Samba 2.2.8a, RH7.3 I have successfully connected machines running XP to the samba controlled domain. There are 3 XP machines, each with only one user designated as a power user (ie domain\username power user). Each can log into any of the three machines without a problem. Now I am trying to log a different person into any of these machines and I get the message "System Could Not Log You On". I can log into any of these machines with the administrator or my account (neither of which are set up in the local users - other than computername\administrator). Any ideas of what is going on? Did I miss something? I thought that with domain logins that any user can log into the XP machine as long as they are set-up correctly via samba, which they are since they can access resources from windows 98 machines to samba shares. Thanks
logs below: -- Jason Williams Wrote: Weird stuff happening eh? Just to get a few things out of the way, the user that is having problems logging on, they have an account on the PDC? ---> all done through ldap, logs show authenticating user fine (below) The machine account will be there since it has already connected to the PDC. ---> machine account is in the LDAP The original user works, but when you create a new user on the XP box and try and log on, you get errors right? ---> I am not creating a new user, just trying to log in (as I did with the first user that works). I did however try to add that user to the list of power users and that didnt help either. Anything the logs say? ---> see comments below> -----Original Message----- > From: _Chris McKeever_ [mailto:tech-mail@prupref.com]> > > Samba 2.2.8a, RH7.3 > > I have successfully connected machines running XP to the > samba controlled > domain. > > There are 3 XP machines, each with only one user designated > as a power user > (ie domain\username power user). Each can log into any of the three > machines without a problem. > > Now I am trying to log a different person into any of these > machines and I > get the message "System Could Not Log You On". > > I can log into any of these machines with the administrator > or my account > (neither of which are set up in the local users - other than > computername\administrator). > > Any ideas of what is going on? Did I miss something? I > thought that with > domain logins that any user can log into the XP machine as > long as they are > set-up correctly via samba, which they are since they can > access resources > from windows 98 machines to samba shares. > > Thanks>From the logs it seems like the user is authenticating fine againstldap/samba: problem user: [2003/07/10 12:46:59, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(605) SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[jearhart] [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:push_sec_ctx(296) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2003/07/10 12:46:59, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/07/10 12:46:59, 5] passdb/pdb_ldap.c:ldap_open_connection(122) ldap_open_connection: starting... [2003/07/10 12:46:59, 10] passdb/pdb_ldap.c:ldap_open_connection(148) Initializing connection to winnetka.prupref.com on port 389 [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(186) StartTLS issued: using a TLS connection [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(217) ldap_open_connection: connection opened [2003/07/10 12:46:59, 0] passdb/pdb_ldap.c:ldap_connect_system(315) ldap_connect_system: Binding to ldap server as "cn=root,dc=prupref,dc=com" [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_connect_system(331) ldap_connect_system: succesful connection to the LDAP server [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) ldap_search_one_user: searching for:[(&(uid=jearhart)(objectclass=sambaAccount))] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [uid] = [jearhart] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) Entry found for user: jearhart [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdLastSet] = [1057792387] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [logonTime] = [0] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [logoffTime] = [2147483647] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [kickoffTime] = [2147483647] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdCanChange] = [0] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdMustChange] = [2147483647] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [cn] = [Jeff Earhart] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [homeDrive] = [<does not exist>] [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626) homeDrive fell back to [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [smbHome] = [<does not exist>] [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183) Home server: prupref-winn [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635) smbHome fell back to \\prupref-winn\jearhart [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [scriptPath] = [<does not exist>] [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644) scriptPath fell back to [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [profilePath] = [<does not exist>] [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183) Home server: prupref-winn [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653) profilePath fell back to \\prupref-winn\jearhart\profile [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [description] = [<does not exist>] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [userWorkstations] = [<does not exist>] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [rid] = [87124] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [primaryGroupID] = [3005] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [lmPassword] = [B9AD96875] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [ntPassword] = [77A7A] [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [acctFlags] = [[UX ]] [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:pop_sec_ctx(435) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:push_sec_ctx(296) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2003/07/10 12:47:00, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 ** this is where the strange part is 2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340) split_domain_name:name 'jearhart' split into domain :'PRUPREF-WINN' and user :'jearhart' [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(160) init_lsa_rid2s: looking up name jearhart [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(457) lookup_name: winbind lookup for jearhart failed - trying local [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(486) lookup_name: (local) jearhart -> SID S-1-5-21-2263616378-1746176118-2189425910-87124 (type 1) [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(164) init_lsa_rid2s: found [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_r_lookup_names [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 ptr_dom_ref: 00000001 [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) 000004 lsa_io_dom_r_ref [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0004 num_ref_doms_1: 00000001 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) Here are logs from the successfull user: 2003/07/10 12:42:54, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(605) SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[mbarnes] [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:ldap_open_connection(122) ldap_open_connection: starting... [2003/07/10 12:42:54, 10] passdb/pdb_ldap.c:ldap_open_connection(148) Initializing connection to winnetka.prupref.com on port 389 [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(186) StartTLS issued: using a TLS connection [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(217) ldap_open_connection: connection opened [2003/07/10 12:42:54, 0] passdb/pdb_ldap.c:ldap_connect_system(315) ldap_connect_system: Binding to ldap server as "cn=root,dc=prupref,dc=com" [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_connect_system(331) ldap_connect_system: succesful connection to the LDAP server [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) ldap_search_one_user: searching for:[(&(uid=mbarnes)(objectclass=sambaAccount))] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [uid] = [mbarnes] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) Entry found for user: mbarnes [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdLastSet] = [1052162872] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [logonTime] = [0] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [logoffTime] = [2147483647] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [kickoffTime] = [2147483647] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdCanChange] = [0] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdMustChange] = [2147483647] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [cn] = [Michael Barnes] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [homeDrive] = [<does not exist>] [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626) homeDrive fell back to [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [smbHome] = [<does not exist>] [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183) Home server: prupref-winn [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635) smbHome fell back to \\prupref-winn\mbarnes [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [scriptPath] = [<does not exist>] [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644) scriptPath fell back to [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [profilePath] = [<does not exist>] [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183) Home server: prupref-winn [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653) profilePath fell back to \\prupref-winn\mbarnes\profile [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [description] = [<does not exist>] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [userWorkstations] = [<does not exist>] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [rid] = [6722] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [primaryGroupID] = [3005] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [lmPassword] = [3DEC2A3] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [ntPassword] = [A87AD606] [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [acctFlags] = [[UX ]] [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456) user_in_list: checking user mbarnes in list [2003/07/10 12:42:54, 3] rpc_server/srv_util.c:get_domain_user_groups(187) domain group access 513/7 granted [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456) user_in_list: checking user mbarnes in list root @domain-admins [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460) user_in_list: checking user |mbarnes| against |root| [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460) user_in_list: checking user |mbarnes| against |@domain-admins| [2003/07/10 12:42:54, 5] lib/username.c:user_in_netgroup_list(298) Unable to get default yp domain [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(392) user_in_unix_group_list: checking user mbarnes in group domain-admins [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) user_in_unix_group_list: checking user mbarnes against member jearhart [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) user_in_unix_group_list: checking user mbarnes against member cfusion [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) user_in_unix_group_list: checking user mbarnes against member administrator [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) user_in_unix_group_list: checking user mbarnes against member mfalanga [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) user_in_unix_group_list: checking user mbarnes against member cgmckeever [2003/07/10 12:42:54, 4] rpc_server/srv_util.c:make_dom_gids(90) make_dom_gids: 513/7 [2003/07/10 12:42:54, 5] rpc_server/srv_util.c:make_dom_gids(149) group id: 513 attr: 7 [2003/07/10 12:42:54, 4] rpc_parse/parse_net.c:init_dom_sid2s(813) init_dom_sid2s: ** The part about domain splitting is not there if you need other parts of the logs, please let me know. Thanks> -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >
some more logs (sorry, these buggers are big and comparing them is making me cross-eyed)> -----Original Message----- > From: _Chris McKeever_ > Sent: Thursday, July 10, 2003 1:25 PM > To: _Chris McKeever_; samba@lists.samba.org > Subject: RE: [Samba] Samba/LDAP XP Authentication Weirdness > > > logs below: > > -- Jason Williams Wrote: > > Weird stuff happening eh? > > Just to get a few things out of the way, the user that is > having problems > logging on, they have an account on the PDC? > > ---> all done through ldap, logs show authenticating user > fine (below) > > The machine account will be there since it has already > connected to the > PDC. > > ---> machine account is in the LDAP > > The original user works, but when you create a new user on the XP box > and try and log on, you get errors right? > > ---> I am not creating a new user, just trying to log in (as > I did with the first user that works). I did however try to > add that user to the list of power users and that didnt help either. > > Anything the logs say? > > ---> see comments below > > > > -----Original Message----- > > From: _Chris McKeever_ [mailto:tech-mail@prupref.com] > > > > > > > Samba 2.2.8a, RH7.3 > > > > I have successfully connected machines running XP to the > > samba controlled > > domain. > > > > There are 3 XP machines, each with only one user designated > > as a power user > > (ie domain\username power user). Each can log into any of the three > > machines without a problem. > > > > Now I am trying to log a different person into any of these > > machines and I > > get the message "System Could Not Log You On". > > > > I can log into any of these machines with the administrator > > or my account > > (neither of which are set up in the local users - other than > > computername\administrator). > > > > Any ideas of what is going on? Did I miss something? I > > thought that with > > domain logins that any user can log into the XP machine as > > long as they are > > set-up correctly via samba, which they are since they can > > access resources > > from windows 98 machines to samba shares. > > > > Thanks > > From the logs it seems like the user is authenticating fine > against ldap/samba: > > problem user: > > [2003/07/10 12:46:59, 3] > rpc_server/srv_netlog_nt.c:_net_sam_logon(605) > SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[jearhart] > [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:push_sec_ctx(296) > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > [2003/07/10 12:46:59, 3] smbd/uid.c:push_conn_ctx(285) > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:set_sec_ctx(328) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 > [2003/07/10 12:46:59, 5] passdb/pdb_ldap.c:ldap_open_connection(122) > ldap_open_connection: starting... > [2003/07/10 12:46:59, 10] passdb/pdb_ldap.c:ldap_open_connection(148) > Initializing connection to winnetka.prupref.com on port 389 > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(186) > StartTLS issued: using a TLS connection > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(217) > ldap_open_connection: connection opened > [2003/07/10 12:46:59, 0] passdb/pdb_ldap.c:ldap_connect_system(315) > ldap_connect_system: Binding to ldap server as > "cn=root,dc=prupref,dc=com" > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_connect_system(331) > ldap_connect_system: succesful connection to the LDAP server > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) > ldap_search_one_user: searching > for:[(&(uid=jearhart)(objectclass=sambaAccount))] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [uid] = [jearhart] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) > Entry found for user: jearhart > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdLastSet] = [1057792387] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [logonTime] = [0] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [logoffTime] = [2147483647] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [kickoffTime] = [2147483647] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdCanChange] = [0] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdMustChange] = [2147483647] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [cn] = [Jeff Earhart] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [homeDrive] = [<does not exist>] > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626) > homeDrive fell back to > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [smbHome] = [<does not exist>] > [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183) > Home server: prupref-winn > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635) > smbHome fell back to \\prupref-winn\jearhart > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [scriptPath] = [<does not exist>] > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644) > scriptPath fell back to > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [profilePath] = [<does not exist>] > [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183) > Home server: prupref-winn > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653) > profilePath fell back to \\prupref-winn\jearhart\profile > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [description] = [<does not exist>] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [userWorkstations] = [<does not exist>] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [rid] = [87124] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [primaryGroupID] = [3005] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [lmPassword] = [B9AD96875] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [ntPassword] = [77A7A] > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [acctFlags] = [[UX ]] > [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:pop_sec_ctx(435) > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 > [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:push_sec_ctx(296) > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > [2003/07/10 12:47:00, 3] smbd/uid.c:push_conn_ctx(285) > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > > ** this is where the strange part is > > 2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340) > split_domain_name:name 'jearhart' split into domain > :'PRUPREF-WINN' and user :'jearhart' > [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(160) > init_lsa_rid2s: looking up name jearhart > [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(457) > lookup_name: winbind lookup for jearhart failed - trying local > [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(486) > lookup_name: (local) jearhart -> SID > S-1-5-21-2263616378-1746176118-2189425910-87124 (type 1) > [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(164) > init_lsa_rid2s: found > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 lsa_io_r_lookup_names > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0000 ptr_dom_ref: 00000001 > [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) > 000004 lsa_io_dom_r_ref > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0004 num_ref_doms_1: 00000001 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > > > Here are logs from the successfull user: > > 2003/07/10 12:42:54, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(605) > SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[mbarnes] > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296) > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285) > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:ldap_open_connection(122) > ldap_open_connection: starting... > [2003/07/10 12:42:54, 10] passdb/pdb_ldap.c:ldap_open_connection(148) > Initializing connection to winnetka.prupref.com on port 389 > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(186) > StartTLS issued: using a TLS connection > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(217) > ldap_open_connection: connection opened > [2003/07/10 12:42:54, 0] passdb/pdb_ldap.c:ldap_connect_system(315) > ldap_connect_system: Binding to ldap server as > "cn=root,dc=prupref,dc=com" > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_connect_system(331) > ldap_connect_system: succesful connection to the LDAP server > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) > ldap_search_one_user: searching > for:[(&(uid=mbarnes)(objectclass=sambaAccount))] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [uid] = [mbarnes] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) > Entry found for user: mbarnes > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdLastSet] = [1052162872] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [logonTime] = [0] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [logoffTime] = [2147483647] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [kickoffTime] = [2147483647] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdCanChange] = [0] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [pwdMustChange] = [2147483647] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [cn] = [Michael Barnes] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [homeDrive] = [<does not exist>] > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626) > homeDrive fell back to > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [smbHome] = [<does not exist>] > [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183) > Home server: prupref-winn > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635) > smbHome fell back to \\prupref-winn\mbarnes > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [scriptPath] = [<does not exist>] > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644) > scriptPath fell back to > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [profilePath] = [<does not exist>] > [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183) > Home server: prupref-winn > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653) > profilePath fell back to \\prupref-winn\mbarnes\profile > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [description] = [<does not exist>] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > get_single_attribute: [userWorkstations] = [<does not exist>] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [rid] = [6722] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [primaryGroupID] = [3005] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [lmPassword] = [3DEC2A3] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [ntPassword] = [A87AD606] > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > get_single_attribute: [acctFlags] = [[UX ]] > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435) > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296) > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285) > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435) > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456) > user_in_list: checking user mbarnes in list > [2003/07/10 12:42:54, 3] > rpc_server/srv_util.c:get_domain_user_groups(187) > domain group access 513/7 granted > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456) > user_in_list: checking user mbarnes in list root @domain-admins > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460) > user_in_list: checking user |mbarnes| against |root| > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460) > user_in_list: checking user |mbarnes| against |@domain-admins| > [2003/07/10 12:42:54, 5] lib/username.c:user_in_netgroup_list(298) > Unable to get default yp domain > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(392) > user_in_unix_group_list: checking user mbarnes in group > domain-admins > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member jearhart > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member cfusion > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member administrator > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member mfalanga > [2003/07/10 12:42:54, 10] lib/username.c:user_in_unix_group_list(413) > user_in_unix_group_list: checking user mbarnes against > member cgmckeever > [2003/07/10 12:42:54, 4] rpc_server/srv_util.c:make_dom_gids(90) > make_dom_gids: 513/7 > [2003/07/10 12:42:54, 5] rpc_server/srv_util.c:make_dom_gids(149) > group id: 513 attr: 7 > [2003/07/10 12:42:54, 4] rpc_parse/parse_net.c:init_dom_sid2s(813) > init_dom_sid2s: > > ** The part about domain splitting is not there > > > if you need other parts of the logs, please let me know. > > ThanksI notice some discrepecny starting here (which the domain splitting shortyl follows): User that doesnt work: 2003/07/10 12:47:00, 10] lib/util.c:dump_data(1541) [000] 5C 50 49 50 45 5C 00 00 00 05 00 00 03 10 00 00 \PIPE\.. ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [010] 00 68 00 00 00 02 00 00 00 50 00 00 00 00 00 0E .h...... .P...... [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [020] 00 00 00 00 00 02 00 00 00 00 00 00 00 94 A6 0D ........ ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [030] 3F 1A 08 00 00 01 00 00 00 01 00 00 00 10 00 12 ?....... ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [040] 00 38 83 0C 00 09 00 00 00 00 00 00 00 08 00 00 .8...... ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [050] 00 6A 00 65 00 61 00 72 00 68 00 61 00 72 00 74 .j.e.a.r .h.a.r.t [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [060] 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 ........ ........ [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) [070] 00 . [2003/07/10 12:47:00, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 2074) [2003/07/10 12:47:00, 4] smbd/uid.c:change_to_user(119) change_to_user: Skipping user change - already user [2003/07/10 12:47:00, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=104 params=0 setup=2 [2003/07/10 12:47:00, 5] smbd/ipc.c:reply_trans(539) calling named_pipe [2003/07/10 12:47:00, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/07/10 12:47:00, 5] smbd/ipc.c:api_fd_reply(275) api_fd_reply [2003/07/10 12:47:00, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990) search for pipe pnum=768b [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) pipe name lsarpc pnum=768b (pipes_open=2) [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) pipe name NETLOGON pnum=7689 (pipes_open=2) [2003/07/10 12:47:00, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 768b)api_fd_reply: p:0x82344d0 max_trans_reply: 1024 [2003/07/10 12:47:00, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752) write_to_pipe: 768b name: lsarpc open: Yes len: 104 [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1541) [000] 05 00 00 03 10 00 00 00 68 00 00 00 02 00 00 00 ........ h....... [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [010] 50 00 00 00 00 00 0E 00 00 00 00 00 02 00 00 00 P....... ........ [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [020] 00 00 00 00 94 A6 0D 3F 1A 08 00 00 01 00 00 00 .......? ........ [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [030] 01 00 00 00 10 00 12 00 38 83 0C 00 09 00 00 00 ........ 8....... [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [040] 00 00 00 00 08 00 00 00 6A 00 65 00 61 00 72 00 ........ j.e.a.r. [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [050] 68 00 61 00 72 00 74 00 00 00 00 00 00 00 00 00 h.a.r.t. ........ [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) [060] 02 00 00 00 00 00 00 00 ........ [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 104 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 104 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(299) fill_rpc_header: data_to_copy = 104, len_needed_to_complete_hdr = 16, receive_len = 0 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 16 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 88 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 88 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 0068 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000002 [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387) unmarshall_rpc_header: using little-endian RPC [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416) unmarshall_rpc_header: type = 0, flags = 3 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 0 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 88 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 88, incoming data = 88 [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(619) process_complete_pdu: processing packet type 0 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr_req req [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 alloc_hint: 00000050 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0004 context_id: 0000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0006 opnum : 000e [2003/07/10 12:47:00, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 0 [2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/07/10 12:47:00, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190) api_rpcTNP: api_ntlsa_rpc op 0xe - created /tmp/in_api_ntlsa_rpc_14.1.prs [2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30347 rpc command: LSA_LOOKUPNAMES [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_q_lookup_names [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_pol_hnd [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 data1: 00000000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0004 data2: 00000002 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 data3: 0000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a data4: 0000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 000c data5: 94 a6 0d 3f 1a 08 00 00 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0014 num_entries : 00000001 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 num_entries2 : 00000001 [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) 00001c smb_io_unihdr hdr_name [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 001c uni_str_len: 0010 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) 001e uni_max_len: 0012 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0020 buffer : 000c8338 [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) 000024 smb_io_unistr2 dom_name [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0024 uni_max_len: 00000009 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0028 undoc : 00000000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 002c uni_str_len: 00000008 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760) 0030 buffer : j.e.a.r.h.a.r.t. [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0040 num_trans_entries : 00000000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0044 ptr_trans_sids : 00000000 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0048 lookup_level : 00000002 [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) 004c mapped_count : 00000000 [2003/07/10 12:47:00, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160) Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 94 A6 0D 3F ........ .......? [2003/07/10 12:47:00, 4] lib/util.c:dump_data(1549) [010] 1A 08 00 00 .... [2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340) split_domain_name:name 'jearhart' split into domain :'PRUPREF-WINN' and user :'jearhart USer that works: 2003/07/10 12:42:56, 10] lib/util.c:dump_data(1541) [000] 5C 50 49 50 45 5C 00 00 00 05 00 00 03 10 00 00 \PIPE\.. ........ [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549) [010] 00 2E 00 00 00 02 00 00 00 16 00 00 00 00 00 07 ........ ........ [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549) [020] 00 00 00 00 00 02 00 00 00 00 00 00 00 A0 A5 0D ........ ........ [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549) [030] 3F 02 08 00 00 05 00 ?...... [2003/07/10 12:42:56, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 2050) [2003/07/10 12:42:56, 4] smbd/uid.c:change_to_user(119) change_to_user: Skipping user change - already user [2003/07/10 12:42:56, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=46 params=0 setup=2 [2003/07/10 12:42:56, 5] smbd/ipc.c:reply_trans(539) calling named_pipe [2003/07/10 12:42:56, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/07/10 12:42:56, 5] smbd/ipc.c:api_fd_reply(275) api_fd_reply [2003/07/10 12:42:56, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990) search for pipe pnum=75a2 [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) pipe name lsarpc pnum=75a2 (pipes_open=2) [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) pipe name NETLOGON pnum=75a0 (pipes_open=2) [2003/07/10 12:42:56, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 75a2)api_fd_reply: p:0x82566d0 max_trans_reply: 1024 [2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752) write_to_pipe: 75a2 name: lsarpc open: Yes len: 46 [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1541) [000] 05 00 00 03 10 00 00 00 2E 00 00 00 02 00 00 00 ........ ........ [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549) [010] 16 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00 ........ ........ [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549) [020] 00 00 00 00 A0 A5 0D 3F 02 08 00 00 05 00 .......? ...... [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 46 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 46 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(299) fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16, receive_len = 0 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 16 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 30 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 30 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 002e [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000002 [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387) unmarshall_rpc_header: using little-endian RPC [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416) unmarshall_rpc_header: type = 0, flags = 3 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 0 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) write_to_pipe: data_left = 30 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(674) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 30, incoming data = 30 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(619) process_complete_pdu: processing packet type 0 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr_req req [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 alloc_hint: 00000016 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0004 context_id: 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0006 opnum : 0007 [2003/07/10 12:42:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 0 [2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/07/10 12:42:56, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190) api_rpcTNP: api_ntlsa_rpc op 0x7 - created /tmp/in_api_ntlsa_rpc_7.5.prs [2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30114 rpc command: LSA_QUERYINFOPOLICY [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_q_query [2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_pol_hnd [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 data1: 00000000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0004 data2: 00000002 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 data3: 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a data4: 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 000c data5: a0 a5 0d 3f 02 08 00 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 info_class: 0005 [2003/07/10 12:42:56, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160) Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 A0 A5 0D 3F ........ .......? [2003/07/10 12:42:56, 4] lib/util.c:dump_data(1549) [010] 02 08 00 00 .... [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_r_query [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 undoc_buffer: 22000000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0004 info_class: 0005 [2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60) 000008 lsa_io_dom_query [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 uni_dom_max_len: 0016 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a uni_dom_str_len: 0018 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c buffer_dom_name: 00000001 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 buffer_dom_sid : 00000001 [2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60) 000014 smb_io_unistr2 unistr2 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0014 uni_max_len: 0000000c [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 undoc : 00000000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 001c uni_str_len: 0000000b [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760) 0020 buffer : P.R.U.P.R.E.F...C.O.M. [2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60) 000038 smb_io_dom_sid2 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0038 num_auths: 00000004 [2003/07/10 12:42:56, 8] rpc_parse/parse_prs.c:prs_debug(60) 00003c smb_io_dom_sid sid [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 003c sid_rev_num: 01 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 003d num_auths : 04 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 003e id_auth[0] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 003f id_auth[1] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0040 id_auth[2] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0041 id_auth[3] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0042 id_auth[4] : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0043 id_auth[5] : 05 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32s(815) 0044 sub_auths : 00000015 86ec0b7a 68148876 827ffcf6 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_ntstatus(617) 0054 status: NT_STATUS_OK [2003/07/10 12:42:56, 0] rpc_parse/parse_prs.c:prs_dump(46) created /tmp/out_api_ntlsa_rpc_7.5.prs [2003/07/10 12:42:56, 5] rpc_server/srv_pipe.c:api_rpcTNP(1235) api_rpcTNP: called api_ntlsa_rpc successfully [2003/07/10 12:42:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 512 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) write_to_pipe: data_used = 30 [2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(799) read_from_pipe: 75a2 name: lsarpc len: 1024 [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:read_from_pipe(844) read_from_pipe: lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 88. [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr hdr [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 02 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 0070 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000002 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_resp resp [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 alloc_hint: 00000058 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 context_id: 0000 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0016 cancel_ct : 00 [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0017 reserved : 00 [2003/07/10 12:42:56, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..112] [2003/07/10 12:42:56, 5] lib/util.c:show_msg(268) size=168 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 [2003/07/10 12:42:56, 5] lib/util.c:show_msg(276) smb_tid=2 smb_pid=528 smb_uid=101> > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > >
update - I turned cachedlogoncount to 0 via the registry and now no one can log in... while this sounds bad, I think at least it helps me try to figure out what is going on. now, with this information, any suggestions?> -----Original Message----- > From: _Chris McKeever_ [mailto:tech-mail@prupref.com] > Sent: Thursday, July 10, 2003 2:03 PM > To: 'samba@lists.samba.org' > Subject: RE: [Samba] Samba/LDAP XP Authentication Weirdness > > > some more logs (sorry, these buggers are big and comparing > them is making me > cross-eyed) > > > -----Original Message----- > > From: _Chris McKeever_ > > Sent: Thursday, July 10, 2003 1:25 PM > > To: _Chris McKeever_; samba@lists.samba.org > > Subject: RE: [Samba] Samba/LDAP XP Authentication Weirdness > > > > > > logs below: > > > > -- Jason Williams Wrote: > > > > Weird stuff happening eh? > > > > Just to get a few things out of the way, the user that is > > having problems > > logging on, they have an account on the PDC? > > > > ---> all done through ldap, logs show authenticating user > > fine (below) > > > > The machine account will be there since it has already > > connected to the > > PDC. > > > > ---> machine account is in the LDAP > > > > The original user works, but when you create a new user on > the XP box > > and try and log on, you get errors right? > > > > ---> I am not creating a new user, just trying to log in (as > > I did with the first user that works). I did however try to > > add that user to the list of power users and that didnt help either. > > > > Anything the logs say? > > > > ---> see comments below > > > > > > > -----Original Message----- > > > From: _Chris McKeever_ [mailto:tech-mail@prupref.com] > > > > > > > > > > > Samba 2.2.8a, RH7.3 > > > > > > I have successfully connected machines running XP to the > > > samba controlled > > > domain. > > > > > > There are 3 XP machines, each with only one user designated > > > as a power user > > > (ie domain\username power user). Each can log into any > of the three > > > machines without a problem. > > > > > > Now I am trying to log a different person into any of these > > > machines and I > > > get the message "System Could Not Log You On". > > > > > > I can log into any of these machines with the administrator > > > or my account > > > (neither of which are set up in the local users - other than > > > computername\administrator). > > > > > > Any ideas of what is going on? Did I miss something? I > > > thought that with > > > domain logins that any user can log into the XP machine as > > > long as they are > > > set-up correctly via samba, which they are since they can > > > access resources > > > from windows 98 machines to samba shares. > > > > > > Thanks > > > > From the logs it seems like the user is authenticating fine > > against ldap/samba: > > > > problem user: > > > > [2003/07/10 12:46:59, 3] > > rpc_server/srv_netlog_nt.c:_net_sam_logon(605) > > SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[jearhart] > > [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:push_sec_ctx(296) > > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > > [2003/07/10 12:46:59, 3] smbd/uid.c:push_conn_ctx(285) > > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > > [2003/07/10 12:46:59, 3] smbd/sec_ctx.c:set_sec_ctx(328) > > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 > > [2003/07/10 12:46:59, 5] passdb/pdb_ldap.c:ldap_open_connection(122) > > ldap_open_connection: starting... > > [2003/07/10 12:46:59, 10] > passdb/pdb_ldap.c:ldap_open_connection(148) > > Initializing connection to winnetka.prupref.com on port 389 > > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(186) > > StartTLS issued: using a TLS connection > > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_open_connection(217) > > ldap_open_connection: connection opened > > [2003/07/10 12:46:59, 0] passdb/pdb_ldap.c:ldap_connect_system(315) > > ldap_connect_system: Binding to ldap server as > > "cn=root,dc=prupref,dc=com" > > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_connect_system(331) > > ldap_connect_system: succesful connection to the LDAP server > > [2003/07/10 12:46:59, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) > > ldap_search_one_user: searching > > for:[(&(uid=jearhart)(objectclass=sambaAccount))] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [uid] = [jearhart] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) > > Entry found for user: jearhart > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [pwdLastSet] = [1057792387] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [logonTime] = [0] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [logoffTime] = [2147483647] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [kickoffTime] = [2147483647] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [pwdCanChange] = [0] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [pwdMustChange] = [2147483647] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [cn] = [Jeff Earhart] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [homeDrive] = [<does not exist>] > > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626) > > homeDrive fell back to > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [smbHome] = [<does not exist>] > > [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183) > > Home server: prupref-winn > > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635) > > smbHome fell back to \\prupref-winn\jearhart > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [scriptPath] = [<does not exist>] > > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644) > > scriptPath fell back to > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [profilePath] = [<does not exist>] > > [2003/07/10 12:47:00, 4] lib/substitute.c:automount_server(183) > > Home server: prupref-winn > > [2003/07/10 12:47:00, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653) > > profilePath fell back to \\prupref-winn\jearhart\profile > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [description] = [<does not exist>] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [userWorkstations] = [<does not exist>] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [rid] = [87124] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [primaryGroupID] = [3005] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [lmPassword] = [B9AD96875] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [ntPassword] = [77A7A] > > [2003/07/10 12:47:00, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [acctFlags] = [[UX ]] > > [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:pop_sec_ctx(435) > > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 > > [2003/07/10 12:47:00, 3] smbd/sec_ctx.c:push_sec_ctx(296) > > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > > [2003/07/10 12:47:00, 3] smbd/uid.c:push_conn_ctx(285) > > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > > > > ** this is where the strange part is > > > > 2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340) > > split_domain_name:name 'jearhart' split into domain > > :'PRUPREF-WINN' and user :'jearhart' > > [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(160) > > init_lsa_rid2s: looking up name jearhart > > [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(457) > > lookup_name: winbind lookup for jearhart failed - trying local > > [2003/07/10 12:47:00, 10] smbd/uid.c:lookup_name(486) > > lookup_name: (local) jearhart -> SID > > S-1-5-21-2263616378-1746176118-2189425910-87124 (type 1) > > [2003/07/10 12:47:00, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(164) > > init_lsa_rid2s: found > > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) > > 000000 lsa_io_r_lookup_names > > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > > 0000 ptr_dom_ref: 00000001 > > [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) > > 000004 lsa_io_dom_r_ref > > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > > 0004 num_ref_doms_1: 00000001 > > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > > > > > > Here are logs from the successfull user: > > > > 2003/07/10 12:42:54, 3] > rpc_server/srv_netlog_nt.c:_net_sam_logon(605) > > SAM Logon (Interactive). Domain:[PRUPREF.COM]. User:[mbarnes] > > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296) > > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > > [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285) > > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328) > > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 > > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:ldap_open_connection(122) > > ldap_open_connection: starting... > > [2003/07/10 12:42:54, 10] > passdb/pdb_ldap.c:ldap_open_connection(148) > > Initializing connection to winnetka.prupref.com on port 389 > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(186) > > StartTLS issued: using a TLS connection > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_open_connection(217) > > ldap_open_connection: connection opened > > [2003/07/10 12:42:54, 0] passdb/pdb_ldap.c:ldap_connect_system(315) > > ldap_connect_system: Binding to ldap server as > > "cn=root,dc=prupref,dc=com" > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_connect_system(331) > > ldap_connect_system: succesful connection to the LDAP server > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) > > ldap_search_one_user: searching > > for:[(&(uid=mbarnes)(objectclass=sambaAccount))] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [uid] = [mbarnes] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) > > Entry found for user: mbarnes > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [pwdLastSet] = [1052162872] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [logonTime] = [0] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [logoffTime] = [2147483647] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [kickoffTime] = [2147483647] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [pwdCanChange] = [0] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [pwdMustChange] = [2147483647] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [cn] = [Michael Barnes] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [homeDrive] = [<does not exist>] > > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(626) > > homeDrive fell back to > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [smbHome] = [<does not exist>] > > [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183) > > Home server: prupref-winn > > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(635) > > smbHome fell back to \\prupref-winn\mbarnes > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [scriptPath] = [<does not exist>] > > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(644) > > scriptPath fell back to > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [profilePath] = [<does not exist>] > > [2003/07/10 12:42:54, 4] lib/substitute.c:automount_server(183) > > Home server: prupref-winn > > [2003/07/10 12:42:54, 5] passdb/pdb_ldap.c:init_sam_from_ldap(653) > > profilePath fell back to \\prupref-winn\mbarnes\profile > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [description] = [<does not exist>] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(435) > > get_single_attribute: [userWorkstations] = [<does not exist>] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [rid] = [6722] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [primaryGroupID] = [3005] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [lmPassword] = [3DEC2A3] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [ntPassword] = [A87AD606] > > [2003/07/10 12:42:54, 2] passdb/pdb_ldap.c:get_single_attribute(441) > > get_single_attribute: [acctFlags] = [[UX ]] > > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435) > > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 > > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(296) > > push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 > > [2003/07/10 12:42:54, 3] smbd/uid.c:push_conn_ctx(285) > > push_conn_ctx(100) : conn_ctx_stack_ndx = 0 > > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(328) > > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 > > [2003/07/10 12:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(435) > > pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 > > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456) > > user_in_list: checking user mbarnes in list > > [2003/07/10 12:42:54, 3] > > rpc_server/srv_util.c:get_domain_user_groups(187) > > domain group access 513/7 granted > > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(456) > > user_in_list: checking user mbarnes in list root @domain-admins > > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460) > > user_in_list: checking user |mbarnes| against |root| > > [2003/07/10 12:42:54, 10] lib/username.c:user_in_list(460) > > user_in_list: checking user |mbarnes| against |@domain-admins| > > [2003/07/10 12:42:54, 5] lib/username.c:user_in_netgroup_list(298) > > Unable to get default yp domain > > [2003/07/10 12:42:54, 10] > lib/username.c:user_in_unix_group_list(392) > > user_in_unix_group_list: checking user mbarnes in group > > domain-admins > > [2003/07/10 12:42:54, 10] > lib/username.c:user_in_unix_group_list(413) > > user_in_unix_group_list: checking user mbarnes against > > member jearhart > > [2003/07/10 12:42:54, 10] > lib/username.c:user_in_unix_group_list(413) > > user_in_unix_group_list: checking user mbarnes against > > member cfusion > > [2003/07/10 12:42:54, 10] > lib/username.c:user_in_unix_group_list(413) > > user_in_unix_group_list: checking user mbarnes against > > member administrator > > [2003/07/10 12:42:54, 10] > lib/username.c:user_in_unix_group_list(413) > > user_in_unix_group_list: checking user mbarnes against > > member mfalanga > > [2003/07/10 12:42:54, 10] > lib/username.c:user_in_unix_group_list(413) > > user_in_unix_group_list: checking user mbarnes against > > member cgmckeever > > [2003/07/10 12:42:54, 4] rpc_server/srv_util.c:make_dom_gids(90) > > make_dom_gids: 513/7 > > [2003/07/10 12:42:54, 5] rpc_server/srv_util.c:make_dom_gids(149) > > group id: 513 attr: 7 > > [2003/07/10 12:42:54, 4] rpc_parse/parse_net.c:init_dom_sid2s(813) > > init_dom_sid2s: > > > > ** The part about domain splitting is not there > > > > > > if you need other parts of the logs, please let me know. > > > > Thanks > > I notice some discrepecny starting here (which the domain > splitting shortyl > follows): > > User that doesnt work: > > 2003/07/10 12:47:00, 10] lib/util.c:dump_data(1541) > [000] 5C 50 49 50 45 5C 00 00 00 05 00 00 03 10 00 00 > \PIPE\.. ........ > [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) > [010] 00 68 00 00 00 02 00 00 00 50 00 00 00 00 00 0E > .h...... .P...... > [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) > [020] 00 00 00 00 00 02 00 00 00 00 00 00 00 94 A6 0D > ........ ........ > [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) > [030] 3F 1A 08 00 00 01 00 00 00 01 00 00 00 10 00 12 > ?....... ........ > [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) > [040] 00 38 83 0C 00 09 00 00 00 00 00 00 00 08 00 00 > .8...... ........ > [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) > [050] 00 6A 00 65 00 61 00 72 00 68 00 61 00 72 00 74 > .j.e.a.r .h.a.r.t > [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) > [060] 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 > ........ ........ > [2003/07/10 12:47:00, 10] lib/util.c:dump_data(1549) > [070] 00 . > [2003/07/10 12:47:00, 3] smbd/process.c:switch_message(685) > switch message SMBtrans (pid 2074) > [2003/07/10 12:47:00, 4] smbd/uid.c:change_to_user(119) > change_to_user: Skipping user change - already user > [2003/07/10 12:47:00, 3] smbd/ipc.c:reply_trans(519) > trans <\PIPE\> data=104 params=0 setup=2 > [2003/07/10 12:47:00, 5] smbd/ipc.c:reply_trans(539) > calling named_pipe > [2003/07/10 12:47:00, 3] smbd/ipc.c:named_pipe(334) > named pipe command on <> name > [2003/07/10 12:47:00, 5] smbd/ipc.c:api_fd_reply(275) > api_fd_reply > [2003/07/10 12:47:00, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990) > search for pipe pnum=768b > [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) > pipe name lsarpc pnum=768b (pipes_open=2) > [2003/07/10 12:47:00, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) > pipe name NETLOGON pnum=7689 (pipes_open=2) > [2003/07/10 12:47:00, 3] smbd/ipc.c:api_fd_reply(296) > Got API command 0x26 on pipe "lsarpc" (pnum > 768b)api_fd_reply: p:0x82344d0 > max_trans_reply: 1024 > [2003/07/10 12:47:00, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752) > write_to_pipe: 768b name: lsarpc open: Yes len: 104 > [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1541) > [000] 05 00 00 03 10 00 00 00 68 00 00 00 02 00 00 00 > ........ h....... > [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) > [010] 50 00 00 00 00 00 0E 00 00 00 00 00 02 00 00 00 > P....... ........ > [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) > [020] 00 00 00 00 94 A6 0D 3F 1A 08 00 00 01 00 00 00 > .......? ........ > [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) > [030] 01 00 00 00 10 00 12 00 38 83 0C 00 09 00 00 00 > ........ 8....... > [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) > [040] 00 00 00 00 08 00 00 00 6A 00 65 00 61 00 72 00 > ........ j.e.a.r. > [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) > [050] 68 00 61 00 72 00 74 00 00 00 00 00 00 00 00 00 > h.a.r.t. ........ > [2003/07/10 12:47:00, 50] lib/util.c:dump_data(1549) > [060] 02 00 00 00 00 00 00 00 ........ > [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) > write_to_pipe: data_left = 104 > [2003/07/10 12:47:00, 10] > rpc_server/srv_pipe_hnd.c:process_incoming_data(674) > process_incoming_data: Start: pdu_received_len = 0, > pdu_needed_len = 0, > incoming data = 104 > [2003/07/10 12:47:00, 10] > rpc_server/srv_pipe_hnd.c:fill_rpc_header(299) > fill_rpc_header: data_to_copy = 104, > len_needed_to_complete_hdr = 16, > receive_len = 0 > [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) > write_to_pipe: data_used = 16 > [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) > write_to_pipe: data_left = 88 > [2003/07/10 12:47:00, 10] > rpc_server/srv_pipe_hnd.c:process_incoming_data(674) > process_incoming_data: Start: pdu_received_len = 16, > pdu_needed_len = 0, > incoming data = 88 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 smb_io_rpc_hdr > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0000 major : 05 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0001 minor : 00 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0002 pkt_type : 00 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0003 flags : 03 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0004 pack_type0: 10 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0005 pack_type1: 00 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0006 pack_type2: 00 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0007 pack_type3: 00 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0008 frag_len : 0068 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 000a auth_len : 0000 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 000c call_id : 00000002 > [2003/07/10 12:47:00, 5] > rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387) > unmarshall_rpc_header: using little-endian RPC > [2003/07/10 12:47:00, 10] > rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416) > unmarshall_rpc_header: type = 0, flags = 3 > [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) > write_to_pipe: data_used = 0 > [2003/07/10 12:47:00, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) > write_to_pipe: data_left = 88 > [2003/07/10 12:47:00, 10] > rpc_server/srv_pipe_hnd.c:process_incoming_data(674) > process_incoming_data: Start: pdu_received_len = 0, > pdu_needed_len = 88, > incoming data = 88 > [2003/07/10 12:47:00, 10] > rpc_server/srv_pipe_hnd.c:process_complete_pdu(619) > process_complete_pdu: processing packet type 0 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 smb_io_rpc_hdr_req req > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0000 alloc_hint: 00000050 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0004 context_id: 0000 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0006 opnum : 000e > [2003/07/10 12:47:00, 3] > rpc_server/srv_pipe_hnd.c:free_pipe_context(444) > free_pipe_context: destroying talloc pool of size 0 > [2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) > Doing \PIPE\lsarpc > [2003/07/10 12:47:00, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190) > api_rpcTNP: api_ntlsa_rpc op 0xe - created > /tmp/in_api_ntlsa_rpc_14.1.prs > [2003/07/10 12:47:00, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) > api_rpcTNP: pipe 30347 rpc command: LSA_LOOKUPNAMES > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 lsa_io_q_lookup_names > [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) > 000000 smb_io_pol_hnd > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0000 data1: 00000000 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0004 data2: 00000002 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0008 data3: 0000 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 000a data4: 0000 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint8s(675) > 000c data5: 94 a6 0d 3f 1a 08 00 00 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0014 num_entries : 00000001 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0018 num_entries2 : 00000001 > [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) > 00001c smb_io_unihdr hdr_name > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 001c uni_str_len: 0010 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 001e uni_max_len: 0012 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0020 buffer : 000c8338 > [2003/07/10 12:47:00, 6] rpc_parse/parse_prs.c:prs_debug(60) > 000024 smb_io_unistr2 dom_name > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0024 uni_max_len: 00000009 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0028 undoc : 00000000 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 002c uni_str_len: 00000008 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760) > 0030 buffer : j.e.a.r.h.a.r.t. > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0040 num_trans_entries : 00000000 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0044 ptr_trans_sids : 00000000 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0048 lookup_level : 00000002 > [2003/07/10 12:47:00, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 004c mapped_count : 00000000 > [2003/07/10 12:47:00, 4] > rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160) > Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 > 00 94 A6 0D 3F > ........ .......? > [2003/07/10 12:47:00, 4] lib/util.c:dump_data(1549) > [010] 1A 08 00 00 .... > [2003/07/10 12:47:00, 10] lib/util_sid.c:split_domain_name(340) > split_domain_name:name 'jearhart' split into domain > :'PRUPREF-WINN' and > user :'jearhart > > > USer that works: > > 2003/07/10 12:42:56, 10] lib/util.c:dump_data(1541) > [000] 5C 50 49 50 45 5C 00 00 00 05 00 00 03 10 00 00 > \PIPE\.. ........ > [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549) > [010] 00 2E 00 00 00 02 00 00 00 16 00 00 00 00 00 07 > ........ ........ > [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549) > [020] 00 00 00 00 00 02 00 00 00 00 00 00 00 A0 A5 0D > ........ ........ > [2003/07/10 12:42:56, 10] lib/util.c:dump_data(1549) > [030] 3F 02 08 00 00 05 00 ?...... > [2003/07/10 12:42:56, 3] smbd/process.c:switch_message(685) > switch message SMBtrans (pid 2050) > [2003/07/10 12:42:56, 4] smbd/uid.c:change_to_user(119) > change_to_user: Skipping user change - already user > [2003/07/10 12:42:56, 3] smbd/ipc.c:reply_trans(519) > trans <\PIPE\> data=46 params=0 setup=2 > [2003/07/10 12:42:56, 5] smbd/ipc.c:reply_trans(539) > calling named_pipe > [2003/07/10 12:42:56, 3] smbd/ipc.c:named_pipe(334) > named pipe command on <> name > [2003/07/10 12:42:56, 5] smbd/ipc.c:api_fd_reply(275) > api_fd_reply > [2003/07/10 12:42:56, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(990) > search for pipe pnum=75a2 > [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) > pipe name lsarpc pnum=75a2 (pipes_open=2) > [2003/07/10 12:42:56, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(993) > pipe name NETLOGON pnum=75a0 (pipes_open=2) > [2003/07/10 12:42:56, 3] smbd/ipc.c:api_fd_reply(296) > Got API command 0x26 on pipe "lsarpc" (pnum > 75a2)api_fd_reply: p:0x82566d0 > max_trans_reply: 1024 > [2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(752) > write_to_pipe: 75a2 name: lsarpc open: Yes len: 46 > [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1541) > [000] 05 00 00 03 10 00 00 00 2E 00 00 00 02 00 00 00 > ........ ........ > [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549) > [010] 16 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00 > ........ ........ > [2003/07/10 12:42:56, 50] lib/util.c:dump_data(1549) > [020] 00 00 00 00 A0 A5 0D 3F 02 08 00 00 05 00 > .......? ...... > [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) > write_to_pipe: data_left = 46 > [2003/07/10 12:42:56, 10] > rpc_server/srv_pipe_hnd.c:process_incoming_data(674) > process_incoming_data: Start: pdu_received_len = 0, > pdu_needed_len = 0, > incoming data = 46 > [2003/07/10 12:42:56, 10] > rpc_server/srv_pipe_hnd.c:fill_rpc_header(299) > fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16, > receive_len = 0 > [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) > write_to_pipe: data_used = 16 > [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) > write_to_pipe: data_left = 30 > [2003/07/10 12:42:56, 10] > rpc_server/srv_pipe_hnd.c:process_incoming_data(674) > process_incoming_data: Start: pdu_received_len = 16, > pdu_needed_len = 0, > incoming data = 30 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 smb_io_rpc_hdr > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0000 major : 05 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0001 minor : 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0002 pkt_type : 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0003 flags : 03 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0004 pack_type0: 10 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0005 pack_type1: 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0006 pack_type2: 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0007 pack_type3: 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0008 frag_len : 002e > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 000a auth_len : 0000 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 000c call_id : 00000002 > [2003/07/10 12:42:56, 5] > rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(387) > unmarshall_rpc_header: using little-endian RPC > [2003/07/10 12:42:56, 10] > rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(416) > unmarshall_rpc_header: type = 0, flags = 3 > [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) > write_to_pipe: data_used = 0 > [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(762) > write_to_pipe: data_left = 30 > [2003/07/10 12:42:56, 10] > rpc_server/srv_pipe_hnd.c:process_incoming_data(674) > process_incoming_data: Start: pdu_received_len = 0, > pdu_needed_len = 30, > incoming data = 30 > [2003/07/10 12:42:56, 10] > rpc_server/srv_pipe_hnd.c:process_complete_pdu(619) > process_complete_pdu: processing packet type 0 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 smb_io_rpc_hdr_req req > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0000 alloc_hint: 00000016 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0004 context_id: 0000 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0006 opnum : 0007 > [2003/07/10 12:42:56, 3] > rpc_server/srv_pipe_hnd.c:free_pipe_context(444) > free_pipe_context: destroying talloc pool of size 0 > [2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) > Doing \PIPE\lsarpc > [2003/07/10 12:42:56, 4] rpc_server/srv_pipe.c:api_rpcTNP(1190) > api_rpcTNP: api_ntlsa_rpc op 0x7 - created > /tmp/in_api_ntlsa_rpc_7.5.prs > [2003/07/10 12:42:56, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) > api_rpcTNP: pipe 30114 rpc command: LSA_QUERYINFOPOLICY > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 lsa_io_q_query > [2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60) > 000000 smb_io_pol_hnd > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0000 data1: 00000000 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0004 data2: 00000002 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0008 data3: 0000 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 000a data4: 0000 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8s(675) > 000c data5: a0 a5 0d 3f 02 08 00 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0014 info_class: 0005 > [2003/07/10 12:42:56, 4] > rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(160) > Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 > 00 A0 A5 0D 3F > ........ .......? > [2003/07/10 12:42:56, 4] lib/util.c:dump_data(1549) > [010] 02 08 00 00 .... > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 lsa_io_r_query > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0000 undoc_buffer: 22000000 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0004 info_class: 0005 > [2003/07/10 12:42:56, 6] rpc_parse/parse_prs.c:prs_debug(60) > 000008 lsa_io_dom_query > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0008 uni_dom_max_len: 0016 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 000a uni_dom_str_len: 0018 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 000c buffer_dom_name: 00000001 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0010 buffer_dom_sid : 00000001 > [2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60) > 000014 smb_io_unistr2 unistr2 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0014 uni_max_len: 0000000c > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0018 undoc : 00000000 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 001c uni_str_len: 0000000b > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760) > 0020 buffer : P.R.U.P.R.E.F...C.O.M. > [2003/07/10 12:42:56, 7] rpc_parse/parse_prs.c:prs_debug(60) > 000038 smb_io_dom_sid2 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0038 num_auths: 00000004 > [2003/07/10 12:42:56, 8] rpc_parse/parse_prs.c:prs_debug(60) > 00003c smb_io_dom_sid sid > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 003c sid_rev_num: 01 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 003d num_auths : 04 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 003e id_auth[0] : 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 003f id_auth[1] : 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0040 id_auth[2] : 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0041 id_auth[3] : 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0042 id_auth[4] : 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0043 id_auth[5] : 05 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32s(815) > 0044 sub_auths : 00000015 86ec0b7a 68148876 > 827ffcf6 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_ntstatus(617) > 0054 status: NT_STATUS_OK > [2003/07/10 12:42:56, 0] rpc_parse/parse_prs.c:prs_dump(46) > created /tmp/out_api_ntlsa_rpc_7.5.prs > [2003/07/10 12:42:56, 5] rpc_server/srv_pipe.c:api_rpcTNP(1235) > api_rpcTNP: called api_ntlsa_rpc successfully > [2003/07/10 12:42:56, 3] > rpc_server/srv_pipe_hnd.c:free_pipe_context(444) > free_pipe_context: destroying talloc pool of size 512 > [2003/07/10 12:42:56, 10] rpc_server/srv_pipe_hnd.c:write_to_pipe(766) > write_to_pipe: data_used = 30 > [2003/07/10 12:42:56, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(799) > read_from_pipe: 75a2 name: lsarpc len: 1024 > [2003/07/10 12:42:56, 10] > rpc_server/srv_pipe_hnd.c:read_from_pipe(844) > read_from_pipe: lsarpc: fault_state = 0 : data_sent_length = 0, > prs_offset(&p->out_data.rdata) = 88. > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000000 smb_io_rpc_hdr hdr > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0000 major : 05 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0001 minor : 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0002 pkt_type : 02 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0003 flags : 03 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0004 pack_type0: 10 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0005 pack_type1: 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0006 pack_type2: 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0007 pack_type3: 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0008 frag_len : 0070 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 000a auth_len : 0000 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 000c call_id : 00000002 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_debug(60) > 000010 smb_io_rpc_hdr_resp resp > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint32(588) > 0010 alloc_hint: 00000058 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint16(559) > 0014 context_id: 0000 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0016 cancel_ct : 00 > [2003/07/10 12:42:56, 5] rpc_parse/parse_prs.c:prs_uint8(530) > 0017 reserved : 00 > [2003/07/10 12:42:56, 5] smbd/ipc.c:copy_trans_params_and_data(62) > copy_trans_params_and_data: params[0..0] data[0..112] > [2003/07/10 12:42:56, 5] lib/util.c:show_msg(268) > size=168 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=1 > [2003/07/10 12:42:56, 5] lib/util.c:show_msg(276) > smb_tid=2 > smb_pid=528 > smb_uid=101 > > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >