thr3ads.net - samba - [Samba] Winbind Problem [May 2005]

If this information is useful, please help other people find it:
Share via:

Honey Bajaj

2005-May-18 13:17 UTC

[Samba] Winbind Problem

Hi,

I have got two production facilities having the same configuration, facility
1-(domain CSW)Samba 3.0.5 PDC running on redhat 9 and 4 member server running
the same samba version on redhat 9, facility-2- (domain CSWN)Samba 3.0.5 PDC
with 2 domain member server, the domain member server uses winbind to
authenticate usersthey connect to the local PDC, I have configured two way trust
between the two facilities , everything was running perfectly from last 6
months, but from last two days the winbind is giving problem in domain CSW, the
following error message appears on the member server in log.winbindd
[2005/05/18 15:10:01, 0] rpc_client/cli_pipe.c:rpc_api_pipe(435)
cli_pipe:return critical error. Error was call timed out: server did not respond
after 10000 millisecond
where as wbinfo -t is successful, but wbinfo -u and -g gives me the listing of
only the trusting domain users(CSWN list and no CSW user list).

The following error message is appearing on the domain controller of CSW domain

make_server_info_info3:pdb_init_sam failed!

Please suggest me some solution.

Regards,
Honey

Robert Penz

2005-Jun-08 07:59 UTC

head link

[Samba] winbind problem

Hi! 

I'm running suse 9.2 on the client and debian sarge on the server. I'm 
trying to authenticate users via the smb domain. It worked some weeks but 
after some weeks not using it, it was brocken. I've no idea why. 

I get following if I call: 

# wbinfo -u
Error looking up domain users 

and in the log file ist following: 

[2005/06/08 08:49:10, 0] rpc_parse/parse_prs.c:prs_mem_get(537)
 prs_mem_get: reading data of size 4194534 would overrun buffer. 


I've turned to debug log to 10 and get following, what got broken? and how 
to fix it? 


[2005/06/08 08:42:16, 6] nsswitch/winbindd.c:new_connection(356)
 accepted socket 19
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
 client_read: read 1824 bytes. Need 0 more for a full request.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:process_request(321)
 process_request: request fn INTERFACE_VERSION
[2005/06/08 08:42:16, 3] 
nsswitch/winbindd_misc.c:winbindd_interface_version(261)
 [ 4374]: request interface version
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(524)
 client_write: wrote 1300 bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
 client_read: read 1824 bytes. Need 0 more for a full request.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:process_request(321)
 process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2005/06/08 08:42:16, 3] 
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
 [ 4374]: request location of privileged pipe
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(524)
 client_write: wrote 1300 bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(569)
 client_write: need to write 35 extra data bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(524)
 client_write: wrote 35 bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(558)
 client_write: client_write: complete response written.
[2005/06/08 08:42:16, 6] nsswitch/winbindd.c:new_connection(356)
 accepted socket 21
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
 client_read: read 0 bytes. Need 1824 more for a full request.
[2005/06/08 08:42:16, 5] nsswitch/winbindd.c:winbind_client_read(477)
 read failed on sock 19, pid 4374: EOF
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
 client_read: read 1824 bytes. Need 0 more for a full request.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:process_request(321)
 process_request: request fn LIST_USERS
[2005/06/08 08:42:16, 3] nsswitch/winbindd_user.c:winbindd_list_users(587)
 [ 4374]: list users
[2005/06/08 08:42:16, 10] nsswitch/winbindd_cache.c:fetch_cache_seqnum(287)
 fetch_cache_seqnum: timeout [HITT][4294967295 @ 1118212550]
[2005/06/08 08:42:16, 10] nsswitch/winbindd_rpc.c:sequence_number(817)
 rpc: fetch sequence_number for HITT
[2005/06/08 08:42:16, 10] rpc_client/cli_samr.c:cli_samr_open_domain(186)
 cli_samr_open_domain with sid S-1-5-21-1475990760-112971085-4177168692
[2005/06/08 08:42:16, 5] rpc_parse/parse_samr.c:init_samr_q_open_domain(250)
 samr_init_samr_q_open_domain
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 samr_io_q_open_domain
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
     000000 smb_io_pol_hnd pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0000 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0004 data2: 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         0008 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         000a data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
         000c data5: 38 a1 a6 42 46 39 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0014 flags: 02000000
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
     000018 smb_io_dom_sid2 sid
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0018 num_auths: 00000004
[2005/06/08 08:42:16, 7] rpc_parse/parse_prs.c:prs_debug(82)
         00001c smb_io_dom_sid sid
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
             001c sid_rev_num: 01
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
             001d num_auths  : 04
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
             001e id_auth[0] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
             001f id_auth[1] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
             0020 id_auth[2] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
             0021 id_auth[3] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
             0022 id_auth[4] : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
             0023 id_auth[5] : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
             0024 sub_auths : 00000015 57f9d4e8 06bbcd4d f8fa8934
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000038 smb_io_rpc_hdr_auth hdr_auth
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0038 auth_type    : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0039 auth_level   : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     003a padding      : 04
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     003b reserved     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     003c auth_context : 00000001
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1034)
 SCHANNEL seq_num=8
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_encode(1472)
 SCHANNEL: netsec_encode seq_num=8 data_len=56
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000040 smb_io_rpc_auth_netsec_chk
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0040 sig  : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0048 seq_num: 9d 5d 4c 39 3d 6a 72 7a
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0050 packet_digest: e2 bf 44 8c 92 22 bf 55
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0058 confounder: 9a 37 ce db 47 28 0d 9b
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
 create_rpc_request: opnum: 0x7 data_len: 0x78
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
 create_rpc_request: data_len: 78 auth_len: 20 alloc_hint: 40
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 smb_io_rpc_hdr hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0000 major     : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0001 minor     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0002 pkt_type  : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0003 flags     : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0008 frag_len  : 0078
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     000a auth_len  : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     000c call_id   : 00000013
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000010 smb_io_rpc_hdr_req hdr_req
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0010 alloc_hint: 00000040
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0016 opnum     : 0007
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
 rpc_api_pipe: fnum:707f
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
 size=202
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=8
 smb_flg2=51201
 smb_tid=1
 smb_pid=4369
 smb_uid=100
 smb_mid=14
 smt_wct=16
 smb_vwv[ 0]=    0 (0x0)
 smb_vwv[ 1]=  120 (0x78)
 smb_vwv[ 2]=    0 (0x0)
 smb_vwv[ 3]= 4280 (0x10B8)
 smb_vwv[ 4]=    0 (0x0)
 smb_vwv[ 5]=    0 (0x0)
 smb_vwv[ 6]=    0 (0x0)
 smb_vwv[ 7]=    0 (0x0)
 smb_vwv[ 8]=    0 (0x0)
 smb_vwv[ 9]=    0 (0x0)
 smb_vwv[10]=   82 (0x52)
 smb_vwv[11]=  120 (0x78)
 smb_vwv[12]=   82 (0x52)
 smb_vwv[13]=    2 (0x2)
 smb_vwv[14]=   38 (0x26)
 smb_vwv[15]=28799 (0x707F)
 smb_bcc=135
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
 [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
 [010] 00 00 03 10 00 00 00 78  00 20 00 13 00 00 00 40  .......x . .....@
 [020] 00 00 00 00 00 07 00 00  00 00 00 01 00 00 00 00  ........ ........
 [030] 00 00 00 38 A1 A6 42 46  39 00 00 00 00 00 02 04  ...8..BF 9.......
 [040] 00 00 00 01 04 00 00 00  00 00 05 15 00 00 00 E8  ........ ........
 [050] D4 F9 57 4D CD BB 06 34  89 FA F8 00 00 00 00 44  ..WM...4 .......D
 [060] 05 04 00 01 00 00 00 77  00 FF FF FF FF 00 00 9D  .......w ........
 [070] 5D 4C 39 3D 6A 72 7A E2  BF 44 8C 92 22 BF 55 9A  ]L9=jrz. .D..".U.
 [080] 37 CE DB 47 28 0D 9B                              7..G(..
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(449)
 write_socket(18,206)
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(452)
 write_socket(18,206) wrote 206
[2005/06/08 08:42:16, 10] 
lib/util_sock.c:read_smb_length_return_keepalive(505)
 got smb length of 144
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
 size=144
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=136
 smb_flg2=51201
 smb_tid=1
 smb_pid=4369
 smb_uid=100
 smb_mid=14
 smt_wct=10
 smb_vwv[ 0]=    0 (0x0)
 smb_vwv[ 1]=   88 (0x58)
 smb_vwv[ 2]=    0 (0x0)
 smb_vwv[ 3]=    0 (0x0)
 smb_vwv[ 4]=   56 (0x38)
 smb_vwv[ 5]=    0 (0x0)
 smb_vwv[ 6]=   88 (0x58)
 smb_vwv[ 7]=   56 (0x38)
 smb_vwv[ 8]=    0 (0x0)
 smb_vwv[ 9]=    0 (0x0)
 smb_bcc=89
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
 [000] 00 05 00 02 03 10 00 00  00 58 00 20 00 13 00 00  ........ .X. ....
 [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 03 00 00  ........ ........
 [020] 00 00 00 00 00 BA A2 A6  42 46 39 00 00 00 00 00  ........ BF9.....
 [030] 00 44 05 00 00 01 00 00  00 77 00 FF FF FF FF 00  .D...... .w......
 [040] 00 1E 36 EE 2E 18 1C 21  08 DF 8D 3B 9D 8B 94 77  ..6....! ...;...w
 [050] F3 BD 4C 9C 43 4A 74 F6  10                       ..L.CJt. .
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
 size=144
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=136
 smb_flg2=51201
 smb_tid=1
 smb_pid=4369
 smb_uid=100
 smb_mid=14
 smt_wct=10
 smb_vwv[ 0]=    0 (0x0)
 smb_vwv[ 1]=   88 (0x58)
 smb_vwv[ 2]=    0 (0x0)
 smb_vwv[ 3]=    0 (0x0)
 smb_vwv[ 4]=   56 (0x38)
 smb_vwv[ 5]=    0 (0x0)
 smb_vwv[ 6]=   88 (0x58)
 smb_vwv[ 7]=   56 (0x38)
 smb_vwv[ 8]=    0 (0x0)
 smb_vwv[ 9]=    0 (0x0)
 smb_bcc=89
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
 [000] 00 05 00 02 03 10 00 00  00 58 00 20 00 13 00 00  ........ .X. ....
 [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 03 00 00  ........ ........
 [020] 00 00 00 00 00 BA A2 A6  42 46 39 00 00 00 00 00  ........ BF9.....
 [030] 00 44 05 00 00 01 00 00  00 77 00 FF FF FF FF 00  .D...... .w......
 [040] 00 1E 36 EE 2E 18 1C 21  08 DF 8D 3B 9D 8B 94 77  ..6....! ...;...w
 [050] F3 BD 4C 9C 43 4A 74 F6  10                       ..L.CJt. .
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
 rpc_check_hdr: rdata->data_size = 88
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 smb_io_rpc_hdr rpc_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0000 major     : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0001 minor     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0002 pkt_type  : 02
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0003 flags     : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0008 frag_len  : 0058
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     000a auth_len  : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     000c call_id   : 00000013
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0010 alloc_hint: 00000018
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0016 cancel_ct : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0017 reserved  : 00
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
 rpc_api_pipe: len left: 0 smbtrans read: 88
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
 rpc_auth_pipe: pkt_type: 2 len: 88 auth_len: 32 NTLMSSP No schannel Yes 
sign Yes seal No
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
 rpc_auth_pipe: packet:
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 smb_io_rpc_hdr_auth auth_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0000 auth_type    : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0001 auth_level   : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0002 padding      : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0003 reserved     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0004 auth_context : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0008 sig  : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0010 seq_num: 1e 36 ee 2e 18 1c 21 08
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0018 packet_digest: df 8d 3b 9d 8b 94 77 f3
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0020 confounder: bd 4c 9c 43 4a 74 f6 10
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1549)
 SCHANNEL: netsec_encode seq_num=9 data_len=24
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1569)
 SCHANNEL: netsec_decode seq_num=9 data_len=24
[2005/06/08 08:42:16, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
 rpc_api_pipe: fragment first and last both set
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000018 samr_io_r_open_domain
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
     000018 smb_io_pol_hnd domain_pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0018 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         001c data2: 00000003
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         0020 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         0022 data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
         0024 data5: ba a2 a6 42 46 39 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
     002c status: NT_STATUS_OK
[2005/06/08 08:42:16, 10] 
rpc_client/cli_samr.c:cli_samr_query_dom_info(1372)
 cli_samr_query_dom_info
[2005/06/08 08:42:16, 5] 
rpc_parse/parse_samr.c:init_samr_q_query_dom_info(468)
 samr_init_samr_q_query_dom_info
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 samr_io_q_query_dom_info
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
     000000 smb_io_pol_hnd domain_pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0000 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0004 data2: 00000003
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         0008 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         000a data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
         000c data5: ba a2 a6 42 46 39 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0014 switch_value: 0002
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000018 smb_io_rpc_hdr_auth hdr_auth
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0018 auth_type    : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0019 auth_level   : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     001a padding      : 02
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     001b reserved     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     001c auth_context : 00000001
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1034)
 SCHANNEL seq_num=10
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_encode(1472)
 SCHANNEL: netsec_encode seq_num=10 data_len=24
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000020 smb_io_rpc_auth_netsec_chk
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0020 sig  : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0028 seq_num: 7d 15 9a ff be b2 fa be
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0030 packet_digest: 75 c1 c9 63 7d 05 62 c6
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0038 confounder: 5f 8f 74 f2 40 c8 16 e2
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
 create_rpc_request: opnum: 0x8 data_len: 0x58
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
 create_rpc_request: data_len: 58 auth_len: 20 alloc_hint: 20
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 smb_io_rpc_hdr hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0000 major     : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0001 minor     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0002 pkt_type  : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0003 flags     : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0008 frag_len  : 0058
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     000a auth_len  : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     000c call_id   : 00000014
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000010 smb_io_rpc_hdr_req hdr_req
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0010 alloc_hint: 00000020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0016 opnum     : 0008
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
 rpc_api_pipe: fnum:707f
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
 size=170
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=8
 smb_flg2=51201
 smb_tid=1
 smb_pid=4369
 smb_uid=100
 smb_mid=15
 smt_wct=16
 smb_vwv[ 0]=    0 (0x0)
 smb_vwv[ 1]=   88 (0x58)
 smb_vwv[ 2]=    0 (0x0)
 smb_vwv[ 3]= 4280 (0x10B8)
 smb_vwv[ 4]=    0 (0x0)
 smb_vwv[ 5]=    0 (0x0)
 smb_vwv[ 6]=    0 (0x0)
 smb_vwv[ 7]=    0 (0x0)
 smb_vwv[ 8]=    0 (0x0)
 smb_vwv[ 9]=    0 (0x0)
 smb_vwv[10]=   82 (0x52)
 smb_vwv[11]=   88 (0x58)
 smb_vwv[12]=   82 (0x52)
 smb_vwv[13]=    2 (0x2)
 smb_vwv[14]=   38 (0x26)
 smb_vwv[15]=28799 (0x707F)
 smb_bcc=103
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
 [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
 [010] 00 00 03 10 00 00 00 58  00 20 00 14 00 00 00 20  .......X . .....
 [020] 00 00 00 00 00 08 00 00  00 00 00 03 00 00 00 00  ........ ........
 [030] 00 00 00 BA A2 A6 42 46  39 00 00 02 00 00 00 44  ......BF 9......D
 [040] 05 02 00 01 00 00 00 77  00 FF FF FF FF 00 00 7D  .......w .......}
 [050] 15 9A FF BE B2 FA BE 75  C1 C9 63 7D 05 62 C6 5F  .......u ..c}.b._
 [060] 8F 74 F2 40 C8 16 E2                              .t.@...
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(449)
 write_socket(18,174)
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(452)
 write_socket(18,174) wrote 174
[2005/06/08 08:42:16, 10] 
lib/util_sock.c:read_smb_length_return_keepalive(505)
 got smb length of 324
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
 size=324
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=136
 smb_flg2=51201
 smb_tid=1
 smb_pid=4369
 smb_uid=100
 smb_mid=15
 smt_wct=10
 smb_vwv[ 0]=    0 (0x0)
 smb_vwv[ 1]=  268 (0x10C)
 smb_vwv[ 2]=    0 (0x0)
 smb_vwv[ 3]=    0 (0x0)
 smb_vwv[ 4]=   56 (0x38)
 smb_vwv[ 5]=    0 (0x0)
 smb_vwv[ 6]=  268 (0x10C)
 smb_vwv[ 7]=   56 (0x38)
 smb_vwv[ 8]=    0 (0x0)
 smb_vwv[ 9]=    0 (0x0)
 smb_bcc=269
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
 [000] 00 05 00 02 03 10 00 00  00 0C 01 20 00 14 00 00  ........ ... ....
 [010] 00 CC 00 00 00 00 00 00  00 01 00 00 00 02 00 00  ........ ........
 [020] 00 00 00 00 00 00 00 00  80 46 00 46 00 01 00 00  ........ .F.F....
 [030] 00 08 00 08 00 01 00 00  00 0A 00 0A 00 01 00 00  ........ ........
 [040] 00 BA A2 A6 42 00 00 00  00 01 00 00 00 03 00 00  ....B... ........
 [050] 00 01 00 00 00 1F 00 00  00 04 00 00 00 00 00 00  ........ ........
 [060] 00 23 00 00 00 00 00 00  00 23 00 00 00 68 00 61  .#...... .#...h.a
 [070] 00 64 00 65 00 73 00 20  00 73 00 65 00 72 00 76  .d.e.s.  .s.e.r.v
 [080] 00 65 00 72 00 20 00 28  00 53 00 61 00 6D 00 62  .e.r. .( .S.a.m.b
 [090] 00 61 00 20 00 33 00 2E  00 30 00 2E 00 31 00 34  .a. .3.. .0...1.4
 [0A0] 00 61 00 2D 00 44 00 65  00 62 00 69 00 61 00 6E  .a.-.D.e .b.i.a.n
 [0B0] 00 29 00 00 00 04 00 00  00 00 00 00 00 04 00 00  .)...... ........
 [0C0] 00 48 00 49 00 54 00 54  00 05 00 00 00 00 00 00  .H.I.T.T ........
 [0D0] 00 05 00 00 00 48 00 41  00 44 00 45 00 53 00 00  .....H.A .D.E.S..
 [0E0] 00 00 00 00 00 44 05 00  00 01 00 00 00 77 00 FF  .....D.. .....w..
 [0F0] FF FF FF 00 00 7D 77 E5  B6 BD 44 D7 8E D4 91 FC  .....}w. ..D.....
 [100] A6 D7 E1 BE 62 AE 15 DB  30 49 40 39 D8           ....b... 0I@9.
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
 size=324
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=136
 smb_flg2=51201
 smb_tid=1
 smb_pid=4369
 smb_uid=100
 smb_mid=15
 smt_wct=10
 smb_vwv[ 0]=    0 (0x0)
 smb_vwv[ 1]=  268 (0x10C)
 smb_vwv[ 2]=    0 (0x0)
 smb_vwv[ 3]=    0 (0x0)
 smb_vwv[ 4]=   56 (0x38)
 smb_vwv[ 5]=    0 (0x0)
 smb_vwv[ 6]=  268 (0x10C)
 smb_vwv[ 7]=   56 (0x38)
 smb_vwv[ 8]=    0 (0x0)
 smb_vwv[ 9]=    0 (0x0)
 smb_bcc=269
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
 [000] 00 05 00 02 03 10 00 00  00 0C 01 20 00 14 00 00  ........ ... ....
 [010] 00 CC 00 00 00 00 00 00  00 01 00 00 00 02 00 00  ........ ........
 [020] 00 00 00 00 00 00 00 00  80 46 00 46 00 01 00 00  ........ .F.F....
 [030] 00 08 00 08 00 01 00 00  00 0A 00 0A 00 01 00 00  ........ ........
 [040] 00 BA A2 A6 42 00 00 00  00 01 00 00 00 03 00 00  ....B... ........
 [050] 00 01 00 00 00 1F 00 00  00 04 00 00 00 00 00 00  ........ ........
 [060] 00 23 00 00 00 00 00 00  00 23 00 00 00 68 00 61  .#...... .#...h.a
 [070] 00 64 00 65 00 73 00 20  00 73 00 65 00 72 00 76  .d.e.s.  .s.e.r.v
 [080] 00 65 00 72 00 20 00 28  00 53 00 61 00 6D 00 62  .e.r. .( .S.a.m.b
 [090] 00 61 00 20 00 33 00 2E  00 30 00 2E 00 31 00 34  .a. .3.. .0...1.4
 [0A0] 00 61 00 2D 00 44 00 65  00 62 00 69 00 61 00 6E  .a.-.D.e .b.i.a.n
 [0B0] 00 29 00 00 00 04 00 00  00 00 00 00 00 04 00 00  .)...... ........
 [0C0] 00 48 00 49 00 54 00 54  00 05 00 00 00 00 00 00  .H.I.T.T ........
 [0D0] 00 05 00 00 00 48 00 41  00 44 00 45 00 53 00 00  .....H.A .D.E.S..
 [0E0] 00 00 00 00 00 44 05 00  00 01 00 00 00 77 00 FF  .....D.. .....w..
 [0F0] FF FF FF 00 00 7D 77 E5  B6 BD 44 D7 8E D4 91 FC  .....}w. ..D.....
 [100] A6 D7 E1 BE 62 AE 15 DB  30 49 40 39 D8           ....b... 0I@9.
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
 rpc_check_hdr: rdata->data_size = 268
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 smb_io_rpc_hdr rpc_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0000 major     : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0001 minor     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0002 pkt_type  : 02
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0003 flags     : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0008 frag_len  : 010c
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     000a auth_len  : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     000c call_id   : 00000014
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0010 alloc_hint: 000000cc
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0016 cancel_ct : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0017 reserved  : 00
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
 rpc_api_pipe: len left: 0 smbtrans read: 268
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
 rpc_auth_pipe: pkt_type: 2 len: 268 auth_len: 32 NTLMSSP No schannel Yes 
sign Yes seal No
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
 rpc_auth_pipe: packet:
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 smb_io_rpc_hdr_auth auth_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0000 auth_type    : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0001 auth_level   : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0002 padding      : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0003 reserved     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0004 auth_context : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0008 sig  : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0010 seq_num: 7d 77 e5 b6 bd 44 d7 8e
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0018 packet_digest: d4 91 fc a6 d7 e1 be 62
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0020 confounder: ae 15 db 30 49 40 39 d8
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1549)
 SCHANNEL: netsec_encode seq_num=11 data_len=204
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1569)
 SCHANNEL: netsec_decode seq_num=11 data_len=204
[2005/06/08 08:42:16, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
 rpc_api_pipe: fragment first and last both set
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000018 samr_io_r_query_dom_info
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0018 ptr_0 : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     001c switch_value: 0002
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
     000020 sam_io_unk_info2 unk_inf2
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0020 unknown_0: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0024 unknown_1: 80000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0028 unknown_2: 00460046
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         002c ptr_0: 00000001
[2005/06/08 08:42:16, 7] rpc_parse/parse_prs.c:prs_debug(82)
         000030 smb_io_unihdr hdr_domain
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
             0030 uni_str_len: 0008
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
             0032 uni_max_len: 0008
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
             0034 buffer     : 00000001
[2005/06/08 08:42:16, 7] rpc_parse/parse_prs.c:prs_debug(82)
         000038 smb_io_unihdr hdr_server
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
             0038 uni_str_len: 000a
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
             003a uni_max_len: 000a
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
             003c buffer     : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0040 seq_num : 42a6a2ba
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0044 unknown_3 : 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0048 unknown_4 : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         004c unknown_5 : 00000003
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0050 unknown_6 : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0054 num_domain_usrs : 0000001f
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0058 num_domain_grps: 00000004
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         005c num_local_grps: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
         0060 unknown: 23 00 00 00 00 00 00 00 23 00 00 00
[2005/06/08 08:42:16, 7] rpc_parse/parse_prs.c:prs_debug(82)
         00006c smb_io_unistr2 uni_domain
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
             006c uni_max_len: 00610068
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
             0070 offset     : 00650064
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
             0074 uni_str_len: 00200073
[2005/06/08 08:42:16, 0] rpc_parse/parse_prs.c:prs_mem_get(537)
 prs_mem_get: reading data of size 4194534 would overrun buffer.
[2005/06/08 08:42:16, 10] nsswitch/winbindd_rpc.c:sequence_number(866)
 domain_sequence_number: failed to get sequence number (4294967295) for 
domain HITT
[2005/06/08 08:42:16, 10] rpc_client/cli_samr.c:cli_samr_close(136)
 cli_samr_close
[2005/06/08 08:42:16, 5] rpc_parse/parse_samr.c:init_samr_q_close_hnd(40)
 init_samr_q_close_hnd
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 samr_io_q_close_hnd
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
     000000 smb_io_pol_hnd pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0000 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0004 data2: 00000003
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         0008 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         000a data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
         000c data5: ba a2 a6 42 46 39 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000018 smb_io_rpc_hdr_auth hdr_auth
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0018 auth_type    : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0019 auth_level   : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     001a padding      : 04
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     001b reserved     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     001c auth_context : 00000001
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1034)
 SCHANNEL seq_num=12
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_encode(1472)
 SCHANNEL: netsec_encode seq_num=12 data_len=24
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000020 smb_io_rpc_auth_netsec_chk
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0020 sig  : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0028 seq_num: 1e 36 ee 2b 98 1c 21 08
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0030 packet_digest: df 8d 3b 9d 8b 94 77 f3
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0038 confounder: 19 ff 5c 1d 7a a3 17 c4
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
 create_rpc_request: opnum: 0x1 data_len: 0x58
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
 create_rpc_request: data_len: 58 auth_len: 20 alloc_hint: 20
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 smb_io_rpc_hdr hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0000 major     : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0001 minor     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0002 pkt_type  : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0003 flags     : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0008 frag_len  : 0058
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     000a auth_len  : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     000c call_id   : 00000015
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000010 smb_io_rpc_hdr_req hdr_req
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0010 alloc_hint: 00000020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0016 opnum     : 0001
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
 rpc_api_pipe: fnum:707f
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
 size=170
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=8
 smb_flg2=51201
 smb_tid=1
 smb_pid=4369
 smb_uid=100
 smb_mid=16
 smt_wct=16
 smb_vwv[ 0]=    0 (0x0)
 smb_vwv[ 1]=   88 (0x58)
 smb_vwv[ 2]=    0 (0x0)
 smb_vwv[ 3]= 4280 (0x10B8)
 smb_vwv[ 4]=    0 (0x0)
 smb_vwv[ 5]=    0 (0x0)
 smb_vwv[ 6]=    0 (0x0)
 smb_vwv[ 7]=    0 (0x0)
 smb_vwv[ 8]=    0 (0x0)
 smb_vwv[ 9]=    0 (0x0)
 smb_vwv[10]=   82 (0x52)
 smb_vwv[11]=   88 (0x58)
 smb_vwv[12]=   82 (0x52)
 smb_vwv[13]=    2 (0x2)
 smb_vwv[14]=   38 (0x26)
 smb_vwv[15]=28799 (0x707F)
 smb_bcc=103
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
 [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\....
 [010] 00 00 03 10 00 00 00 58  00 20 00 15 00 00 00 20  .......X . .....
 [020] 00 00 00 00 00 01 00 00  00 00 00 03 00 00 00 00  ........ ........
 [030] 00 00 00 BA A2 A6 42 46  39 00 00 00 00 00 00 44  ......BF 9......D
 [040] 05 04 00 01 00 00 00 77  00 FF FF FF FF 00 00 1E  .......w ........
 [050] 36 EE 2B 98 1C 21 08 DF  8D 3B 9D 8B 94 77 F3 19  6.+..!.. .;...w..
 [060] FF 5C 1D 7A A3 17 C4                              .\.z...
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(449)
 write_socket(18,174)
[2005/06/08 08:42:16, 6] lib/util_sock.c:write_socket(452)
 write_socket(18,174) wrote 174
[2005/06/08 08:42:16, 10] 
lib/util_sock.c:read_smb_length_return_keepalive(505)
 got smb length of 144
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
 size=144
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=136
 smb_flg2=51201
 smb_tid=1
 smb_pid=4369
 smb_uid=100
 smb_mid=16
 smt_wct=10
 smb_vwv[ 0]=    0 (0x0)
 smb_vwv[ 1]=   88 (0x58)
 smb_vwv[ 2]=    0 (0x0)
 smb_vwv[ 3]=    0 (0x0)
 smb_vwv[ 4]=   56 (0x38)
 smb_vwv[ 5]=    0 (0x0)
 smb_vwv[ 6]=   88 (0x58)
 smb_vwv[ 7]=   56 (0x38)
 smb_vwv[ 8]=    0 (0x0)
 smb_vwv[ 9]=    0 (0x0)
 smb_bcc=89
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
 [000] 00 05 00 02 03 10 00 00  00 58 00 20 00 15 00 00  ........ .X. ....
 [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
 [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
 [030] 00 44 05 00 00 01 00 00  00 77 00 FF FF FF FF 00  .D...... .w......
 [040] 00 62 3D 18 4F 54 EA 80  FA C9 FD 55 52 95 89 58  .b=.OT.. ...UR..X
 [050] D0 B4 28 4C 8B 7D 16 3A  6C                       ..(L.}.: l
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(464)
[2005/06/08 08:42:16, 5] lib/util.c:show_msg(474)
 size=144
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=136
 smb_flg2=51201
 smb_tid=1
 smb_pid=4369
 smb_uid=100
 smb_mid=16
 smt_wct=10
 smb_vwv[ 0]=    0 (0x0)
 smb_vwv[ 1]=   88 (0x58)
 smb_vwv[ 2]=    0 (0x0)
 smb_vwv[ 3]=    0 (0x0)
 smb_vwv[ 4]=   56 (0x38)
 smb_vwv[ 5]=    0 (0x0)
 smb_vwv[ 6]=   88 (0x58)
 smb_vwv[ 7]=   56 (0x38)
 smb_vwv[ 8]=    0 (0x0)
 smb_vwv[ 9]=    0 (0x0)
 smb_bcc=89
[2005/06/08 08:42:16, 10] lib/util.c:dump_data(1977)
 [000] 00 05 00 02 03 10 00 00  00 58 00 20 00 15 00 00  ........ .X. ....
 [010] 00 18 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
 [020] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
 [030] 00 44 05 00 00 01 00 00  00 77 00 FF FF FF FF 00  .D...... .w......
 [040] 00 62 3D 18 4F 54 EA 80  FA C9 FD 55 52 95 89 58  .b=.OT.. ...UR..X
 [050] D0 B4 28 4C 8B 7D 16 3A  6C                       ..(L.}.: l
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
 rpc_check_hdr: rdata->data_size = 88
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 smb_io_rpc_hdr rpc_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0000 major     : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0001 minor     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0002 pkt_type  : 02
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0003 flags     : 03
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0004 pack_type0: 10
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0005 pack_type1: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0006 pack_type2: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0007 pack_type3: 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0008 frag_len  : 0058
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     000a auth_len  : 0020
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     000c call_id   : 00000015
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0010 alloc_hint: 00000018
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
     0014 context_id: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0016 cancel_ct : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0017 reserved  : 00
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
 rpc_api_pipe: len left: 0 smbtrans read: 88
[2005/06/08 08:42:16, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(212)
 rpc_auth_pipe: pkt_type: 2 len: 88 auth_len: 32 NTLMSSP No schannel Yes 
sign Yes seal No
[2005/06/08 08:42:16, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(219)
 rpc_auth_pipe: packet:
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000000 smb_io_rpc_hdr_auth auth_hdr
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0000 auth_type    : 44
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0001 auth_level   : 05
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0002 padding      : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8(584)
     0003 reserved     : 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
     0004 auth_context : 00000001
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0008 sig  : 77 00 ff ff ff ff 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0010 seq_num: 62 3d 18 4f 54 ea 80 fa
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0018 packet_digest: c9 fd 55 52 95 89 58 d0
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
     0020 confounder: b4 28 4c 8b 7d 16 3a 6c
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1549)
 SCHANNEL: netsec_encode seq_num=13 data_len=24
[2005/06/08 08:42:16, 10] rpc_parse/parse_prs.c:netsec_decode(1569)
 SCHANNEL: netsec_decode seq_num=13 data_len=24
[2005/06/08 08:42:16, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
 rpc_api_pipe: fragment first and last both set
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_debug(82)
 000018 samr_io_r_close_hnd
[2005/06/08 08:42:16, 6] rpc_parse/parse_prs.c:prs_debug(82)
     000018 smb_io_pol_hnd pol
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         0018 data1: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint32(642)
         001c data2: 00000000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         0020 data3: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint16(613)
         0022 data4: 0000
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
         0024 data5: 00 00 00 00 00 00 00 00
[2005/06/08 08:42:16, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
     002c status: NT_STATUS_OK
[2005/06/08 08:42:16, 10] nsswitch/winbindd_cache.c:store_cache_seqnum(325)
 store_cache_seqnum: success [HITT][4294967295 @ 1118212936]
[2005/06/08 08:42:16, 10] 
nsswitch/winbindd_cache.c:refresh_sequence_number(386)
 refresh_sequence_number: HITT seq number is now -1
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:client_write(524)
 client_write: wrote 1300 bytes.
[2005/06/08 08:42:16, 10] nsswitch/winbindd.c:winbind_client_read(470)
 client_read: read 0 bytes. Need 1824 more for a full request.
[2005/06/08 08:42:16, 5] nsswitch/winbindd.c:winbind_client_read(477)
 read failed on sock 21, pid 4374: EOF

Robert Penz

2005-Jun-08 08:53 UTC

head link

[Samba] winbind problem

Matt Schwartz writes: 
> I am guessing, but it might be that the SID has changed and this might be 
> the cause of your problem.  What you might do, is try re-joining your SUSE 
> box to the smb domain.
thx for the hint. 

tried it but I got following. did also again via yast, same error message. 
it worked some time ago and the windows clients also don't have any problem.

# net join
root's password:
[2005/06/08 09:44:34, 0] utils/net_ads.c:ads_startup(186)
 ads_connect: Transport endpoint is not connected
Joined domain HITT. 

if I provide an wrong passwort I get - so he must connect to server in some 
way. 

# net join
root's password:
[2005/06/08 09:44:27, 0] utils/net_ads.c:ads_startup(186)
 ads_connect: Transport endpoint is not connected
Could not connect to server HADES
The username or password was not correct.

Possibly Parallel Threads

Search for more reasonably related threads

samba - May 2005 - Winbind Problem

[Samba] Winbind Problem

[Samba] winbind problem

[Samba] winbind problem

Possibly Parallel Threads