Hi there,
this one starts driving me nuts:
1. Configuration:
- iPlanet LDAP Server
- Solaris 9 Server 1 - Samba 2.8.8, Domain: FRSTPRV
- Solaris 9 Server 2 - Samba 3.0.x, Domain: FRSTPRV.DE
(Problem occurs, using whatever domain name)
- x means Version 1 and Version 2a have been tested...
- Both samba servers are physically different machines!
2. Solaris Server 1 using Samba 2.8 is productional, second Server
was setup for testing reasons.
Samba 2.8 Admin (root:1), rootdn, -w set in secrets.db.
Samba 2.8 is joined by multiple Win2K Terminalservers.
Samba 3.0.x SambaAdmin302 (root:1), rootdn, -w set in secrets.db.
Clients cannot join the domain. Strange error message returned.
The message is in german and says something like: Securityaccounts
and blah could not be matched and registered...
When checking the logfiles, if found the following:
1. NativeOS=[Windows 2002 2600 Service Pack 1] NativeLanMan[Windows 2002 5.1]
PrimaryDomain=[]
2. Got user=[SambaAdmin302] domain=[FRSTPRV.DE] workstation[HEARTOFGOLD] len1=24
len2=24
3. check_ntlm_password: Checking password for unmapped user
[FRSTPRV.DE]\[SambaAdmin302]@[HEARTOFGOLD] with the new
password interface
4. check_ntlm_password: mapped user is: [FRSTPRV]\[SambaAdmin302]
@[HEARTOFGOLD]
Ok - and here s the question: Why and how is it possible to map an
Admin User of the Domain
FRSTPRV.DE to a completely different Domain???
See - point 4 is missing ".DE":
1. Got user=[SambaAdmin302] domain=[FRSTPRV.DE]
4. mapped user is: [FRSTPRV]\[SambaAdmin302]@[HEARTOFGOLD]
Please remember FRSTPRV is a Samba 2.8.8 Domain using a
completely different LDAP schema
The user SambaAdmin302 was never added to the 2.8.8 Domain and
therefor has no LDAP object
of type "sambaAccount" - as well it has no mapping to the Samba 2.8.8
Domain-SID
What s going wrong here?
The really sad thing about this problem is, although I stopped all Samba
2.8.8 services, removed its
LDAP-Domain-Object entry (FRSTPRV) from the LDAP Server and
restarted Samba 3.0.x, the problem
still existed.
And - even more weired (at least for me), the Samba 3.0.x Server re-added
the LDAP-Domain-Object
entry (FRSTPRV) to the LDAP Server, although it is configured as and
running the Domain "frstprv.DE".
(The Domain "frstprv.DE" really exists, can be browsed and displays
the
Samba 3.0.x servers correct
netbios name, although a domain named frstprv cannot be found!)
Thanx 4 your time help
Dirk Brenckmann
(P.S. The Windows PC s I tried to join the domain with, seem to be
correctly configured, because
they do not have any problem to join my own "Home-Samba-3.0.2a-
Server" running LDAP too.)
Dont' quote the following, unless you REALLY need it ;-)
---- Snip ---- Snip ---- Snip ---- Snip ---- Snip ---- Snip ---- Snip ---- Snip
----
Snip ---- Snip ---- Snip ---- Snip
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBsesssetupX (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_sesssetup_and_X(638)
wct=12 flg2=0xc807
[2004/03/01 17:59:50, 2, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:setup_new_vc_session(591)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would
close all old resources.
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(518)
Doing spnego session setup
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(549)
NativeOS=[Windows 2002 2600 Service Pack 1] NativeLanMan[Windows 2002 5.1]
PrimaryDomain=[]
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_spnego_negotiate(427)
Got OID 1 3 6 1 4 1 311 2 2 10
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_spnego_negotiate(430)
Got secblob of size 32
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe0088297
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 3 of length 374
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBsesssetupX (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_sesssetup_and_X(638)
wct=12 flg2=0xc807
[2004/03/01 17:59:50, 2, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:setup_new_vc_session(591)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would
close all old resources.
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(518)
Doing spnego session setup
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(549)
NativeOS=[Windows 2002 2600 Service Pack 1] NativeLanMan[Windows 2002 5.1]
PrimaryDomain=[]
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
libsmb/ntlmssp.c:ntlmssp_server_auth(616)
Got user=[SambaAdmin302] domain=[FRSTPRV.DE] workstation[HEARTOFGOLD] len1=24
len2=24
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/uid.c:push_conn_ctx(287)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user
[FRSTPRV.DE]\[SambaAdmin302]@[HEARTOFGOLD] with the new
password interfa
ce
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: [FRSTPRV]\[SambaAdmin302]
@[HEARTOFGOLD]
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/uid.c:push_conn_ctx(287)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 2, effective(0, 0), real(0, 0)]
passdb/pdb_ldap.c:init_sam_from_ldap(462)
init_sam_from_ldap: Entry found for user: SambaAdmin302
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/uid.c:push_conn_ctx(287)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/uid.c:push_conn_ctx(287)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
passdb/lookup_sid.c:fetch_sid_from_gid_cache(235)
fetch sid from gid cache 1 -> S-1-5-21-2771790978-568927189-
1120492779-1003
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
auth/auth.c:check_ntlm_password(268)
check_ntlm_password: sam authentication for user [SambaAdmin302]
succeeded
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/uid.c:push_conn_ctx(287)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 2, effective(0, 0), real(0, 0)]
auth/auth.c:check_ntlm_password(305)
check_ntlm_password: authentication for user [SambaAdmin302] ->
[SambaAdmin302] -> [SambaAdmin302] succeeded
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
NTLMSSP Sign/Seal - Initialising with flags:
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0x60088215
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/password.c:register_vuid(221)
User name: SambaAdmin302 Real name: Administrator Samba
3.0.2a
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/password.c:register_vuid(240)
UNIX uid 0 is UNIX user SambaAdmin302, and will be vuid 100
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/password.c:register_vuid(264)
Adding/updating homes service for user 'SambaAdmin302' using home
directory: '/'
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 4 of length 76
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBtconX (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/service.c:make_connection_snum(543)
Connect path is '/tmp' for service [IPC$]
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
lib/util_seaccess.c:se_access_check(251)
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-121683378-226845664-
2080652275-1000
se_access_check: also S-1-5-21-121683378-226845664-2080652275-
1003
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-2771790978-568927189-1120492779-
1003
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/vfs.c:vfs_init_default(203)
Initialising default vfs hooks
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
lib/util_seaccess.c:se_access_check(251)
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-121683378-226845664-
2080652275-1000
se_access_check: also S-1-5-21-121683378-226845664-2080652275-
1003
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-2771790978-568927189-1120492779-
1003
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 1) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/service.c:make_connection_snum(705)
heartofgold (192.168.30.127) connect to service IPC$ initially as user
SambaAdmin302 (uid=0, gid=1) (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/reply.c:reply_tcon_and_X(326)
tconX service=IPC$
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 5 of length 104
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBntcreateX (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 0), real(0, 0)]
smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 1) - sec_ctx_stack_ndx = 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/nttrans.c:nt_open_pipe(503)
nt_open_pipe: Known pipe lsarpc opening.
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 6 of length 140
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBwriteX (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe.c:api_pipe_bind_req(860)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe.c:check_bind_req(732)
check_bind_req for \PIPE\lsarpc
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=76e5 nwritten=72
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 7 of length 63
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBreadX (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=76e5 min=1024 max=1024 nread=68
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 8 of length 168
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:reply_trans
(538)
trans <\PIPE\> data=80 params=0 setup=2
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:named_pipe
(334)
named pipe command on <> name
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:api_fd_reply
(296)
Got API command 0x26 on pipe "lsarpc" (pnum 76e5)free_pipe_context:
destroying talloc pool of size 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe.c:api_rpcTNP(1509)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
lib/util_seaccess.c:se_access_check(251)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-121683378-226845664-
2080652275-1000
se_access_check: also S-1-5-21-121683378-226845664-2080652275-
1003
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-2771790978-568927189-1120492779-
1003
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 812
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 9 of length 134
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:reply_trans
(538)
trans <\PIPE\> data=46 params=0 setup=2
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:named_pipe
(334)
named pipe command on <> name
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:api_fd_reply
(296)
Got API command 0x26 on pipe "lsarpc" (pnum 76e5)free_pipe_context:
destroying talloc pool of size 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 10 of length 134
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:reply_trans
(538)
trans <\PIPE\> data=46 params=0 setup=2
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:named_pipe
(334)
named pipe command on <> name
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:api_fd_reply
(296)
Got API command 0x26 on pipe "lsarpc" (pnum 76e5)free_pipe_context:
destroying talloc pool of size 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe.c:api_rpcTNP(1509)
api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 512
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 11 of length 104
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBntcreateX (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/nttrans.c:nt_open_pipe(503)
nt_open_pipe: Known pipe winreg opening.
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 12 of length 140
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBwriteX (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe.c:api_pipe_bind_req(860)
api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe.c:check_bind_req(732)
check_bind_req for \PIPE\winreg
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=76e6 nwritten=72
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 13 of length 63
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBreadX (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=76e6 min=1024 max=1024 nread=68
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 14 of length 124
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:reply_trans
(538)
trans <\PIPE\> data=36 params=0 setup=2
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:named_pipe
(334)
named pipe command on <> name
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:api_fd_reply
(296)
Got API command 0x26 on pipe "winreg" (pnum 76e6)free_pipe_context:
destroying talloc pool of size 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe.c:api_rpcTNP(1509)
api_rpcTNP: rpc command: REG_OPEN_HKLM
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 15 of length 272
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:reply_trans
(538)
trans <\PIPE\> data=184 params=0 setup=2
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:named_pipe
(334)
named pipe command on <> name
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:api_fd_reply
(296)
Got API command 0x26 on pipe "winreg" (pnum 76e6)free_pipe_context:
destroying talloc pool of size 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe.c:api_rpcTNP(1509)
api_rpcTNP: rpc command: REG_OPEN_ENTRY
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 110
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:process_smb(890)
Transaction 16 of length 236
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25315)
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:reply_trans
(538)
trans <\PIPE\> data=148 params=0 setup=2
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:named_pipe
(334)
named pipe command on <> name
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)] smbd/ipc.c:api_fd_reply
(296)
Got API command 0x26 on pipe "winreg" (pnum 76e6)free_pipe_context:
destroying talloc pool of size 0
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe.c:api_rpcTNP(1509)
api_rpcTNP: rpc command: REG_INFO
[2004/03/01 17:59:50, 3, effective(0, 1), real(0, 0)]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 42
