Hello,
we are currently in the process of migrating Windows machines to Ubuntu
10.04. For now, these machines act as samba clients in a Windows domain
(which is controlled also by a samba PDC), and are itself sharing files
via SMB/CIFS. The clients are - from time to time and with no apparent
reason - losing their domain membership. When this happens, access to
shares on the PDC still seems to work, but access to shares served by
the client do not.
sudo net rpc testjoin gives:
failed to get schannel session key from server PDC for Domain DOM. Error
was: NT_STATUS_ACCESS_DENIED
Join to Domain 'DOM' is not valid: NT_STATUS_ACCESS_DENIED
Doing 'sudo net rpc join' re-establishes connection. Since the machines
in question are not older than 4 weeks, I doubt it has anything to do
with trust account password change or the like.
Clients are using Ubuntu 10.04 with samba 3.4.7 and Linux 2.6.32; Server
is Debian 5.0 with samba 3.2.5 and Linux 2.6.26. PDC is configured to
use LDAP as passdb backend, this is also the UNIX user db for both
server and clients (using libnss-ldap/libpam-ldap).
I increased debug level to 3 and got this on client and server/PDC when
trying to access a share on the client machine:
Client side log:
[2010/07/06 08:57:59, 3] auth/auth.c:222(check_ntlm_password)
check_ntlm_password: Checking password for unmapped user
[DOM]\[ah]@[ADMIN2-DESKTOP] with the new password interface
[2010/07/06 08:57:59, 3] auth/auth.c:225(check_ntlm_password)
check_ntlm_password: mapped user is: [DOM]\[ah]@[ADMIN2-DESKTOP]
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/uid.c:428(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 2] auth/auth.c:320(check_ntlm_password)
check_ntlm_password: Authentication for user [ah] -> [ah] FAILED with
error NT_STATUS_ACCESS_DENIED
[2010/07/06 08:57:59, 3] smbd/error.c:60(error_packet_set)
error packet at smbd/sesssetup.c(122) cmd=115 (SMBsesssetupX)
NT_STATUS_ACCESS_DENIED
[2010/07/06 08:57:59, 3] smbd/process.c:1459(process_smb)
Transaction 3 of length 92 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:1273(switch_message)
switch message SMBsesssetupX (pid 3710) conn 0x0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
wct=13 flg2=0xc801
[2010/07/06 08:57:59, 3] smbd/sesssetup.c:1607(reply_sesssetup_and_X)
Domain=[] NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
[2010/07/06 08:57:59, 3] smbd/sesssetup.c:1623(reply_sesssetup_and_X)
sesssetupX:name=[]\[]@[admin2-desktop]
[2010/07/06 08:57:59, 3] smbd/sesssetup.c:151(check_guest_password)
Got anonymous request
[2010/07/06 08:57:59, 3] auth/auth.c:222(check_ntlm_password)
check_ntlm_password: Checking password for unmapped user []\[]@[]
with the new password interface
[2010/07/06 08:57:59, 3] auth/auth.c:225(check_ntlm_password)
check_ntlm_password: mapped user is: []\[]@[]
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/uid.c:428(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/uid.c:428(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/uid.c:428(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/uid.c:428(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] auth/auth.c:271(check_ntlm_password)
check_ntlm_password: guest authentication for user [] succeeded
[2010/07/06 08:57:59, 3] smbd/password.c:269(register_existing_vuid)
register_existing_vuid: User name: nobody Real name: nobody
[2010/07/06 08:57:59, 3] smbd/password.c:279(register_existing_vuid)
register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will
be vuid 101
[2010/07/06 08:57:59, 3] smbd/process.c:1459(process_smb)
Transaction 4 of length 106 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:1273(switch_message)
switch message SMBtconX (pid 3710) conn 0x0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 2] smbd/service.c:585(create_connection_server_info)
guest user (from session setup) not permitted to access this share
(PGF intern)
[2010/07/06 08:57:59, 1] smbd/service.c:676(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/07/06 08:57:59, 3] smbd/error.c:60(error_packet_set)
error packet at smbd/reply.c(689) cmd=117 (SMBtconX)
NT_STATUS_ACCESS_DENIED
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/connection.c:31(yield_connection)
Yielding connection to
[2010/07/06 08:57:59, 3] smbd/server.c:849(exit_server_common)
Server exit (failed to receive smb request)
Server side log:
[2010/07/06 08:57:59, 3] smbd/oplock.c:init_oplocks(875)
init_oplocks: initializing messages.
[2010/07/06 08:57:59, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(241)
Linux kernel oplocks enabled
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 0 of length 194 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBnegprot (pid 26212) conn 0x0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [MICROSOFT NETWORKS 1.03]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [MICROSOFT NETWORKS 3.0]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [LANMAN1.0]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [LM1.2X002]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [DOS LANMAN2.1]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [LANMAN2.1]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [Samba]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [NT LANMAN 1.0]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(568)
Requested protocol [NT LM 0.12]
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_nt1(392)
using SPNEGO
[2010/07/06 08:57:59, 3] smbd/negprot.c:reply_negprot(673)
Selected protocol NT LANMAN 1.0
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 1 of length 92 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBsesssetupX (pid 26212) conn 0x0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1409)
wct=13 flg2=0xc801
[2010/07/06 08:57:59, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1608)
Domain=[] NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
[2010/07/06 08:57:59, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1624)
sesssetupX:name=[]\[]@[__ffff_172.16.9.188]
[2010/07/06 08:57:59, 3] smbd/sesssetup.c:check_guest_password(159)
Got anonymous request
[2010/07/06 08:57:59, 3] auth/auth.c:check_ntlm_password(220)
check_ntlm_password: Checking password for unmapped user []\[]@[]
with the new password interface
[2010/07/06 08:57:59, 3] auth/auth.c:check_ntlm_password(223)
check_ntlm_password: mapped user is: []\[]@[]
[2010/07/06 08:57:59, 2] lib/smbldap.c:smbldap_open_connection(796)
smbldap_open_connection: connection opened
[2010/07/06 08:57:59, 3] lib/smbldap.c:smbldap_connect_system(1007)
ldap_connect_system: successful connection to the LDAP server
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] auth/auth.c:check_ntlm_password(269)
check_ntlm_password: guest authentication for user [] succeeded
[2010/07/06 08:57:59, 3] smbd/password.c:register_existing_vuid(314)
register_existing_vuid: User name: nobody Real name: nobody
[2010/07/06 08:57:59, 3] smbd/password.c:register_existing_vuid(326)
register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will
be vuid 100
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 2 of length 76 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBtconX (pid 26212) conn 0x0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/service.c:make_connection_snum(940)
Connect path is '/tmp' for service [IPC$]
[2010/07/06 08:57:59, 3] lib/util_seaccess.c:se_access_check(249)
[2010/07/06 08:57:59, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-984661005-3929174099-2628988521-501
se_access_check: also S-1-22-2-65534
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
[2010/07/06 08:57:59, 3] smbd/vfs.c:vfs_init_default(96)
Initialising default vfs hooks
[2010/07/06 08:57:59, 3] smbd/vfs.c:vfs_init_custom(130)
Initialising custom vfs hooks from [/[Default VFS]/]
[2010/07/06 08:57:59, 3] lib/util_seaccess.c:se_access_check(249)
[2010/07/06 08:57:59, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-984661005-3929174099-2628988521-501
se_access_check: also S-1-22-2-65534
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/service.c:make_connection_snum(1194)
__ffff_172.16.9.188 (::ffff:172.16.9.188) connect to service IPC$
initially as user nobody (uid=65534, gid=65534) (pid 26212)
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/reply.c:reply_tcon_and_X(727)
tconX service=IPC$
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 3 of length 110 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBntcreateX (pid 26212) conn 0x14cb960
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/nttrans.c:nt_open_pipe(320)
nt_open_pipe: Known pipe NETLOGON opening.
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 4 of length 158 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 26212) conn 0x14cb960
[2010/07/06 08:57:59, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\> data=72 params=0 setup=2
[2010/07/06 08:57:59, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <> name
[2010/07/06 08:57:59, 3] smbd/ipc.c:api_fd_reply(345)
Got API command 0x26 on pipe "NETLOGON" (pnum 751a)
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1564)
api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for \PIPE\NETLOGON
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 5 of length 188 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 26212) conn 0x14cb960
[2010/07/06 08:57:59, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\> data=102 params=0 setup=2
[2010/07/06 08:57:59, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <> name
[2010/07/06 08:57:59, 3] smbd/ipc.c:api_fd_reply(345)
Got API command 0x26 on pipe "NETLOGON" (pnum 751a)
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 76
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304)
api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 0
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 6 of length 238 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 26212) conn 0x14cb960
[2010/07/06 08:57:59, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\> data=152 params=0 setup=2
[2010/07/06 08:57:59, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <> name
[2010/07/06 08:57:59, 3] smbd/ipc.c:api_fd_reply(345)
Got API command 0x26 on pipe "NETLOGON" (pnum 751a)
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 0
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304)
api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 2] passdb/pdb_ldap.c:init_sam_from_ldap(571)
init_sam_from_ldap: Entry found for user: auf4-desktop$
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 2]
libsmb/credentials.c:netlogon_creds_server_check(223)
netlogon_creds_server_check: credentials check failed.
[2010/07/06 08:57:59, 0]
rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(520)
_netr_ServerAuthenticate2: netlogon_creds_server_check failed.
Rejecting auth request from client AUF4-DESKTOP machine account
AUF4-DESKTOP$
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 0
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 7 of length 188 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 26212) conn 0x14cb960
[2010/07/06 08:57:59, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\> data=102 params=0 setup=2
[2010/07/06 08:57:59, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <> name
[2010/07/06 08:57:59, 3] smbd/ipc.c:api_fd_reply(345)
Got API command 0x26 on pipe "NETLOGON" (pnum 751a)
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 0
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304)
api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 0
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 8 of length 238 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBtrans (pid 26212) conn 0x14cb960
[2010/07/06 08:57:59, 3] smbd/ipc.c:handle_trans(436)
trans <\PIPE\> data=152 params=0 setup=2
[2010/07/06 08:57:59, 3] smbd/ipc.c:named_pipe(387)
named pipe command on <> name
[2010/07/06 08:57:59, 3] smbd/ipc.c:api_fd_reply(345)
Got API command 0x26 on pipe "NETLOGON" (pnum 751a)
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 0
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe.c:api_rpcTNP(2304)
api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 2] passdb/pdb_ldap.c:init_sam_from_ldap(571)
init_sam_from_ldap: Entry found for user: auf4-desktop$
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/uid.c:push_conn_ctx(357)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 2]
libsmb/credentials.c:netlogon_creds_server_check(223)
netlogon_creds_server_check: credentials check failed.
[2010/07/06 08:57:59, 0]
rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(520)
_netr_ServerAuthenticate2: netlogon_creds_server_check failed.
Rejecting auth request from client AUF4-DESKTOP machine account
AUF4-DESKTOP$
[2010/07/06 08:57:59, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(519)
free_pipe_context: destroying talloc pool of size 0
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 9 of length 45 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBclose (pid 26212) conn 0x14cb960
[2010/07/06 08:57:59, 3] smbd/process.c:process_smb(1549)
Transaction 10 of length 39 (0 toread)
[2010/07/06 08:57:59, 3] smbd/process.c:switch_message(1361)
switch message SMBtdis (pid 26212) conn 0x14cb960
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/service.c:close_cnum(1405)
__ffff_172.16.9.188 (::ffff:172.16.9.188) closed connection to service
IPC$
[2010/07/06 08:57:59, 3] smbd/connection.c:yield_connection(31)
Yielding connection to IPC$
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/process.c:smbd_process(2035)
receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
[2010/07/06 08:57:59, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/07/06 08:57:59, 3] smbd/connection.c:yield_connection(31)
Yielding connection to
[2010/07/06 08:57:59, 3] smbd/server.c:exit_server_common(949)
Server exit (normal exit)
