Ali Naddaf
2005-Mar-02 18:25 UTC
[Samba] Can access shares, but cannot logon to the domain
Hello everyone.
I am having a problem loging into my domain (although I can log into my
shares successfully). Here are the details.
Servers and applications:
PDC Server:
Name: ACME-SERVER
Domain: ACME
Samba: 3.0.10-1 (Debian)
smbldap-tools: 0.8.5-3
Distribution: Debian, running kernel 2.6.8-1-k7
IP Address: 192.168.1.106
Backend Database: ldap (OpenLdap)
Windows Machine:
OS: Win2K
Name: naddaf2
IP Address: 192.168.1.108
username used in creating the log files: "maunelie"
I have been able to add my windows machine (i.e. naddaf2) to the ACME
domain (and a "naddaf2$" entry was added to my ldap backend as a
result). After cleaning up my /var/log/samba/ content, I started my
samba and tried to login from naddaf2 to my domain and it created a
number of log files and at the bottom of this email, I have included the
"naddaf2" log file. In addition, I have my smb.conf file there , too.
Looking at the naddaf2 log file (included in the above zipped file), it
seems that logon has gone through successfully, but what I see on my
windows box is the standard error:
"The system could not log you in. make sure your User name and Domain
are correct, then type your password again. Letters in passwords must
be typed using the correct case. Make sure Caps Lock is not accidently
on."
I appreciate it if someone could help me fix the issue.
Many thanks,
Ali Naddaf.
---- smb.conf --------------------------------------
# Global parameters
[global]
unix charset = LOCALE
workgroup = ACME
netbios name = ACME-SERVER
interfaces = eth0, lo
bind interfaces only = Yes
passdb backend = ldapsam:ldap://127.0.0.1
username map = /etc/samba/smbusers
log level = 10
syslog = 0
log file = /var/log/samba/%m
max log size = 50
smb ports = 139 445
name resolve order = wins bcast hosts
time server = Yes
printcap name = CUPS
show add printer wizard = No
add user script = /usr/sbin/smbldap-useradd -a -m '%u'
delete user script = /usr/sbin/smbldap-userdel '%u'
add group script = /usr/sbin/smbldap-groupadd -p '%g'
delete group script = /usr/sbin/smbldap-groupdel '%g'
add user to group script = /usr/sbin/smbldap-groupmod -m '%u'
'%g'
delete user from group script = /usr/sbin/smbldap-groupmod -x '%u'
'%g'
set primary group script = /usr/sbin/smbldap-usermod -g '%g'
'%u'
add machine script = /usr/sbin/smbldap-useradd -w '%u'
shutdown script = /var/lib/samba/scripts/shutdown.sh
abort shutdown script = /sbin/shutdown -c
logon script = scripts\logon.bat
logon path = \\%L\profiles\%U
logon drive = H:
domain logons = Yes
preferred master = Yes
wins support = Yes
ldap suffix = dc=acme,dc=com
ldap machine suffix = ou=People
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap admin dn = cn=admin,dc=com
ldap passwd sync = Yes
passwd program=/usr/sbin/smbldap-passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*all*authentication*tokens*updated*
idmap backend = ldap://127.0.0.1
idmap uid = 10000-20000
idmap gid = 10000-20000
map acl inherit = Yes
printing = cups
printer admin = Administrator
[IPC$]
path = /tmp
hosts allow = 192.168.1., 127.
hosts deny = 0.0.0.0/0
[accounts]
comment = Accounting Files
path = /data/accounts
read only = No
[service]
comment = Financial Services Files
path = /data/service
read only = No
[pidata]
comment = Property Insurance Files
path = /data/pidata
read only = No
[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
[printers]
comment = SMB Print Spool
path = /var/spool/samba
guest ok = Yes
printable = Yes
browseable = No
[apps]
comment = Application Files
path = /apps
admin users = bjones
read only = No
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
guest ok = Yes
locking = No
[profiles]
comment = Profile Share
path = /var/lib/samba/profiles
read only = No
profile acls = Yes
[profdata]
comment = Profile Data Share
path = /var/lib/samba/profdata
read only = No
profile acls = Yes
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
browseable = yes
guest ok = no
read only = yes
write list = root
---- End of smb.conf ----------------------------------------
------ naddaf2 log file -------------------------------------
[2005/03/01 00:15:09, 5] auth/auth_util.c:is_trusted_domain(1448)
is_trusted_domain: Checking for domain trust with [ACME]
[2005/03/01 00:15:09, 5]
passdb/secrets.c:secrets_fetch_trusted_domain_password(333)
secrets_fetch failed!
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/03/01 00:15:09, 10] lib/gencache.c:gencache_get(285)
Cache entry with key = TDOM/ACME couldn't be found
[2005/03/01 00:15:09, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184)
no entry for trusted domain ACME found.
[2005/03/01 00:15:09, 5] auth/auth_util.c:make_user_info(133)
attempting to make a user_info for maunelie (maunelie)
[2005/03/01 00:15:09, 5] auth/auth_util.c:make_user_info(143)
making strings for maunelie's user_info struct
[2005/03/01 00:15:09, 5] auth/auth_util.c:make_user_info(185)
making blobs for maunelie's user_info struct
[2005/03/01 00:15:09, 10] auth/auth_util.c:make_user_info(201)
made an encrypted user_info for maunelie (maunelie)
[2005/03/01 00:15:09, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user
[ACME]\[maunelie]@[NADDAF2] with the new password interface
[2005/03/01 00:15:09, 3] auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: [ACME]\[maunelie]@[NADDAF2]
[2005/03/01 00:15:09, 10] auth/auth.c:check_ntlm_password(231)
check_ntlm_password: auth_context challenge created by random
[2005/03/01 00:15:09, 10] auth/auth.c:check_ntlm_password(233)
challenge is:
[2005/03/01 00:15:09, 5] lib/util.c:dump_data(1977)
[000] C3 BC 4E 01 8C AE B0 12 ..N.....
[2005/03/01 00:15:09, 10] auth/auth.c:check_ntlm_password(259)
check_ntlm_password: guest had nothing to say
[2005/03/01 00:15:09, 8] lib/util.c:is_myname(1797)
is_myname("ACME") returns 0
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2005/03/01 00:15:09, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/03/01 00:15:09, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:15:09, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:15:09, 5] lib/smbldap.c:smbldap_search(1017)
smbldap_search: base => [dc=acme,dc=com], filter =>
[(&(uid=maunelie)(objectclass=sambaSamAccount))], scope => [2]
[2005/03/01 00:15:09, 2] passdb/pdb_ldap.c:init_sam_from_ldap(511)
init_sam_from_ldap: Entry found for user: maunelie
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_username(625)
pdb_set_username: setting username maunelie, was
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 12 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_domain(652)
pdb_set_domain: setting domain ACME, was
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_nt_username(679)
pdb_set_nt_username: setting nt username maunelie, was
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 15 -> now SET
[2005/03/01 00:15:09, 10]
passdb/pdb_get_set.c:pdb_set_user_sid_from_string(565)
pdb_set_user_sid_from_string: setting user sid
S-1-5-21-1911238739-97561441-2706018148-3010
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_user_sid(552)
pdb_set_user_sid: setting user sid
S-1-5-21-1911238739-97561441-2706018148-3010
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 18 -> now SET
[2005/03/01 00:15:09, 10]
passdb/pdb_get_set.c:pdb_set_group_sid_from_string(600)
pdb_set_group_sid_from_string: setting group sid
S-1-5-21-1911238739-97561441-2706018148-513
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_group_sid(588)
pdb_set_group_sid: setting group sid
S-1-5-21-1911238739-97561441-2706018148-513
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 19 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 21 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 5 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 6 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 7 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 9 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 10 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_fullname(706)
pdb_set_full_name: setting full name System User, was
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 13 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(787)
pdb_set_dir_drive: setting dir drive H:, was NULL
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 3 -> now SET
[2005/03/01 00:15:09, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
smbldap_get_single_attribute: [sambaHomePath] = [<does not exist>]
[2005/03/01 00:15:09, 4] lib/substitute.c:automount_server(323)
Home server: acme-server
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_homedir(814)
pdb_set_homedir: setting home dir \\acme-server\maunelie, was
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_logon_script(733)
pdb_set_logon_script: setting logon script maunelie.cmd, was
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 4 -> now SET
[2005/03/01 00:15:09, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
smbldap_get_single_attribute: [sambaProfilePath] = [<does not exist>]
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_profile_path(760)
pdb_set_profile_path: setting profile path
\\acme-server\profiles\maunelie, was
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 23 -> now SET
[2005/03/01 00:15:09, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
smbldap_get_single_attribute: [sambaUserWorkstations] = [<does not
exist>]
[2005/03/01 00:15:09, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
smbldap_get_single_attribute: [sambaMungedDial] = [<does not exist>]
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 32 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 33 -> now SET
[2005/03/01 00:15:09, 10] lib/account_pol.c:account_policy_get(155)
account_policy_get: password history:0
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 20 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 16 -> now SET
[2005/03/01 00:15:09, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
element 17 -> now SET
[2005/03/01 00:15:09, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
smbldap_get_single_attribute: [sambaBadPasswordCount] = [<does not
exist>]
[2005/03/01 00:15:09, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
smbldap_get_single_attribute: [sambaBadPasswordTime] = [<does not
exist>]
[2005/03/01 00:15:09, 10] lib/smbldap.c:smbldap_get_single_attribute(358)
smbldap_get_single_attribute: [sambaLogonHours] = [<does not exist>]
[2005/03/01 00:15:09, 7] passdb/login_cache.c:login_cache_read(83)
Looking up login cache for user maunelie
[2005/03/01 00:15:09, 7] passdb/login_cache.c:login_cache_read(97)
No cache entry found
[2005/03/01 00:15:09, 9] passdb/pdb_ldap.c:init_sam_from_ldap(833)
No cache entry, bad count = 0, bad time = 0
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/03/01 00:15:09, 9] passdb/passdb.c:pdb_update_autolock_flag(2319)
pdb_update_autolock_flag: Account maunelie not autolocked, no check
needed
[2005/03/01 00:15:09, 4] auth/auth_sam.c:sam_account_ok(119)
sam_account_ok: Checking SMB password for user maunelie
[2005/03/01 00:15:09, 5] auth/auth_sam.c:logon_hours_ok(101)
logon_hours_ok: user maunelie allowed to logon at this time (Tue Mar
1 00:15:09 2005
)
[2005/03/01 00:15:09, 10] lib/system_smbd.c:sys_getgrouplist(117)
sys_getgrouplist: user [maunelie]
[2005/03/01 00:15:09, 10] lib/system_smbd.c:sys_getgrouplist(126)
sys_getgrouplist(): disabled winbindd for group lookup [user == maunelie]
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2005/03/01 00:15:09, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/03/01 00:15:09, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:15:09, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:15:09, 8] lib/util_getent.c:remove_duplicate_gids(330)
remove_duplicate_gids: Enter 2 gids
[2005/03/01 00:15:09, 8] lib/util_getent.c:remove_duplicate_gids(348)
remove_duplicate_gids: Exit 1 gids
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/03/01 00:15:09, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 1005
Primary group is 513 and contains 1 supplementary groups
Group[ 0]: 513
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2005/03/01 00:15:09, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/03/01 00:15:09, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:15:09, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:15:09, 5] lib/smbldap.c:smbldap_search(1017)
smbldap_search: base => [ou=Groups,dc=acme,dc=com], filter =>
[(&(objectClass=sambaGroupMapping)(gidNumber=513))], scope => [2]
[2005/03/01 00:15:09, 2] passdb/pdb_ldap.c:init_group_from_ldap(2011)
init_group_from_ldap: Entry found for group: 513
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/03/01 00:15:09, 10] passdb/passdb.c:local_gid_to_sid(1275)
local_gid_to_sid: gid (513) -> SID
S-1-5-21-1911238739-97561441-2706018148-513.
[2005/03/01 00:15:09, 10] passdb/lookup_sid.c:gid_to_sid(365)
gid_to_sid: local 513 -> S-1-5-21-1911238739-97561441-2706018148-513
[2005/03/01 00:15:09, 10] auth/auth_util.c:debug_nt_user_token(491)
NT user token of user S-1-5-21-1911238739-97561441-2706018148-3010
contains 5 SIDs
SID[ 0]: S-1-5-21-1911238739-97561441-2706018148-3010
SID[ 1]: S-1-5-21-1911238739-97561441-2706018148-513
SID[ 2]: S-1-1-0
SID[ 3]: S-1-5-2
SID[ 4]: S-1-5-11
[2005/03/01 00:15:09, 5] auth/auth_util.c:make_server_info_sam(844)
make_server_info_sam: made server info for user maunelie -> maunelie
[2005/03/01 00:15:09, 3] auth/auth.c:check_ntlm_password(268)
check_ntlm_password: sam authentication for user [maunelie] succeeded
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2005/03/01 00:15:09, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/03/01 00:15:09, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:15:09, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:15:09, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/03/01 00:15:09, 5] auth/auth.c:check_ntlm_password(292)
check_ntlm_password: PAM Account for user [maunelie] succeeded
[2005/03/01 00:15:09, 2] auth/auth.c:check_ntlm_password(305)
check_ntlm_password: authentication for user [maunelie] ->
[maunelie] -> [maunelie] succeeded
[2005/03/01 00:15:09, 5] auth/auth_util.c:free_user_info(1318)
attempting to free (and zero) a user_info structure
[2005/03/01 00:15:09, 10] auth/auth_util.c:free_user_info(1321)
structure was created for maunelie
[2005/03/01 00:15:09, 5] rpc_server/srv_netlog_nt.c:_net_sam_logon(716)
_net_sam_logon: check_password returned status NT_STATUS_OK
[2005/03/01 00:15:09, 4] rpc_parse/parse_net.c:init_dom_sid2s(1006)
init_dom_sid2s:
[2005/03/01 00:15:09, 5] auth/auth_util.c:free_server_info(1344)
attempting to free (and zero) a server_info structure
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 net_io_r_sam_logon
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0000 buffer_creds: 00000001
[2005/03/01 00:15:09, 6] rpc_parse/parse_prs.c:prs_debug(82)
000004 smb_io_cred
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000004 smb_io_chal
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0004 data: 79 0d b8 ad 80 92 6e 7d
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
00000c smb_io_utime
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c time: 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0010 switch_value: 0003
[2005/03/01 00:15:09, 6] rpc_parse/parse_prs.c:prs_debug(82)
000014 net_io_user_info3
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0014 ptr_user_info : 00000001
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000018 smb_io_time logon time
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0018 low : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
001c high: 00000000
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000020 smb_io_time logoff time
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0020 low : ffffffff
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0024 high: 7fffffff
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000028 smb_io_time kickoff time
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0028 low : ffffffff
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
002c high: 7fffffff
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000030 smb_io_time last set time
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0030 low : 40e8f280
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0034 high: 01c51c8a
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000038 smb_io_time can change time
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0038 low : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
003c high: 00000000
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000040 smb_io_time must change time
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0040 low : 09929a80
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0044 high: 01c56a5e
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000048 smb_io_unihdr hdr_user_name
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0048 uni_str_len: 0010
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
004a uni_max_len: 0010
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
004c buffer : 00000001
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000050 smb_io_unihdr hdr_full_name
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0050 uni_str_len: 0016
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0052 uni_max_len: 0016
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0054 buffer : 00000001
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000058 smb_io_unihdr hdr_logon_script
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0058 uni_str_len: 0018
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
005a uni_max_len: 0018
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
005c buffer : 00000001
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000060 smb_io_unihdr hdr_profile_path
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0060 uni_str_len: 003e
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0062 uni_max_len: 003e
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0064 buffer : 00000001
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000068 smb_io_unihdr hdr_home_dir
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0068 uni_str_len: 002c
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
006a uni_max_len: 002c
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
006c buffer : 00000001
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000070 smb_io_unihdr hdr_dir_drive
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0070 uni_str_len: 0004
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0072 uni_max_len: 0004
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0074 buffer : 00000001
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0078 logon_count : 0000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
007a bad_pw_count : 0000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
007c user_rid : 00000bc2
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0080 group_rid : 00000201
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0084 num_groups : 00000001
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0088 buffer_groups : 00000001
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
008c user_flgs : 00000020
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0090 user_sess_key: 32 c1 7f 5f 28 3a fe 0e b3 19 4e 06 b0 fe
ba ac
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
0000a0 smb_io_unihdr hdr_logon_srv
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00a0 uni_str_len: 0016
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00a2 uni_max_len: 0016
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00a4 buffer : 00000001
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
0000a8 smb_io_unihdr hdr_logon_dom
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00a8 uni_str_len: 0008
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
00aa uni_max_len: 0008
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00ac buffer : 00000001
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00b0 buffer_dom_id : 00000001
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
00b4 padding : 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00dc num_other_sids: 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00e0 buffer_other_sids: 00000000
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
0000e4 smb_io_unistr2 uni_user_name
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00e4 uni_max_len: 00000008
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00e8 offset : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
00ec uni_str_len: 00000008
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
00f0 buffer : m.a.u.n.e.l.i.e.
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000100 smb_io_unistr2 uni_full_name
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0100 uni_max_len: 0000000b
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0104 offset : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0108 uni_str_len: 0000000b
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
010c buffer : S.y.s.t.e.m. .U.s.e.r.
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000122 smb_io_unistr2 uni_logon_script
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0124 uni_max_len: 0000000c
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0128 offset : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
012c uni_str_len: 0000000c
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
0130 buffer : m.a.u.n.e.l.i.e...c.m.d.
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000148 smb_io_unistr2 uni_profile_path
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0148 uni_max_len: 0000001f
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
014c offset : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0150 uni_str_len: 0000001f
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
0154 buffer :
\.\.a.c.m.e.-.s.e.r.v.e.r.\.p.r.o.f.i.l.e.s.\.m.a.u.n.e.l.i.e.
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000192 smb_io_unistr2 uni_home_dir
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0194 uni_max_len: 00000016
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0198 offset : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
019c uni_str_len: 00000016
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
01a0 buffer :
\.\.a.c.m.e.-.s.e.r.v.e.r.\.m.a.u.n.e.l.i.e.
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
0001cc smb_io_unistr2 uni_dir_drive
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01cc uni_max_len: 00000002
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01d0 offset : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01d4 uni_str_len: 00000002
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
01d8 buffer : H.:.
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01dc num_groups2 : 00000001
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
0001e0 smb_io_gid
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01e0 g_rid: 00000201
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01e4 attr : 00000007
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
0001e8 smb_io_unistr2 uni_logon_srv
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01e8 uni_max_len: 0000000b
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01ec offset : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
01f0 uni_str_len: 0000000b
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
01f4 buffer : A.C.M.E.-.S.E.R.V.E.R.
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
00020a smb_io_unistr2 uni_logon_dom
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
020c uni_max_len: 00000004
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0210 offset : 00000000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0214 uni_str_len: 00000004
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
0218 buffer : A.C.M.E.
[2005/03/01 00:15:09, 7] rpc_parse/parse_prs.c:prs_debug(82)
000220 smb_io_dom_sid2
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0220 num_auths: 00000004
[2005/03/01 00:15:09, 8] rpc_parse/parse_prs.c:prs_debug(82)
000224 smb_io_dom_sid sid
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0224 sid_rev_num: 01
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0225 num_auths : 04
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0226 id_auth[0] : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0227 id_auth[1] : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0228 id_auth[2] : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0229 id_auth[3] : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
022a id_auth[4] : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
022b id_auth[5] : 05
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
022c sub_auths : 00000015 71eb3053 05d0ab61 a14a8f64
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
023c auth_resp : 00000001
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
0240 status : NT_STATUS_OK
[2005/03/01 00:15:09, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
api_rpcTNP: called NETLOGON successfully
[2005/03/01 00:15:09, 10] rpc_server/srv_pipe.c:api_rpcTNP(1587)
api_rpcTNP: rpc input buffer underflow (parse error?)
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0104 : 8a e3 13 71 02 f4 36 71 01 40 04 00 01 00 00 00 65 00 6d 00 20
00 55 00 73 00 65 00 44 06 0c 00 60 67 09 00
[2005/03/01 00:15:09, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 4804
[2005/03/01 00:15:09, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
write_to_pipe: data_used = 336
[2005/03/01 00:15:09, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=711e nwritten=352
[2005/03/01 00:15:09, 5] lib/util.c:show_msg(464)
[2005/03/01 00:15:09, 5] lib/util.c:show_msg(474)
size=47
smb_com=0x2f
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=1984
smt_wct=6
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 352 (0x160)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_bcc=0
[2005/03/01 00:15:09, 6] lib/util_sock.c:write_socket(449)
write_socket(24,51)
[2005/03/01 00:15:09, 6] lib/util_sock.c:write_socket(452)
write_socket(24,51) wrote 51
[2005/03/01 00:15:09, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 59
[2005/03/01 00:15:09, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x3b
[2005/03/01 00:15:09, 3] smbd/process.c:process_smb(1091)
Transaction 33 of length 63
[2005/03/01 00:15:09, 5] lib/util.c:show_msg(464)
[2005/03/01 00:15:09, 5] lib/util.c:show_msg(474)
size=59
smb_com=0x2e
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=2048
smt_wct=12
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]=57054 (0xDEDE)
smb_vwv[ 2]=28958 (0x711E)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 1024 (0x400)
smb_vwv[ 6]= 1024 (0x400)
smb_vwv[ 7]=65535 (0xFFFF)
smb_vwv[ 8]=65535 (0xFFFF)
smb_vwv[ 9]= 1024 (0x400)
smb_vwv[10]= 0 (0x0)
smb_vwv[11]= 0 (0x0)
smb_bcc=0
[2005/03/01 00:15:09, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 20854) conn 0x83c2828
[2005/03/01 00:15:09, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2005/03/01 00:15:09, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=711e
[2005/03/01 00:15:09, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name NETLOGON pnum=711e (pipes_open=2)
[2005/03/01 00:15:09, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
pipe name NETLOGON pnum=711c (pipes_open=2)
[2005/03/01 00:15:09, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
read_from_pipe: 711e name: NETLOGON len: 1024
[2005/03/01 00:15:09, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
read_from_pipe: NETLOGON: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 580.
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_debug(82)
000000 smb_io_rpc_hdr hdr
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0000 major : 05
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0001 minor : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0002 pkt_type : 02
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0003 flags : 03
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0004 pack_type0: 10
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0005 pack_type1: 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0006 pack_type2: 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0007 pack_type3: 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0008 frag_len : 0284
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
000a auth_len : 0020
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
000c call_id : 00000004
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0010 alloc_hint: 00000244
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint16(613)
0014 context_id: 0000
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0016 cancel_ct : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
0017 reserved : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_debug(82)
00025c smb_io_rpc_hdr_auth hdr_auth
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
025c auth_type : 44
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
025d auth_level : 06
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
025e padding : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8(584)
025f reserved : 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint32(642)
0260 auth_context : 00000001
[2005/03/01 00:15:09, 10] rpc_parse/parse_prs.c:netsec_encode(1472)
SCHANNEL: netsec_encode seq_num=1 data_len=580
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_debug(82)
000264 smb_io_rpc_auth_netsec_chk
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0264 sig : 77 00 7a 00 ff ff 00 00
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
026c seq_num: cd 95 32 0f e7 36 32 cd
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
0274 packet_digest: e6 37 17 73 f1 38 ff 1e
[2005/03/01 00:15:09, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
027c confounder: f5 cd 39 84 91 f3 4b d1
[2005/03/01 00:15:09, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=711e min=1024 max=1024 nread=644
[2005/03/01 00:15:09, 5] lib/util.c:show_msg(464)
[2005/03/01 00:15:09, 5] lib/util.c:show_msg(474)
size=703
smb_com=0x2e
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=2048
smt_wct=12
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 644 (0x284)
smb_vwv[ 6]= 59 (0x3B)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 0 (0x0)
smb_vwv[11]= 0 (0x0)
smb_bcc=644
[2005/03/01 00:15:09, 10] lib/util.c:dump_data(1977)
[000] 05 00 02 03 10 00 00 00 84 02 20 00 04 00 00 00 ........ .. .....
[010] 44 02 00 00 00 00 00 00 53 5B 15 F1 7C 46 F0 40 D....... S[..|F.@
[020] 62 F6 27 0D 0E 2B AA 80 64 75 C3 54 4D 97 6D 15 b.'..+.. du.TM.m.
[030] 09 5A 13 05 2E DD EB A0 E3 9D BD B8 07 94 C3 14 .Z...... ........
[040] 36 F1 CD 80 7C CE 6A BF 3A 3A C8 54 81 12 1F 86 6...|.j. ::.T....
[050] 28 66 2C 5F F1 64 A9 AF 75 88 53 B2 28 25 F7 CD (f,_.d.. u.S.(%..
[060] B2 33 0A 8B DB 89 A0 49 89 4C E1 AA E9 09 28 1B .3.....I .L....(.
[070] 74 BD F0 77 4D F6 5C B8 01 A0 C2 89 F6 09 60 C5 t..wM.\. ......`.
[080] 8D DE CD 3B A5 01 62 8D B2 D8 87 49 8B 43 2F CF ...;..b. ...I.C/.
[090] 58 A3 8D DC F7 E5 EC D2 9B 45 F8 85 34 65 52 C5 X....... .E..4eR.
[0A0] 92 07 24 AE 64 CA B5 59 9B BF 37 E9 D9 C7 18 B4 ..$.d..Y ..7.....
[0B0] 93 23 4B 95 B5 4F 1F B1 2E B2 D2 9E 4A 36 70 F0 .#K..O.. ....J6p.
[0C0] B0 B0 B8 EA CA F0 02 23 9D 0A 5C 91 BD 02 4C AB .......# ..\...L.
[0D0] D4 6F EE A8 0A 4D CD F2 7E 32 F0 84 13 62 31 00 .o...M.. ~2...b1.
[0E0] F8 CF 97 7B 61 E1 87 05 93 98 5B 62 F2 B0 9A 50 ...{a... ..[b...P
[0F0] E9 4F EC 83 48 32 13 A2 AB 1C 64 92 47 3E F2 4A .O..H2.. ..d.G>.J
[100] 17 77 60 D1 74 6B 0B B8 0E 27 BB 3A 1F 6A 99 11 .w`.tk.. .'.:.j..
[110] 76 12 F6 B5 EB BF 07 FF 6A A7 E9 ED A3 DE 71 14 v....... j.....q.
[120] 40 0E DF 51 E1 D2 53 00 4A 64 D4 56 EC 2D 4B A3 @..Q..S. Jd.V.-K.
[130] 8D 21 92 F9 82 86 B9 D7 23 FD 9F DC 58 EE B8 C6 .!...... #...X...
[140] 0D D0 98 57 C8 35 0D E0 FA 79 3B 63 14 D8 18 F8 ...W.5.. .y;c....
[150] 79 47 59 B6 84 37 51 29 55 B0 EA 22 22 A0 4D 5A yGY..7Q)
U.."".MZ
[160] 8A BF E2 14 AC 18 44 4A 50 FA 8B 11 CA 0C B4 AF ......DJ P.......
[170] 50 11 15 F6 73 95 B4 63 BE 5C 9C 70 43 B6 06 C2 P...s..c .\.pC...
[180] BE 25 08 07 3F 62 B0 6B B2 43 35 A3 8A BB A3 C7 .%..?b.k .C5.....
[190] 12 48 A3 5D 41 96 34 8C 94 CF 12 8C 1D E5 59 80 .H.]A.4. ......Y.
[1A0] 44 1C 98 AE E5 9E CA C4 0A 28 B3 AD 0F 91 FE C1 D....... .(......
[1B0] 88 97 3B 28 59 F3 11 27 46 9F 2C C3 6C 46 9A 5B ..;(Y..' F.,.lF.[
[1C0] 6E 64 6D B7 86 73 DD 59 A1 25 B9 64 29 18 19 37 ndm..s.Y .%.d)..7
[1D0] 79 F2 73 38 AE EB 4D 11 84 3F 6C 5D 59 DF F8 CA y.s8..M. .?l]Y...
[1E0] 01 47 F4 0D 63 D2 A6 0C AF 29 50 F5 6E 9C 33 CA .G..c... .)P.n.3.
[1F0] 22 3C 7C 78 19 33 A3 67 7F 66 96 9C E5 66 0D C0 "<|x.3.g
.f...f..
[2005/03/01 00:15:09, 6] lib/util_sock.c:write_socket(449)
write_socket(24,707)
[2005/03/01 00:15:09, 6] lib/util_sock.c:write_socket(452)
write_socket(24,707) wrote 707
[2005/03/01 00:16:09, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/01 00:16:09, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:16:09, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:16:09, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/01 00:16:14, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 35
[2005/03/01 00:16:14, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x23
[2005/03/01 00:16:14, 3] smbd/process.c:process_smb(1091)
Transaction 34 of length 39
[2005/03/01 00:16:14, 5] lib/util.c:show_msg(464)
[2005/03/01 00:16:14, 5] lib/util.c:show_msg(474)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=2
smb_pid=65279
smb_uid=101
smb_mid=2112
smt_wct=0
smb_bcc=0
[2005/03/01 00:16:14, 3] smbd/process.c:switch_message(886)
switch message SMBtdis (pid 20854) conn 0x83e2290
[2005/03/01 00:16:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/01 00:16:14, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:16:14, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:16:14, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/01 00:16:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/01 00:16:14, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:16:14, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:16:14, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/01 00:16:14, 3] smbd/service.c:close_cnum(836)
naddaf2 (192.168.1.108) closed connection to service IPC$
[2005/03/01 00:16:14, 3] smbd/connection.c:yield_connection(69)
Yielding connection to IPC$
[2005/03/01 00:16:14, 4] smbd/vfs.c:vfs_ChDir(654)
vfs_ChDir to /
[2005/03/01 00:16:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/01 00:16:14, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:16:14, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:16:14, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/01 00:16:14, 5] lib/util.c:show_msg(464)
[2005/03/01 00:16:14, 5] lib/util.c:show_msg(474)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2
smb_pid=65279
smb_uid=101
smb_mid=2112
smt_wct=0
smb_bcc=0
[2005/03/01 00:16:14, 6] lib/util_sock.c:write_socket(449)
write_socket(24,39)
[2005/03/01 00:16:14, 6] lib/util_sock.c:write_socket(452)
write_socket(24,39) wrote 39
[2005/03/01 00:16:14, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)
got smb length of 39
[2005/03/01 00:16:14, 6] smbd/process.c:process_smb(1090)
got message type 0x0 of len 0x27
[2005/03/01 00:16:14, 3] smbd/process.c:process_smb(1091)
Transaction 35 of length 43
[2005/03/01 00:16:14, 5] lib/util.c:show_msg(464)
[2005/03/01 00:16:14, 5] lib/util.c:show_msg(474)
size=39
smb_com=0x74
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=0
smb_pid=65279
smb_uid=101
smb_mid=2176
smt_wct=2
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_bcc=0
[2005/03/01 00:16:14, 3] smbd/process.c:switch_message(886)
switch message SMBulogoffX (pid 20854) conn 0x0
[2005/03/01 00:16:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/01 00:16:14, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:16:14, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:16:14, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/01 00:16:14, 5] auth/auth_util.c:free_server_info(1344)
attempting to free (and zero) a server_info structure
[2005/03/01 00:16:14, 3] smbd/reply.c:reply_ulogoffX(1249)
ulogoffX vuid=101
[2005/03/01 00:16:14, 5] lib/util.c:show_msg(464)
[2005/03/01 00:16:14, 5] lib/util.c:show_msg(474)
size=39
smb_com=0x74
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=65279
smb_uid=101
smb_mid=2176
smt_wct=2
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_bcc=0
[2005/03/01 00:16:14, 6] lib/util_sock.c:write_socket(449)
write_socket(24,43)
[2005/03/01 00:16:14, 6] lib/util_sock.c:write_socket(452)
write_socket(24,43) wrote 43
[2005/03/01 00:16:33, 10] smbd/process.c:async_processing(281)
async_processing: Doing async processing.
[2005/03/01 00:16:33, 5] smbd/oplock.c:receive_local_message(107)
receive_local_message: doing select with timeout of 1 ms
[2005/03/01 00:16:33, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/01 00:16:33, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:16:33, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:16:33, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/01 00:16:33, 2] smbd/server.c:exit_server(571)
Closing connections
[2005/03/01 00:16:33, 4] smbd/vfs.c:vfs_ChDir(654)
vfs_ChDir to /tmp
[2005/03/01 00:16:33, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
closed pipe name NETLOGON pnum=711e (pipes_open=1)
[2005/03/01 00:16:33, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235)
close_policy_by_pipe: deleted handle list for pipe NETLOGON
[2005/03/01 00:16:33, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
closed pipe name NETLOGON pnum=711c (pipes_open=0)
[2005/03/01 00:16:33, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/01 00:16:33, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:16:33, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:16:33, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/01 00:16:33, 3] smbd/service.c:close_cnum(836)
naddaf2 (192.168.1.108) closed connection to service IPC$
[2005/03/01 00:16:33, 3] smbd/connection.c:yield_connection(69)
Yielding connection to IPC$
[2005/03/01 00:16:33, 4] smbd/vfs.c:vfs_ChDir(654)
vfs_ChDir to /
[2005/03/01 00:16:33, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/01 00:16:33, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2005/03/01 00:16:33, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2005/03/01 00:16:33, 5] smbd/uid.c:change_to_root_user(296)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/03/01 00:16:33, 5] auth/auth_util.c:free_server_info(1344)
attempting to free (and zero) a server_info structure
[2005/03/01 00:16:33, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2005/03/01 00:16:33, 5] smbd/oplock.c:receive_local_message(107)
receive_local_message: doing select with timeout of 1 ms
[2005/03/01 00:16:33, 3] smbd/server.c:exit_server(614)
Server exit (Caught TERM signal)
-------- End of naddaf2 log file -----------------------------------
Maybe Matching Threads
Wisdom of the Ancients
