Thomas Hannan
2003-Oct-23 23:50 UTC
[Samba] Win NT 4.0 clients give error C0000078 when login to Samba PDC
Hi all, I've tried searching all over the net for any information about this error but can't seem to find any. I've compiled Samba 2.2.8a on a RH Linux 7.3 box (kernel 2.4.18-3) with lsapsam support against openldap 2.0.23-4. I'm also using pam_ldap such that all authentication (unix + samba/windows) is done through LDAP, which is working quite nicely. However, none of my NT 4.0 systems can log on to the PDC -- my 2K Pro and XP Pro systems can (assuming the SignOrSeal registry hack is done), but the NT systems will join the domain, but as soon as I enter the root password (or log in under any other account) I get a "The system cannot log you on (C0000078)" which apparently means NT_STATUS_INVALID_SID. Nothing shows up in the EventLog on these NT workstations. I've tried flushing the NBT cache (with "c:\> nbtstat -RR") and one system is a fresh NT install just for testing. I've also tried joining other domains or setting them to be workgroup only and restarting a few times before re-joining this domain to see if they're somehow caching old SIDs. Any ideas? I'm ready to try just about anything at this point. I've attached my smb.conf, ldapsam/smbpasswd entries, and log. Regards, Tico [root@gw-uk root]# /usr/local/samba/bin/testparm -x Load smb config files from /usr/local/samba/lib/smb.conf Processing section "[homes]" Processing section "[netlogon]" Processing section "[public]" Loaded services file OK. Press enter to see a dump of your service definitions # Global parameters [global] workgroup = POI netbios name = POI-US server string = "POI-USA file server" encrypt passwords = Yes log level = 3 log file = /var/log/samba/%m.log socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain admin group = root, administrator, @smbadmin logon path logon home domain logons = Yes os level = 34 preferred master = Yes domain master = Yes wins support = Yes ldap server = 192.168.1.60 ldap port = 389 ldap suffix = "ou=accounts, ou=people, dc=pharm-olam, dc=com" ldap admin dn = "cn=Manager,dc=pharm-olam,dc=com" ldap ssl = no guest account = smbguest [homes] read only = No create mask = 0600 directory mask = 0700 [netlogon] path = /var/samba/netlogon locking = No [public] path = /tmp read only = No guest ok = Yes Here are the relevant user entries in the LDAPSAM (if need be I can dump the entries directly out of LDAP): root@gw-uk root]# /usr/local/samba/bin/pdbedit -v -u emach-nt-01$ ldap_connect_system: Binding to ldap server as "cn=Manager,dc=pharm-olam,dc=com" username: EMACH-NT-01$ user ID/Group: 1311/1300 user RID/GRID: 3622/3601 Full Name: EMACH-NT-01$ Home Directory: HomeDir Drive: Logon Script: Profile Path: [root@gw-uk root]# /usr/local/samba/bin/pdbedit -v -u root ldap_connect_system: Binding to ldap server as "cn=Manager,dc=pharm-olam,dc=com" username: root user ID/Group: 0/0 user RID/GRID: 1000/512 Full Name: root Home Directory: HomeDir Drive: Logon Script: Profile Path: Below is a "tail -f /var/log/samba/emach-nt-01.log" Transaction 2 of length 131 [2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685) switch message SMBsesssetupX (pid 19365) [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/10/23 15:40:53, 3] smbd/reply.c:reply_sesssetup_and_X(879) Domain=[] NativeOS=[Windows NT 1381] NativeLanMan=[] [2003/10/23 15:40:53, 3] smbd/reply.c:reply_sesssetup_and_X(890) sesssetupX:name=[] [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:push_sec_ctx(296) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/10/23 15:40:53, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:get_current_groups(172) get_current_groups: user is in 1 groups: 1100 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:pop_sec_ctx(435) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:get_current_groups(172) get_current_groups: user is in 1 groups: 1100 [2003/10/23 15:40:53, 3] smbd/password.c:register_vuid(336) uid 999 registered to name smbguest [2003/10/23 15:40:53, 3] smbd/password.c:register_vuid(338) Clearing default real name [2003/10/23 15:40:53, 3] smbd/password.c:register_vuid(340) User name: smbguest Real name: smbguest [2003/10/23 15:40:53, 3] smbd/process.c:chain_reply(991) Chained message [2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685) switch message SMBtconX (pid 19365) [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/10/23 15:40:53, 3] smbd/password.c:authorise_login(854) authorise_login: ACCEPTED: guest account and guest ok (smbguest) [2003/10/23 15:40:53, 3] smbd/service.c:make_connection(487) Connect path is /tmp [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:push_sec_ctx(296) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/10/23 15:40:53, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:get_current_groups(172) get_current_groups: user is in 1 groups: 1100 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:pop_sec_ctx(435) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:get_current_groups(172) get_current_groups: user is in 1 groups: 1100 [2003/10/23 15:40:53, 3] smbd/uid.c:fetch_sid_from_uid_cache(590) fetch sid from uid cache 999 -> S-1-5-21-3756293304-439759695-3178546228-2998 [2003/10/23 15:40:53, 3] smbd/uid.c:fetch_sid_from_gid_cache(666) fetch sid from gid cache 1100 -> S-1-5-21-3756293304-439759695-3178546228-3201[2003/10/23 15:40:53, 3] lib/util_seaccess.c:se_access_check(269) se_access_check: user sid is S-1-5-21-3756293304-439759695-3178546228-2998 [2003/10/23 15:40:53, 3] lib/util_seaccess.c:se_access_check(272) se_access_check: also S-1-5-21-3756293304-439759695-3178546228-3201 [2003/10/23 15:40:53, 3] lib/util_seaccess.c:se_access_check(272) se_access_check: also S-1-1-0 [2003/10/23 15:40:53, 3] lib/util_seaccess.c:se_access_check(272) se_access_check: also S-1-5-2 [2003/10/23 15:40:53, 3] lib/util_seaccess.c:se_access_check(272) se_access_check: also S-1-5-32-546 [2003/10/23 15:40:53, 3] smbd/vfs.c:vfs_init_default(123) Initialising default vfs hooks [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (999, 1100) - sec_ctx_stack_ndx = 0 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(334) 1 user groups: 1100 [2003/10/23 15:40:53, 3] smbd/vfs.c:vfs_ChDir(574) vfs_ChDir to /tmp [2003/10/23 15:40:53, 3] smbd/service.c:make_connection(636) emach-nt-01 (192.168.1.211) connect to service IPC$ as user smbguest (uid=999, gid=1100) (pid 19365) [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/10/23 15:40:53, 3] smbd/reply.c:reply_tcon_and_X(394) tconX service=ipc$ user=smbguest [2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846) Transaction 3 of length 95 [2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 19365) [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (999, 1100) - sec_ctx_stack_ndx = 0 [2003/10/23 15:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(334) 1 user groups: 1100 [2003/10/23 15:40:53, 3] smbd/nttrans.c:nt_open_pipe(559) nt_open_pipe: Known pipe lsarpc opening. [2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846) Transaction 4 of length 152 [2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:40:53, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=72 params=0 setup=2 [2003/10/23 15:40:53, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:40:53, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 7770)api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass [2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846) Transaction 5 of length 168 [2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:40:53, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=88 params=0 setup=2 [2003/10/23 15:40:53, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:40:53, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 7770)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30576 rpc command: LSA_OPENPOLICY2 [2003/10/23 15:40:53, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 18 [2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846) Transaction 6 of length 132 [2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:40:53, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=52 params=0 setup=2 [2003/10/23 15:40:53, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:40:53, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 7770)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30576 rpc command: LSA_ENUMTRUSTDOM [2003/10/23 15:40:53, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846) Transaction 7 of length 124 [2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:40:53, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=44 params=0 setup=2 [2003/10/23 15:40:53, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:40:53, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 7770)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/10/23 15:40:53, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30576 rpc command: LSA_CLOSE [2003/10/23 15:40:53, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(197) Closed policy [2003/10/23 15:40:53, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:40:53, 3] smbd/process.c:process_smb(846) Transaction 8 of length 46 [2003/10/23 15:40:53, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 19365) [2003/10/23 15:41:11, 3] smbd/process.c:process_smb(846) Transaction 9 of length 97 [2003/10/23 15:41:11, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 19365) [2003/10/23 15:41:11, 3] smbd/nttrans.c:nt_open_pipe(559) nt_open_pipe: Known pipe NETLOGON opening. [2003/10/23 15:41:11, 3] smbd/process.c:process_smb(846) Transaction 10 of length 152 [2003/10/23 15:41:11, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:11, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=72 params=0 setup=2 [2003/10/23 15:41:11, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:11, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "NETLOGON" (pnum 7771)api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass [2003/10/23 15:41:11, 3] smbd/process.c:process_smb(846) Transaction 11 of length 364 [2003/10/23 15:41:11, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:11, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=284 params=0 setup=2 [2003/10/23 15:41:11, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:11, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "NETLOGON" (pnum 7771)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:11, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\NETLOGON [2003/10/23 15:41:11, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30577 rpc command: NET_SAMLOGON [2003/10/23 15:41:11, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 656 [2003/10/23 15:41:11, 3] smbd/process.c:process_smb(846) Transaction 12 of length 46 [2003/10/23 15:41:11, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 19365) [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 13 of length 95 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 19365) [2003/10/23 15:41:20, 3] smbd/nttrans.c:nt_open_pipe(559) nt_open_pipe: Known pipe lsarpc opening. [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 14 of length 152 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=72 params=0 setup=2 [2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 7772)api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 15 of length 168 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=88 params=0 setup=2 [2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 7772)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30578 rpc command: LSA_OPENPOLICY2 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 18 [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 16 of length 132 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=52 params=0 setup=2 [2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 7772)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30578 rpc command: LSA_ENUMTRUSTDOM [2003/10/23 15:41:20, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 17 of length 124 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=44 params=0 setup=2 [2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "lsarpc" (pnum 7772)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\lsarpc [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30578 rpc command: LSA_CLOSE [2003/10/23 15:41:20, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(197) Closed policy [2003/10/23 15:41:20, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 18 of length 46 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBclose (pid 19365) [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 19 of length 97 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 19365) [2003/10/23 15:41:20, 3] smbd/nttrans.c:nt_open_pipe(559) nt_open_pipe: Known pipe NETLOGON opening. [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 20 of length 152 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=72 params=0 setup=2 [2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "NETLOGON" (pnum 7773)api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 21 of length 184 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=104 params=0 setup=2 [2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "NETLOGON" (pnum 7773)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\NETLOGON [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30579 rpc command: NET_REQCHAL [2003/10/23 15:41:20, 3] smbd/sec_ctx.c:push_sec_ctx(296) push_sec_ctx(999, 1100) : sec_ctx_stack_ndx = 1 [2003/10/23 15:41:20, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2003/10/23 15:41:20, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_open_connection(217) ldap_open_connection: connection opened [2003/10/23 15:41:20, 0] passdb/pdb_ldap.c:ldap_connect_system(315) ldap_connect_system: Binding to ldap server as "cn=Manager,dc=pharm-olam,dc=com" [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_connect_system(331) ldap_connect_system: succesful connection to the LDAP server [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) ldap_search_one_user: searching for:[(&(uid=emach-nt-01$)(objectclass=sambaAccount))] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [uid] = [EMACH-NT-01$] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) Entry found for user: EMACH-NT-01$ [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdLastSet] = [1066938672] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [logonTime] = [0] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [logoffTime] = [2147483647] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [kickoffTime] = [2147483647] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdCanChange] = [0] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdMustChange] = [2147483647] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [cn] = [EMACH-NT-01$] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [homeDrive] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [smbHome] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [scriptPath] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [profilePath] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [description] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [userWorkstations] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [rid] = [3622] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [primaryGroupID] = [3601] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [lmPassword] [0E3730B32E3C58C12F839336D7EE2783] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [ntPassword] [0E3730B32E3C58C12F839336D7EE2783] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [acctFlags] = [[W ]] [2003/10/23 15:41:20, 3] smbd/sec_ctx.c:pop_sec_ctx(435) pop_sec_ctx (999, 1100) - sec_ctx_stack_ndx = 0 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 42 [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 22 of length 228 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=148 params=0 setup=2 [2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "NETLOGON" (pnum 7773)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\NETLOGON [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30579 rpc command: NET_AUTH2 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 68 [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 23 of length 364 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=284 params=0 setup=2 [2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "NETLOGON" (pnum 7773)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\NETLOGON [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30579 rpc command: NET_SAMLOGON [2003/10/23 15:41:20, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(605) SAM Logon (Interactive). Domain:[POI]. User:[root] [2003/10/23 15:41:20, 3] smbd/sec_ctx.c:push_sec_ctx(296) push_sec_ctx(999, 1100) : sec_ctx_stack_ndx = 1 [2003/10/23 15:41:20, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2003/10/23 15:41:20, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_open_connection(217) ldap_open_connection: connection opened [2003/10/23 15:41:20, 0] passdb/pdb_ldap.c:ldap_connect_system(315) ldap_connect_system: Binding to ldap server as "cn=Manager,dc=pharm-olam,dc=com" [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_connect_system(331) ldap_connect_system: succesful connection to the LDAP server [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:ldap_search_one_user(343) ldap_search_one_user: searching for:[(&(uid=root)(objectclass=sambaAccount))] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [uid] = [root] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:init_sam_from_ldap(576) Entry found for user: root [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdLastSet] = [0] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [logonTime] = [0] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [logoffTime] = [0] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [kickoffTime] = [0] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdCanChange] = [0] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [pwdMustChange] = [0] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [cn] = [root] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [homeDrive] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [smbHome] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [scriptPath] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [profilePath] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [description] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(435) get_single_attribute: [userWorkstations] = [<does not exist>] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [rid] = [1000] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [primaryGroupID] = [512] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [lmPassword] [624AAC413795CDC1FF17365FAF1FFE89] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [ntPassword] [3B1B47E42E0463276E3DED6CEF349F93] [2003/10/23 15:41:20, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [acctFlags] = [[UX ]] [2003/10/23 15:41:20, 3] smbd/sec_ctx.c:pop_sec_ctx(435) pop_sec_ctx (999, 1100) - sec_ctx_stack_ndx = 0 [2003/10/23 15:41:20, 3] smbd/sec_ctx.c:push_sec_ctx(296) push_sec_ctx(999, 1100) : sec_ctx_stack_ndx = 1 [2003/10/23 15:41:20, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2003/10/23 15:41:20, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/10/23 15:41:20, 3] smbd/sec_ctx.c:pop_sec_ctx(435) pop_sec_ctx (999, 1100) - sec_ctx_stack_ndx = 0 [2003/10/23 15:41:20, 3] rpc_server/srv_util.c:get_domain_user_groups(187) domain group access 513/7 granted [2003/10/23 15:41:20, 3] rpc_server/srv_util.c:get_domain_user_groups(194) domain admin group access 512/7 granted [2003/10/23 15:41:20, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 4792 [2003/10/23 15:41:20, 3] smbd/process.c:process_smb(846) Transaction 24 of length 362 [2003/10/23 15:41:20, 3] smbd/process.c:switch_message(685) switch message SMBtrans (pid 19365) [2003/10/23 15:41:20, 3] smbd/ipc.c:reply_trans(519) trans <\PIPE\> data=282 params=0 setup=2 [2003/10/23 15:41:20, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2003/10/23 15:41:20, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "NETLOGON" (pnum 7773)free_pipe_context: destroying talloc pool of size 0 [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_pipe_request(1165) Doing \PIPE\NETLOGON [2003/10/23 15:41:20, 3] rpc_server/srv_pipe.c:api_rpcTNP(1197) api_rpcTNP: pipe 30579 rpc command: NET_SAMLOGOFF [2003/10/23 15:41:20, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 232 [2003/10/23 15:42:20, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/10/23 15:43:20, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/10/23 15:44:20, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0