm' registered
[2023/04/05 12:31:58.188607, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_negotiate' registered
[2023/04/05 12:31:58.188614, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'krb5' registered
[2023/04/05 12:31:58.188619, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2023/04/05 12:32:02.180238, 3] ../../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
[2023/04/05 12:32:02.180827, 3] ../../auth/ntlmssp/ntlmssp_server.c:509(ntlmssp_server_preauth)
Got user=[testuser] domain=[COMIND] workstation=[JAN] len1=24 len2=204
[2023/04/05 12:32:02.180889, 3] ../../source3/auth/auth.c:200(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [COMIND]\[testuser]@[JAN] with the new password interface
[2023/04/05 12:32:02.180898, 3] ../../source3/auth/auth.c:203(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [COMIND]\[testuser]@[JAN]
[2023/04/05 12:32:02.181561, 3] ../../source3/auth/check_samsec.c:398(check_sam_security)
check_sam_security: Couldn't find user 'testuser' in passdb.
[2023/04/05 12:32:02.181594, 2] ../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/05 12:32:02.181641, 2] ../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [COMIND]\[testuser] at [Wed, 05 Apr 2023 12:32:02.181625 UTC] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JAN] remote host [ipv4:192.168.50.106:51276] mapped to [COMIND]\[testuser]. local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-05T12:32:02.181714+0000", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:51276", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "COMIND", "clientAccount": "testuser", "workstation": "JAN", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "testuser", "mappedDomain": "COMIND", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1715}}
[2023/04/05 12:32:02.181749, 3] ../../source3/auth/auth_util.c:2295(do_map_to_guest_server_info)
No such user testuser [COMIND] - using guest account
[2023/04/05 12:32:02.181765, 3] ../../source3/param/loadparm.c:3945(lp_load_ex)
lp_load_ex: refreshing parameters
[2023/04/05 12:32:02.181815, 3] ../../source3/param/loadparm.c:551(init_globals)
Initialising global parameters
[2023/04/05 12:32:02.181892, 3] ../../source3/param/loadparm.c:2847(lp_do_section)
Processing section "[global]"
[2023/04/05 12:32:02.182051, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[homes]"
[2023/04/05 12:32:02.182094, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[public]"
[2023/04/05 12:32:02.182138, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[engineering]"
[2023/04/05 12:32:02.182183, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[qara]"
[2023/04/05 12:32:02.182225, 3] ../../source3/param/loadparm.c:1648(lp_add_ipc)
adding IPC service
[2023/04/05 12:44:09.800622, 3] ../../source3/smbd/oplock.c:1427(init_oplocks)
init_oplocks: initializing messages.
[2023/04/05 12:44:09.800944, 3] ../../source3/smbd/process.c:1956(process_smb)
Transaction 0 of length 204 (0 toread)
[2023/04/05 12:44:09.801133, 3] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot)
Selected protocol SMB3_11
[2023/04/05 12:44:09.802622, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2023/04/05 12:44:09.802646, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2023/04/05 12:44:09.802653, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2023/04/05 12:44:09.802661, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'spnego' registered
[2023/04/05 12:44:09.802667, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'schannel' registered
[2023/04/05 12:44:09.802672, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2023/04/05 12:44:09.802678, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2023/04/05 12:44:09.802684, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp' registered
[2023/04/05 12:44:09.802689, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2023/04/05 12:44:09.802695, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_basic' registered
[2023/04/05 12:44:09.802701, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_ntlm' registered
[2023/04/05 12:44:09.802707, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_negotiate' registered
[2023/04/05 12:44:09.802714, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'krb5' registered
[2023/04/05 12:44:09.802720, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2023/04/05 12:44:16.807704, 3] ../../source3/smbd/server_exit.c:220(exit_server_common)
Server exit (NT_STATUS_END_OF_FILE)
[2023/04/06 12:11:50.279347, 3] ../../source3/smbd/oplock.c:1427(init_oplocks)
init_oplocks: initializing messages.
[2023/04/06 12:11:50.279664, 3] ../../source3/smbd/process.c:1956(process_smb)
Transaction 0 of length 204 (0 toread)
[2023/04/06 12:11:50.279830, 3] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot)
Selected protocol SMB3_11
[2023/04/06 12:11:50.281308, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2023/04/06 12:11:50.281330, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2023/04/06 12:11:50.281337, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2023/04/06 12:11:50.281346, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'spnego' registered
[2023/04/06 12:11:50.281352, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'schannel' registered
[2023/04/06 12:11:50.281357, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2023/04/06 12:11:50.281363, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2023/04/06 12:11:50.281369, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp' registered
[2023/04/06 12:11:50.281374, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2023/04/06 12:11:50.281380, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_basic' registered
[2023/04/06 12:11:50.281386, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_ntlm' registered
[2023/04/06 12:11:50.281391, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_negotiate' registered
[2023/04/06 12:11:50.281407, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'krb5' registered
[2023/04/06 12:11:50.281412, 3] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2023/04/06 12:11:58.991626, 3] ../../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
[2023/04/06 12:11:58.992721, 3] ../../auth/ntlmssp/ntlmssp_server.c:509(ntlmssp_server_preauth)
Got user=[testuser] domain=[COMIND] workstation=[JAN] len1=24 len2=204
[2023/04/06 12:11:58.992782, 3] ../../source3/auth/auth.c:200(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [COMIND]\[testuser]@[JAN] with the new password interface
[2023/04/06 12:11:58.992791, 3] ../../source3/auth/auth.c:203(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [COMIND]\[testuser]@[JAN]
[2023/04/06 12:11:58.993564, 3] ../../source3/auth/check_samsec.c:398(check_sam_security)
check_sam_security: Couldn't find user 'testuser' in passdb.
[2023/04/06 12:11:58.993596, 2] ../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/06 12:11:58.993640, 2] ../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [COMIND]\[testuser] at [Thu, 06 Apr 2023 12:11:58.993624 UTC] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JAN] remote host [ipv4:192.168.50.106:49866] mapped to [COMIND]\[testuser]. local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-06T12:11:58.993716+0000", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:49866", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "COMIND", "clientAccount": "testuser", "workstation": "JAN", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "testuser", "mappedDomain": "COMIND", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 2321}}
[2023/04/06 12:11:58.993753, 3] ../../source3/auth/auth_util.c:2295(do_map_to_guest_server_info)
No such user testuser [COMIND] - using guest account
[2023/04/06 12:11:58.993770, 3] ../../source3/param/loadparm.c:3945(lp_load_ex)
lp_load_ex: refreshing parameters
[2023/04/06 12:11:58.993823, 3] ../../source3/param/loadparm.c:551(init_globals)
Initialising global parameters
[2023/04/06 12:11:58.993901, 3] ../../source3/param/loadparm.c:2847(lp_do_section)
Processing section "[global]"
[2023/04/06 12:11:58.994069, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[homes]"
[2023/04/06 12:11:58.994112, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[public]"
[2023/04/06 12:11:58.994159, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[engineering]"
[2023/04/06 12:11:58.994206, 2] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[qara]"
[2023/04/06 12:11:58.994251, 3] ../../source3/param/loadparm.c:1648(lp_add_ipc)
adding IPC service
[2023/04/11 09:11:49.965417, 6, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2363(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Apr 6 14:48:17 2023
[2023/04/11 09:11:49.965730, 3, pid=1086964, effective(0, 0), real(0, 0), class=locking] ../../source3/smbd/oplock.c:1427(init_oplocks)
init_oplocks: initializing messages.
[2023/04/11 09:11:49.965742, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 774 - private_data=0x5625a2782ff0
[2023/04/11 09:11:49.965756, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 778 - private_data=0x5625a2782ff0
[2023/04/11 09:11:49.965762, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 770 - private_data=0x5625a2782ff0
[2023/04/11 09:11:49.965768, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 801 - private_data=0x5625a2782ff0
[2023/04/11 09:11:49.965775, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 787 - private_data=0x5625a2782ff0
[2023/04/11 09:11:49.965781, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 779 - private_data=0x5625a2782ff0
[2023/04/11 09:11:49.965788, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 15 - private_data=(nil)
[2023/04/11 09:11:49.965794, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:739(messaging_register)
Overriding messaging pointer for type 15 - private_data=(nil)
[2023/04/11 09:11:49.965801, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 16 - private_data=(nil)
[2023/04/11 09:11:49.965807, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 16 - private_data=0x5625a2782ff0
[2023/04/11 09:11:49.965813, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 33 - private_data=0x5625a248bc90
[2023/04/11 09:11:49.965819, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 33 - private_data=0x5625a2782ff0
[2023/04/11 09:11:49.965826, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 790 - private_data=(nil)
[2023/04/11 09:11:49.965835, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 790 - private_data=0x5625a2782ff0
[2023/04/11 09:11:49.965842, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 791 - private_data=(nil)
[2023/04/11 09:11:49.965848, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 1 - private_data=(nil)
[2023/04/11 09:11:49.965854, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 1 - private_data=(nil)
[2023/04/11 09:11:49.965863, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/util_event.c:100(event_add_idle)
event_add_idle: idle_evt(keepalive) 0x5625a2796800
[2023/04/11 09:11:49.965870, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/util_event.c:100(event_add_idle)
event_add_idle: idle_evt(deadtime) 0x5625a27984d0
[2023/04/11 09:11:49.965881, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/util_event.c:100(event_add_idle)
event_add_idle: idle_evt(housekeeping) 0x5625a278f4b0
[2023/04/11 09:11:49.965904, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
got smb length of 200
[2023/04/11 09:11:49.965915, 6, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/process.c:1954(process_smb)
got message type 0x0 of len 0xc8
[2023/04/11 09:11:49.965924, 3, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/process.c:1956(process_smb)
Transaction 0 of length 204 (0 toread)
[2023/04/11 09:11:49.965931, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:4438(smbd_smb2_process_negprot)
smbd_smb2_first_negprot: packet length 200
[2023/04/11 09:11:49.965946, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:706(smb2_validate_sequence_number)
smb2_validate_sequence_number: smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap
[2023/04/11 09:11:49.965957, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:2910(smbd_smb2_request_dispatch)
smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 0
[2023/04/11 09:11:49.965977, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 09:11:49.965989, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 09:11:49.966006, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 09:11:49.966034, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:493(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2023/04/11 09:11:49.966050, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 09:11:49.966062, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 09:11:49.966069, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 09:11:49.966075, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 09:11:49.966080, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 09:11:49.966118, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 09:11:49.966125, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/util.c:1217(set_remote_arch)
set_remote_arch: Client arch is 'Vista'
[2023/04/11 09:11:49.966139, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/util/debug.c:811(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
dsdb_transaction_json_audit: 10
dsdb_group_audit: 10
dsdb_group_json_audit: 10
[2023/04/11 09:11:49.966271, 6, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2363(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Apr 6 14:48:17 2023
[2023/04/11 09:11:49.966286, 3, pid=1086964, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot)
Selected protocol SMB3_11
[2023/04/11 09:11:49.966304, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:563(make_auth3_context_for_ntlm)
make_auth3_context_for_ntlm: Making default auth method list for server role = 'standalone server', encrypt passwords = yes
[2023/04/11 09:11:49.966320, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend anonymous
[2023/04/11 09:11:49.966330, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'anonymous'
[2023/04/11 09:11:49.966336, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend sam
[2023/04/11 09:11:49.966342, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'sam'
[2023/04/11 09:11:49.966348, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend sam_ignoredomain
[2023/04/11 09:11:49.966354, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'sam_ignoredomain'
[2023/04/11 09:11:49.966360, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend sam_netlogon3
[2023/04/11 09:11:49.966367, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'sam_netlogon3'
[2023/04/11 09:11:49.966374, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend winbind
[2023/04/11 09:11:49.966380, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'winbind'
[2023/04/11 09:11:49.966386, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend unix
[2023/04/11 09:11:49.966392, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'unix'
[2023/04/11 09:11:49.966398, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match anonymous
[2023/04/11 09:11:49.966405, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method anonymous has a valid init
[2023/04/11 09:11:49.966411, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match sam_ignoredomain
[2023/04/11 09:11:49.966417, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method sam_ignoredomain has a valid init
[2023/04/11 09:11:49.967860, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2023/04/11 09:11:49.967882, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2023/04/11 09:11:49.967891, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2023/04/11 09:11:49.967898, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'spnego' registered
[2023/04/11 09:11:49.967905, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'schannel' registered
[2023/04/11 09:11:49.967919, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2023/04/11 09:11:49.967925, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2023/04/11 09:11:49.967932, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp' registered
[2023/04/11 09:11:49.967938, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2023/04/11 09:11:49.967945, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_basic' registered
[2023/04/11 09:11:49.967952, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_ntlm' registered
[2023/04/11 09:11:49.967958, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_negotiate' registered
[2023/04/11 09:11:49.967966, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'krb5' registered
[2023/04/11 09:11:49.967973, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2023/04/11 09:11:49.968037, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC mechanism spnego
[2023/04/11 09:11:49.968091, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC submechanism ntlmssp
[2023/04/11 09:11:49.968118, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: spnego[0x5625a279d920]: subreq: 0x5625a279a1d0
[2023/04/11 09:11:49.968133, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: spnego[0x5625a279d920]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x5625a279a1d0/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x5625a279a380)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
[2023/04/11 09:11:49.968184, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:3747(smbd_smb2_request_done_ex)
smbd_smb2_request_done_ex: mid [0] idx[1] status[NT_STATUS_OK] body[64] dyn[yes:140] at ../../source3/smbd/smb2_negprot.c:667
[2023/04/11 09:11:49.968199, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:963(smb2_set_operation_credit)
smb2_set_operation_credit: smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 8192/8192, total granted/max/low/range 1/8192/1/1
[2023/04/11 09:11:54.446219, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:4889(smbd_smb2_io_handler)
smbd_smb2_request idx[1] of 5 vectors
[2023/04/11 09:11:54.446299, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:706(smb2_validate_sequence_number)
smb2_validate_sequence_number: smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap
[2023/04/11 09:11:54.446326, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:2910(smbd_smb2_request_dispatch)
smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 1
[2023/04/11 09:11:54.446350, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 09:11:54.446394, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 09:11:54.446414, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 09:11:54.446456, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:493(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2023/04/11 09:11:54.446511, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 09:11:54.446547, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/11 09:11:54.446575, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key F2395285
[2023/04/11 09:11:54.446614, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x5625a2783900
[2023/04/11 09:11:54.446695, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/11 09:11:54.446738, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/11 09:11:54.446744, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key 'F2395285' stored
[2023/04/11 09:11:54.446752, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000001 (1)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0xf2395285 (4063842949)
session_wire_id : 0x00000000f2395285 (4063842949)
creation_time : Tue Apr 11 09:11:54 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x00000000001095f4 (1086964)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x3c88f7000bf168a4 (4362007818680756388)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 09:11:54 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:59892'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/11 09:11:54.446908, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 09:11:54.446917, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key F2395285
[2023/04/11 09:11:54.446924, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1324(smbXsrv_session_create)
[2023/04/11 09:11:54.446929, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1330(smbXsrv_session_create)
smbXsrv_session_create: global_id (0xf2395285) stored
[2023/04/11 09:11:54.446936, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0xf2395285 (4063842949)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0xf2395285 (4063842949)
session_wire_id : 0x00000000f2395285 (4063842949)
creation_time : Tue Apr 11 09:11:54 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x00000000001095f4 (1086964)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x3c88f7000bf168a4 (4362007818680756388)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 09:11:54 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:59892'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Tue Apr 11 09:11:54 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : NULL
[2023/04/11 09:11:54.447123, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:563(make_auth3_context_for_ntlm)
make_auth3_context_for_ntlm: Making default auth method list for server role = 'standalone server', encrypt passwords = yes
[2023/04/11 09:11:54.447135, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match anonymous
[2023/04/11 09:11:54.447144, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method anonymous has a valid init
[2023/04/11 09:11:54.447151, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match sam_ignoredomain
[2023/04/11 09:11:54.447158, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method sam_ignoredomain has a valid init
[2023/04/11 09:11:54.447228, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC mechanism spnego
[2023/04/11 09:11:54.447237, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 09:11:54.447245, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/11 09:11:54.447253, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key F2395285
[2023/04/11 09:11:54.447262, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x5625a2791080
[2023/04/11 09:11:54.447274, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/11 09:11:54.447282, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/11 09:11:54.447287, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key 'F2395285' stored
[2023/04/11 09:11:54.447294, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000002 (2)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0xf2395285 (4063842949)
session_wire_id : 0x00000000f2395285 (4063842949)
creation_time : Tue Apr 11 09:11:54 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x00000000001095f4 (1086964)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x3c88f7000bf168a4 (4362007818680756388)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 09:11:54 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:59892'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/11 09:11:54.447425, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 09:11:54.447432, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key F2395285
[2023/04/11 09:11:54.447439, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1421(smbXsrv_session_update)
[2023/04/11 09:11:54.447444, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1427(smbXsrv_session_update)
smbXsrv_session_update: global_id (0xf2395285) stored
[2023/04/11 09:11:54.447451, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0xf2395285 (4063842949)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0xf2395285 (4063842949)
session_wire_id : 0x00000000f2395285 (4063842949)
creation_time : Tue Apr 11 09:11:54 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x00000000001095f4 (1086964)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x3c88f7000bf168a4 (4362007818680756388)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 09:11:54 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:59892'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Tue Apr 11 09:11:54 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : *
pending_auth: struct smbXsrv_session_auth0
prev : *
next : NULL
session : *
connection : *
gensec : *
preauth : *
in_flags : 0x00 (0)
in_security_mode : 0x01 (1)
creation_time : Tue Apr 11 09:11:54 2023 UTC
idle_time : Tue Apr 11 09:11:54 2023 UTC
channel_id : 0x0000000000000000 (0)
[2023/04/11 09:11:54.447667, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 09:11:54.447676, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 09:11:54.447683, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 09:11:54.447690, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 09:11:54.447696, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 09:11:54.447750, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC submechanism ntlmssp
[2023/04/11 09:11:54.447771, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
NTLMSSP_NEGOTIATE_VERSION
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
[2023/04/11 09:11:54.448056, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
negotiate: struct NEGOTIATE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmNegotiate (1)
NegotiateFlags : 0x62088215 (1644724757)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
0: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
DomainNameLen : 0x0000 (0)
DomainNameMaxLen : 0x0000 (0)
DomainName : *
DomainName : ''
WorkstationLen : 0x0000 (0)
WorkstationMaxLen : 0x0000 (0)
Workstation : *
Workstation : ''
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
ProductBuild : 0x0000 (0)
Reserved: ARRAY(3)
[0] : 0x00 (0)
[1] : 0x00 (0)
[2] : 0x00 (0)
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15)
[2023/04/11 09:11:54.448227, 6, pid=1086964, effective(0, 0), real(0, 0)] ../../librpc/ndr/ndr_string.c:178(ndr_pull_string)
short string '', sent with NULL termination despite NOTERM flag in IDL
[2023/04/11 09:11:54.448239, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
challenge: struct CHALLENGE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmChallenge (0x2)
TargetNameLen : 0x0008 (8)
TargetNameMaxLen : 0x0008 (8)
TargetName : *
TargetName : 'KNOX'
NegotiateFlags : 0x628a8215 (1653244437)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
1: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
1: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
ServerChallenge : d5a8948cbadb9c43
Reserved : 0000000000000000
TargetInfoLen : 0x003a (58)
TargetInfoMaxLen : 0x003a (58)
TargetInfo : *
TargetInfo: struct AV_PAIR_LIST
count : 0x00000006 (6)
pair: ARRAY(6)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x0002 (2)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : ''
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'knox'
pair: struct AV_PAIR
AvId : MsvAvTimestamp (0x7)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x7)
AvTimestamp : Tue Apr 11 09:11:54 2023 UTC
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1)
ProductBuild : 0x0000 (0)
Reserved : 000000
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF)
[2023/04/11 09:11:54.448454, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: ntlmssp[0x5625a27a0dd0]: subreq: 0x5625a2652e60
[2023/04/11 09:11:54.448462, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: spnego[0x5625a2796290]: subreq: 0x5625a2791d10
[2023/04/11 09:11:54.448476, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 09:11:54.448500, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: ntlmssp[0x5625a27a0dd0]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x5625a2652e60/../../auth/ntlmssp/ntlmssp.c:180]: state[2] error[0 (0x0)] state[struct gensec_ntlmssp_update_state (0x5625a2653010)] timer[(nil)] finish[../../auth/ntlmssp/ntlmssp.c:215]
[2023/04/11 09:11:54.448519, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: spnego[0x5625a2796290]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x5625a2791d10/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x5625a2791ec0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
[2023/04/11 09:11:54.448534, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 09:11:54.448542, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 09:11:54.448548, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 09:11:54.448555, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 09:11:54.448562, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 09:11:54.448578, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 09:11:54.448588, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:3747(smbd_smb2_request_done_ex)
smbd_smb2_request_done_ex: mid [1] idx[1] status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:151] at ../../source3/smbd/smb2_sesssetup.c:183
[2023/04/11 09:11:54.448599, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:963(smb2_set_operation_credit)
smb2_set_operation_credit: smb2_set_operation_credit: requested 8192, charge 1, granted 1, current possible/max 8192/8192, total granted/max/low/range 1/8192/2/1
[2023/04/11 09:11:54.449571, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:4889(smbd_smb2_io_handler)
smbd_smb2_request idx[1] of 5 vectors
[2023/04/11 09:11:54.449607, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:706(smb2_validate_sequence_number)
smb2_validate_sequence_number: smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap
[2023/04/11 09:11:54.449627, 10, pid=1086964, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:2910(smbd_smb2_request_dispatch)
smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 2
[2023/04/11 09:11:54.449641, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 09:11:54.449649, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/11 09:11:54.449660, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key F2395285
[2023/04/11 09:11:54.449671, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x5625a2791080
[2023/04/11 09:11:54.449693, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/11 09:11:54.449702, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/11 09:11:54.449707, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key 'F2395285' stored
[2023/04/11 09:11:54.449715, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000003 (3)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0xf2395285 (4063842949)
session_wire_id : 0x00000000f2395285 (4063842949)
creation_time : Tue Apr 11 09:11:54 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x00000000001095f4 (1086964)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x3c88f7000bf168a4 (4362007818680756388)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 09:11:54 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:59892'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/11 09:11:54.449864, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 09:11:54.449872, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key F2395285
[2023/04/11 09:11:54.449879, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1421(smbXsrv_session_update)
[2023/04/11 09:11:54.449884, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1427(smbXsrv_session_update)
smbXsrv_session_update: global_id (0xf2395285) stored
[2023/04/11 09:11:54.449891, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0xf2395285 (4063842949)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0xf2395285 (4063842949)
session_wire_id : 0x00000000f2395285 (4063842949)
creation_time : Tue Apr 11 09:11:54 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x00000000001095f4 (1086964)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x3c88f7000bf168a4 (4362007818680756388)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 09:11:54 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:59892'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Tue Apr 11 09:11:54 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : *
pending_auth: struct smbXsrv_session_auth0
prev : *
next : NULL
session : *
connection : *
gensec : *
preauth : *
in_flags : 0x00 (0)
in_security_mode : 0x01 (1)
creation_time : Tue Apr 11 09:11:54 2023 UTC
idle_time : Tue Apr 11 09:11:54 2023 UTC
channel_id : 0x0000000000000000 (0)
[2023/04/11 09:11:54.450108, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 09:11:54.450115, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 09:11:54.450122, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 09:11:54.450140, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:493(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2023/04/11 09:11:54.450150, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 09:11:54.450158, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/11 09:11:54.450167, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key F2395285
[2023/04/11 09:11:54.450174, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x5625a2791080
[2023/04/11 09:11:54.450188, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/11 09:11:54.450195, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/11 09:11:54.450200, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key 'F2395285' stored
[2023/04/11 09:11:54.450207, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000004 (4)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0xf2395285 (4063842949)
session_wire_id : 0x00000000f2395285 (4063842949)
creation_time : Tue Apr 11 09:11:54 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x00000000001095f4 (1086964)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x3c88f7000bf168a4 (4362007818680756388)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 09:11:54 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:59892'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/11 09:11:54.450337, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 09:11:54.450344, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key F2395285
[2023/04/11 09:11:54.450351, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1421(smbXsrv_session_update)
[2023/04/11 09:11:54.450356, 10, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1427(smbXsrv_session_update)
smbXsrv_session_update: global_id (0xf2395285) stored
[2023/04/11 09:11:54.450362, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0xf2395285 (4063842949)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0xf2395285 (4063842949)
session_wire_id : 0x00000000f2395285 (4063842949)
creation_time : Tue Apr 11 09:11:54 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x00000000001095f4 (1086964)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x3c88f7000bf168a4 (4362007818680756388)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 09:11:54 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:59892'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Tue Apr 11 09:11:54 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : *
pending_auth: struct smbXsrv_session_auth0
prev : *
next : NULL
session : *
connection : *
gensec : *
preauth : *
in_flags : 0x00 (0)
in_security_mode : 0x01 (1)
creation_time : Tue Apr 11 09:11:54 2023 UTC
idle_time : Tue Apr 11 09:11:54 2023 UTC
channel_id : 0x0000000000000000 (0)
[2023/04/11 09:11:54.450576, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 09:11:54.450584, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 09:11:54.450591, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 09:11:54.450597, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 09:11:54.450603, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 09:11:54.450650, 6, pid=1086964, effective(0, 0), real(0, 0)] ../../librpc/ndr/ndr_string.c:178(ndr_pull_string)
short string '', sent with NULL termination despite NOTERM flag in IDL
[2023/04/11 09:11:54.450666, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
authenticate: struct AUTHENTICATE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmAuthenticate (3)
LmChallengeResponseLen : 0x0018 (24)
LmChallengeResponseMaxLen: 0x0018 (24)
LmChallengeResponse : *
LmChallengeResponse : union ntlmssp_LM_RESPONSE_with_len(case 24)
v1: struct LM_RESPONSE
Response : 000000000000000000000000000000000000000000000000
NtChallengeResponseLen : 0x00cc (204)
NtChallengeResponseMaxLen: 0x00cc (204)
NtChallengeResponse : *
NtChallengeResponse : union ntlmssp_NTLM_RESPONSE_with_len(case 204)
v2: struct NTLMv2_RESPONSE
Response : c3b6a350358f22dc1bf07a89de8aa629
Challenge: struct NTLMv2_CLIENT_CHALLENGE
RespType : 0x01 (1)
HiRespType : 0x01 (1)
Reserved1 : 0x0000 (0)
Reserved2 : 0x00000000 (0)
TimeStamp : Tue Apr 11 09:11:54 2023 UTC
ChallengeFromClient : 3ac650b192cae5a4
Reserved3 : 0x00000000 (0)
AvPairs: struct AV_PAIR_LIST
count : 0x0000000a (10)
pair: ARRAY(10)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x0002 (2)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : ''
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'knox'
pair: struct AV_PAIR
AvId : MsvAvTimestamp (0x7)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x7)
AvTimestamp : Tue Apr 11 09:11:54 2023 UTC
pair: struct AV_PAIR
AvId : MsvAvFlags (0x6)
AvLen : 0x0004 (4)
Value : union ntlmssp_AvValue(case 0x6)
AvFlags : 0x00000002 (2)
0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT
1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE
0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE
pair: struct AV_PAIR
AvId : MsvAvSingleHost (0x8)
AvLen : 0x0030 (48)
Value : union ntlmssp_AvValue(case 0x8)
AvSingleHost: struct ntlmssp_SingleHostData
Size : 0x00000030 (48)
Z4 : 0x00000000 (0)
token_info: struct LSAP_TOKEN_INFO_INTEGRITY
Flags : 0x00000000 (0)
TokenIL : 0x00000000 (0)
MachineId : 4f8f7800319aba02aefbec90b2e02f26bde3d96862a629485ed7fb79252671d3
remaining : DATA_BLOB length=0
pair: struct AV_PAIR
AvId : MsvChannelBindings (0xA)
AvLen : 0x0010 (16)
Value : union ntlmssp_AvValue(case 0xA)
ChannelBindings : 00000000000000000000000000000000
pair: struct AV_PAIR
AvId : MsvAvTargetName (0x9)
AvLen : 0x0012 (18)
Value : union ntlmssp_AvValue(case 0x9)
AvTargetName : 'cifs/knox'
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
DomainNameLen : 0x000c (12)
DomainNameMaxLen : 0x000c (12)
DomainName : *
DomainName : 'COMIND'
UserNameLen : 0x000c (12)
UserNameMaxLen : 0x000c (12)
UserName : *
UserName : 'zzuser'
WorkstationLen : 0x0006 (6)
WorkstationMaxLen : 0x0006 (6)
Workstation : *
Workstation : 'JAN'
EncryptedRandomSessionKeyLen: 0x0010 (16)
EncryptedRandomSessionKeyMaxLen: 0x0010 (16)
EncryptedRandomSessionKey: *
EncryptedRandomSessionKey: DATA_BLOB length=16
[0000] 0F 9F FA 18 9A 43 60 4E A8 DC 76 BA 91 61 B1 23 .....C`N ..v..a.#
NegotiateFlags : 0x62088215 (1644724757)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
0: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
ProductBuild : 0x0000 (0)
Reserved: ARRAY(3)
[0] : 0x00 (0)
[1] : 0x00 (0)
[2] : 0x00 (0)
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15)
[2023/04/11 09:11:54.451091, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:509(ntlmssp_server_preauth)
Got user=[zzuser] domain=[COMIND] workstation=[JAN] len1=24 len2=204
[2023/04/11 09:11:54.451102, 6, pid=1086964, effective(0, 0), real(0, 0)] ../../librpc/ndr/ndr_string.c:178(ndr_pull_string)
short string '', sent with NULL termination despite NOTERM flag in IDL
[2023/04/11 09:11:54.451112, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:544(ntlmssp_server_preauth)
[2023/04/11 09:11:54.451116, 1, pid=1086964, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&v2_resp: struct NTLMv2_RESPONSE
Response : c3b6a350358f22dc1bf07a89de8aa629
Challenge: struct NTLMv2_CLIENT_CHALLENGE
RespType : 0x01 (1)
HiRespType : 0x01 (1)
Reserved1 : 0x0000 (0)
Reserved2 : 0x00000000 (0)
TimeStamp : Tue Apr 11 09:11:54 2023 UTC
ChallengeFromClient : 3ac650b192cae5a4
Reserved3 : 0x00000000 (0)
AvPairs: struct AV_PAIR_LIST
count : 0x0000000a (10)
pair: ARRAY(10)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x0002 (2)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : ''
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'knox'
pair: struct AV_PAIR
AvId : MsvAvTimestamp (0x7)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x7)
AvTimestamp : Tue Apr 11 09:11:54 2023 UTC
pair: struct AV_PAIR
AvId : MsvAvFlags (0x6)
AvLen : 0x0004 (4)
Value : union ntlmssp_AvValue(case 0x6)
AvFlags : 0x00000002 (2)
0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT
1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE
0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE
pair: struct AV_PAIR
AvId : MsvAvSingleHost (0x8)
AvLen : 0x0030 (48)
Value : union ntlmssp_AvValue(case 0x8)
AvSingleHost: struct ntlmssp_SingleHostData
Size : 0x00000030 (48)
Z4 : 0x00000000 (0)
token_info: struct LSAP_TOKEN_INFO_INTEGRITY
Flags : 0x00000000 (0)
TokenIL : 0x00000000 (0)
MachineId : 4f8f7800319aba02aefbec90b2e02f26bde3d96862a629485ed7fb79252671d3
remaining : DATA_BLOB length=0
pair: struct AV_PAIR
AvId : MsvChannelBindings (0xA)
AvLen : 0x0010 (16)
Value : union ntlmssp_AvValue(case 0xA)
ChannelBindings : 00000000000000000000000000000000
pair: struct AV_PAIR
AvId : MsvAvTargetName (0x9)
AvLen : 0x0012 (18)
Value : union ntlmssp_AvValue(case 0x9)
AvTargetName : 'cifs/knox'
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
[2023/04/11 09:11:54.451345, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_util.c:123(make_user_info_map)
Mapping user [COMIND]\[zzuser] from workstation [JAN]
[2023/04/11 09:11:54.451353, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:64(make_user_info)
attempting to make a user_info for zzuser (zzuser)
[2023/04/11 09:11:54.451360, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:72(make_user_info)
making strings for zzuser's user_info struct
[2023/04/11 09:11:54.451369, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:117(make_user_info)
making blobs for zzuser's user_info struct
[2023/04/11 09:11:54.451378, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:163(make_user_info)
made a user_info for zzuser (zzuser)
[2023/04/11 09:11:54.451386, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:200(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [COMIND]\[zzuser]@[JAN] with the new password interface
[2023/04/11 09:11:54.451394, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:203(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [COMIND]\[zzuser]@[JAN]
[2023/04/11 09:11:54.451401, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:213(auth_check_ntlm_password)
check_ntlm_password: auth_context challenge created by random
[2023/04/11 09:11:54.451408, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:216(auth_check_ntlm_password)
challenge is:
[2023/04/11 09:11:54.451414, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/util/util.c:722(dump_data)
[0000] D5 A8 94 8C BA DB 9C 43 .......C
[2023/04/11 09:11:54.451427, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_builtin.c:41(check_anonymous_security)
Check auth for: [zzuser]
[2023/04/11 09:11:54.451434, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:249(auth_check_ntlm_password)
auth_check_ntlm_password: anonymous had nothing to say
[2023/04/11 09:11:54.451441, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_sam.c:46(auth_sam_ignoredomain_auth)
auth_sam_ignoredomain_auth: Check auth for: [COMIND]\[zzuser]
[2023/04/11 09:11:54.451450, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2023/04/11 09:11:54.451457, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2023/04/11 09:11:54.451464, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2023/04/11 09:11:54.451470, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 09:11:54.451477, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 09:11:54.451509, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/lib/smbldap.c:1307(smbldap_search_ext)
smbldap_search_ext: base => [dc=zombie,dc=io], filter => [(&(uid=zzuser)(objectclass=sambaSamAccount))], scope => [2]
[2023/04/11 09:11:54.452085, 4, pid=1086964, effective(0, 0), real(0, 0), class=passdb] ../../source3/passdb/pdb_ldap.c:1563(ldapsam_getsampwnam)
ldapsam_getsampwnam: Unable to locate user [zzuser] count=0
[2023/04/11 09:11:54.452131, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 09:11:54.452141, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/check_samsec.c:398(check_sam_security)
check_sam_security: Couldn't find user 'zzuser' in passdb.
[2023/04/11 09:11:54.452155, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:258(auth_check_ntlm_password)
auth_check_ntlm_password: sam_ignoredomain authentication for user [zzuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/11 09:11:54.452166, 2, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [zzuser] -> [zzuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/11 09:11:54.452200, 2, pid=1086964, effective(0, 0), real(0, 0), class=auth_audit] ../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [COMIND]\[zzuser] at [Tue, 11 Apr 2023 09:11:54.452188 UTC] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JAN] remote host [ipv4:192.168.50.106:59892] mapped to [COMIND]\[zzuser]. local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-11T09:11:54.452272+0000", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:59892", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "COMIND", "clientAccount": "zzuser", "workstation": "JAN", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "zzuser", "mappedDomain": "COMIND", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 5142}}
[2023/04/11 09:11:54.452307, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/auth_ntlmssp.c:210(auth3_check_password_send)
auth3_check_password_send: Checking NTLMSSP password for COMIND\zzuser failed: NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/11 09:11:54.452318, 3, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_util.c:2295(do_map_to_guest_server_info)
No such user zzuser [COMIND] - using guest account
[2023/04/11 09:11:54.452334, 3, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:3945(lp_load_ex)
lp_load_ex: refreshing parameters
[2023/04/11 09:11:54.452343, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:1371(free_param_opts)
Freeing parametrics:
[2023/04/11 09:11:54.452396, 3, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:551(init_globals)
Initialising global parameters
[2023/04/11 09:11:54.452444, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/util/debug.c:811(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
dsdb_transaction_json_audit: 10
dsdb_group_audit: 10
dsdb_group_json_audit: 10
[2023/04/11 09:11:54.452544, 3, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2847(lp_do_section)
Processing section "[global]"
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter logging = file
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter server role = standalone server
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter usershare allow guests = yes
doing parameter netbios name = knox
doing parameter workgroup = CoMind
doing parameter root preexec = /usr/local/sbin/mkhome %U
doing parameter passdb backend = ldapsam:ldap://vogon.zombie.io
doing parameter ldap suffix = dc=zombie,dc=io
doing parameter ldap user suffix = ou=people
doing parameter ldap group suffix = ou=groups
doing parameter ldap machine suffix = ou=computers
doing parameter ldap idmap suffix = ou=Idmap
doing parameter ldap admin dn = cn=admin,dc=zombie,dc=io
doing parameter ldap ssl = start tls
doing parameter ldap passwd sync = yes
[2023/04/11 09:11:54.452771, 2, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[homes]"
doing parameter comment = Home Directories
doing parameter browseable = no
doing parameter read only = no
doing parameter create mask = 0700
doing parameter directory mask = 0700
doing parameter valid users = %S
[2023/04/11 09:11:54.452837, 2, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[public]"
doing parameter comment = Public Folder
doing parameter path = /data1
doing parameter writable = yes
doing parameter guest ok = yes
doing parameter guest only = yes
doing parameter force create mode = 775
doing parameter force directory mode = 775
[2023/04/11 09:11:54.452897, 2, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[engineering]"
doing parameter path = /data1/engineering
doing parameter writable = yes
doing parameter read only = no
doing parameter guest ok = no
doing parameter create mask = 0660
doing parameter directory mask = 0770
doing parameter browsable = yes
[2023/04/11 09:11:54.452956, 2, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[qara]"
doing parameter path = /data1/qara
doing parameter read only = no
doing parameter browsable = yes
doing parameter guest ok = yes
doing parameter create mask = 0660
doing parameter directory mask = 0770
[2023/04/11 09:11:54.453007, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:3987(lp_load_ex)
pm_process() returned Yes
[2023/04/11 09:11:54.453024, 3, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:1648(lp_add_ipc)
adding IPC service
[2023/04/11 09:11:54.453044, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: ntlmssp[0x5625a27a0dd0]: subreq: 0x5625a2652e60
[2023/04/11 09:11:54.453052, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: spnego[0x5625a2796290]: subreq: 0x5625a2791d10
[2023/04/11 09:11:54.453064, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 09:11:54.453119, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:981(ntlmssp_server_postauth)
ntlmssp_server_auth: Failed to create unmodified session key.
[2023/04/11 09:11:54.453128, 5, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:997(ntlmssp_server_postauth)
server session key is invalid (len == 0), cannot do KEY_EXCH!
[2023/04/11 09:11:54.453140, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: ntlmssp[0x5625a27a0dd0]: NT_STATUS_OK tevent_req[0x5625a2652e60/../../auth/ntlmssp/ntlmssp.c:180]: state[2] error[0 (0x0)] state[struct gensec_ntlmssp_update_state (0x5625a2653010)] timer[(nil)] finish[../../auth/ntlmssp/ntlmssp.c:244]
[2023/04/11 09:11:54.453155, 10, pid=1086964, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: spnego[0x5625a2796290]: NT_STATUS_OK tevent_req[0x5625a2791d10/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x5625a2791ec0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
[2023/04/11 09:11:54.453164, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 09:11:54.453176, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 09:11:54.453183, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 09:11:54.453190, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 09:11:54.453197, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 09:11:54.453212, 4, pid=1086964, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 09:11:54.453236, 4, pid=1086964, effective(0, 0), real(0, 0), class=auth_audit] ../../auth/auth_log.c:740(log_successful_authz_event_human_readable)
Successful AuthZ: [SMB2,NTLMSSP] user [KNOX]\[nobody] [S-1-5-21-2215539713-2866336102-139347275-501] at [Tue, 11 Apr 2023 09:11:54.453231 UTC] Remote host [ipv4:192.168.50.106:59892] local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-11T09:11:54.453272+0000", "type": "Authorization", "Authorization": {"version": {"major": 1, "minor": 1}, "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:59892", "serviceDescription": "SMB2", "authType": "NTLMSSP", "domain": "KNOX", "account": "nobody", "sid": "S-1-5-21-2215539713-2866336102-139347275-501", "sessionId": "af0bf608-c85d-4573-910f-187626c7174c", "logonServer": null, "transportProtection": "SMB", "accountFlags": "0x00000000"}}
[2023/04/11 09:11:54.453334, 5, pid=1086964, effective(0, 0), real(0, 0)] ../../lib/util/debug.c:811(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
[2023/04/11 10:06:54.056707, 6, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2363(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Apr 6 14:48:17 2023
[2023/04/11 10:06:54.057016, 3, pid=1089697, effective(0, 0), real(0, 0), class=locking] ../../source3/smbd/oplock.c:1427(init_oplocks)
init_oplocks: initializing messages.
[2023/04/11 10:06:54.057028, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 774 - private_data=0x555b53cfeff0
[2023/04/11 10:06:54.057037, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 778 - private_data=0x555b53cfeff0
[2023/04/11 10:06:54.057043, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 770 - private_data=0x555b53cfeff0
[2023/04/11 10:06:54.057051, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 801 - private_data=0x555b53cfeff0
[2023/04/11 10:06:54.057057, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 787 - private_data=0x555b53cfeff0
[2023/04/11 10:06:54.057063, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 779 - private_data=0x555b53cfeff0
[2023/04/11 10:06:54.057075, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 15 - private_data=(nil)
[2023/04/11 10:06:54.057082, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:739(messaging_register)
Overriding messaging pointer for type 15 - private_data=(nil)
[2023/04/11 10:06:54.057089, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 16 - private_data=(nil)
[2023/04/11 10:06:54.057095, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 16 - private_data=0x555b53cfeff0
[2023/04/11 10:06:54.057102, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 33 - private_data=0x555b53a07c90
[2023/04/11 10:06:54.057108, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 33 - private_data=0x555b53cfeff0
[2023/04/11 10:06:54.057114, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 790 - private_data=(nil)
[2023/04/11 10:06:54.057124, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 790 - private_data=0x555b53cfeff0
[2023/04/11 10:06:54.057130, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 791 - private_data=(nil)
[2023/04/11 10:06:54.057136, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 1 - private_data=(nil)
[2023/04/11 10:06:54.057143, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 1 - private_data=(nil)
[2023/04/11 10:06:54.057152, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/util_event.c:100(event_add_idle)
event_add_idle: idle_evt(keepalive) 0x555b53d15500
[2023/04/11 10:06:54.057159, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/util_event.c:100(event_add_idle)
event_add_idle: idle_evt(deadtime) 0x555b53d144d0
[2023/04/11 10:06:54.057170, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/util_event.c:100(event_add_idle)
event_add_idle: idle_evt(housekeeping) 0x555b53d0b4b0
[2023/04/11 10:06:54.057194, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
got smb length of 200
[2023/04/11 10:06:54.057205, 6, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/process.c:1954(process_smb)
got message type 0x0 of len 0xc8
[2023/04/11 10:06:54.057211, 3, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/process.c:1956(process_smb)
Transaction 0 of length 204 (0 toread)
[2023/04/11 10:06:54.057219, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:4438(smbd_smb2_process_negprot)
smbd_smb2_first_negprot: packet length 200
[2023/04/11 10:06:54.057235, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:706(smb2_validate_sequence_number)
smb2_validate_sequence_number: smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap
[2023/04/11 10:06:54.057256, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:2910(smbd_smb2_request_dispatch)
smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 0
[2023/04/11 10:06:54.057278, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 10:06:54.057294, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 10:06:54.057310, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 10:06:54.057338, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:493(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2023/04/11 10:06:54.057356, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 10:06:54.057368, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 10:06:54.057374, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 10:06:54.057380, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 10:06:54.057386, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 10:06:54.057422, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 10:06:54.057430, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/util.c:1217(set_remote_arch)
set_remote_arch: Client arch is 'Vista'
[2023/04/11 10:06:54.057444, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/util/debug.c:811(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
dsdb_transaction_json_audit: 10
dsdb_group_audit: 10
dsdb_group_json_audit: 10
[2023/04/11 10:06:54.057578, 6, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2363(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Apr 6 14:48:17 2023
[2023/04/11 10:06:54.057594, 3, pid=1089697, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot)
Selected protocol SMB3_11
[2023/04/11 10:06:54.057611, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:563(make_auth3_context_for_ntlm)
make_auth3_context_for_ntlm: Making default auth method list for server role = 'standalone server', encrypt passwords = yes
[2023/04/11 10:06:54.057624, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend anonymous
[2023/04/11 10:06:54.057634, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'anonymous'
[2023/04/11 10:06:54.057641, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend sam
[2023/04/11 10:06:54.057647, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'sam'
[2023/04/11 10:06:54.057653, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend sam_ignoredomain
[2023/04/11 10:06:54.057663, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'sam_ignoredomain'
[2023/04/11 10:06:54.057670, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend sam_netlogon3
[2023/04/11 10:06:54.057676, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'sam_netlogon3'
[2023/04/11 10:06:54.057684, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend winbind
[2023/04/11 10:06:54.057690, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'winbind'
[2023/04/11 10:06:54.057696, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend unix
[2023/04/11 10:06:54.057702, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'unix'
[2023/04/11 10:06:54.057708, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match anonymous
[2023/04/11 10:06:54.057715, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method anonymous has a valid init
[2023/04/11 10:06:54.057721, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match sam_ignoredomain
[2023/04/11 10:06:54.057728, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method sam_ignoredomain has a valid init
[2023/04/11 10:06:54.059166, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2023/04/11 10:06:54.059190, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2023/04/11 10:06:54.059199, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2023/04/11 10:06:54.059206, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'spnego' registered
[2023/04/11 10:06:54.059212, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'schannel' registered
[2023/04/11 10:06:54.059219, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2023/04/11 10:06:54.059226, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2023/04/11 10:06:54.059232, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp' registered
[2023/04/11 10:06:54.059239, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2023/04/11 10:06:54.059246, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_basic' registered
[2023/04/11 10:06:54.059260, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_ntlm' registered
[2023/04/11 10:06:54.059266, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_negotiate' registered
[2023/04/11 10:06:54.059274, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'krb5' registered
[2023/04/11 10:06:54.059281, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2023/04/11 10:06:54.059348, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC mechanism spnego
[2023/04/11 10:06:54.059402, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC submechanism ntlmssp
[2023/04/11 10:06:54.059430, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: spnego[0x555b53d19810]: subreq: 0x555b53d178a0
[2023/04/11 10:06:54.059446, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: spnego[0x555b53d19810]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x555b53d178a0/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x555b53d17a50)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
[2023/04/11 10:06:54.059497, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:3747(smbd_smb2_request_done_ex)
smbd_smb2_request_done_ex: mid [0] idx[1] status[NT_STATUS_OK] body[64] dyn[yes:140] at ../../source3/smbd/smb2_negprot.c:667
[2023/04/11 10:06:54.059511, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:963(smb2_set_operation_credit)
smb2_set_operation_credit: smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 8192/8192, total granted/max/low/range 1/8192/1/1
[2023/04/11 10:06:56.589614, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:4889(smbd_smb2_io_handler)
smbd_smb2_request idx[1] of 5 vectors
[2023/04/11 10:06:56.589685, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:706(smb2_validate_sequence_number)
smb2_validate_sequence_number: smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap
[2023/04/11 10:06:56.589712, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:2910(smbd_smb2_request_dispatch)
smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 1
[2023/04/11 10:06:56.589736, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 10:06:56.589756, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 10:06:56.589775, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 10:06:56.589821, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:493(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2023/04/11 10:06:56.589876, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 10:06:56.589913, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/11 10:06:56.589966, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key EE964E70
[2023/04/11 10:06:56.590005, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x555b53d166a0
[2023/04/11 10:06:56.590081, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/11 10:06:56.590126, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/11 10:06:56.590132, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key 'EE964E70' stored
[2023/04/11 10:06:56.590141, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000001 (1)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0xee964e70 (4002827888)
session_wire_id : 0x00000000ee964e70 (4002827888)
creation_time : Tue Apr 11 10:06:57 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000010a0a1 (1089697)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x8f19b48f241f67f4 (-8135272724988729356)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 10:06:57 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:60046'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/11 10:06:56.590300, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 10:06:56.590309, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key EE964E70
[2023/04/11 10:06:56.590322, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1324(smbXsrv_session_create)
[2023/04/11 10:06:56.590327, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1330(smbXsrv_session_create)
smbXsrv_session_create: global_id (0xee964e70) stored
[2023/04/11 10:06:56.590335, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0xee964e70 (4002827888)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0xee964e70 (4002827888)
session_wire_id : 0x00000000ee964e70 (4002827888)
creation_time : Tue Apr 11 10:06:57 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000010a0a1 (1089697)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x8f19b48f241f67f4 (-8135272724988729356)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 10:06:57 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:60046'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Tue Apr 11 10:06:57 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : NULL
[2023/04/11 10:06:56.590530, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:563(make_auth3_context_for_ntlm)
make_auth3_context_for_ntlm: Making default auth method list for server role = 'standalone server', encrypt passwords = yes
[2023/04/11 10:06:56.590543, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match anonymous
[2023/04/11 10:06:56.590552, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method anonymous has a valid init
[2023/04/11 10:06:56.590560, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match sam_ignoredomain
[2023/04/11 10:06:56.590567, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method sam_ignoredomain has a valid init
[2023/04/11 10:06:56.590641, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC mechanism spnego
[2023/04/11 10:06:56.590651, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 10:06:56.590659, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/11 10:06:56.590668, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key EE964E70
[2023/04/11 10:06:56.590676, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x555b53d0d080
[2023/04/11 10:06:56.590689, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/11 10:06:56.590698, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/11 10:06:56.590703, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key 'EE964E70' stored
[2023/04/11 10:06:56.590710, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000002 (2)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0xee964e70 (4002827888)
session_wire_id : 0x00000000ee964e70 (4002827888)
creation_time : Tue Apr 11 10:06:57 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000010a0a1 (1089697)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x8f19b48f241f67f4 (-8135272724988729356)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 10:06:57 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:60046'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/11 10:06:56.590849, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 10:06:56.590857, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key EE964E70
[2023/04/11 10:06:56.590865, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1421(smbXsrv_session_update)
[2023/04/11 10:06:56.590870, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1427(smbXsrv_session_update)
smbXsrv_session_update: global_id (0xee964e70) stored
[2023/04/11 10:06:56.590877, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0xee964e70 (4002827888)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0xee964e70 (4002827888)
session_wire_id : 0x00000000ee964e70 (4002827888)
creation_time : Tue Apr 11 10:06:57 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000010a0a1 (1089697)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x8f19b48f241f67f4 (-8135272724988729356)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 10:06:57 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:60046'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Tue Apr 11 10:06:57 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : *
pending_auth: struct smbXsrv_session_auth0
prev : *
next : NULL
session : *
connection : *
gensec : *
preauth : *
in_flags : 0x00 (0)
in_security_mode : 0x01 (1)
creation_time : Tue Apr 11 10:06:57 2023 UTC
idle_time : Tue Apr 11 10:06:57 2023 UTC
channel_id : 0x0000000000000000 (0)
[2023/04/11 10:06:56.591102, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 10:06:56.591111, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 10:06:56.591119, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 10:06:56.591126, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 10:06:56.591133, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 10:06:56.591191, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC submechanism ntlmssp
[2023/04/11 10:06:56.591213, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
NTLMSSP_NEGOTIATE_VERSION
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
[2023/04/11 10:06:56.591524, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
negotiate: struct NEGOTIATE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmNegotiate (1)
NegotiateFlags : 0x62088215 (1644724757)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
0: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
DomainNameLen : 0x0000 (0)
DomainNameMaxLen : 0x0000 (0)
DomainName : *
DomainName : ''
WorkstationLen : 0x0000 (0)
WorkstationMaxLen : 0x0000 (0)
Workstation : *
Workstation : ''
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
ProductBuild : 0x0000 (0)
Reserved: ARRAY(3)
[0] : 0x00 (0)
[1] : 0x00 (0)
[2] : 0x00 (0)
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15)
[2023/04/11 10:06:56.591696, 6, pid=1089697, effective(0, 0), real(0, 0)] ../../librpc/ndr/ndr_string.c:178(ndr_pull_string)
short string '', sent with NULL termination despite NOTERM flag in IDL
[2023/04/11 10:06:56.591708, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
challenge: struct CHALLENGE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmChallenge (0x2)
TargetNameLen : 0x0008 (8)
TargetNameMaxLen : 0x0008 (8)
TargetName : *
TargetName : 'KNOX'
NegotiateFlags : 0x628a8215 (1653244437)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
1: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
1: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
ServerChallenge : 4d6cb7d7bd519cad
Reserved : 0000000000000000
TargetInfoLen : 0x003a (58)
TargetInfoMaxLen : 0x003a (58)
TargetInfo : *
TargetInfo: struct AV_PAIR_LIST
count : 0x00000006 (6)
pair: ARRAY(6)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x0002 (2)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : ''
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'knox'
pair: struct AV_PAIR
AvId : MsvAvTimestamp (0x7)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x7)
AvTimestamp : Tue Apr 11 10:06:57 2023 UTC
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1)
ProductBuild : 0x0000 (0)
Reserved : 000000
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF)
[2023/04/11 10:06:56.591935, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: ntlmssp[0x555b53d1cc90]: subreq: 0x555b53bcee60
[2023/04/11 10:06:56.591944, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: spnego[0x555b53d12290]: subreq: 0x555b53d0e2e0
[2023/04/11 10:06:56.591961, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 10:06:56.591985, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: ntlmssp[0x555b53d1cc90]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x555b53bcee60/../../auth/ntlmssp/ntlmssp.c:180]: state[2] error[0 (0x0)] state[struct gensec_ntlmssp_update_state (0x555b53bcf010)] timer[(nil)] finish[../../auth/ntlmssp/ntlmssp.c:215]
[2023/04/11 10:06:56.592006, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: spnego[0x555b53d12290]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x555b53d0e2e0/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x555b53d0e490)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
[2023/04/11 10:06:56.592021, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 10:06:56.592029, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 10:06:56.592037, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 10:06:56.592044, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 10:06:56.592051, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 10:06:56.592068, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 10:06:56.592078, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:3747(smbd_smb2_request_done_ex)
smbd_smb2_request_done_ex: mid [1] idx[1] status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:151] at ../../source3/smbd/smb2_sesssetup.c:183
[2023/04/11 10:06:56.592090, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:963(smb2_set_operation_credit)
smb2_set_operation_credit: smb2_set_operation_credit: requested 8192, charge 1, granted 1, current possible/max 8192/8192, total granted/max/low/range 1/8192/2/1
[2023/04/11 10:06:56.592895, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:4889(smbd_smb2_io_handler)
smbd_smb2_request idx[1] of 5 vectors
[2023/04/11 10:06:56.592930, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:706(smb2_validate_sequence_number)
smb2_validate_sequence_number: smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap
[2023/04/11 10:06:56.592941, 10, pid=1089697, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:2910(smbd_smb2_request_dispatch)
smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 2
[2023/04/11 10:06:56.592955, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 10:06:56.592964, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/11 10:06:56.592975, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key EE964E70
[2023/04/11 10:06:56.592996, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x555b53d0d080
[2023/04/11 10:06:56.593018, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/11 10:06:56.593028, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/11 10:06:56.593033, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key 'EE964E70' stored
[2023/04/11 10:06:56.593042, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000003 (3)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0xee964e70 (4002827888)
session_wire_id : 0x00000000ee964e70 (4002827888)
creation_time : Tue Apr 11 10:06:57 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000010a0a1 (1089697)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x8f19b48f241f67f4 (-8135272724988729356)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 10:06:57 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:60046'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/11 10:06:56.593196, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 10:06:56.593205, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key EE964E70
[2023/04/11 10:06:56.593213, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1421(smbXsrv_session_update)
[2023/04/11 10:06:56.593222, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1427(smbXsrv_session_update)
smbXsrv_session_update: global_id (0xee964e70) stored
[2023/04/11 10:06:56.593229, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0xee964e70 (4002827888)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0xee964e70 (4002827888)
session_wire_id : 0x00000000ee964e70 (4002827888)
creation_time : Tue Apr 11 10:06:57 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000010a0a1 (1089697)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x8f19b48f241f67f4 (-8135272724988729356)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 10:06:57 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:60046'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Tue Apr 11 10:06:57 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : *
pending_auth: struct smbXsrv_session_auth0
prev : *
next : NULL
session : *
connection : *
gensec : *
preauth : *
in_flags : 0x00 (0)
in_security_mode : 0x01 (1)
creation_time : Tue Apr 11 10:06:57 2023 UTC
idle_time : Tue Apr 11 10:06:57 2023 UTC
channel_id : 0x0000000000000000 (0)
[2023/04/11 10:06:56.593473, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 10:06:56.593482, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 10:06:56.593489, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 10:06:56.593508, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:493(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2023/04/11 10:06:56.593519, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 10:06:56.593528, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/11 10:06:56.593537, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key EE964E70
[2023/04/11 10:06:56.593545, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x555b53d0d080
[2023/04/11 10:06:56.593559, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/11 10:06:56.593567, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/11 10:06:56.593572, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key 'EE964E70' stored
[2023/04/11 10:06:56.593580, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000004 (4)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0xee964e70 (4002827888)
session_wire_id : 0x00000000ee964e70 (4002827888)
creation_time : Tue Apr 11 10:06:57 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000010a0a1 (1089697)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x8f19b48f241f67f4 (-8135272724988729356)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 10:06:57 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:60046'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/11 10:06:56.593717, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/11 10:06:56.593725, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key EE964E70
[2023/04/11 10:06:56.593732, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1421(smbXsrv_session_update)
[2023/04/11 10:06:56.593737, 10, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1427(smbXsrv_session_update)
smbXsrv_session_update: global_id (0xee964e70) stored
[2023/04/11 10:06:56.593744, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0xee964e70 (4002827888)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0xee964e70 (4002827888)
session_wire_id : 0x00000000ee964e70 (4002827888)
creation_time : Tue Apr 11 10:06:57 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x000000000010a0a1 (1089697)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x8f19b48f241f67f4 (-8135272724988729356)
channel_id : 0x0000000000000000 (0)
creation_time : Tue Apr 11 10:06:57 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:60046'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Tue Apr 11 10:06:57 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : *
pending_auth: struct smbXsrv_session_auth0
prev : *
next : NULL
session : *
connection : *
gensec : *
preauth : *
in_flags : 0x00 (0)
in_security_mode : 0x01 (1)
creation_time : Tue Apr 11 10:06:57 2023 UTC
idle_time : Tue Apr 11 10:06:57 2023 UTC
channel_id : 0x0000000000000000 (0)
[2023/04/11 10:06:56.593968, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 10:06:56.593976, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 10:06:56.593983, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 10:06:56.593990, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 10:06:56.593997, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 10:06:56.594049, 6, pid=1089697, effective(0, 0), real(0, 0)] ../../librpc/ndr/ndr_string.c:178(ndr_pull_string)
short string '', sent with NULL termination despite NOTERM flag in IDL
[2023/04/11 10:06:56.594066, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
authenticate: struct AUTHENTICATE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmAuthenticate (3)
LmChallengeResponseLen : 0x0018 (24)
LmChallengeResponseMaxLen: 0x0018 (24)
LmChallengeResponse : *
LmChallengeResponse : union ntlmssp_LM_RESPONSE_with_len(case 24)
v1: struct LM_RESPONSE
Response : 000000000000000000000000000000000000000000000000
NtChallengeResponseLen : 0x00cc (204)
NtChallengeResponseMaxLen: 0x00cc (204)
NtChallengeResponse : *
NtChallengeResponse : union ntlmssp_NTLM_RESPONSE_with_len(case 204)
v2: struct NTLMv2_RESPONSE
Response : a328f8ce2d267d5a4917a01aa05d5491
Challenge: struct NTLMv2_CLIENT_CHALLENGE
RespType : 0x01 (1)
HiRespType : 0x01 (1)
Reserved1 : 0x0000 (0)
Reserved2 : 0x00000000 (0)
TimeStamp : Tue Apr 11 10:06:57 2023 UTC
ChallengeFromClient : 0cacbf18104961bf
Reserved3 : 0x00000000 (0)
AvPairs: struct AV_PAIR_LIST
count : 0x0000000a (10)
pair: ARRAY(10)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x0002 (2)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : ''
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'knox'
pair: struct AV_PAIR
AvId : MsvAvTimestamp (0x7)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x7)
AvTimestamp : Tue Apr 11 10:06:57 2023 UTC
pair: struct AV_PAIR
AvId : MsvAvFlags (0x6)
AvLen : 0x0004 (4)
Value : union ntlmssp_AvValue(case 0x6)
AvFlags : 0x00000002 (2)
0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT
1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE
0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE
pair: struct AV_PAIR
AvId : MsvAvSingleHost (0x8)
AvLen : 0x0030 (48)
Value : union ntlmssp_AvValue(case 0x8)
AvSingleHost: struct ntlmssp_SingleHostData
Size : 0x00000030 (48)
Z4 : 0x00000000 (0)
token_info: struct LSAP_TOKEN_INFO_INTEGRITY
Flags : 0x00000000 (0)
TokenIL : 0x00000000 (0)
MachineId : 0694bed4c22ac5a04010fef9cb1447ffe3eba981f5d91db32f29995f269fe3f1
remaining : DATA_BLOB length=0
pair: struct AV_PAIR
AvId : MsvChannelBindings (0xA)
AvLen : 0x0010 (16)
Value : union ntlmssp_AvValue(case 0xA)
ChannelBindings : 00000000000000000000000000000000
pair: struct AV_PAIR
AvId : MsvAvTargetName (0x9)
AvLen : 0x0012 (18)
Value : union ntlmssp_AvValue(case 0x9)
AvTargetName : 'cifs/knox'
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
DomainNameLen : 0x000c (12)
DomainNameMaxLen : 0x000c (12)
DomainName : *
DomainName : 'COMIND'
UserNameLen : 0x000c (12)
UserNameMaxLen : 0x000c (12)
UserName : *
UserName : 'zzuser'
WorkstationLen : 0x0006 (6)
WorkstationMaxLen : 0x0006 (6)
Workstation : *
Workstation : 'JAN'
EncryptedRandomSessionKeyLen: 0x0010 (16)
EncryptedRandomSessionKeyMaxLen: 0x0010 (16)
EncryptedRandomSessionKey: *
EncryptedRandomSessionKey: DATA_BLOB length=16
[0000] F3 87 CE 90 D6 28 36 2E 3C 74 8F E0 CE B0 E7 69 .....(6. <t.....i
NegotiateFlags : 0x62088215 (1644724757)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
0: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
ProductBuild : 0x0000 (0)
Reserved: ARRAY(3)
[0] : 0x00 (0)
[1] : 0x00 (0)
[2] : 0x00 (0)
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15)
[2023/04/11 10:06:56.594504, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:509(ntlmssp_server_preauth)
Got user=[zzuser] domain=[COMIND] workstation=[JAN] len1=24 len2=204
[2023/04/11 10:06:56.594515, 6, pid=1089697, effective(0, 0), real(0, 0)] ../../librpc/ndr/ndr_string.c:178(ndr_pull_string)
short string '', sent with NULL termination despite NOTERM flag in IDL
[2023/04/11 10:06:56.594525, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:544(ntlmssp_server_preauth)
[2023/04/11 10:06:56.594531, 1, pid=1089697, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&v2_resp: struct NTLMv2_RESPONSE
Response : a328f8ce2d267d5a4917a01aa05d5491
Challenge: struct NTLMv2_CLIENT_CHALLENGE
RespType : 0x01 (1)
HiRespType : 0x01 (1)
Reserved1 : 0x0000 (0)
Reserved2 : 0x00000000 (0)
TimeStamp : Tue Apr 11 10:06:57 2023 UTC
ChallengeFromClient : 0cacbf18104961bf
Reserved3 : 0x00000000 (0)
AvPairs: struct AV_PAIR_LIST
count : 0x0000000a (10)
pair: ARRAY(10)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x0002 (2)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : ''
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'knox'
pair: struct AV_PAIR
AvId : MsvAvTimestamp (0x7)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x7)
AvTimestamp : Tue Apr 11 10:06:57 2023 UTC
pair: struct AV_PAIR
AvId : MsvAvFlags (0x6)
AvLen : 0x0004 (4)
Value : union ntlmssp_AvValue(case 0x6)
AvFlags : 0x00000002 (2)
0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT
1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE
0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE
pair: struct AV_PAIR
AvId : MsvAvSingleHost (0x8)
AvLen : 0x0030 (48)
Value : union ntlmssp_AvValue(case 0x8)
AvSingleHost: struct ntlmssp_SingleHostData
Size : 0x00000030 (48)
Z4 : 0x00000000 (0)
token_info: struct LSAP_TOKEN_INFO_INTEGRITY
Flags : 0x00000000 (0)
TokenIL : 0x00000000 (0)
MachineId : 0694bed4c22ac5a04010fef9cb1447ffe3eba981f5d91db32f29995f269fe3f1
remaining : DATA_BLOB length=0
pair: struct AV_PAIR
AvId : MsvChannelBindings (0xA)
AvLen : 0x0010 (16)
Value : union ntlmssp_AvValue(case 0xA)
ChannelBindings : 00000000000000000000000000000000
pair: struct AV_PAIR
AvId : MsvAvTargetName (0x9)
AvLen : 0x0012 (18)
Value : union ntlmssp_AvValue(case 0x9)
AvTargetName : 'cifs/knox'
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
[2023/04/11 10:06:56.594771, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_util.c:123(make_user_info_map)
Mapping user [COMIND]\[zzuser] from workstation [JAN]
[2023/04/11 10:06:56.594780, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:64(make_user_info)
attempting to make a user_info for zzuser (zzuser)
[2023/04/11 10:06:56.594787, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:72(make_user_info)
making strings for zzuser's user_info struct
[2023/04/11 10:06:56.594796, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:117(make_user_info)
making blobs for zzuser's user_info struct
[2023/04/11 10:06:56.594804, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:163(make_user_info)
made a user_info for zzuser (zzuser)
[2023/04/11 10:06:56.594812, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:200(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [COMIND]\[zzuser]@[JAN] with the new password interface
[2023/04/11 10:06:56.594820, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:203(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [COMIND]\[zzuser]@[JAN]
[2023/04/11 10:06:56.594828, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:213(auth_check_ntlm_password)
check_ntlm_password: auth_context challenge created by random
[2023/04/11 10:06:56.594835, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:216(auth_check_ntlm_password)
challenge is:
[2023/04/11 10:06:56.594845, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/util/util.c:722(dump_data)
[0000] 4D 6C B7 D7 BD 51 9C AD Ml...Q..
[2023/04/11 10:06:56.594859, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_builtin.c:41(check_anonymous_security)
Check auth for: [zzuser]
[2023/04/11 10:06:56.594866, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:249(auth_check_ntlm_password)
auth_check_ntlm_password: anonymous had nothing to say
[2023/04/11 10:06:56.594874, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_sam.c:46(auth_sam_ignoredomain_auth)
auth_sam_ignoredomain_auth: Check auth for: [COMIND]\[zzuser]
[2023/04/11 10:06:56.594883, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2023/04/11 10:06:56.594891, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2023/04/11 10:06:56.594898, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2023/04/11 10:06:56.594905, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 10:06:56.594913, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 10:06:56.594949, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/lib/smbldap.c:1307(smbldap_search_ext)
smbldap_search_ext: base => [dc=zombie,dc=io], filter => [(&(uid=zzuser)(objectclass=sambaSamAccount))], scope => [2]
[2023/04/11 10:06:56.595600, 4, pid=1089697, effective(0, 0), real(0, 0), class=passdb] ../../source3/passdb/pdb_ldap.c:1563(ldapsam_getsampwnam)
ldapsam_getsampwnam: Unable to locate user [zzuser] count=0
[2023/04/11 10:06:56.595645, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 10:06:56.595656, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/check_samsec.c:398(check_sam_security)
check_sam_security: Couldn't find user 'zzuser' in passdb.
[2023/04/11 10:06:56.595665, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:258(auth_check_ntlm_password)
auth_check_ntlm_password: sam_ignoredomain authentication for user [zzuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/11 10:06:56.595676, 2, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [zzuser] -> [zzuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/11 10:06:56.595704, 2, pid=1089697, effective(0, 0), real(0, 0), class=auth_audit] ../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [COMIND]\[zzuser] at [Tue, 11 Apr 2023 10:06:56.595692 UTC] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JAN] remote host [ipv4:192.168.50.106:60046] mapped to [COMIND]\[zzuser]. local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-11T10:06:56.595778+0000", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:60046", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "COMIND", "clientAccount": "zzuser", "workstation": "JAN", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "zzuser", "mappedDomain": "COMIND", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 5241}}
[2023/04/11 10:06:56.595822, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/auth_ntlmssp.c:210(auth3_check_password_send)
auth3_check_password_send: Checking NTLMSSP password for COMIND\zzuser failed: NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/11 10:06:56.595832, 3, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_util.c:2295(do_map_to_guest_server_info)
No such user zzuser [COMIND] - using guest account
[2023/04/11 10:06:56.595850, 3, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:3945(lp_load_ex)
lp_load_ex: refreshing parameters
[2023/04/11 10:06:56.595860, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:1371(free_param_opts)
Freeing parametrics:
[2023/04/11 10:06:56.595917, 3, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:551(init_globals)
Initialising global parameters
[2023/04/11 10:06:56.595968, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/util/debug.c:811(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
dsdb_transaction_json_audit: 10
dsdb_group_audit: 10
dsdb_group_json_audit: 10
[2023/04/11 10:06:56.596073, 3, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2847(lp_do_section)
Processing section "[global]"
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter logging = file
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter server role = standalone server
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter usershare allow guests = yes
doing parameter netbios name = knox
doing parameter workgroup = CoMind
doing parameter root preexec = /usr/local/sbin/mkhome %U
doing parameter passdb backend = ldapsam:ldap://vogon.zombie.io
doing parameter ldap suffix = dc=zombie,dc=io
doing parameter ldap user suffix = ou=people
doing parameter ldap group suffix = ou=groups
doing parameter ldap machine suffix = ou=computers
doing parameter ldap idmap suffix = ou=Idmap
doing parameter ldap admin dn = cn=admin,dc=zombie,dc=io
doing parameter ldap ssl = start tls
doing parameter ldap passwd sync = yes
[2023/04/11 10:06:56.596305, 2, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[homes]"
doing parameter comment = Home Directories
doing parameter browseable = no
doing parameter read only = no
doing parameter create mask = 0700
doing parameter directory mask = 0700
doing parameter valid users = %S
[2023/04/11 10:06:56.596374, 2, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[public]"
doing parameter comment = Public Folder
doing parameter path = /data1
doing parameter writable = yes
doing parameter guest ok = yes
doing parameter guest only = yes
doing parameter force create mode = 775
doing parameter force directory mode = 775
[2023/04/11 10:06:56.596440, 2, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[engineering]"
doing parameter path = /data1/engineering
doing parameter writable = yes
doing parameter read only = no
doing parameter guest ok = no
doing parameter create mask = 0660
doing parameter directory mask = 0770
doing parameter browsable = yes
[2023/04/11 10:06:56.596503, 2, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[qara]"
doing parameter path = /data1/qara
doing parameter read only = no
doing parameter browsable = yes
doing parameter guest ok = yes
doing parameter create mask = 0660
doing parameter directory mask = 0770
[2023/04/11 10:06:56.596555, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:3987(lp_load_ex)
pm_process() returned Yes
[2023/04/11 10:06:56.596573, 3, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:1648(lp_add_ipc)
adding IPC service
[2023/04/11 10:06:56.596593, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: ntlmssp[0x555b53d1cc90]: subreq: 0x555b53bcee60
[2023/04/11 10:06:56.596603, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: spnego[0x555b53d12290]: subreq: 0x555b53d0e2e0
[2023/04/11 10:06:56.596616, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 10:06:56.596671, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:981(ntlmssp_server_postauth)
ntlmssp_server_auth: Failed to create unmodified session key.
[2023/04/11 10:06:56.596681, 5, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:997(ntlmssp_server_postauth)
server session key is invalid (len == 0), cannot do KEY_EXCH!
[2023/04/11 10:06:56.596694, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: ntlmssp[0x555b53d1cc90]: NT_STATUS_OK tevent_req[0x555b53bcee60/../../auth/ntlmssp/ntlmssp.c:180]: state[2] error[0 (0x0)] state[struct gensec_ntlmssp_update_state (0x555b53bcf010)] timer[(nil)] finish[../../auth/ntlmssp/ntlmssp.c:244]
[2023/04/11 10:06:56.596710, 10, pid=1089697, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: spnego[0x555b53d12290]: NT_STATUS_OK tevent_req[0x555b53d0e2e0/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x555b53d0e490)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
[2023/04/11 10:06:56.596719, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/11 10:06:56.596727, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/11 10:06:56.596735, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/11 10:06:56.596742, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/11 10:06:56.596749, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/11 10:06:56.596766, 4, pid=1089697, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/11 10:06:56.596790, 4, pid=1089697, effective(0, 0), real(0, 0), class=auth_audit] ../../auth/auth_log.c:740(log_successful_authz_event_human_readable)
Successful AuthZ: [SMB2,NTLMSSP] user [KNOX]\[nobody] [S-1-5-21-2215539713-2866336102-139347275-501] at [Tue, 11 Apr 2023 10:06:56.596785 UTC] Remote host [ipv4:192.168.50.106:60046] local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-11T10:06:56.596818+0000", "type": "Authorization", "Authorization": {"version": {"major": 1, "minor": 1}, "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:60046", "serviceDescription": "SMB2", "authType": "NTLMSSP", "domain": "KNOX", "account": "nobody", "sid": "S-1-5-21-2215539713-2866336102-139347275-501", "sessionId": "a45cf516-8ac1-48a4-beaf-33be1bff9973", "logonServer": null, "transportProtection": "SMB", "accountFlags": "0x00000000"}}
[2023/04/11 10:06:56.596877, 5, pid=1089697, effective(0, 0), real(0, 0)] ../../lib/util/debug.c:811(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
[2023/04/12 10:24:38.473212, 6, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2363(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Apr 12 10:22:03 2023
[2023/04/12 10:24:38.473633, 3, pid=1152101, effective(0, 0), real(0, 0), class=locking] ../../source3/smbd/oplock.c:1427(init_oplocks)
init_oplocks: initializing messages.
[2023/04/12 10:24:38.473649, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 774 - private_data=0x55db7b26eff0
[2023/04/12 10:24:38.473659, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 778 - private_data=0x55db7b26eff0
[2023/04/12 10:24:38.473667, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 770 - private_data=0x55db7b26eff0
[2023/04/12 10:24:38.473674, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 801 - private_data=0x55db7b26eff0
[2023/04/12 10:24:38.473681, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 787 - private_data=0x55db7b26eff0
[2023/04/12 10:24:38.473688, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 779 - private_data=0x55db7b26eff0
[2023/04/12 10:24:38.473695, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 15 - private_data=(nil)
[2023/04/12 10:24:38.473702, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:739(messaging_register)
Overriding messaging pointer for type 15 - private_data=(nil)
[2023/04/12 10:24:38.473709, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 16 - private_data=(nil)
[2023/04/12 10:24:38.473716, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 16 - private_data=0x55db7b26eff0
[2023/04/12 10:24:38.473723, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 33 - private_data=0x55db7af77c90
[2023/04/12 10:24:38.473743, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 33 - private_data=0x55db7b26eff0
[2023/04/12 10:24:38.473750, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 790 - private_data=(nil)
[2023/04/12 10:24:38.473762, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 790 - private_data=0x55db7b26eff0
[2023/04/12 10:24:38.473769, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 791 - private_data=(nil)
[2023/04/12 10:24:38.473776, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:771(messaging_deregister)
Deregistering messaging pointer for type 1 - private_data=(nil)
[2023/04/12 10:24:38.473782, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/messages.c:723(messaging_register)
Registering messaging pointer for type 1 - private_data=(nil)
[2023/04/12 10:24:38.473793, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/util_event.c:100(event_add_idle)
event_add_idle: idle_evt(keepalive) 0x55db7b285500
[2023/04/12 10:24:38.473800, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/util_event.c:100(event_add_idle)
event_add_idle: idle_evt(deadtime) 0x55db7b2844d0
[2023/04/12 10:24:38.473812, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/util_event.c:100(event_add_idle)
event_add_idle: idle_evt(housekeeping) 0x55db7b27b4b0
[2023/04/12 10:24:38.473840, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/util_sock.c:248(read_smb_length_return_keepalive)
got smb length of 200
[2023/04/12 10:24:38.473851, 6, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/process.c:1954(process_smb)
got message type 0x0 of len 0xc8
[2023/04/12 10:24:38.473859, 3, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/process.c:1956(process_smb)
Transaction 0 of length 204 (0 toread)
[2023/04/12 10:24:38.473866, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:4438(smbd_smb2_process_negprot)
smbd_smb2_first_negprot: packet length 200
[2023/04/12 10:24:38.473886, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:706(smb2_validate_sequence_number)
smb2_validate_sequence_number: smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap
[2023/04/12 10:24:38.473898, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:2910(smbd_smb2_request_dispatch)
smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 0
[2023/04/12 10:24:38.473920, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/12 10:24:38.473933, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/12 10:24:38.473950, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/12 10:24:38.473979, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:493(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2023/04/12 10:24:38.473997, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/12 10:24:38.474010, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/12 10:24:38.474017, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/12 10:24:38.474028, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/12 10:24:38.474034, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/12 10:24:38.474072, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/12 10:24:38.474081, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/util.c:1217(set_remote_arch)
set_remote_arch: Client arch is 'Vista'
[2023/04/12 10:24:38.474097, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/util/debug.c:811(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
dsdb_transaction_json_audit: 10
dsdb_group_audit: 10
dsdb_group_json_audit: 10
[2023/04/12 10:24:38.474267, 6, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2363(lp_file_list_changed)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Apr 12 10:22:03 2023
[2023/04/12 10:24:38.474285, 3, pid=1152101, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_negprot.c:293(smbd_smb2_request_process_negprot)
Selected protocol SMB3_11
[2023/04/12 10:24:38.474308, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:563(make_auth3_context_for_ntlm)
make_auth3_context_for_ntlm: Making default auth method list for server role = 'standalone server', encrypt passwords = yes
[2023/04/12 10:24:38.474321, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend anonymous
[2023/04/12 10:24:38.474332, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'anonymous'
[2023/04/12 10:24:38.474340, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend sam
[2023/04/12 10:24:38.474347, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'sam'
[2023/04/12 10:24:38.474353, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend sam_ignoredomain
[2023/04/12 10:24:38.474360, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'sam_ignoredomain'
[2023/04/12 10:24:38.474367, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend sam_netlogon3
[2023/04/12 10:24:38.474374, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'sam_netlogon3'
[2023/04/12 10:24:38.474380, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend winbind
[2023/04/12 10:24:38.474387, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'winbind'
[2023/04/12 10:24:38.474397, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:51(smb_register_auth)
Attempting to register auth backend unix
[2023/04/12 10:24:38.474404, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:63(smb_register_auth)
Successfully added auth method 'unix'
[2023/04/12 10:24:38.474410, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match anonymous
[2023/04/12 10:24:38.474418, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method anonymous has a valid init
[2023/04/12 10:24:38.474425, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match sam_ignoredomain
[2023/04/12 10:24:38.474432, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method sam_ignoredomain has a valid init
[2023/04/12 10:24:38.476209, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2023/04/12 10:24:38.476237, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2023/04/12 10:24:38.476246, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2023/04/12 10:24:38.476256, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'spnego' registered
[2023/04/12 10:24:38.476263, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'schannel' registered
[2023/04/12 10:24:38.476270, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'naclrpc_as_system' registered
[2023/04/12 10:24:38.476278, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'sasl-EXTERNAL' registered
[2023/04/12 10:24:38.476285, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp' registered
[2023/04/12 10:24:38.476292, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'ntlmssp_resume_ccache' registered
[2023/04/12 10:24:38.476299, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_basic' registered
[2023/04/12 10:24:38.476306, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_ntlm' registered
[2023/04/12 10:24:38.476313, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'http_negotiate' registered
[2023/04/12 10:24:38.476322, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'krb5' registered
[2023/04/12 10:24:38.476329, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:987(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2023/04/12 10:24:38.476399, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC mechanism spnego
[2023/04/12 10:24:38.476459, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC submechanism ntlmssp
[2023/04/12 10:24:38.476497, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: spnego[0x55db7b289810]: subreq: 0x55db7b2878a0
[2023/04/12 10:24:38.476513, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: spnego[0x55db7b289810]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x55db7b2878a0/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x55db7b287a50)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
[2023/04/12 10:24:38.476565, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:3747(smbd_smb2_request_done_ex)
smbd_smb2_request_done_ex: mid [0] idx[1] status[NT_STATUS_OK] body[64] dyn[yes:140] at ../../source3/smbd/smb2_negprot.c:667
[2023/04/12 10:24:38.476581, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:963(smb2_set_operation_credit)
smb2_set_operation_credit: smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 8192/8192, total granted/max/low/range 1/8192/1/1
[2023/04/12 10:24:40.667186, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:4889(smbd_smb2_io_handler)
smbd_smb2_request idx[1] of 5 vectors
[2023/04/12 10:24:40.667261, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:706(smb2_validate_sequence_number)
smb2_validate_sequence_number: smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap
[2023/04/12 10:24:40.667288, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:2910(smbd_smb2_request_dispatch)
smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 1
[2023/04/12 10:24:40.667312, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/12 10:24:40.667321, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/12 10:24:40.667329, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/12 10:24:40.667353, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:493(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2023/04/12 10:24:40.667382, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/12 10:24:40.667399, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/12 10:24:40.667412, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key 2895EFF9
[2023/04/12 10:24:40.667432, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x55db7b2866a0
[2023/04/12 10:24:40.667478, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/12 10:24:40.667545, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/12 10:24:40.667551, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key '2895EFF9' stored
[2023/04/12 10:24:40.667568, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000001 (1)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0x2895eff9 (680914937)
session_wire_id : 0x000000002895eff9 (680914937)
creation_time : Wed Apr 12 10:24:41 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x0000000000119465 (1152101)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x4bac6e96b678d733 (5452854842424350515)
channel_id : 0x0000000000000000 (0)
creation_time : Wed Apr 12 10:24:41 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:35206'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/12 10:24:40.667729, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/12 10:24:40.667738, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key 2895EFF9
[2023/04/12 10:24:40.667746, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1324(smbXsrv_session_create)
[2023/04/12 10:24:40.667751, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1330(smbXsrv_session_create)
smbXsrv_session_create: global_id (0x2895eff9) stored
[2023/04/12 10:24:40.667758, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0x2895eff9 (680914937)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0x2895eff9 (680914937)
session_wire_id : 0x000000002895eff9 (680914937)
creation_time : Wed Apr 12 10:24:41 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x0000000000119465 (1152101)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x4bac6e96b678d733 (5452854842424350515)
channel_id : 0x0000000000000000 (0)
creation_time : Wed Apr 12 10:24:41 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:35206'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Wed Apr 12 10:24:41 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : NULL
[2023/04/12 10:24:40.667953, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:563(make_auth3_context_for_ntlm)
make_auth3_context_for_ntlm: Making default auth method list for server role = 'standalone server', encrypt passwords = yes
[2023/04/12 10:24:40.667966, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match anonymous
[2023/04/12 10:24:40.667975, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method anonymous has a valid init
[2023/04/12 10:24:40.667986, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:424(load_auth_module)
load_auth_module: Attempting to find an auth method to match sam_ignoredomain
[2023/04/12 10:24:40.667993, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:449(load_auth_module)
load_auth_module: auth method sam_ignoredomain has a valid init
[2023/04/12 10:24:40.668065, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC mechanism spnego
[2023/04/12 10:24:40.668074, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/12 10:24:40.668082, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/12 10:24:40.668091, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key 2895EFF9
[2023/04/12 10:24:40.668099, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x55db7b27d080
[2023/04/12 10:24:40.668112, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/12 10:24:40.668121, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/12 10:24:40.668126, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key '2895EFF9' stored
[2023/04/12 10:24:40.668134, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000002 (2)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0x2895eff9 (680914937)
session_wire_id : 0x000000002895eff9 (680914937)
creation_time : Wed Apr 12 10:24:41 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x0000000000119465 (1152101)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x4bac6e96b678d733 (5452854842424350515)
channel_id : 0x0000000000000000 (0)
creation_time : Wed Apr 12 10:24:41 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:35206'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/12 10:24:40.668272, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/12 10:24:40.668280, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key 2895EFF9
[2023/04/12 10:24:40.668288, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1421(smbXsrv_session_update)
[2023/04/12 10:24:40.668292, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1427(smbXsrv_session_update)
smbXsrv_session_update: global_id (0x2895eff9) stored
[2023/04/12 10:24:40.668299, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0x2895eff9 (680914937)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0x2895eff9 (680914937)
session_wire_id : 0x000000002895eff9 (680914937)
creation_time : Wed Apr 12 10:24:41 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x00 (0)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
0: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x00 (0)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x0000000000119465 (1152101)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x4bac6e96b678d733 (5452854842424350515)
channel_id : 0x0000000000000000 (0)
creation_time : Wed Apr 12 10:24:41 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:35206'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Wed Apr 12 10:24:41 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : *
pending_auth: struct smbXsrv_session_auth0
prev : *
next : NULL
session : *
connection : *
gensec : *
preauth : *
in_flags : 0x00 (0)
in_security_mode : 0x01 (1)
creation_time : Wed Apr 12 10:24:41 2023 UTC
idle_time : Wed Apr 12 10:24:41 2023 UTC
channel_id : 0x0000000000000000 (0)
[2023/04/12 10:24:40.668528, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/12 10:24:40.668536, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/12 10:24:40.668544, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/12 10:24:40.668551, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/12 10:24:40.668558, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/12 10:24:40.668613, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:748(gensec_start_mech)
Starting GENSEC submechanism ntlmssp
[2023/04/12 10:24:40.668635, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x62088215
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
NTLMSSP_NEGOTIATE_VERSION
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
[2023/04/12 10:24:40.668935, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
negotiate: struct NEGOTIATE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmNegotiate (1)
NegotiateFlags : 0x62088215 (1644724757)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
0: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
DomainNameLen : 0x0000 (0)
DomainNameMaxLen : 0x0000 (0)
DomainName : *
DomainName : ''
WorkstationLen : 0x0000 (0)
WorkstationMaxLen : 0x0000 (0)
Workstation : *
Workstation : ''
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
ProductBuild : 0x0000 (0)
Reserved: ARRAY(3)
[0] : 0x00 (0)
[1] : 0x00 (0)
[2] : 0x00 (0)
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15)
[2023/04/12 10:24:40.669113, 6, pid=1152101, effective(0, 0), real(0, 0)] ../../librpc/ndr/ndr_string.c:178(ndr_pull_string)
short string '', sent with NULL termination despite NOTERM flag in IDL
[2023/04/12 10:24:40.669124, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
challenge: struct CHALLENGE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmChallenge (0x2)
TargetNameLen : 0x0008 (8)
TargetNameMaxLen : 0x0008 (8)
TargetName : *
TargetName : 'KNOX'
NegotiateFlags : 0x628a8215 (1653244437)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
1: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
1: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
ServerChallenge : ffda716dbd28eb9a
Reserved : 0000000000000000
TargetInfoLen : 0x003a (58)
TargetInfoMaxLen : 0x003a (58)
TargetInfo : *
TargetInfo: struct AV_PAIR_LIST
count : 0x00000006 (6)
pair: ARRAY(6)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x0002 (2)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : ''
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'knox'
pair: struct AV_PAIR
AvId : MsvAvTimestamp (0x7)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x7)
AvTimestamp : Wed Apr 12 10:24:41 2023 UTC
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1)
ProductBuild : 0x0000 (0)
Reserved : 000000
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF)
[2023/04/12 10:24:40.669371, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: ntlmssp[0x55db7b28cc90]: subreq: 0x55db7b13ee60
[2023/04/12 10:24:40.669379, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: spnego[0x55db7b282290]: subreq: 0x55db7b27e2e0
[2023/04/12 10:24:40.669394, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/12 10:24:40.669419, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: ntlmssp[0x55db7b28cc90]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x55db7b13ee60/../../auth/ntlmssp/ntlmssp.c:180]: state[2] error[0 (0x0)] state[struct gensec_ntlmssp_update_state (0x55db7b13f010)] timer[(nil)] finish[../../auth/ntlmssp/ntlmssp.c:215]
[2023/04/12 10:24:40.669440, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: spnego[0x55db7b282290]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x55db7b27e2e0/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x55db7b27e490)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
[2023/04/12 10:24:40.669460, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/12 10:24:40.669468, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/12 10:24:40.669475, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/12 10:24:40.669483, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/12 10:24:40.669490, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/12 10:24:40.669506, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/12 10:24:40.669516, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:3747(smbd_smb2_request_done_ex)
smbd_smb2_request_done_ex: mid [1] idx[1] status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:151] at ../../source3/smbd/smb2_sesssetup.c:183
[2023/04/12 10:24:40.669528, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:963(smb2_set_operation_credit)
smb2_set_operation_credit: smb2_set_operation_credit: requested 8192, charge 1, granted 1, current possible/max 8192/8192, total granted/max/low/range 1/8192/2/1
[2023/04/12 10:24:40.670522, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:4889(smbd_smb2_io_handler)
smbd_smb2_request idx[1] of 5 vectors
[2023/04/12 10:24:40.670558, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2_credits] ../../source3/smbd/smb2_server.c:706(smb2_validate_sequence_number)
smb2_validate_sequence_number: smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap
[2023/04/12 10:24:40.670569, 10, pid=1152101, effective(0, 0), real(0, 0), class=smb2] ../../source3/smbd/smb2_server.c:2910(smbd_smb2_request_dispatch)
smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 2
[2023/04/12 10:24:40.670582, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/12 10:24:40.670590, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/12 10:24:40.670602, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key 2895EFF9
[2023/04/12 10:24:40.670613, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x55db7b27d080
[2023/04/12 10:24:40.670635, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/12 10:24:40.670644, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/12 10:24:40.670650, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key '2895EFF9' stored
[2023/04/12 10:24:40.670658, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000003 (3)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0x2895eff9 (680914937)
session_wire_id : 0x000000002895eff9 (680914937)
creation_time : Wed Apr 12 10:24:41 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x0000000000119465 (1152101)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x4bac6e96b678d733 (5452854842424350515)
channel_id : 0x0000000000000000 (0)
creation_time : Wed Apr 12 10:24:41 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:35206'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/12 10:24:40.670823, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/12 10:24:40.670832, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key 2895EFF9
[2023/04/12 10:24:40.670840, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1421(smbXsrv_session_update)
[2023/04/12 10:24:40.670845, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1427(smbXsrv_session_update)
smbXsrv_session_update: global_id (0x2895eff9) stored
[2023/04/12 10:24:40.670852, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0x2895eff9 (680914937)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0x2895eff9 (680914937)
session_wire_id : 0x000000002895eff9 (680914937)
creation_time : Wed Apr 12 10:24:41 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x0000000000119465 (1152101)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x4bac6e96b678d733 (5452854842424350515)
channel_id : 0x0000000000000000 (0)
creation_time : Wed Apr 12 10:24:41 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:35206'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Wed Apr 12 10:24:41 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : *
pending_auth: struct smbXsrv_session_auth0
prev : *
next : NULL
session : *
connection : *
gensec : *
preauth : *
in_flags : 0x00 (0)
in_security_mode : 0x01 (1)
creation_time : Wed Apr 12 10:24:41 2023 UTC
idle_time : Wed Apr 12 10:24:41 2023 UTC
channel_id : 0x0000000000000000 (0)
[2023/04/12 10:24:40.671085, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/12 10:24:40.671093, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/12 10:24:40.671101, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/12 10:24:40.671118, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:493(smbd_change_to_root_user)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2023/04/12 10:24:40.671130, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_lock)
dbwrap_lock_order_lock: check lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/12 10:24:40.671138, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:131(debug_lock_order)
lock order: 1:/run/samba/smbXsrv_session_global.tdb 2:<none> 3:<none> 4:<none>
[2023/04/12 10:24:40.671147, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Locking key 2895EFF9
[2023/04/12 10:24:40.671154, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:153(db_tdb_fetch_locked_internal)
db_tdb_fetch_locked_internal: Allocated locked data 0x55db7b27d080
[2023/04/12 10:24:40.671168, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/dbwrap/dbwrap_watch.c:452(dbwrap_watched_subrec_wakeup_fn)
dbwrap_watched_subrec_wakeup_fn: No watchers
[2023/04/12 10:24:40.671176, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:948(smbXsrv_session_global_store)
[2023/04/12 10:24:40.671181, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:949(smbXsrv_session_global_store)
smbXsrv_session_global_store: key '2895EFF9' stored
[2023/04/12 10:24:40.671188, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&global_blob: struct smbXsrv_session_globalB
version : SMBXSRV_VERSION_0 (0)
seqnum : 0x00000004 (4)
info : union smbXsrv_session_globalU(case 0)
info0 : *
info0: struct smbXsrv_session_global0
db_rec : *
session_global_id : 0x2895eff9 (680914937)
session_wire_id : 0x000000002895eff9 (680914937)
creation_time : Wed Apr 12 10:24:41 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x0000000000119465 (1152101)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x4bac6e96b678d733 (5452854842424350515)
channel_id : 0x0000000000000000 (0)
creation_time : Wed Apr 12 10:24:41 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:35206'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
[2023/04/12 10:24:40.671325, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap.c:178(dbwrap_lock_order_unlock)
dbwrap_lock_order_unlock: release lock order 1 for /run/samba/smbXsrv_session_global.tdb
[2023/04/12 10:24:40.671333, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key)
db_tdb_log_key: Unlocking key 2895EFF9
[2023/04/12 10:24:40.671340, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1421(smbXsrv_session_update)
[2023/04/12 10:24:40.671345, 10, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/smbXsrv_session.c:1427(smbXsrv_session_update)
smbXsrv_session_update: global_id (0x2895eff9) stored
[2023/04/12 10:24:40.671352, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&session_blob: struct smbXsrv_sessionB
version : SMBXSRV_VERSION_0 (0)
reserved : 0x00000000 (0)
info : union smbXsrv_sessionU(case 0)
info0 : *
info0: struct smbXsrv_session
table : *
db_rec : NULL
client : *
local_id : 0x2895eff9 (680914937)
global : *
global: struct smbXsrv_session_global0
db_rec : NULL
session_global_id : 0x2895eff9 (680914937)
session_wire_id : 0x000000002895eff9 (680914937)
creation_time : Wed Apr 12 10:24:41 2023 UTC
expiration_time : Thu Sep 14 02:48:05 30828 UTC
auth_time : NTTIME(0)
auth_session_info_seqnum : 0x00000000 (0)
auth_session_info : NULL
connection_dialect : 0x0311 (785)
signing_flags : 0x04 (4)
0: SMBXSRV_SIGNING_REQUIRED
0: SMBXSRV_PROCESSED_SIGNED_PACKET
1: SMBXSRV_PROCESSED_UNSIGNED_PACKET
encryption_flags : 0x08 (8)
0: SMBXSRV_ENCRYPTION_REQUIRED
0: SMBXSRV_ENCRYPTION_DESIRED
0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET
1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET
signing_key : NULL
encryption_key : NULL
decryption_key : NULL
num_channels : 0x00000001 (1)
channels: ARRAY(1)
channels: struct smbXsrv_channel_global0
server_id: struct server_id
pid : 0x0000000000119465 (1152101)
task_id : 0x00000000 (0)
vnn : 0xffffffff (4294967295)
unique_id : 0x4bac6e96b678d733 (5452854842424350515)
channel_id : 0x0000000000000000 (0)
creation_time : Wed Apr 12 10:24:41 2023 UTC
local_address : 'ipv4:192.168.50.7:445'
remote_address : 'ipv4:192.168.50.106:35206'
remote_name : '192.168.50.106'
signing_key : NULL
auth_session_info_seqnum : 0x00000000 (0)
connection : *
encryption_cipher : 0x0000 (0)
status : NT_STATUS_MORE_PROCESSING_REQUIRED
idle_time : Wed Apr 12 10:24:41 2023 UTC
nonce_high_random : 0x0000000000000000 (0)
nonce_high_max : 0x0000000000000000 (0)
nonce_high : 0x0000000000000000 (0)
nonce_low : 0x0000000000000000 (0)
tcon_table : *
homes_snum : 0xffffffff (4294967295)
pending_auth : *
pending_auth: struct smbXsrv_session_auth0
prev : *
next : NULL
session : *
connection : *
gensec : *
preauth : *
in_flags : 0x00 (0)
in_security_mode : 0x01 (1)
creation_time : Wed Apr 12 10:24:41 2023 UTC
idle_time : Wed Apr 12 10:24:41 2023 UTC
channel_id : 0x0000000000000000 (0)
[2023/04/12 10:24:40.671575, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/12 10:24:40.671583, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/12 10:24:40.671591, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/12 10:24:40.671598, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/12 10:24:40.671604, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/12 10:24:40.671653, 6, pid=1152101, effective(0, 0), real(0, 0)] ../../librpc/ndr/ndr_string.c:178(ndr_pull_string)
short string '', sent with NULL termination despite NOTERM flag in IDL
[2023/04/12 10:24:40.671669, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
authenticate: struct AUTHENTICATE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLmAuthenticate (3)
LmChallengeResponseLen : 0x0018 (24)
LmChallengeResponseMaxLen: 0x0018 (24)
LmChallengeResponse : *
LmChallengeResponse : union ntlmssp_LM_RESPONSE_with_len(case 24)
v1: struct LM_RESPONSE
Response : 000000000000000000000000000000000000000000000000
NtChallengeResponseLen : 0x00cc (204)
NtChallengeResponseMaxLen: 0x00cc (204)
NtChallengeResponse : *
NtChallengeResponse : union ntlmssp_NTLM_RESPONSE_with_len(case 204)
v2: struct NTLMv2_RESPONSE
Response : 8aa586568733cbe20048bc3522655b4f
Challenge: struct NTLMv2_CLIENT_CHALLENGE
RespType : 0x01 (1)
HiRespType : 0x01 (1)
Reserved1 : 0x0000 (0)
Reserved2 : 0x00000000 (0)
TimeStamp : Wed Apr 12 10:24:41 2023 UTC
ChallengeFromClient : 5a0d72fe08899633
Reserved3 : 0x00000000 (0)
AvPairs: struct AV_PAIR_LIST
count : 0x0000000a (10)
pair: ARRAY(10)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x0002 (2)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : ''
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'knox'
pair: struct AV_PAIR
AvId : MsvAvTimestamp (0x7)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x7)
AvTimestamp : Wed Apr 12 10:24:41 2023 UTC
pair: struct AV_PAIR
AvId : MsvAvFlags (0x6)
AvLen : 0x0004 (4)
Value : union ntlmssp_AvValue(case 0x6)
AvFlags : 0x00000002 (2)
0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT
1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE
0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE
pair: struct AV_PAIR
AvId : MsvAvSingleHost (0x8)
AvLen : 0x0030 (48)
Value : union ntlmssp_AvValue(case 0x8)
AvSingleHost: struct ntlmssp_SingleHostData
Size : 0x00000030 (48)
Z4 : 0x00000000 (0)
token_info: struct LSAP_TOKEN_INFO_INTEGRITY
Flags : 0x00000000 (0)
TokenIL : 0x00000000 (0)
MachineId : 3328d344da137f867eda8f1193abfb7b338b4db5f00302bdf6797c85bdde9059
remaining : DATA_BLOB length=0
pair: struct AV_PAIR
AvId : MsvChannelBindings (0xA)
AvLen : 0x0010 (16)
Value : union ntlmssp_AvValue(case 0xA)
ChannelBindings : 00000000000000000000000000000000
pair: struct AV_PAIR
AvId : MsvAvTargetName (0x9)
AvLen : 0x0012 (18)
Value : union ntlmssp_AvValue(case 0x9)
AvTargetName : 'cifs/knox'
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
DomainNameLen : 0x000c (12)
DomainNameMaxLen : 0x000c (12)
DomainName : *
DomainName : 'COMIND'
UserNameLen : 0x000c (12)
UserNameMaxLen : 0x000c (12)
UserName : *
UserName : 'zzuser'
WorkstationLen : 0x0006 (6)
WorkstationMaxLen : 0x0006 (6)
Workstation : *
Workstation : 'JAN'
EncryptedRandomSessionKeyLen: 0x0010 (16)
EncryptedRandomSessionKeyMaxLen: 0x0010 (16)
EncryptedRandomSessionKey: *
EncryptedRandomSessionKey: DATA_BLOB length=16
[0000] FA C0 5B 48 20 FD 35 24 B4 76 C4 33 F2 77 96 6C ..[H .5$ .v.3.w.l
NegotiateFlags : 0x62088215 (1644724757)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
0: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
Version: struct ntlmssp_VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6)
ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1)
ProductBuild : 0x0000 (0)
Reserved: ARRAY(3)
[0] : 0x00 (0)
[1] : 0x00 (0)
[2] : 0x00 (0)
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15)
[2023/04/12 10:24:40.672161, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:509(ntlmssp_server_preauth)
Got user=[zzuser] domain=[COMIND] workstation=[JAN] len1=24 len2=204
[2023/04/12 10:24:40.672172, 6, pid=1152101, effective(0, 0), real(0, 0)] ../../librpc/ndr/ndr_string.c:178(ndr_pull_string)
short string '', sent with NULL termination despite NOTERM flag in IDL
[2023/04/12 10:24:40.672183, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:544(ntlmssp_server_preauth)
[2023/04/12 10:24:40.672188, 1, pid=1152101, effective(0, 0), real(0, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:429(ndr_print_debug)
&v2_resp: struct NTLMv2_RESPONSE
Response : 8aa586568733cbe20048bc3522655b4f
Challenge: struct NTLMv2_CLIENT_CHALLENGE
RespType : 0x01 (1)
HiRespType : 0x01 (1)
Reserved1 : 0x0000 (0)
Reserved2 : 0x00000000 (0)
TimeStamp : Wed Apr 12 10:24:41 2023 UTC
ChallengeFromClient : 5a0d72fe08899633
Reserved3 : 0x00000000 (0)
AvPairs: struct AV_PAIR_LIST
count : 0x0000000a (10)
pair: ARRAY(10)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName (0x1)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'KNOX'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName (0x4)
AvLen : 0x0002 (2)
Value : union ntlmssp_AvValue(case 0x4)
AvDnsDomainName : ''
pair: struct AV_PAIR
AvId : MsvAvDnsComputerName (0x3)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x3)
AvDnsComputerName : 'knox'
pair: struct AV_PAIR
AvId : MsvAvTimestamp (0x7)
AvLen : 0x0008 (8)
Value : union ntlmssp_AvValue(case 0x7)
AvTimestamp : Wed Apr 12 10:24:41 2023 UTC
pair: struct AV_PAIR
AvId : MsvAvFlags (0x6)
AvLen : 0x0004 (4)
Value : union ntlmssp_AvValue(case 0x6)
AvFlags : 0x00000002 (2)
0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT
1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE
0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE
pair: struct AV_PAIR
AvId : MsvAvSingleHost (0x8)
AvLen : 0x0030 (48)
Value : union ntlmssp_AvValue(case 0x8)
AvSingleHost: struct ntlmssp_SingleHostData
Size : 0x00000030 (48)
Z4 : 0x00000000 (0)
token_info: struct LSAP_TOKEN_INFO_INTEGRITY
Flags : 0x00000000 (0)
TokenIL : 0x00000000 (0)
MachineId : 3328d344da137f867eda8f1193abfb7b338b4db5f00302bdf6797c85bdde9059
remaining : DATA_BLOB length=0
pair: struct AV_PAIR
AvId : MsvChannelBindings (0xA)
AvLen : 0x0010 (16)
Value : union ntlmssp_AvValue(case 0xA)
ChannelBindings : 00000000000000000000000000000000
pair: struct AV_PAIR
AvId : MsvAvTargetName (0x9)
AvLen : 0x0012 (18)
Value : union ntlmssp_AvValue(case 0x9)
AvTargetName : 'cifs/knox'
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union ntlmssp_AvValue(case 0x0)
[2023/04/12 10:24:40.672431, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_util.c:123(make_user_info_map)
Mapping user [COMIND]\[zzuser] from workstation [JAN]
[2023/04/12 10:24:40.672440, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:64(make_user_info)
attempting to make a user_info for zzuser (zzuser)
[2023/04/12 10:24:40.672447, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:72(make_user_info)
making strings for zzuser's user_info struct
[2023/04/12 10:24:40.672456, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:117(make_user_info)
making blobs for zzuser's user_info struct
[2023/04/12 10:24:40.672463, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/user_info.c:163(make_user_info)
made a user_info for zzuser (zzuser)
[2023/04/12 10:24:40.672471, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:200(auth_check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [COMIND]\[zzuser]@[JAN] with the new password interface
[2023/04/12 10:24:40.672479, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:203(auth_check_ntlm_password)
check_ntlm_password: mapped user is: [COMIND]\[zzuser]@[JAN]
[2023/04/12 10:24:40.672487, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:213(auth_check_ntlm_password)
check_ntlm_password: auth_context challenge created by random
[2023/04/12 10:24:40.672494, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:216(auth_check_ntlm_password)
challenge is:
[2023/04/12 10:24:40.672500, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/util/util.c:722(dump_data)
[0000] FF DA 71 6D BD 28 EB 9A ..qm.(..
[2023/04/12 10:24:40.672513, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_builtin.c:41(check_anonymous_security)
Check auth for: [zzuser]
[2023/04/12 10:24:40.672520, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:249(auth_check_ntlm_password)
auth_check_ntlm_password: anonymous had nothing to say
[2023/04/12 10:24:40.672528, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_sam.c:46(auth_sam_ignoredomain_auth)
auth_sam_ignoredomain_auth: Check auth for: [COMIND]\[zzuser]
[2023/04/12 10:24:40.672537, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2023/04/12 10:24:40.672548, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2023/04/12 10:24:40.672555, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2023/04/12 10:24:40.672562, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/12 10:24:40.672570, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/12 10:24:40.672600, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/lib/smbldap.c:1307(smbldap_search_ext)
smbldap_search_ext: base => [dc=zombie,dc=io], filter => [(&(uid=zzuser)(objectclass=sambaSamAccount))], scope => [2]
[2023/04/12 10:24:40.673581, 4, pid=1152101, effective(0, 0), real(0, 0), class=passdb] ../../source3/passdb/pdb_ldap.c:1563(ldapsam_getsampwnam)
ldapsam_getsampwnam: Unable to locate user [zzuser] count=0
[2023/04/12 10:24:40.673666, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/12 10:24:40.673690, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/check_samsec.c:398(check_sam_security)
check_sam_security: Couldn't find user 'zzuser' in passdb.
[2023/04/12 10:24:40.673712, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:258(auth_check_ntlm_password)
auth_check_ntlm_password: sam_ignoredomain authentication for user [zzuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/12 10:24:40.673737, 2, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth.c:344(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [zzuser] -> [zzuser] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/12 10:24:40.673797, 2, pid=1152101, effective(0, 0), real(0, 0), class=auth_audit] ../../auth/auth_log.c:635(log_authentication_event_human_readable)
Auth: [SMB2,(null)] user [COMIND]\[zzuser] at [Wed, 12 Apr 2023 10:24:40.673770 UTC] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JAN] remote host [ipv4:192.168.50.106:35206] mapped to [COMIND]\[zzuser]. local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-12T10:24:40.673943+0000", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:35206", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "COMIND", "clientAccount": "zzuser", "workstation": "JAN", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "zzuser", "mappedDomain": "COMIND", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 5989}}
[2023/04/12 10:24:40.674016, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/auth_ntlmssp.c:210(auth3_check_password_send)
auth3_check_password_send: Checking NTLMSSP password for COMIND\zzuser failed: NT_STATUS_NO_SUCH_USER, authoritative=1
[2023/04/12 10:24:40.674027, 3, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../source3/auth/auth_util.c:2295(do_map_to_guest_server_info)
No such user zzuser [COMIND] - using guest account
[2023/04/12 10:24:40.674044, 3, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:3945(lp_load_ex)
lp_load_ex: refreshing parameters
[2023/04/12 10:24:40.674053, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:1371(free_param_opts)
Freeing parametrics:
[2023/04/12 10:24:40.674118, 3, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:551(init_globals)
Initialising global parameters
[2023/04/12 10:24:40.674168, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/util/debug.c:811(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
dsdb_transaction_json_audit: 10
dsdb_group_audit: 10
dsdb_group_json_audit: 10
[2023/04/12 10:24:40.674272, 3, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2847(lp_do_section)
Processing section "[global]"
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter logging = file
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter server role = standalone server
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter usershare allow guests = yes
doing parameter netbios name = knox
doing parameter workgroup = CoMind
doing parameter root preexec = /usr/local/sbin/mkhome %U
doing parameter passdb backend = ldapsam:ldap://vogon.zombie.io
doing parameter ldap suffix = dc=zombie,dc=io
doing parameter ldap user suffix = ou=people
doing parameter ldap group suffix = ou=groups
doing parameter ldap machine suffix = ou=computers
doing parameter ldap idmap suffix = ou=Idmap
doing parameter ldap admin dn = cn=admin,dc=zombie,dc=io
doing parameter ldap ssl = start tls
doing parameter ldap passwd sync = yes
[2023/04/12 10:24:40.674504, 2, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[homes]"
doing parameter comment = Home Directories
doing parameter browseable = no
doing parameter read only = no
doing parameter create mask = 0700
doing parameter directory mask = 0700
doing parameter valid users = %S
[2023/04/12 10:24:40.674572, 2, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[public]"
doing parameter comment = Public Folder
doing parameter path = /data1
doing parameter writable = yes
doing parameter guest ok = yes
doing parameter guest only = yes
doing parameter force create mode = 775
doing parameter force directory mode = 775
[2023/04/12 10:24:40.674634, 2, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[engineering]"
doing parameter path = /data1/engineering
doing parameter writable = yes
doing parameter read only = no
doing parameter guest ok = no
doing parameter create mask = 0660
doing parameter directory mask = 0770
doing parameter browsable = yes
[2023/04/12 10:24:40.674697, 2, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:2864(lp_do_section)
Processing section "[qara]"
doing parameter path = /data1/qara
doing parameter read only = no
doing parameter browsable = yes
doing parameter guest ok = yes
doing parameter create mask = 0660
doing parameter directory mask = 0770
[2023/04/12 10:24:40.674749, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:3987(lp_load_ex)
pm_process() returned Yes
[2023/04/12 10:24:40.674772, 3, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:1648(lp_add_ipc)
adding IPC service
[2023/04/12 10:24:40.674791, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: ntlmssp[0x55db7b28cc90]: subreq: 0x55db7b13ee60
[2023/04/12 10:24:40.674801, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:455(gensec_update_send)
gensec_update_send: spnego[0x55db7b282290]: subreq: 0x55db7b27e2e0
[2023/04/12 10:24:40.674813, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/12 10:24:40.674869, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:981(ntlmssp_server_postauth)
ntlmssp_server_auth: Failed to create unmodified session key.
[2023/04/12 10:24:40.674877, 5, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_server.c:997(ntlmssp_server_postauth)
server session key is invalid (len == 0), cannot do KEY_EXCH!
[2023/04/12 10:24:40.674889, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: ntlmssp[0x55db7b28cc90]: NT_STATUS_OK tevent_req[0x55db7b13ee60/../../auth/ntlmssp/ntlmssp.c:180]: state[2] error[0 (0x0)] state[struct gensec_ntlmssp_update_state (0x55db7b13f010)] timer[(nil)] finish[../../auth/ntlmssp/ntlmssp.c:244]
[2023/04/12 10:24:40.674905, 10, pid=1152101, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:547(gensec_update_done)
gensec_update_done: spnego[0x55db7b282290]: NT_STATUS_OK tevent_req[0x55db7b27e2e0/../../auth/gensec/spnego.c:1631]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x55db7b27e490)] timer[(nil)] finish[../../auth/gensec/spnego.c:2116]
[2023/04/12 10:24:40.674915, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2023/04/12 10:24:40.674923, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/uid.c:561(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2023/04/12 10:24:40.674930, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2023/04/12 10:24:40.674937, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../libcli/security/security_token.c:52(security_token_debug)
Security token: (NULL)
[2023/04/12 10:24:40.674944, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/auth/token_util.c:873(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2023/04/12 10:24:40.674961, 4, pid=1152101, effective(0, 0), real(0, 0)] ../../source3/smbd/sec_ctx.c:437(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2023/04/12 10:24:40.674985, 4, pid=1152101, effective(0, 0), real(0, 0), class=auth_audit] ../../auth/auth_log.c:740(log_successful_authz_event_human_readable)
Successful AuthZ: [SMB2,NTLMSSP] user [KNOX]\[nobody] [S-1-5-21-2215539713-2866336102-139347275-501] at [Wed, 12 Apr 2023 10:24:40.674980 UTC] Remote host [ipv4:192.168.50.106:35206] local host [ipv4:192.168.50.7:445]
{"timestamp": "2023-04-12T10:24:40.675008+0000", "type": "Authorization", "Authorization": {"version": {"major": 1, "minor": 1}, "localAddress": "ipv4:192.168.50.7:445", "remoteAddress": "ipv4:192.168.50.106:35206", "serviceDescription": "SMB2", "authType": "NTLMSSP", "domain": "KNOX", "account": "nobody", "sid": "S-1-5-21-2215539713-2866336102-139347275-501", "sessionId": "915fbad5-0238-403d-90cf-eaa3f91e43b7", "logonServer": null, "transportProtection": "SMB", "accountFlags": "0x00000000"}}
[2023/04/12 10:24:40.675067, 5, pid=1152101, effective(0, 0), real(0, 0)] ../../lib/util/debug.c:811(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
More information about the samba-technical
mailing list