Bernd Schröder
2009-Feb-22 14:32 UTC
[Samba] Can't add machines to domain after Debian-Update
Guten Tag Samba-List, after updating my Linux-Server from Debian Etch to Lenny, some of my workstations (W2kSP4) couln't log into the domain. I removed the machines from the domain, changed the name, created a new machine-account, but I still can't add the machine to the domain. My /etc/smb.conf (see below the logfile) is unchanged since Debian Etch. Perhaps someone find's my fault in the following logfile (it's only the log from the machine-to-domain-adding). [2009/02/21 11:50:00, 3] smbd/process.c:process_smb(1549) Transaction 0 of length 137 (0 toread) [2009/02/21 11:50:00, 3] smbd/process.c:switch_message(1361) switch message SMBnegprot (pid 25528) conn 0x0 [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) Requested protocol [PC NETWORK PROGRAM 1.0] [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) Requested protocol [LANMAN1.0] [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) Requested protocol [Windows for Workgroups 3.1a] [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) Requested protocol [LM1.2X002] [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) Requested protocol [LANMAN2.1] [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) Requested protocol [NT LM 0.12] [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_nt1(392) using SPNEGO [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(673) Selected protocol NT LM 0.12 [2009/02/21 11:50:00, 3] smbd/process.c:process_smb(1549) Transaction 1 of length 210 (0 toread) [2009/02/21 11:50:00, 3] smbd/process.c:switch_message(1361) switch message SMBsesssetupX (pid 25528) conn 0x0 [2009/02/21 11:50:00, 2] smbd/sesssetup.c:setup_new_vc_session(1363) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173) Doing spnego session setup [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_spnego_negotiate(800) reply_spnego_negotiate: Got secblob of size 40 [2009/02/21 11:50:00, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0xe2088297 [2009/02/21 11:50:00, 3] smbd/process.c:process_smb(1549) Transaction 2 of length 338 (0 toread) [2009/02/21 11:50:00, 3] smbd/process.c:switch_message(1361) switch message SMBsesssetupX (pid 25528) conn 0x0 [2009/02/21 11:50:00, 2] smbd/sesssetup.c:setup_new_vc_session(1363) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173) Doing spnego session setup [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2009/02/21 11:50:00, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(745) Got user=[domadmin] domain=[wuerggrub] workstation=[TESTPC] len1=24 len2=24 [2009/02/21 11:50:00, 3] auth/auth.c:check_ntlm_password(220) check_ntlm_password: Checking password for unmapped user [wuerggrub]\[domadmin]@[TESTPC] with the new password interface [2009/02/21 11:50:00, 3] auth/auth.c:check_ntlm_password(223) check_ntlm_password: mapped user is: [wuerggrub]\[domadmin]@[TESTPC] [2009/02/21 11:50:01, 3] auth/auth.c:check_ntlm_password(269) check_ntlm_password: sam authentication for user [domadmin] succeeded [2009/02/21 11:50:01, 2] auth/auth.c:check_ntlm_password(308) check_ntlm_password: authentication for user [domadmin] -> [domadmin] -> [domadmin] succeeded [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) get_privileges: No privileges assigned to SID [S-1-5-21-3831126834-3789920992-3113685232-3006] [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) get_privileges: No privileges assigned to SID [S-1-5-21-3831126834-3789920992-3113685232-512] [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) get_privileges: No privileges assigned to SID [S-1-5-2] [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) get_privileges: No privileges assigned to SID [S-1-5-11] [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) get_privileges: No privileges assigned to SID [S-1-5-32-545] [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) get_privileges: No privileges assigned to SID [S-1-22-2-1003] [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) get_privileges: No privileges assigned to SID [S-1-22-2-1001] [2009/02/21 11:50:01, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337) NTLMSSP Sign/Seal - Initialising with flags: [2009/02/21 11:50:01, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0xe2088215 [2009/02/21 11:50:01, 3] smbd/password.c:register_existing_vuid(314) register_existing_vuid: User name: domadmin Real name: Don D??del Domain-Admin [2009/02/21 11:50:01, 3] smbd/password.c:register_existing_vuid(326) register_existing_vuid: UNIX uid 1003 is UNIX user domadmin, and will be vuid 100 [2009/02/21 11:50:01, 3] smbd/password.c:register_existing_vuid(350) Adding homes service for user 'domadmin' using home directory: '/home/domadmin' [2009/02/21 11:50:01, 3] param/loadparm.c:lp_add_home(5881) adding home's share [domadmin] for user 'domadmin' at '/home/domadmin' [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 3 of length 86 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtconX (pid 25528) conn 0x0 [2009/02/21 11:50:01, 3] smbd/service.c:make_connection_snum(940) Connect path is '/tmp' for service [IPC$] [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] smbd/vfs.c:vfs_init_default(96) Initialising default vfs hooks [2009/02/21 11:50:01, 3] smbd/vfs.c:vfs_init_custom(130) Initialising custom vfs hooks from [/[Default VFS]/] [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] smbd/service.c:make_connection_snum(1194) TESTPC (192.168.10.3) connect to service IPC$ initially as user domadmin (uid=1003, gid=1003) (pid 25528) [2009/02/21 11:50:01, 3] smbd/reply.c:reply_tcon_and_X(727) tconX service=IPC$ [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 4 of length 104 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBntcreateX (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (1003, 1003) - sec_ctx_stack_ndx = 0 [2009/02/21 11:50:01, 3] smbd/nttrans.c:nt_open_pipe(320) nt_open_pipe: Known pipe lsarpc opening. [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 5 of length 160 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=72 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "lsarpc" (pnum 77e1) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564) api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:check_bind_req(991) check_bind_req for \PIPE\lsarpc [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 6 of length 180 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=92 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "lsarpc" (pnum 77e1) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 70 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: LSA_OPENPOLICY2 [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 820 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 7 of length 134 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=46 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "lsarpc" (pnum 77e1) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY2 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 8 of length 134 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=46 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "lsarpc" (pnum 77e1) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 112 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 9 of length 104 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBntcreateX (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/nttrans.c:nt_open_pipe(320) nt_open_pipe: Known pipe winreg opening. [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 10 of length 160 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=72 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "winreg" (pnum 77e2) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564) api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:check_bind_req(991) check_bind_req for \PIPE\winreg [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 11 of length 124 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=36 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "winreg" (pnum 77e2) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 70 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: WINREG_OPENHKLM [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 12 of length 272 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=184 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "winreg" (pnum 77e2) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: WINREG_OPENKEY [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 13 of length 236 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=148 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "winreg" (pnum 77e2) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: WINREG_QUERYVALUE [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 20 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 14 of length 132 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=44 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "winreg" (pnum 77e2) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: WINREG_CLOSEKEY [2009/02/21 11:50:01, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(206) Closed policy [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 15 of length 132 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=44 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "winreg" (pnum 77e2) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: WINREG_CLOSEKEY [2009/02/21 11:50:01, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(206) Closed policy [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 16 of length 45 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBclose (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 17 of length 100 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBntcreateX (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/nttrans.c:nt_open_pipe(320) nt_open_pipe: Known pipe samr opening. [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 18 of length 160 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=72 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "samr" (pnum 77e3) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564) api_pipe_bind_req: \PIPE\samr -> \PIPE\samr [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:check_bind_req(991) check_bind_req for \PIPE\samr [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 19 of length 160 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=72 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "samr" (pnum 77e3) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 68 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: SAMR_CONNECT4 [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-32-545 se_access_check: also S-1-22-2-1003 se_access_check: also S-1-22-2-1001 se_access_check: also S-1-5-32-544 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 984 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 20 of length 140 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=52 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "samr" (pnum 77e3) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: SAMR_ENUMDOMAINS [2009/02/21 11:50:01, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) _samr_EnumDomains: ACCESS DENIED (granted: 0x00000002; required: 0x00000010) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 21 of length 140 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=52 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "samr" (pnum 77e3) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: SAMR_ENUMDOMAINS [2009/02/21 11:50:01, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) _samr_EnumDomains: ACCESS DENIED (granted: 0x00000002; required: 0x00000010) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 22 of length 132 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=44 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "samr" (pnum 77e3) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: SAMR_CLOSE [2009/02/21 11:50:01, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(206) Closed policy [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 23 of length 45 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBclose (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 24 of length 132 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtrans (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) trans <\PIPE\> data=44 params=0 setup=2 [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) named pipe command on <> name [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) Got API command 0x26 on pipe "lsarpc" (pnum 77e1) [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) api_rpcTNP: rpc command: LSA_CLOSE [2009/02/21 11:50:01, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(206) Closed policy [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) free_pipe_context: destroying talloc pool of size 0 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 25 of length 45 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBclose (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 26 of length 43 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBulogoffX (pid 25528) conn 0x0 [2009/02/21 11:50:01, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/21 11:50:01, 3] smbd/reply.c:reply_ulogoffX(1910) ulogoffX vuid=100 [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) Transaction 27 of length 39 (0 toread) [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) switch message SMBtdis (pid 25528) conn 0x85bf0d8 [2009/02/21 11:50:01, 3] smbd/service.c:close_cnum(1405) TESTPC (192.168.10.3) closed connection to service IPC$ [2009/02/21 11:50:01, 3] smbd/connection.c:yield_connection(31) Yielding connection to IPC$ [2009/02/21 11:50:01, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/21 11:50:01, 3] smbd/process.c:smbd_process(2035) receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting [2009/02/21 11:50:01, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/02/21 11:50:01, 3] smbd/connection.c:yield_connection(31) Yielding connection to [2009/02/21 11:50:01, 3] smbd/server.c:exit_server_common(949) Server exit (normal exit) [global] add group script = /usr/sbin/groupadd %g add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u add user script = /usr/sbin/useradd -d /dev/null -g smbpc -c 'Maschinenkonto' -s /bin/false -M %m$ add user script = /usr/sbin/useradd -m %u add user to group script = /usr/sbin/usermod -G %g %u delete group script = /usr/sbin/groupdel %g delete user script = /usr/sbin/userdel -r %u acl compatibility = win2k bind interfaces only = yes domain logons = Yes domain master = Yes encrypt passwords = true idmap gid = 10000-20000 idmap uid = 10000-20000 interfaces = 127.0.0.1 192.168.10.100/255.255.255.0 192.168.11.100/255.255.255.0 kernel oplocks = no local master = yes logon drive = H: logon home = \\%L\%U logon path = \\%L\Profiles\%m-%U # logon script = %U.cmd logon script = %m.cmd log file = /var/log/samba/%m log level = 10 map to guest = Bad User os level = 255 # passdb backend = tdbsam, smbpasswd passdb backend = tdbsam preferred master = Yes protocol = NT1 security = user server string = Server # socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=16384 SO_RCVBUF=16384 socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 time server = yes username map = /etc/samba/smbusers # veto files = /*.eml/*.nws/riched20.dll/*.{*}/ # veto files = /*.eml/*.nws/*.{*}/ wins support = yes workgroup = wuerggrub deadtime = 15 max xmit = 16644 large readwrite = no smb ports = 139 # # Drucker-Ansteuerung # disable spoolss = no printing = cups # printcap name = /etc/printcap printcap name = /var/run/cups/printcap load printers = yes # # Zeichensaetze und Names-Konventionen # case sensitive = no default case = lower display Charset = CP850 dos charset = CP850 mangled names = yes preserve case = yes short preserve case = yes # # Share Definitionen # [homes] browseable = Yes comment = Eigene Dateien (Netzwerk) create mask = 0600 directory mask = 0700 hide dot files = yes nt acl support = yes public = no writeable = yes [netlogon] admin users = domadmin @smbadmin comment = Network Logon Service path = /server/netlogon read only = no writeable = yes [Profiles] admin users = domadmin @smbadmin browseable = No comment = Network Profiles Service create mode = 0600 directory mode = 0700 nt acl support = yes path = /server/Profiles # profile acls = no read only = no # use sendfile = no writeable = yes [user] acl group control = yes admin users = domadmin @smbadmin browseable = yes comment = Das User-Volumen create mask = 0664 directory mask = 0775 inherit acls = yes inherit owner = yes inherit permissions = yes nt acl support = yes path = /server/freigaben/user public = no read list = @smbusrro writeable = yes [Laser] browseable = yes comment = LexWuerg E320 create mask = 0666 default devmode = no hosts allow = 127.0.0.1 192.168.10.0/255.255.255.0 192.168.11.0/255.255.255.0 path = /tmp printable = yes printer admin = @smbusr print command = /usr/bin/lp -d%p -oraw %s; rm %s printer name = Laser public = yes use client driver = yes writeable = yes -- Mit freundlichen Gr??en Bernd Schr?der
Can't say for certain its related but - I notice that Debian/Lenny also has trouble with shares that end in "$". Windows uses this convention to hide shares network browsing. Since Samba also uses a trailing "$" for computer accounts, perhaps there is a common cause underlying both issues. Bernd Schr?der wrote:> Guten Tag Samba-List, > > after updating my Linux-Server from Debian Etch to Lenny, some of my > workstations (W2kSP4) couln't log into the domain. I removed the > machines from the domain, changed the name, created a new > machine-account, but I still can't add the machine to the domain. > > My /etc/smb.conf (see below the logfile) is unchanged since Debian Etch. > > Perhaps someone find's my fault in the following logfile (it's only > the log from the machine-to-domain-adding). > > [2009/02/21 11:50:00, 3] smbd/process.c:process_smb(1549) > Transaction 0 of length 137 (0 toread) > [2009/02/21 11:50:00, 3] smbd/process.c:switch_message(1361) > switch message SMBnegprot (pid 25528) conn 0x0 > [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) > Requested protocol [PC NETWORK PROGRAM 1.0] > [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) > Requested protocol [LANMAN1.0] > [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) > Requested protocol [Windows for Workgroups 3.1a] > [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) > Requested protocol [LM1.2X002] > [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) > Requested protocol [LANMAN2.1] > [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(568) > Requested protocol [NT LM 0.12] > [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_nt1(392) > using SPNEGO > [2009/02/21 11:50:00, 3] smbd/negprot.c:reply_negprot(673) > Selected protocol NT LM 0.12 > [2009/02/21 11:50:00, 3] smbd/process.c:process_smb(1549) > Transaction 1 of length 210 (0 toread) > [2009/02/21 11:50:00, 3] smbd/process.c:switch_message(1361) > switch message SMBsesssetupX (pid 25528) conn 0x0 > [2009/02/21 11:50:00, 2] smbd/sesssetup.c:setup_new_vc_session(1363) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. > [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173) > Doing spnego session setup > [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208) > NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] > [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_spnego_negotiate(800) > reply_spnego_negotiate: Got secblob of size 40 > [2009/02/21 11:50:00, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) > Got NTLMSSP neg_flags=0xe2088297 > [2009/02/21 11:50:00, 3] smbd/process.c:process_smb(1549) > Transaction 2 of length 338 (0 toread) > [2009/02/21 11:50:00, 3] smbd/process.c:switch_message(1361) > switch message SMBsesssetupX (pid 25528) conn 0x0 > [2009/02/21 11:50:00, 2] smbd/sesssetup.c:setup_new_vc_session(1363) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. > [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1173) > Doing spnego session setup > [2009/02/21 11:50:00, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1208) > NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] > [2009/02/21 11:50:00, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(745) > Got user=[domadmin] domain=[wuerggrub] workstation=[TESTPC] len1=24 len2=24 > [2009/02/21 11:50:00, 3] auth/auth.c:check_ntlm_password(220) > check_ntlm_password: Checking password for unmapped user [wuerggrub]\[domadmin]@[TESTPC] with the new password interface > [2009/02/21 11:50:00, 3] auth/auth.c:check_ntlm_password(223) > check_ntlm_password: mapped user is: [wuerggrub]\[domadmin]@[TESTPC] > [2009/02/21 11:50:01, 3] auth/auth.c:check_ntlm_password(269) > check_ntlm_password: sam authentication for user [domadmin] succeeded > [2009/02/21 11:50:01, 2] auth/auth.c:check_ntlm_password(308) > check_ntlm_password: authentication for user [domadmin] -> [domadmin] -> [domadmin] succeeded > [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) > get_privileges: No privileges assigned to SID [S-1-5-21-3831126834-3789920992-3113685232-3006] > [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) > get_privileges: No privileges assigned to SID [S-1-5-21-3831126834-3789920992-3113685232-512] > [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) > get_privileges: No privileges assigned to SID [S-1-5-2] > [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) > get_privileges: No privileges assigned to SID [S-1-5-11] > [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) > get_privileges: No privileges assigned to SID [S-1-5-32-545] > [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) > get_privileges: No privileges assigned to SID [S-1-22-2-1003] > [2009/02/21 11:50:01, 3] lib/privileges.c:get_privileges(63) > get_privileges: No privileges assigned to SID [S-1-22-2-1001] > [2009/02/21 11:50:01, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337) > NTLMSSP Sign/Seal - Initialising with flags: > [2009/02/21 11:50:01, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) > Got NTLMSSP neg_flags=0xe2088215 > [2009/02/21 11:50:01, 3] smbd/password.c:register_existing_vuid(314) > register_existing_vuid: User name: domadmin Real name: Don D??del Domain-Admin > [2009/02/21 11:50:01, 3] smbd/password.c:register_existing_vuid(326) > register_existing_vuid: UNIX uid 1003 is UNIX user domadmin, and will be vuid 100 > [2009/02/21 11:50:01, 3] smbd/password.c:register_existing_vuid(350) > Adding homes service for user 'domadmin' using home directory: '/home/domadmin' > [2009/02/21 11:50:01, 3] param/loadparm.c:lp_add_home(5881) > adding home's share [domadmin] for user 'domadmin' at '/home/domadmin' > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 3 of length 86 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtconX (pid 25528) conn 0x0 > [2009/02/21 11:50:01, 3] smbd/service.c:make_connection_snum(940) > Connect path is '/tmp' for service [IPC$] > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] smbd/vfs.c:vfs_init_default(96) > Initialising default vfs hooks > [2009/02/21 11:50:01, 3] smbd/vfs.c:vfs_init_custom(130) > Initialising custom vfs hooks from [/[Default VFS]/] > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] smbd/service.c:make_connection_snum(1194) > TESTPC (192.168.10.3) connect to service IPC$ initially as user domadmin (uid=1003, gid=1003) (pid 25528) > [2009/02/21 11:50:01, 3] smbd/reply.c:reply_tcon_and_X(727) > tconX service=IPC$ > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 4 of length 104 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBntcreateX (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/sec_ctx.c:set_sec_ctx(324) > setting sec ctx (1003, 1003) - sec_ctx_stack_ndx = 0 > [2009/02/21 11:50:01, 3] smbd/nttrans.c:nt_open_pipe(320) > nt_open_pipe: Known pipe lsarpc opening. > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 5 of length 160 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=72 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "lsarpc" (pnum 77e1) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564) > api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:check_bind_req(991) > check_bind_req for \PIPE\lsarpc > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 6 of length 180 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=92 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "lsarpc" (pnum 77e1) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 70 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: LSA_OPENPOLICY2 > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 820 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 7 of length 134 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=46 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "lsarpc" (pnum 77e1) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY2 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 8 of length 134 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=46 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "lsarpc" (pnum 77e1) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 112 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 9 of length 104 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBntcreateX (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/nttrans.c:nt_open_pipe(320) > nt_open_pipe: Known pipe winreg opening. > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 10 of length 160 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=72 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "winreg" (pnum 77e2) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564) > api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:check_bind_req(991) > check_bind_req for \PIPE\winreg > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 11 of length 124 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=36 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "winreg" (pnum 77e2) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 70 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: WINREG_OPENHKLM > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 12 of length 272 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=184 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "winreg" (pnum 77e2) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: WINREG_OPENKEY > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 13 of length 236 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=148 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "winreg" (pnum 77e2) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: WINREG_QUERYVALUE > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 20 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 14 of length 132 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=44 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "winreg" (pnum 77e2) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: WINREG_CLOSEKEY > [2009/02/21 11:50:01, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(206) > Closed policy > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 15 of length 132 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=44 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "winreg" (pnum 77e2) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: WINREG_CLOSEKEY > [2009/02/21 11:50:01, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(206) > Closed policy > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 16 of length 45 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBclose (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 17 of length 100 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBntcreateX (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/nttrans.c:nt_open_pipe(320) > nt_open_pipe: Known pipe samr opening. > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 18 of length 160 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=72 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "samr" (pnum 77e3) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564) > api_pipe_bind_req: \PIPE\samr -> \PIPE\samr > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:check_bind_req(991) > check_bind_req for \PIPE\samr > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 19 of length 160 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=72 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "samr" (pnum 77e3) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 68 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: SAMR_CONNECT4 > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(249) > [2009/02/21 11:50:01, 3] lib/util_seaccess.c:se_access_check(252) > se_access_check: user sid is S-1-5-21-3831126834-3789920992-3113685232-3006 > se_access_check: also S-1-5-21-3831126834-3789920992-3113685232-512 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-11 > se_access_check: also S-1-5-32-545 > se_access_check: also S-1-22-2-1003 > se_access_check: also S-1-22-2-1001 > se_access_check: also S-1-5-32-544 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 984 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 20 of length 140 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=52 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "samr" (pnum 77e3) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: SAMR_ENUMDOMAINS > [2009/02/21 11:50:01, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) > _samr_EnumDomains: ACCESS DENIED (granted: 0x00000002; required: 0x00000010) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 21 of length 140 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=52 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "samr" (pnum 77e3) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: SAMR_ENUMDOMAINS > [2009/02/21 11:50:01, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) > _samr_EnumDomains: ACCESS DENIED (granted: 0x00000002; required: 0x00000010) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 22 of length 132 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=44 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "samr" (pnum 77e3) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: SAMR_CLOSE > [2009/02/21 11:50:01, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(206) > Closed policy > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 23 of length 45 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBclose (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 24 of length 132 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtrans (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/ipc.c:handle_trans(436) > trans <\PIPE\> data=44 params=0 setup=2 > [2009/02/21 11:50:01, 3] smbd/ipc.c:named_pipe(387) > named pipe command on <> name > [2009/02/21 11:50:01, 3] smbd/ipc.c:api_fd_reply(345) > Got API command 0x26 on pipe "lsarpc" (pnum 77e1) > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304) > api_rpcTNP: rpc command: LSA_CLOSE > [2009/02/21 11:50:01, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(206) > Closed policy > [2009/02/21 11:50:01, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519) > free_pipe_context: destroying talloc pool of size 0 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 25 of length 45 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBclose (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 26 of length 43 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBulogoffX (pid 25528) conn 0x0 > [2009/02/21 11:50:01, 3] smbd/sec_ctx.c:set_sec_ctx(324) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 > [2009/02/21 11:50:01, 3] smbd/reply.c:reply_ulogoffX(1910) > ulogoffX vuid=100 > [2009/02/21 11:50:01, 3] smbd/process.c:process_smb(1549) > Transaction 27 of length 39 (0 toread) > [2009/02/21 11:50:01, 3] smbd/process.c:switch_message(1361) > switch message SMBtdis (pid 25528) conn 0x85bf0d8 > [2009/02/21 11:50:01, 3] smbd/service.c:close_cnum(1405) > TESTPC (192.168.10.3) closed connection to service IPC$ > [2009/02/21 11:50:01, 3] smbd/connection.c:yield_connection(31) > Yielding connection to IPC$ > [2009/02/21 11:50:01, 3] smbd/sec_ctx.c:set_sec_ctx(324) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 > [2009/02/21 11:50:01, 3] smbd/process.c:smbd_process(2035) > receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting > [2009/02/21 11:50:01, 3] smbd/sec_ctx.c:set_sec_ctx(324) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 > [2009/02/21 11:50:01, 3] smbd/connection.c:yield_connection(31) > Yielding connection to > [2009/02/21 11:50:01, 3] smbd/server.c:exit_server_common(949) > Server exit (normal exit) > > > > > [global] > add group script = /usr/sbin/groupadd %g > add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u > add user script = /usr/sbin/useradd -d /dev/null -g smbpc -c 'Maschinenkonto' -s /bin/false -M %m$ > add user script = /usr/sbin/useradd -m %u > add user to group script = /usr/sbin/usermod -G %g %u > delete group script = /usr/sbin/groupdel %g > delete user script = /usr/sbin/userdel -r %u > > acl compatibility = win2k > bind interfaces only = yes > domain logons = Yes > domain master = Yes > encrypt passwords = true > idmap gid = 10000-20000 > idmap uid = 10000-20000 > interfaces = 127.0.0.1 192.168.10.100/255.255.255.0 192.168.11.100/255.255.255.0 > kernel oplocks = no > local master = yes > logon drive = H: > logon home = \\%L\%U > logon path = \\%L\Profiles\%m-%U > # logon script = %U.cmd > logon script = %m.cmd > log file = /var/log/samba/%m > log level = 10 > map to guest = Bad User > os level = 255 > # passdb backend = tdbsam, smbpasswd > passdb backend = tdbsam > preferred master = Yes > protocol = NT1 > security = user > server string = Server > # socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=16384 SO_RCVBUF=16384 > socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 > time server = yes > username map = /etc/samba/smbusers > # veto files = /*.eml/*.nws/riched20.dll/*.{*}/ > # veto files = /*.eml/*.nws/*.{*}/ > wins support = yes > workgroup = wuerggrub > deadtime = 15 > max xmit = 16644 > large readwrite = no > smb ports = 139 > > # > # Drucker-Ansteuerung > # > > disable spoolss = no > printing = cups > # printcap name = /etc/printcap > printcap name = /var/run/cups/printcap > load printers = yes > > # > # Zeichensaetze und Names-Konventionen > # > > case sensitive = no > default case = lower > display Charset = CP850 > dos charset = CP850 > mangled names = yes > preserve case = yes > short preserve case = yes > > > # > # Share Definitionen > # > > [homes] > browseable = Yes > comment = Eigene Dateien (Netzwerk) > create mask = 0600 > directory mask = 0700 > hide dot files = yes > nt acl support = yes > public = no > writeable = yes > > [netlogon] > admin users = domadmin @smbadmin > comment = Network Logon Service > path = /server/netlogon > read only = no > writeable = yes > > [Profiles] > admin users = domadmin @smbadmin > browseable = No > comment = Network Profiles Service > create mode = 0600 > directory mode = 0700 > nt acl support = yes > path = /server/Profiles > # profile acls = no > read only = no > # use sendfile = no > writeable = yes > > [user] > acl group control = yes > admin users = domadmin @smbadmin > browseable = yes > comment = Das User-Volumen > create mask = 0664 > directory mask = 0775 > inherit acls = yes > inherit owner = yes > inherit permissions = yes > nt acl support = yes > path = /server/freigaben/user > public = no > read list = @smbusrro > writeable = yes > > [Laser] > browseable = yes > comment = LexWuerg E320 > create mask = 0666 > default devmode = no > hosts allow = 127.0.0.1 192.168.10.0/255.255.255.0 192.168.11.0/255.255.255.0 > path = /tmp > printable = yes > printer admin = @smbusr > print command = /usr/bin/lp -d%p -oraw %s; rm %s > printer name = Laser > public = yes > use client driver = yes > writeable = yes > >