hi just a question to understand we have a NT PDC and i successfully transfered it's data to samba 3.0 because we're cautious i let the NT PDC "online" (domain=evan) and introduced samba with the same date in a new domain (domain=testevan) for testing purposes to get rid of conflicts i had to change the SID of the samba server, because my knowledge tells me: "a sid hast to be unique in a network" so i changed the sid to a value different from the evan-sid okay...still, everything is working fine but: isn't there a tool, which creates a unique sid for my new (test)domain like sidchanger for NT? because i can't be sure that the sid i entered for the new domain "testevan" is unique plz help thx micha
On Sun, 2003-12-28 at 09:00, Michael Gasch wrote:> hi > > just a question to understand > > we have a NT PDC and i successfully transfered it's data to samba 3.0 > because we're cautious i let the NT PDC "online" (domain=evan) and > introduced samba with the same date in a new domain (domain=testevan) > for testing purposes > > to get rid of conflicts i had to change the SID of the samba server, > because my knowledge tells me: "a sid hast to be unique in a network" > > so i changed the sid to a value different from the evan-sid > okay...still, everything is working fine > > but: isn't there a tool, which creates a unique sid for my new > (test)domain like sidchanger for NT? > because i can't be sure that the sid i entered for the new domain > "testevan" is unique--- I've been struggling with the problem of previous NT PDC and in my case, trying to figure out how to keep it online while I ease the transition. It appears to me that the 'vampire' tools is a monster, and how you deal with it is left to the imagination of the admin. Anyway, to answer your question... 'net getlocalsid' will tell your your Domain SID 'net setlocalsid' will allow you to change it to whatever you want but recognize that the accounts created by the 'net rpc vampire' will all have the localsid (SID) set by the value that is in your new account script, which in my case - was the smbldap_conf.pm YMMV. Thus, if you want the users to use your new domain's PDC, they would have to have the correct SID. Craig
Sundaram Ramasamy
2003-Dec-30 04:25 UTC
[Samba] suse 8.2 Samba 3 LDAP Domain Join Error : Logon failure: unknown user name or bad password
Hi,
I am using suse 8.2 with samba 3+ LDAP PDC. When I try to join the W2K
machine I am getting Logon failure: unknown user name or bad password.
with root user I was able log in to the machine, Even from Windows 2000 I
was able to access the share like this \\192.168.0.101.
Here is some more information.
Any Help to fix this.
-Sundaram
linux:/var/log # id root
uid=0(root) gid=512(Domain Admins) groups=512(Domain Admins)
rpm -qa | grep sam
samba3-client-3.0.1-15
samba3-3.0.1-15
samba3-doc-3.0.1-15
samba3-winbind-3.0.1-15
linux:/var/log # testparm -s
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Loaded services file OK.
# Global parameters
[global]
workgroup = TECHGROUP
netbios name = RISHI
server string = rishi Samba Server
null passwords = Yes
passdb backend = ldapsam
passwd program = /usr/local/bin/smbldap-passwd.pl -o %u
passwd chat = *new*password* %n\n *new*password:* %n\ *successfully*
passwd chat debug = Yes
log level = 3
log file = /var/log/samba/%m.log
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
add user script = /usr/local/sbin/smbldap-useradd.pl -a "%u"
delete user script = /usr/local/sbin/smbldap-useradd.pl -d
"%u"
add group script = /usr/local/sbin/smbldap-useradd.pl -a -g
"%g"
delete group script = /usr/local/sbin/smbldap-useradd.pl -d -g
"%g"
add user to group script = /usr/local/sbin/smbldap-useradd.pl -j
-u "%u" -g "%g"
delete user from group script = /usr/local/sbin/smbldap-useradd.pl
-j -u "%u" -g "%g"
set primary group script = /usr/local/sbin/smbldap-useradd.pl -m
-u "%u" -gid "%g"
add machine script = /usr/local/sbin/smbldap-useradd.pl -a -w
"%m"
domain logons = Yes
os level = 22
preferred master = Yes
local master = No
domain master = Yes
dns proxy = No
wins support = Yes
ldap suffix = dc=sfgroup,dc=com
ldap machine suffix = ou=People
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap filter = (&(uid=%u)(objectclass=sambaSamAccount))
ldap admin dn = "cn=Manager,dc=sfgroup,dc=com"
ldap ssl = no
[homes]
comment = Home Directories
read only = No
browseable = No
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
LDAP data:
=========
linux:/var/log # ldapsearch -x
# extended LDIF
#
# LDAPv3
# base <> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#
# sfgroup.com
dn: dc=sfgroup,dc=com
objectClass: dcObject
objectClass: organization
dc: sfgroup
o: sfgroup
# People, sfgroup.com
dn: ou=People,dc=sfgroup,dc=com
objectClass: organizationalUnit
ou: People
# Groups, sfgroup.com
dn: ou=Groups,dc=sfgroup,dc=com
objectClass: organizationalUnit
ou: Groups
# Computers, sfgroup.com
dn: ou=Computers,dc=sfgroup,dc=com
objectClass: organizationalUnit
ou: Computers
# nobody, People, sfgroup.com
dn: uid=nobody,ou=People,dc=sfgroup,dc=com
cn: nobody
sn: nobody
objectClass: inetOrgPerson
objectClass: sambaSAMAccount
objectClass: posixAccount
gidNumber: 514
uid: nobody
uidNumber: 999
homeDirectory: /dev/null
sambaPwdLastSet: 0
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaPwdMustChange: 2147483647
sambaHomePath: \\rishi\homes
sambaHomeDrive: _HOMEDRIVE_
sambaProfilePath: \\_PDCNAME_\profiles\
sambaPrimaryGroupSID: S-1-5-21-3516781642-1962875130-3438800523-514
sambaLMPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
sambaNTPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
sambaAcctFlags: [NU ]
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-2998
loginShell: /bin/false
# Domain Admins, Groups, sfgroup.com
dn: cn=Domain Admins,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 512
cn: Domain Admins
description: Netbios Domain Administrators
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-512
sambaGroupType: 2
displayName: Domain Admins
# Domain Users, Groups, sfgroup.com
dn: cn=Domain Users,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 513
cn: Domain Users
description: Netbios Domain Users
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-513
sambaGroupType: 2
displayName: Domain Users
# Domain Guests, Groups, sfgroup.com
dn: cn=Domain Guests,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 514
cn: Domain Guests
description: Netbios Domain Guests Users
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-514
sambaGroupType: 2
displayName: Domain Guests
# Administrators, Groups, sfgroup.com
dn: cn=Administrators,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 544
cn: Administrators
description: Netbios Domain Members can fully administer the
computer/sambaDom
ainName
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-544
sambaGroupType: 2
displayName: Administrators
# Users, Groups, sfgroup.com
dn: cn=Users,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 545
cn: Users
description: Netbios Domain Ordinary users
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-545
sambaGroupType: 2
displayName: users
# Guests, Groups, sfgroup.com
dn: cn=Guests,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 546
cn: Guests
memberUid: nobody
description: Netbios Domain Users granted guest access to the
computer/sambaDo
mainName
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-546
sambaGroupType: 2
displayName: Guests
# Power Users, Groups, sfgroup.com
dn: cn=Power Users,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 547
cn: Power Users
description: Netbios Domain Members can share directories and printers
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-547
sambaGroupType: 2
displayName: Power Users
# Account Operators, Groups, sfgroup.com
dn: cn=Account Operators,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 548
cn: Account Operators
description: Netbios Domain Users to manipulate users accounts
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-548
sambaGroupType: 2
displayName: Account Operators
# Server Operators, Groups, sfgroup.com
dn: cn=Server Operators,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 549
cn: Server Operators
description: Netbios Domain Server Operators
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-549
sambaGroupType: 2
displayName: Server Operators
# Print Operators, Groups, sfgroup.com
dn: cn=Print Operators,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 550
cn: Print Operators
description: Netbios Domain Print Operators
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-550
sambaGroupType: 2
displayName: Print Operators
# Backup Operators, Groups, sfgroup.com
dn: cn=Backup Operators,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 551
cn: Backup Operators
description: Netbios Domain Members can bypass file security to back up files
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-551
sambaGroupType: 2
displayName: Backup Operators
# Replicator, Groups, sfgroup.com
dn: cn=Replicator,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 552
cn: Replicator
description: Netbios Domain Supports file replication in a sambaDomainName
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-552
sambaGroupType: 2
displayName: Replicator
# Domain Computers, Groups, sfgroup.com
dn: cn=Domain Computers,ou=Groups,dc=sfgroup,dc=com
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 553
cn: Domain Computers
description: Netbios Domain Computers accounts
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-553
sambaGroupType: 2
displayName: Domain Computers
# root, People, sfgroup.com
dn: uid=root,ou=People,dc=sfgroup,dc=com
cn: root
sn: root
objectClass: inetOrgPerson
objectClass: sambaSAMAccount
objectClass: posixAccount
uid: root
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaHomePath: \\rishi\homes
sambaHomeDrive: _HOMEDRIVE_
sambaProfilePath: \\_PDCNAME_\profiles\
gecos: Netbios Domain Administrator
sambaSID: S-1-5-21-3516781642-1962875130-3438800523-1000
uidNumber: 0
gidNumber: 512
sambaPrimaryGroupSID: S-1-5-21-3516781642-1962875130-3438800523-512
homeDirectory: /root
sambaLMPassword: 8C6F5D02DEB21501AAD3B435B51404EE
sambaAcctFlags: [U]
sambaNTPassword: E0FBA38268D0EC66EF1CB452D5885E53
sambaPwdLastSet: 1072756099
sambaPwdMustChange: 1076644099
loginShell: /bin/bash
# TECHGROUP, sfgroup.com
dn: sambaDomainName=TECHGROUP,dc=sfgroup,dc=com
sambaDomainName: TECHGROUP
sambaSID: S-1-5-21-1818518954-1584551537-3523831235
sambaAlgorithmicRidBase: 1000
objectClass: sambaDomain
# rama$, People, sfgroup.com
dn: uid=rama$,ou=People,dc=sfgroup,dc=com
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
cn: rama$
sn: rama$
uid: rama$
uidNumber: 1000
gidNumber: 553
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
# search result
search: 2
result: 0 Success
# numResponses: 22
# numEntries: 21
linux:/var/log #
ldap log message:
------------------
Dec 29 20:17:42 linux slapd[1139]: conn=40 fd=17 ACCEPT from IP=::1 32812
(IP=:: 389)
Dec 29 20:17:42 linux slapd[1302]: conn=40 op=0 BIND
dn="cn=Manager,dc=sfgroup,dc=com" method=128
Dec 29 20:17:42 linux slapd[1302]: conn=40 op=0 AUTHZ
dn="cn=Manager,dc=sfgroup,dc=com" mech=simple ssf=0
Dec 29 20:17:42 linux slapd[1302]: conn=40 op=0 RESULT tag=97 err=0 textDec 29
20:17:42 linux slapd[1475]: conn=40 op=1 SRCH
base="dc=sfgroup,dc=com" scope=2
filter="(&(objectClass=sambaDomain)(sambaDomainName=TECHGROUP))"
Dec 29 20:17:42 linux slapd[1475]: conn=40 op=1 SEARCH RESULT tag=101
err=0 nentries=1 textDec 29 20:17:42 linux slapd[1474]: conn=40 op=2 SRCH
base="dc=sfgroup,dc=com" scope=2
filter="(&(&(uid=root)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Dec 29 20:17:42 linux slapd[1474]: conn=40 op=2 SEARCH RESULT tag=101
err=0 nentries=1 textDec 29 20:17:43 linux slapd[1139]: conn=41 fd=22 ACCEPT
from
IP=127.0.0.1:32813 (IP=:: 389)
Dec 29 20:17:43 linux slapd[1302]: conn=41 op=0 BIND dn="" method=128
Dec 29 20:17:43 linux slapd[1302]: conn=41 op=0 RESULT tag=97 err=0 textDec 29
20:17:43 linux slapd[1475]: conn=41 op=1 SRCH
base="dc=sfgroup,dc=com" scope=2 filter="(uid=root)"
Dec 29 20:17:43 linux slapd[1475]: conn=41 op=1 SEARCH RESULT tag=101
err=0 nentries=1 textDec 29 20:17:43 linux slapd[1474]: conn=41 op=2 SRCH
base="ou=Groups,dc=sfgroup,dc=com" scope=2
filter="(&(objectClass=posixGroup)(|(memberUid=root)(uniqueMember=uid=root,ou=people,dc=sfgroup,dc=com)))"
Dec 29 20:17:43 linux slapd[1474]: conn=41 op=2 SEARCH RESULT tag=101
err=0 nentries=0 textDec 29 20:17:43 linux slapd[1302]: conn=40 op=3 SRCH
base="ou=Groups,dc=sfgroup,dc=com" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=512))"
Dec 29 20:17:43 linux slapd[1302]: conn=40 op=3 SEARCH RESULT tag=101
err=0 nentries=1 textDec 29 20:17:44 linux slapd[1475]: conn=40 op=4 SRCH
base="dc=sfgroup,dc=com" scope=2
filter="(&(&(uid=rama$)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Dec 29 20:17:44 linux slapd[1475]: conn=40 op=4 SEARCH RESULT tag=101
err=0 nentries=0 textDec 29 20:17:44 linux slapd[1302]: conn=40 op=5 SRCH
base="ou=Groups,dc=sfgroup,dc=com" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=553))"
Dec 29 20:17:44 linux slapd[1302]: conn=40 op=5 SEARCH RESULT tag=101
err=0 nentries=1 textDec 29 20:17:44 linux slapd[1474]: conn=40 op=6 SRCH
base="dc=sfgroup,dc=com" scope=2
filter="(&(&(uid=rama$)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Dec 29 20:17:44 linux slapd[1474]: conn=40 op=6 SEARCH RESULT tag=101
err=0 nentries=0 textDec 29 20:17:44 linux slapd[1475]: conn=40 op=7 SRCH
base="dc=sfgroup,dc=com" scope=2
filter="(&(sambaSID=S-1-5-21-1818518954-1584551537-3523831235-3000)(objectClass=sambaSamAccount))"
Dec 29 20:17:44 linux slapd[1475]: conn=40 op=7 SEARCH RESULT tag=101
err=0 nentries=0 textDec 29 20:17:44 linux slapd[1302]: conn=40 op=8 SRCH
base="dc=sfgroup,dc=com" scope=2
filter="(&(uid=rama$)(objectClass=sambaSamAccount))"
Dec 29 20:17:44 linux slapd[1302]: conn=40 op=8 SEARCH RESULT tag=101
err=0 nentries=0 textDec 29 20:17:44 linux slapd[1474]: conn=40 op=9 SRCH
base="dc=sfgroup,dc=com" scope=2
filter="(&(sambaSID=S-1-5-21-1818518954-1584551537-3523831235-3000)(|(objectClass=sambaIdmapEntry)(objectClass=sambaSidEntry)))"
Dec 29 20:17:44 linux slapd[1474]: conn=40 op=9 SEARCH RESULT tag=101
err=0 nentries=0 textDec 29 20:17:44 linux slapd[1475]: conn=40 op=10 ADD
dn="uid=rama$,ou=People,dc=sfgroup,dc=com"
Dec 29 20:17:44 linux slapd[1475]: conn=40 op=10 RESULT tag=105 err=68 textDec
29 20:17:44 linux slapd[1139]: conn=40 fd=17 closed
Dec 29 20:17:44 linux slapd[1139]: conn=41 fd=22 closed
Dec 29 20:17:45 linux slapd[1139]: conn=42 fd=17 ACCEPT from IP=::1 32814
(IP=:: 389)
Dec 29 20:17:45 linux slapd[1302]: conn=42 op=0 BIND
dn="cn=Manager,dc=sfgroup,dc=com" method=128
Dec 29 20:17:45 linux slapd[1302]: conn=42 op=0 AUTHZ
dn="cn=Manager,dc=sfgroup,dc=com" mech=simple ssf=0
Dec 29 20:17:45 linux slapd[1302]: conn=42 op=0 RESULT tag=97 err=0 textDec 29
20:17:45 linux slapd[1474]: conn=42 op=1 SRCH
base="dc=sfgroup,dc=com" scope=2
filter="(&(objectClass=sambaDomain)(sambaDomainName=TECHGROUP))"
Dec 29 20:17:45 linux slapd[1474]: conn=42 op=1 SEARCH RESULT tag=101
err=0 nentries=1 textDec 29 20:17:45 linux slapd[1475]: conn=42 op=2 SRCH
base="dc=sfgroup,dc=com" scope=2
filter="(&(&(uid=root)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Dec 29 20:17:45 linux slapd[1475]: conn=42 op=2 SEARCH RESULT tag=101
err=0 nentries=1 textDec 29 20:17:45 linux slapd[1139]: conn=43 fd=22 ACCEPT
from
IP=127.0.0.1:32815 (IP=:: 389)
Dec 29 20:17:45 linux slapd[1302]: conn=43 op=0 BIND dn="" method=128
Dec 29 20:17:45 linux slapd[1302]: conn=43 op=0 RESULT tag=97 err=0 textDec 29
20:17:45 linux slapd[1474]: conn=43 op=1 SRCH
base="dc=sfgroup,dc=com" scope=2 filter="(uid=root)"
Dec 29 20:17:45 linux slapd[1474]: conn=43 op=1 SEARCH RESULT tag=101
err=0 nentries=1 textDec 29 20:17:45 linux slapd[1475]: conn=43 op=2 SRCH
base="ou=Groups,dc=sfgroup,dc=com" scope=2
filter="(&(objectClass=posixGroup)(|(memberUid=root)(uniqueMember=uid=root,ou=people,dc=sfgroup,dc=com)))"
Dec 29 20:17:45 linux slapd[1475]: conn=43 op=2 SEARCH RESULT tag=101
err=0 nentries=0 textDec 29 20:17:45 linux slapd[1302]: conn=42 op=3 SRCH
base="ou=Groups,dc=sfgroup,dc=com" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=512))"
Dec 29 20:17:45 linux slapd[1302]: conn=42 op=3 SEARCH RESULT tag=101
err=0 nentries=1 textDec 29 20:17:46 linux slapd[1139]: conn=42 fd=17 closed
Dec 29 20:17:46 linux slapd[1139]: conn=43 fd=22 closed
machine log:
-----------
linux:/var/log/samba # grep -v 2003 /var/log/samba/rama.log
Transaction 1 of length 137
switch message SMBnegprot (pid 1692)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
Requested protocol [PC NETWORK PROGRAM 1.0]
Requested protocol [LANMAN1.0]
Requested protocol [Windows for Workgroups 3.1a]
Requested protocol [LM1.2X002]
Requested protocol [LANMAN2.1]
Requested protocol [NT LM 0.12]
using SPNEGO
Selected protocol NT LM 0.12
Transaction 2 of length 202
switch message SMBsesssetupX (pid 1692)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
wct=12 flg2=0xc807
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
Doing spnego session setup
NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
PrimaryDomain=[]
Got OID 1 3 6 1 4 1 311 2 2 10
Got secblob of size 32
Got NTLMSSP neg_flags=0xe0088297
Transaction 3 of length 310
switch message SMBsesssetupX (pid 1692)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
wct=12 flg2=0xc807
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
Doing spnego session setup
NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
PrimaryDomain=[]
Got user=[root] domain=[techgroup] workstation=[RAMA] len1=24 len2=24
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
check_ntlm_password: Checking password for unmapped user
[techgroup]\[root]@[RAMA] with the new password interface
check_ntlm_password: mapped user is: [techgroup]\[root]@[RAMA]
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
smbldap_search_suffix: searching
for:[(&(&(uid=root)(objectclass=sambaSamAccount))(objectclass=sambaSamAccount))]
init_sam_from_ldap: Entry found for user: root
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=512))]
init_group_from_ldap: Entry found for group: 512
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
fetch sid from gid cache 512 ->
S-1-5-21-3516781642-1962875130-3438800523-512
check_ntlm_password: sam authentication for user [root] succeeded
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
check_ntlm_password: authentication for user [root] -> [root] -> [root]
succeeded
User name: root Real name: root
UNIX uid 0 is UNIX user root, and will be vuid 100
Adding/updating homes service for user 'root' using home directory:
'/root'
adding home's share [root] for user 'root' at '/root'
Transaction 4 of length 80
switch message SMBtconX (pid 1692)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
Connect path is '/tmp' for service [IPC$]
se_access_check: user sid is S-1-5-21-3516781642-1962875130-3438800523-1000
se_access_check: also S-1-5-21-3516781642-1962875130-3438800523-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
Initialising default vfs hooks
se_access_check: user sid is S-1-5-21-3516781642-1962875130-3438800523-1000
se_access_check: also S-1-5-21-3516781642-1962875130-3438800523-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
setting sec ctx (0, 512) - sec_ctx_stack_ndx = 0
rama (192.168.0.102) connect to service IPC$ initially as user root
(uid=0, gid=512) (pid 1692)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
tconX service=IPC$
Transaction 5 of length 104
switch message SMBntcreateX (pid 1692)
setting sec ctx (0, 512) - sec_ctx_stack_ndx = 0
nt_open_pipe: Known pipe lsarpc opening.
Transaction 6 of length 160
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=72 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b0)api_pipe_bind_req:
\PIPE\lsarpc -> \PIPE\lsass
check_bind_req for \PIPE\lsarpc
Transaction 7 of length 172
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=84 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b0)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: LSA_OPENPOLICY2
se_access_check: user sid is S-1-5-21-3516781642-1962875130-3438800523-1000
se_access_check: also S-1-5-21-3516781642-1962875130-3438800523-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
free_pipe_context: destroying talloc pool of size 816
Transaction 8 of length 134
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=46 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b0)free_pipe_context:
destroying talloc pool of size 0
free_pipe_context: destroying talloc pool of size 0
Transaction 9 of length 134
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=46 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b0)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
free_pipe_context: destroying talloc pool of size 512
Transaction 10 of length 104
switch message SMBntcreateX (pid 1692)
nt_open_pipe: Known pipe winreg opening.
Transaction 11 of length 160
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=72 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b1)api_pipe_bind_req:
\PIPE\winreg -> \PIPE\winreg
check_bind_req for \PIPE\winreg
Transaction 12 of length 124
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=36 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b1)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_OPEN_HKLM
free_pipe_context: destroying talloc pool of size 0
Transaction 13 of length 272
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=184 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b1)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_OPEN_ENTRY
free_pipe_context: destroying talloc pool of size 110
Transaction 14 of length 236
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=148 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b1)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_INFO
free_pipe_context: destroying talloc pool of size 42
Transaction 15 of length 132
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=44 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b1)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_CLOSE
Closed policy
free_pipe_context: destroying talloc pool of size 0
Transaction 16 of length 132
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=44 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b1)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_CLOSE
Closed policy
free_pipe_context: destroying talloc pool of size 0
Transaction 17 of length 45
switch message SMBclose (pid 1692)
Transaction 18 of length 100
switch message SMBntcreateX (pid 1692)
nt_open_pipe: Known pipe samr opening.
Transaction 19 of length 160
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=72 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "samr" (pnum 75b2)api_pipe_bind_req:
\PIPE\samr -> \PIPE\lsass
check_bind_req for \PIPE\samr
Transaction 20 of length 152
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=64 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "samr" (pnum 75b2)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: SAMR_CONNECT4
se_access_check: user sid is S-1-5-21-3516781642-1962875130-3438800523-1000
se_access_check: also S-1-5-21-3516781642-1962875130-3438800523-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
free_pipe_context: destroying talloc pool of size 748
Transaction 21 of length 140
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=52 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "samr" (pnum 75b2)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: SAMR_ENUM_DOMAINS
free_pipe_context: destroying talloc pool of size 1080
Transaction 22 of length 170
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=82 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "samr" (pnum 75b2)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: SAMR_LOOKUP_DOMAIN
Returning domain sid for domain TECHGROUP ->
S-1-5-21-1818518954-1584551537-3523831235
free_pipe_context: destroying talloc pool of size 18
Transaction 23 of length 164
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=76 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "samr" (pnum 75b2)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: SAMR_OPEN_DOMAIN
se_access_check: user sid is S-1-5-21-3516781642-1962875130-3438800523-1000
se_access_check: also S-1-5-21-3516781642-1962875130-3438800523-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
free_pipe_context: destroying talloc pool of size 732
Transaction 24 of length 172
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=84 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "samr" (pnum 75b2)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: SAMR_CREATE_USER
push_sec_ctx(0, 512) : sec_ctx_stack_ndx = 1
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
smbldap_search_suffix: searching
for:[(&(&(uid=rama$)(objectclass=sambaSamAccount))(objectclass=sambaSamAccount))]
pop_sec_ctx (0, 512) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 512) : sec_ctx_stack_ndx = 1
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=553))]
init_group_from_ldap: Entry found for group: 553
pop_sec_ctx (0, 512) - sec_ctx_stack_ndx = 0
smbldap_search_suffix: searching
for:[(&(&(uid=rama$)(objectclass=sambaSamAccount))(objectclass=sambaSamAccount))]
smbldap_search_suffix: searching
for:[(&(sambaSID=S-1-5-21-1818518954-1584551537-3523831235-3000)(objectclass=sambaSamAccount))]
smbldap_search_suffix: searching
for:[(&(uid=rama$)(objectclass=sambaSamAccount))]
smbldap_search_suffix: searching
for:[(&(sambaSID=S-1-5-21-1818518954-1584551537-3523831235-3000)(|(objectClass=sambaIdmapEntry)(objectClass=sambaSidEntry)))]
ldapsam_add_sam_account: Adding new user
init_ldap_from_sam: Setting entry for user: rama$
ldapsam_modify_entry: Failed to add user
dnuid=rama$,ou=People,dc=sfgroup,dc=com with: Already exists
ldapsam_add_sam_account: failed to modify/add user with uid = rama$ (dn
= uid=rama$,ou=People,dc=sfgroup,dc=com)
could not add user/computer rama$ to passdb. Check permissions?
free_pipe_context: destroying talloc pool of size 12
Transaction 25 of length 132
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=44 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "samr" (pnum 75b2)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: SAMR_CLOSE_HND
Closed policy
free_pipe_context: destroying talloc pool of size 0
Transaction 26 of length 132
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=44 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "samr" (pnum 75b2)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: SAMR_CLOSE_HND
Closed policy
free_pipe_context: destroying talloc pool of size 0
Transaction 27 of length 45
switch message SMBclose (pid 1692)
Transaction 28 of length 132
switch message SMBtrans (pid 1692)
trans <\PIPE\> data=44 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b0)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: LSA_CLOSE
Closed policy
free_pipe_context: destroying talloc pool of size 0
Transaction 29 of length 45
switch message SMBclose (pid 1692)
Transaction 30 of length 39
switch message SMBtdis (pid 1692)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
rama (192.168.0.102) closed connection to service IPC$
Yielding connection to IPC$
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
Transaction 31 of length 43
switch message SMBulogoffX (pid 1692)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
ulogoffX vuid=100
timeout_processing: End of file from client (client has disconnected).
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
Closing connections
Yielding connection to
Server exit (normal exit)
Transaction 1 of length 137
switch message SMBnegprot (pid 1693)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
Requested protocol [PC NETWORK PROGRAM 1.0]
Requested protocol [LANMAN1.0]
Requested protocol [Windows for Workgroups 3.1a]
Requested protocol [LM1.2X002]
Requested protocol [LANMAN2.1]
Requested protocol [NT LM 0.12]
using SPNEGO
Selected protocol NT LM 0.12
Transaction 2 of length 202
switch message SMBsesssetupX (pid 1693)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
wct=12 flg2=0xc807
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
Doing spnego session setup
NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
PrimaryDomain=[]
Got OID 1 3 6 1 4 1 311 2 2 10
Got secblob of size 32
Got NTLMSSP neg_flags=0xe0088297
Transaction 3 of length 310
switch message SMBsesssetupX (pid 1693)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
wct=12 flg2=0xc807
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
Doing spnego session setup
NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
PrimaryDomain=[]
Got user=[root] domain=[techgroup] workstation=[RAMA] len1=24 len2=24
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
check_ntlm_password: Checking password for unmapped user
[techgroup]\[root]@[RAMA] with the new password interface
check_ntlm_password: mapped user is: [techgroup]\[root]@[RAMA]
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
smbldap_search_suffix: searching
for:[(&(&(uid=root)(objectclass=sambaSamAccount))(objectclass=sambaSamAccount))]
init_sam_from_ldap: Entry found for user: root
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=512))]
init_group_from_ldap: Entry found for group: 512
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
fetch sid from gid cache 512 ->
S-1-5-21-3516781642-1962875130-3438800523-512
check_ntlm_password: sam authentication for user [root] succeeded
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
check_ntlm_password: authentication for user [root] -> [root] -> [root]
succeeded
User name: root Real name: root
UNIX uid 0 is UNIX user root, and will be vuid 100
Adding/updating homes service for user 'root' using home directory:
'/root'
adding home's share [root] for user 'root' at '/root'
Transaction 4 of length 80
switch message SMBtconX (pid 1693)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
Connect path is '/tmp' for service [IPC$]
se_access_check: user sid is S-1-5-21-3516781642-1962875130-3438800523-1000
se_access_check: also S-1-5-21-3516781642-1962875130-3438800523-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
Initialising default vfs hooks
se_access_check: user sid is S-1-5-21-3516781642-1962875130-3438800523-1000
se_access_check: also S-1-5-21-3516781642-1962875130-3438800523-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
setting sec ctx (0, 512) - sec_ctx_stack_ndx = 0
rama (192.168.0.102) connect to service IPC$ initially as user root
(uid=0, gid=512) (pid 1693)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
tconX service=IPC$
Transaction 5 of length 104
switch message SMBntcreateX (pid 1693)
setting sec ctx (0, 512) - sec_ctx_stack_ndx = 0
nt_open_pipe: Known pipe lsarpc opening.
Transaction 6 of length 160
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=72 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b3)api_pipe_bind_req:
\PIPE\lsarpc -> \PIPE\lsass
check_bind_req for \PIPE\lsarpc
Transaction 7 of length 172
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=84 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b3)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: LSA_OPENPOLICY2
se_access_check: user sid is S-1-5-21-3516781642-1962875130-3438800523-1000
se_access_check: also S-1-5-21-3516781642-1962875130-3438800523-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
free_pipe_context: destroying talloc pool of size 816
Transaction 8 of length 134
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=46 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b3)free_pipe_context:
destroying talloc pool of size 0
free_pipe_context: destroying talloc pool of size 0
Transaction 9 of length 134
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=46 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b3)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
free_pipe_context: destroying talloc pool of size 512
Transaction 10 of length 104
switch message SMBntcreateX (pid 1693)
nt_open_pipe: Known pipe winreg opening.
Transaction 11 of length 160
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=72 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b4)api_pipe_bind_req:
\PIPE\winreg -> \PIPE\winreg
check_bind_req for \PIPE\winreg
Transaction 12 of length 124
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=36 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b4)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_OPEN_HKLM
free_pipe_context: destroying talloc pool of size 0
Transaction 13 of length 272
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=184 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b4)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_OPEN_ENTRY
free_pipe_context: destroying talloc pool of size 110
Transaction 14 of length 236
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=148 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b4)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_INFO
free_pipe_context: destroying talloc pool of size 42
Transaction 15 of length 132
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=44 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b4)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_CLOSE
Closed policy
free_pipe_context: destroying talloc pool of size 0
Transaction 16 of length 132
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=44 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "winreg" (pnum 75b4)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: REG_CLOSE
Closed policy
free_pipe_context: destroying talloc pool of size 0
Transaction 17 of length 45
switch message SMBclose (pid 1693)
Transaction 18 of length 108
switch message SMBntcreateX (pid 1693)
nt_open_pipe: Known pipe NETLOGON opening.
Transaction 19 of length 160
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=72 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "NETLOGON" (pnum
75b5)api_pipe_bind_req:
\PIPE\NETLOGON -> \PIPE\lsass
check_bind_req for \PIPE\NETLOGON
Transaction 20 of length 174
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=86 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "NETLOGON" (pnum
75b5)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: NET_REQCHAL
free_pipe_context: destroying talloc pool of size 26
Transaction 21 of length 45
switch message SMBclose (pid 1693)
Transaction 22 of length 108
switch message SMBntcreateX (pid 1693)
nt_open_pipe: Known pipe NETLOGON opening.
Transaction 23 of length 160
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=72 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "NETLOGON" (pnum
75b6)api_pipe_bind_req:
\PIPE\NETLOGON -> \PIPE\lsass
check_bind_req for \PIPE\NETLOGON
Transaction 24 of length 202
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=114 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "NETLOGON" (pnum
75b6)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: NET_AUTH
free_pipe_context: destroying talloc pool of size 38
Transaction 25 of length 45
switch message SMBclose (pid 1693)
Transaction 26 of length 132
switch message SMBtrans (pid 1693)
trans <\PIPE\> data=44 params=0 setup=2
named pipe command on <> name
Got API command 0x26 on pipe "lsarpc" (pnum 75b3)free_pipe_context:
destroying talloc pool of size 0
api_rpcTNP: rpc command: LSA_CLOSE
Closed policy
free_pipe_context: destroying talloc pool of size 0
Transaction 27 of length 45
switch message SMBclose (pid 1693)
Transaction 28 of length 39
switch message SMBtdis (pid 1693)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
rama (192.168.0.102) closed connection to service IPC$
Yielding connection to IPC$
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
Transaction 29 of length 43
switch message SMBulogoffX (pid 1693)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
ulogoffX vuid=100
timeout_processing: End of file from client (client has disconnected).
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
Closing connections
Yielding connection to
Server exit (normal exit)
linux:/var/log/samba #