thr3ads.net - samba - [Samba] I could really use some help here (SAMBA PDC) [May 2005]

If this information is useful, please help other people find it:
Share via:

John Zakhar

2005-May-16 05:18 UTC

[Samba] I could really use some help here (SAMBA PDC)

The log files are attached, I have NEVER had so much trouble with a 
samba PDC before. I need to turn in my unix admin license, this is 
pathetic...

Anyway, I am here. When trying to join a domain with the administrator 
account I get "no mapping between account name and security ID's was
done"
And the joining fails...

All the needed files are attached, from the ldap log. to the samba.conf 
to the ldifs of the machine, root and admin account.
Trying with the root account nets me the same error

in smbusers I noticed an entry i never made

root = administrator

software versions:

[root@vnpdc01 openldap-data]# rpm -qa |grep samba
samba-3.0.11-1
samba-swat-3.0.11-1
samba-client-3.0.11-1
samba-common-3.0.11-1

I am assumine the rpm or something else made that mapping. I dunno...

I have really about had it here, it's been well over a week, we are 
working on close to two. I need to get this resolved or move on to a 
Windows PDC. I have a deadline to meet with a domain controller (that is 
no one problem here, i realize this)

If more information is needed please ask. I will be happy to provide 
anything but passwords..
If anyone has any insite, advice, or whatever I would very much 
appreciate it

-- 
John Zakhar <jzakhar@ventusnetworks.com>

Systems Administrator.

Ventus Networks
800 Connecticut Ave
Norwalk, CT. 06854

Work 1-(203)-642-2800
Home 1-(860)-318-0276
Cell 1-(203)-257-4165

-------------- next part --------------
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash) 
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command
"testparm"
# to check that you have not made any basic syntactic errors. 
#
#======================= Global Settings
====================================[global]

   workgroup = VENTUS_OFFICE
   netbios name = vnpdc01 
   server string = Ventus File Server
   hosts allow = 172.28.0. 192.168.1 127.
   printcap name = /etc/printcap
   load printers = yes
   log file = /var/log/samba/%m.log
   max log size = 50
   ldap passwd sync = Yes
passdb backend = ldapsam:ldap://192.168.1.242/
ldap suffix = o=ventusnetworks.com,dc=na
ldap filter = (&(uid=%u)(objectclass=sambaSamAccount))
ldap machine suffix = ou=Computers
ldap user suffix = ou=Staff
ldap group suffix = ou=Groups
ldap admin dn = "cn=Manager,dc=na"
ldap delete dn = no
#ldap ssl = ssl
   security = user
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   log level = 10 
   local master = yes
   os level = 255
   domain master = yes
   preferred master = yes
   domain logons = yes
#   logon script = netlogon.bat
   logon path = \\%L\Profiles\%U
#   logon drive = U:

   name resolve order = wins lmhosts bcast
   wins support = yes
   dns proxy = no 

        #delete user script = /usr/local/sbin/smbldap-userdel "%u"
        add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"
-H W
        add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
        #delete group script = /usr/local/sbin/smbldap-groupdel "%g"
        add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m
"%u" "%g"
        delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x
"%u" "%g"
        set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g
"%g" "%u"

#============================ Share Definitions =============================#  
idmap uid = 16777216-33554431
#   idmap gid = 16777216-33554431
   template shell = /bin/false
   winbind use default domain = no

   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
[homes]
   comment = Home Directories
   browseable = no
   writable = yes

[netlogon]
   comment = Network Logon Service
   path = /var/samba/logon
   guest ok = yes
   writable = no
   share modes = no

#[Profiles]
#    path = /home/profiles
#    browseable = no
#    guest ok = yes

#[printers]
#   comment = All Printers
#   path = /var/spool/samba
#   browseable = no
# Set public = yes to allow user 'guest account' to print
#   guest ok = no
#   writable = no
#   printable = yes

[engineering]
   	comment = Engineering Share
   	path = /opt/store/engineering
   	public = yes
   	read only = no
   	write list = @Engineering
   	read list = @Engineering
   	create mask = 0770

[support]
   	comment = Support Share
   	path = /opt/store/support
   	public = no
   	read only = no
   	write list = @support
   	read list = @support
   	create mask = 0770

[Accounting]
   	comment = Accounting Share
   	path = /opt/store/accounting
   	public = no
   	read only = no
   	write list = @accounting
   	read list = @accounting
   	create mask = 0770

[sales]
	comment = Sales Share
   	path = /opt/store/sales
  	public = no
   	read only = no
   	write list = @sales
   	read list = @sales
   	create mask = 0770

[Administration]
	comment = Administration Share
	path = /opt/store/administration
	public = no
	read only = no
	write list = @administration
	create mask = 0770

[CompanyShare]
	comment = Company Share
	writeable = yes
	path = /opt/store
	write list = @administration,@sales,@accounting,@support,@Engineering
	create mask = 0777
[SAP_Project]
	comment = SAP Share
	path = /opt/store/Sap_Project
	write list =  @administration,@sales,@accounting,@support,@Engineering
	public = no
	read only = no
	
[public]
   	comment = Public Share
   	path = /opt/store/public
   	public = yes
   	read only = no
   	create mask = 0777
[User Home]
	comment = user homes
	path = /opt/store/UserHome
	writeable = yes
	public = no
	write list = @administration,@sales,@accounting,@support,@Engineering
	read only = no

[Lisa Backup]
	comment = Just for Lisa =)
	path = /opt/store/Lisa\ Backup
	writeable = yes
	public = no
	write list = lromano
	read only = no

[admin]
   	path = /home/
   	public = yes
   	read only = no

-------------- next part --------------
dn: uid=administrator, ou=Staff, o=ventusnetworks.com, dc=na
sambaLMPassword: 
sambaPrimaryGroupSID: S-1-5-21-3107161993-1039155829-3332455197-512
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
userPassword:: 
sambaLogonTime: 0
sambaHomeDrive: H:
uid: administrator
uidNumber: 0
cn: administrator
sambaLogoffTime: 2147483647
sambaPwdLastSet: 1111419696
loginShell: /bin/bash
sambaAcctFlags: [U          ]
sambaProfilePath: \\vnpdc01\profiles\administrator\
gidNumber: 512
sambaPwdMustChange: 2147483647
sambaNTPassword: 
sambaPwdCanChange: 1111419696
gecos: Netbios Domain Administrator
sambaSID: S-1-5-21-3107161993-1039155829-3332455197-2996
homeDirectory: /home/administrator
sambaKickoffTime: 2147483647
sn: administrator
sambaHomePath: \\vnpdc01\home\administrator
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000
 000000000

-------------- next part --------------
dn: uid=ibm-zus90725eca$, ou=Computers, o=ventusnetworks.com, dc=na
sambaPwdLastSet: 1111418025
sn: ibm-zus90725eca$
sambaAcctFlags: [W          ]
userPassword:: e1NNRDV9cHVjZlRnck5MWVFmaENjcjFJQUp6RHdZbHBBPQ=uidNumber: 1023
gidNumber: 515
sambaPwdMustChange: 2147483647
uid: ibm-zus90725eca$
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: posixAccount
objectClass: sambaSamAccount
objectClass: person
objectClass: top
sambaSID: S-1-5-21-3107161993-1036545829-3332455197
cn: ibm-zus90725eca$
homeDirectory: /dev/null
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000
 000000000
sambaPwdCanChange: 1111418025
sambaNTPassword: 4143428EA74C32CCF1AED23B88F1C64C
sambaLMPassword: 205A06C82DD819D1AAD3B435B51404EE

-------------- next part --------------
dn: sambaDomainName=VENTUS_OFFICE, o=ventusnetworks.com, dc=na
sambaNextUserRid: 67109862
sambaSID: S-1-5-21-3107161993-1039155829-3332455197
sambaNextGroupRid: 67109863
objectClass: sambaDomain
sambaAlgorithmicRidBase: 1000
sambaDomainName: VENTUS_OFFICE

-------------- next part --------------
  smb_bcc=61
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 00  .\.P.I.P .E.\....
  [010] 00 05 00 00 03 10 00 00  00 2C 00 00 00 04 00 00  ........ .,......
  [020] 00 14 00 00 00 00 00 01  00 00 00 00 00 07 00 00  ........ ........
  [030] 00 00 00 00 00 4F F9 3E  42 4C 5A 00 00           .....O.> BLZ..
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBtrans (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/03/21 11:41:52, 5] smbd/ipc.c:reply_trans(560)
  calling named_pipe
[2005/03/21 11:41:52, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/03/21 11:41:52, 5] smbd/ipc.c:api_fd_reply(265)
  api_fd_reply
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7307
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name samr pnum=7307 (pipes_open=2)
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=2)
[2005/03/21 11:41:52, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "samr" (pnum 7307)
[2005/03/21 11:41:52, 10] smbd/ipc.c:api_fd_reply(299)
  api_fd_reply: p:0x9ca1360 max_trans_reply: 1024
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
  write_to_pipe: 7307 name: samr open: Yes len: 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0,
incoming data = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16,
receive_len = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 16
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0,
incoming data = 28
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr 
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 002c
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000004
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
  unmarshall_rpc_header: using little-endian RPC
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
  unmarshall_rpc_header: type = 0, flags = 3
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28,
incoming data = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
  process_complete_pdu: processing packet type 0
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr_req req
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0000 alloc_hint: 00000014
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0004 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0006 opnum     : 0001
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
  Requested \PIPE\samr
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
  api_rpc_cmds[0].fn == 0x813d91a
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 samr_io_q_close_hnd 
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000007
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 4f f9 3e 42 4c 5a 00 00 
[2005/03/21 11:41:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
  Found policy hnd[0] [000] 00 00 00 00 07 00 00 00  00 00 00 00 4F F9 3E 42 
........ ....O.>B
  [010] 4C 5A 00 00                                       LZ.. 
[2005/03/21 11:41:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/03/21 11:41:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(591)
  samr_reply_close_hnd: 591
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 samr_io_r_close_hnd 
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 00 00 00 00 00 00 00 00 
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
      0014 status: NT_STATUS_OK
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
  api_rpcTNP: called samr successfully
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 28
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
  read_from_pipe: 7307 name: samr len: 1024
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
  read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 24.
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 02
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 0030
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000004
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_resp resp
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0010 alloc_hint: 00000018
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0014 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0016 cancel_ct : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0017 reserved  : 00
[2005/03/21 11:41:52, 5] smbd/ipc.c:copy_trans_params_and_data(60)
  copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=104
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=2944
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   48 (0x30)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   48 (0x30)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=49
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 05 00 02 03 10 00 00  00 30 00 00 00 04 00 00  ........ .0......
  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [030] 00                                                . 
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,108)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,108) wrote 108
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 128
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x80
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 48 of length 132
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=128
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=3008
  smt_wct=16
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   44 (0x2C)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 1024 (0x400)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=   84 (0x54)
  smb_vwv[11]=   44 (0x2C)
  smb_vwv[12]=   84 (0x54)
  smb_vwv[13]=    2 (0x2)
  smb_vwv[14]=   38 (0x26)
  smb_vwv[15]=29447 (0x7307)
  smb_bcc=61
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 00  .\.P.I.P .E.\....
  [010] 00 05 00 00 03 10 00 00  00 2C 00 00 00 05 00 00  ........ .,......
  [020] 00 14 00 00 00 00 00 01  00 00 00 00 00 06 00 00  ........ ........
  [030] 00 00 00 00 00 4F F9 3E  42 4C 5A 00 00           .....O.> BLZ..
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBtrans (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/03/21 11:41:52, 5] smbd/ipc.c:reply_trans(560)
  calling named_pipe
[2005/03/21 11:41:52, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/03/21 11:41:52, 5] smbd/ipc.c:api_fd_reply(265)
  api_fd_reply
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7307
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name samr pnum=7307 (pipes_open=2)
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=2)
[2005/03/21 11:41:52, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "samr" (pnum 7307)
[2005/03/21 11:41:52, 10] smbd/ipc.c:api_fd_reply(299)
  api_fd_reply: p:0x9ca1360 max_trans_reply: 1024
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
  write_to_pipe: 7307 name: samr open: Yes len: 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0,
incoming data = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16,
receive_len = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 16
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0,
incoming data = 28
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr 
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 002c
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000005
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
  unmarshall_rpc_header: using little-endian RPC
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
  unmarshall_rpc_header: type = 0, flags = 3
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28,
incoming data = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
  process_complete_pdu: processing packet type 0
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr_req req
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0000 alloc_hint: 00000014
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0004 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0006 opnum     : 0001
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
  Requested \PIPE\samr
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
  api_rpc_cmds[0].fn == 0x813d91a
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 samr_io_q_close_hnd 
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000006
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 4f f9 3e 42 4c 5a 00 00 
[2005/03/21 11:41:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
  Found policy hnd[0] [000] 00 00 00 00 06 00 00 00  00 00 00 00 4F F9 3E 42 
........ ....O.>B
  [010] 4C 5A 00 00                                       LZ.. 
[2005/03/21 11:41:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/03/21 11:41:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(591)
  samr_reply_close_hnd: 591
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 samr_io_r_close_hnd 
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd pol
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 00 00 00 00 00 00 00 00 
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
      0014 status: NT_STATUS_OK
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
  api_rpcTNP: called samr successfully
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 28
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
  read_from_pipe: 7307 name: samr len: 1024
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
  read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 24.
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 02
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 0030
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000005
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_resp resp
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0010 alloc_hint: 00000018
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0014 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0016 cancel_ct : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0017 reserved  : 00
[2005/03/21 11:41:52, 5] smbd/ipc.c:copy_trans_params_and_data(60)
  copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=104
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=3008
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   48 (0x30)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   48 (0x30)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=49
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 05 00 02 03 10 00 00  00 30 00 00 00 05 00 00  ........ .0......
  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [030] 00                                                . 
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,108)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,108) wrote 108
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 41
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x29
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 49 of length 45
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=41
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3072
  smt_wct=3
  smb_vwv[ 0]=29447 (0x7307)
  smb_vwv[ 1]=65535 (0xFFFF)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBclose (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7307
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name samr pnum=7307 (pipes_open=2)
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=2)
[2005/03/21 11:41:52, 5] smbd/pipes.c:reply_pipe_close(260)
  reply_pipe_close: pnum:7307
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
  closed pipe name samr pnum=7307 (pipes_open=1)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3072
  smt_wct=0
  smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,39)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,39) wrote 39
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 128
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x80
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 50 of length 132
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=128
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=3136
  smt_wct=16
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   44 (0x2C)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 1024 (0x400)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=   84 (0x54)
  smb_vwv[11]=   44 (0x2C)
  smb_vwv[12]=   84 (0x54)
  smb_vwv[13]=    2 (0x2)
  smb_vwv[14]=   38 (0x26)
  smb_vwv[15]=29442 (0x7302)
  smb_bcc=61
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 00  .\.P.I.P .E.\....
  [010] 00 05 00 00 03 10 00 00  00 2C 00 00 00 04 00 00  ........ .,......
  [020] 00 14 00 00 00 00 00 00  00 00 00 00 00 01 00 00  ........ ........
  [030] 00 00 00 00 00 4E F9 3E  42 4C 5A 00 00           .....N.> BLZ..
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBtrans (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=44 params=0 setup=2
[2005/03/21 11:41:52, 5] smbd/ipc.c:reply_trans(560)
  calling named_pipe
[2005/03/21 11:41:52, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/03/21 11:41:52, 5] smbd/ipc.c:api_fd_reply(265)
  api_fd_reply
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7302
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=1)
[2005/03/21 11:41:52, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "lsarpc" (pnum 7302)
[2005/03/21 11:41:52, 10] smbd/ipc.c:api_fd_reply(299)
  api_fd_reply: p:0x9c966c8 max_trans_reply: 1024
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
  write_to_pipe: 7302 name: lsarpc open: Yes len: 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0,
incoming data = 44
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16,
receive_len = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 16
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0,
incoming data = 28
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr 
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 002c
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000004
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
  unmarshall_rpc_header: using little-endian RPC
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
  unmarshall_rpc_header: type = 0, flags = 3
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 28,
incoming data = 28
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
  process_complete_pdu: processing packet type 0
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr_req req
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0000 alloc_hint: 00000014
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0004 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0006 opnum     : 0000
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
  Requested \PIPE\lsarpc
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: lsarpc op 0x0 - api_rpcTNP: rpc command: LSA_CLOSE
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
  api_rpc_cmds[4].fn == 0x8111a60
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 lsa_io_q_close 
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd 
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000001
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 4e f9 3e 42 4c 5a 00 00 
[2005/03/21 11:41:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
  Found policy hnd[0] [000] 00 00 00 00 01 00 00 00  00 00 00 00 4E F9 3E 42 
........ ....N.>B
  [010] 4C 5A 00 00                                       LZ.. 
[2005/03/21 11:41:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
  Found policy hnd[0] [000] 00 00 00 00 01 00 00 00  00 00 00 00 4E F9 3E 42 
........ ....N.>B
  [010] 4C 5A 00 00                                       LZ.. 
[2005/03/21 11:41:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 lsa_io_r_close 
[2005/03/21 11:41:52, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_pol_hnd 
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0000 data1: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
          0004 data2: 00000000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          0008 data3: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
          000a data4: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
          000c data5: 00 00 00 00 00 00 00 00 
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
      0014 status: NT_STATUS_OK
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
  api_rpcTNP: called lsarpc successfully
[2005/03/21 11:41:52, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 28
[2005/03/21 11:41:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
  read_from_pipe: 7302 name: lsarpc len: 1024
[2005/03/21 11:41:52, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
  read_from_pipe: lsarpc: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 24.
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr hdr
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0000 major     : 05
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0001 minor     : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0002 pkt_type  : 02
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0003 flags     : 03
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0004 pack_type0: 10
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0005 pack_type1: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0006 pack_type2: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0007 pack_type3: 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0008 frag_len  : 0030
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      000a auth_len  : 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      000c call_id   : 00000004
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_resp resp
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint32(642)
      0010 alloc_hint: 00000018
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint16(613)
      0014 context_id: 0000
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0016 cancel_ct : 00
[2005/03/21 11:41:52, 5] rpc_parse/parse_prs.c:prs_uint8(584)
      0017 reserved  : 00
[2005/03/21 11:41:52, 5] smbd/ipc.c:copy_trans_params_and_data(60)
  copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=104
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=904
  smb_uid=100
  smb_mid=3136
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   48 (0x30)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   48 (0x30)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=49
[2005/03/21 11:41:52, 10] lib/util.c:dump_data(1990)
  [000] 00 05 00 02 03 10 00 00  00 30 00 00 00 04 00 00  ........ .0......
  [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [030] 00                                                . 
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,108)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,108) wrote 108
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 41
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x29
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 51 of length 45
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=41
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3200
  smt_wct=3
  smb_vwv[ 0]=29442 (0x7302)
  smb_vwv[ 1]=65535 (0xFFFF)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBclose (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=7302
[2005/03/21 11:41:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
  pipe name lsarpc pnum=7302 (pipes_open=1)
[2005/03/21 11:41:52, 5] smbd/pipes.c:reply_pipe_close(260)
  reply_pipe_close: pnum:7302
[2005/03/21 11:41:52, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235)
  close_policy_by_pipe: deleted handle list for pipe lsarpc
[2005/03/21 11:41:52, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
  closed pipe name lsarpc pnum=7302 (pipes_open=0)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3200
  smt_wct=0
  smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,39)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,39) wrote 39
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 39
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x27
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 52 of length 43
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=39
  smb_com=0x74
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=0
  smb_pid=65279
  smb_uid=100
  smb_mid=3264
  smt_wct=2
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBulogoffX (pid 23116) conn 0x0
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 5] auth/auth_util.c:free_server_info(1374)
  attempting to free (and zero) a server_info structure
[2005/03/21 11:41:52, 3] smbd/reply.c:reply_ulogoffX(1248)
  ulogoffX vuid=100
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=39
  smb_com=0x74
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=0
  smb_pid=65279
  smb_uid=100
  smb_mid=3264
  smt_wct=2
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,43)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,43) wrote 43
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
  got smb length of 35
[2005/03/21 11:41:52, 6] smbd/process.c:process_smb(1090)
  got message type 0x0 of len 0x23
[2005/03/21 11:41:52, 3] smbd/process.c:process_smb(1091)
  Transaction 53 of length 39
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3328
  smt_wct=0
  smb_bcc=0
[2005/03/21 11:41:52, 3] smbd/process.c:switch_message(886)
  switch message SMBtdis (pid 23116) conn 0x9c99a28
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 3] smbd/service.c:close_cnum(833)
  ibm-zus90725eca (172.28.0.64) closed connection to service IPC$
[2005/03/21 11:41:52, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to IPC$
[2005/03/21 11:41:52, 4] smbd/vfs.c:vfs_ChDir(657)
  vfs_ChDir to /
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(464)
[2005/03/21 11:41:52, 5] lib/util.c:show_msg(474)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=3328
  smt_wct=0
  smb_bcc=0
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(449)
  write_socket(25,39)
[2005/03/21 11:41:52, 6] lib/util_sock.c:write_socket(452)
  write_socket(25,39) wrote 39
[2005/03/21 11:41:52, 10] lib/util_sock.c:read_socket_data(378)
  read_socket_data: recv of 4 returned 0. Error = Success
[2005/03/21 11:41:52, 10] lib/util_sock.c:receive_smb_raw(556)
  receive_smb_raw: length < 0!
[2005/03/21 11:41:52, 3] smbd/process.c:timeout_processing(1334)
  timeout_processing: End of file from client (client has disconnected).
[2005/03/21 11:41:52, 5] lib/gencache.c:gencache_shutdown(88)
  Closing cache file
[2005/03/21 11:41:52, 5] libsmb/namecache.c:namecache_shutdown(79)
  namecache_shutdown: netbios namecache closed successfully.
[2005/03/21 11:41:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/03/21 11:41:52, 5] auth/auth_util.c:debug_unix_user_token(507)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/03/21 11:41:52, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/21 11:41:52, 2] smbd/server.c:exit_server(609)
  Closing connections
[2005/03/21 11:41:52, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to 
[2005/03/21 11:41:52, 5] smbd/oplock.c:receive_local_message(107)
  receive_local_message: doing select with timeout of 1 ms
[2005/03/21 11:41:52, 3] smbd/server.c:exit_server(652)
  Server exit (normal exit)
-------------- next part --------------
dn: uid=root, ou=Staff, o=ventusnetworks.com, dc=na
sambaLMPassword:
sambaPrimaryGroupSID: S-1-5-21-3107161993-1039155829-3332455197-512
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
userPassword:: 
sambaLogonTime: 0
sambaHomeDrive: H:
uid: root
uidNumber: 0
cn: root
sambaLogoffTime: 2147483647
sambaPwdLastSet: 1110913083
sambaAcctFlags: [U          ]
loginShell: /bin/false
sambaProfilePath: \\vnpdc01\profiles\root\
gidNumber: 512
sambaPwdMustChange: 2147483647
sambaNTPassword: 
sambaPwdCanChange: 1110913083
gecos: Netbios Domain Administrator
sambaSID: S-1-5-21-3107161993-1039155829-3332455197-2996
homeDirectory: /home/root
sambaKickoffTime: 2147483647
sn: root
sambaHomePath: \\vnpdc01\home\root
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000
 000000000

-------------- next part --------------

Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 fd=22 ACCEPT from
IP=172.28.0.46:33934 (IP=0.0.0.0:389)
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 BIND
dn="cn=Manager,dc=na" method=128
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 BIND
dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 RESULT tag=97 err=0 text= 
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SRCH base=""
scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SRCH attr=supportedControl 
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SRCH
base="o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(&(uid=administrator)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SRCH attr=uid uidNumber
gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange
sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive
sambaHomePath sambaLogonScript sambaProfilePath description
sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword
sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial
sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp
sambaLogonHours modifyTimestamp
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 fd=23 ACCEPT from
IP=172.28.0.46:33935 (IP=0.0.0.0:389)
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=0 BIND dn=""
method=128
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=0 RESULT tag=97 err=0 text= 
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=1 SRCH
base="o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=1 SRCH attr=uid userPassword
uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=2 SRCH
base="o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=2 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=3 SRCH
base="ou=Groups,o=ventusnetworks.com,dc=na" scope=1 deref=0
filter="(&(objectClass=posixGroup)(|(memberUid=administrator)(uniqueMember=uid=administrator,ou=staff,o=ventusnetworks.com,dc=na)))"
Mar 21 11:37:24 vnldap02 slapd[20690]: conn=40 op=3 SRCH attr=gidNumber 
Mar 21 11:37:24 vnldap02 slapd[20690]: <= bdb_equality_candidates:
(uniqueMember) index_param failed (18)
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=40 op=3 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=39 op=3 UNBIND 
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=39 fd=22 closed 
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 fd=22 ACCEPT from
IP=172.28.0.46:33936 (IP=0.0.0.0:389)
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=0 BIND
dn="cn=Manager,dc=na" method=128
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=0 BIND
dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=0 RESULT tag=97 err=0 text= 
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=1 SRCH base=""
scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=1 SRCH attr=supportedControl 
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=2 SRCH
base="ou=Groups,o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(gidNumber=512))"
Mar 21 11:37:26 vnldap02 slapd[20690]: conn=41 op=2 SRCH attr=gidNumber sambaSID
sambaGroupType sambaSIDList description displayName cn objectClass
Mar 21 11:37:26 vnldap02 slapd[20690]: <= bdb_equality_candidates:
(gidNumber) index_param failed (18)
Mar 21 11:37:27 vnldap02 slapd[20690]: conn=41 op=2 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=41 fd=22 closed 
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=40 fd=23 closed 
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 fd=22 ACCEPT from
IP=172.28.0.46:33937 (IP=0.0.0.0:389)
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=0 BIND
dn="cn=Manager,dc=na" method=128
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=0 BIND
dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=0 RESULT tag=97 err=0 text= 
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=1 SRCH base=""
scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=1 SRCH attr=supportedControl 
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=2 SRCH
base="o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(&(uid=administrator)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Mar 21 11:37:28 vnldap02 slapd[20690]: conn=42 op=2 SRCH attr=uid uidNumber
gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange
sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive
sambaHomePath sambaLogonScript sambaProfilePath description
sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword
sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial
sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp
sambaLogonHours modifyTimestamp
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=42 op=2 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 fd=23 ACCEPT from
IP=172.28.0.46:33938 (IP=0.0.0.0:389)
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=0 BIND dn=""
method=128
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=0 RESULT tag=97 err=0 text= 
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=1 SRCH
base="o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=1 SRCH attr=uid userPassword
uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=2 SRCH
base="o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(objectClass=posixAccount)(uid=administrator))"
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=2 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=3 SRCH
base="ou=Groups,o=ventusnetworks.com,dc=na" scope=1 deref=0
filter="(&(objectClass=posixGroup)(|(memberUid=administrator)(uniqueMember=uid=administrator,ou=staff,o=ventusnetworks.com,dc=na)))"
Mar 21 11:37:29 vnldap02 slapd[20690]: conn=43 op=3 SRCH attr=gidNumber 
Mar 21 11:37:29 vnldap02 slapd[20690]: <= bdb_equality_candidates:
(uniqueMember) index_param failed (18)
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=43 op=3 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=42 op=3 UNBIND 
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=42 fd=22 closed 
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 fd=22 ACCEPT from
IP=172.28.0.46:33939 (IP=0.0.0.0:389)
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 op=0 BIND
dn="cn=Manager,dc=na" method=128
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 op=0 BIND
dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:30 vnldap02 slapd[20690]: conn=44 op=0 RESULT tag=97 err=0 text= 
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=1 SRCH base=""
scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=1 SRCH attr=supportedControl 
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=2 SRCH
base="ou=Groups,o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(gidNumber=512))"
Mar 21 11:37:31 vnldap02 slapd[20690]: conn=44 op=2 SRCH attr=gidNumber sambaSID
sambaGroupType sambaSIDList description displayName cn objectClass
Mar 21 11:37:31 vnldap02 slapd[20690]: <= bdb_equality_candidates:
(gidNumber) index_param failed (18)
Mar 21 11:37:32 vnldap02 slapd[20690]: conn=44 op=2 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:32 vnldap02 slapd[20690]: conn=44 op=3 UNBIND 
Mar 21 11:37:32 vnldap02 slapd[20690]: conn=44 fd=22 closed 
Mar 21 11:37:32 vnldap02 slapd[20690]: conn=45 fd=22 ACCEPT from
IP=172.28.0.46:33940 (IP=0.0.0.0:389)
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=0 BIND
dn="cn=Manager,dc=na" method=128
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=0 BIND
dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=0 RESULT tag=97 err=0 text= 
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=1 SRCH base=""
scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=1 SRCH attr=supportedControl 
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=2 SRCH
base="o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(&(uid=ibm-zus90725eca$)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=2 SRCH attr=uid uidNumber
gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange
sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive
sambaHomePath sambaLogonScript sambaProfilePath description
sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword
sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial
sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp
sambaLogonHours modifyTimestamp
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=2 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 op=3 UNBIND 
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=45 fd=22 closed 
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 fd=22 ACCEPT from
IP=172.28.0.46:33941 (IP=0.0.0.0:389)
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 op=0 BIND
dn="cn=Manager,dc=na" method=128
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 op=0 BIND
dn="cn=Manager,dc=na" mech=SIMPLE ssf=0
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 op=0 RESULT tag=97 err=0 text= 
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 op=1 SRCH base=""
scope=0 deref=0 filter="(objectClass=*)"
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 op=1 SRCH attr=supportedControl 
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 op=2 SRCH
base="o=ventusnetworks.com,dc=na" scope=2 deref=0
filter="(&(&(uid=ibm-zus90725eca$)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 op=2 SRCH attr=uid uidNumber
gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange
sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive
sambaHomePath sambaLogonScript sambaProfilePath description
sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword
sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial
sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp
sambaLogonHours modifyTimestamp
Mar 21 11:37:33 vnldap02 slapd[20690]: conn=46 op=2 SEARCH RESULT tag=101 err=0
nentries=1 text=
Mar 21 11:37:34 vnldap02 slapd[20690]: conn=46 fd=22 closed 
Mar 21 11:37:34 vnldap02 slapd[20690]: conn=43 fd=23 closed 
Mar 21 11:37:37 vnldap02 slapd[20690]: conn=47 fd=22 ACCEPT from
IP=127.0.0.1:33785 (IP=0.0.0.0:389)
Mar 21 11:37:37 vnldap02 slapd[20690]: conn=47 op=1 BIND dn=""
method=128
Mar 21 11:37:37 vnldap02 slapd[20690]: conn=47 op=1 RESULT tag=97 err=0 text= 
Mar 21 11:37:37 vnldap02 slapd[20690]: conn=47 op=2 SRCH base="dc=na"
scope=0 deref=0 filter="(&(objectClass=posixAccount)(uid=root))"
Mar 21 11:37:37 vnldap02 slapd[20690]: conn=47 op=2 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:37 vnldap02 slapd[20690]: conn=47 op=3 SRCH base="dc=na"
scope=0 deref=0
filter="(&(objectClass=posixGroup)(memberUid=root))"
Mar 21 11:37:37 vnldap02 slapd[20690]: conn=47 op=3 SRCH attr=gidNumber 
Mar 21 11:37:37 vnldap02 slapd[20690]: conn=47 op=3 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=4 SRCH base="dc=na"
scope=0 deref=0 filter="(&(objectClass=posixAccount)(uid=root))"
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=4 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=5 SRCH base="dc=na"
scope=0 deref=0
filter="(&(objectClass=posixGroup)(memberUid=root))"
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=5 SRCH attr=gidNumber 
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=5 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=6 SRCH base="dc=na"
scope=0 deref=0 filter="(&(objectClass=posixAccount)(uid=root))"
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=6 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=7 SRCH base="dc=na"
scope=0 deref=0
filter="(&(objectClass=posixGroup)(memberUid=root))"
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=7 SRCH attr=gidNumber 
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 op=7 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=47 fd=22 closed 
Mar 21 11:37:38 vnldap02 slapd[20690]: conn=48 fd=22 ACCEPT from
IP=127.0.0.1:33786 (IP=0.0.0.0:389)
Mar 21 11:37:39 vnldap02 slapd[20690]: conn=48 op=1 BIND dn=""
method=128
Mar 21 11:37:39 vnldap02 slapd[20690]: conn=48 op=1 RESULT tag=97 err=0 text= 
Mar 21 11:37:39 vnldap02 slapd[20690]: conn=48 op=2 SRCH base="dc=na"
scope=0 deref=0 filter="(&(objectClass=posixAccount)(uid=root))"
Mar 21 11:37:39 vnldap02 slapd[20690]: conn=48 op=2 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:39 vnldap02 slapd[20690]: conn=48 op=3 SRCH base="dc=na"
scope=0 deref=0
filter="(&(objectClass=posixGroup)(memberUid=root))"
Mar 21 11:37:39 vnldap02 slapd[20690]: conn=48 op=3 SRCH attr=gidNumber 
Mar 21 11:37:39 vnldap02 slapd[20690]: conn=48 op=3 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:37:39 vnldap02 slapd[20690]: conn=48 fd=22 closed 
Mar 21 11:38:00 vnldap02 slapd[20690]: conn=49 fd=22 ACCEPT from
IP=127.0.0.1:33787 (IP=0.0.0.0:389)
Mar 21 11:38:00 vnldap02 slapd[20690]: conn=49 op=1 BIND dn=""
method=128
Mar 21 11:38:00 vnldap02 slapd[20690]: conn=49 op=1 RESULT tag=97 err=0 text= 
Mar 21 11:38:00 vnldap02 slapd[20690]: conn=49 op=2 SRCH base="dc=na"
scope=0 deref=0 filter="(&(objectClass=posixAccount)(uid=root))"
Mar 21 11:38:00 vnldap02 slapd[20690]: conn=49 op=2 SEARCH RESULT tag=101 err=0
nentries=0 text=
Mar 21 11:38:00 vnldap02 slapd[20690]: conn=49 op=3 SRCH base="dc=na"
scope=0 deref=0
filter="(&(objectClass=posixGroup)(memberUid=root))"
Mar 21 11:38:00 vnldap02 slapd[20690]: conn=49 op=3 SRCH attr=gidNumber

Geoff Scott

2005-May-16 06:52 UTC

head link

[Samba] I could really use some help here (SAMBA PDC)

John Zakhar wrote:> The log files are attached, I have NEVER had so much trouble with a
> samba PDC before. I need to turn in my unix admin license, this is
> pathetic...  
> 
>
Why have all your ldifs got spaces in the dn's ? In your slapd.log you have
this: "o=ventusnetworks.com,dc=na"
NO SPACES.  
Yet all your ldifs have this:
uid=administrator,<space>ou=Staff,<space>o=ventusnetworks.com,<space>dc=na
.

I don't think that's gonna work, I hope it's a typo.  Because what I
quoted
from the log is your search base.  I'm not particularly proficient in ldap
but your search base is different to what potentially is in ldap.......

Are you vampiring accounts of an old windows server?  Or is this a network
from scratch.

Regards Geoff Scott

Reasonably Related Threads

Search for more possibly parallel threads

samba - May 2005 - I could really use some help here (SAMBA PDC)

[Samba] I could really use some help here (SAMBA PDC)

[Samba] I could really use some help here (SAMBA PDC)

Reasonably Related Threads