Hello!
I see where this came up on the list a few months and never really ws
resolved. Someone resolved it by linking libnss_winbind ... But that's not
my problem...
I'm getting " Failed to join domain: failed to set machine spn:
Operations
error" when I do a net ads join. I've used this user account (me) to
join
many Samba 3.5.6 servers to the domain.
Config file and log are below. Anyone with any ideas??? I'm in a
suer-huge hurry to get this working!
Thanks,
-b
[global]
workgroup = MVP
netbios name = MVPPVT125
server string = MVPPVT125
passwoerver = *
realm = 8950HIX.COM
realm = MACHINEVISIONPRODUCTS.COM
security = ads
idmap uid = 10000000-33554431
idmap gid = 10000000-33554431
template shell = /bin/bash
template homedir = /export/home/%D/%U
winbind use default domain = yes
winbind offline logon = no
idmap backend = rid
encrypt passwords = yes
log level = 3
log file = /var/log/samba/smbd.log
[homes]
comment = Home Directories
browseable = no
writable = yes
[EXPORT]
comment = Filevault
path = /filevault
browseable = yes
writable = yes
[2011/01/21 09:50:40, 5] lib/debug.c:405(debug_dump_status)
INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
sb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
quota: False/0
acls: False/0
locking False/0
msdfs: False/0
dmapi: False/0
registry: False/0
[2011/01/21 09:50:40, 3] param/loadparm.c:9158(lp_load_ex)
lp_load_ex: refreshing parameters
[2011/01/21 09:50:40, 3] param/loadparm.c:4929(init_globals)
Iitialising global parameters
[2011/01/21 09:50:40, 2] param/loadparm.c:4788(max_open_files)
rlimit_max: rlimit_max (1024) below minimum Windowslimit (16384)
[2011/01/21 09:50:40.299645, 3] ../lib/util/params.c:550(pm_process)
params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf"
[2011/01/21 09:50:40.299672, 3] param/loadparm.c:7842(do_section)
Processing setion "[global]"
doing parameter workgroup = MVP
doing parameter netbios name = MVPPVT125
[2011/01 09:50:40.299707, 4] param/loadparm.c:7204(handle_netbios_name)
handle_netbios_name: set global_myname to: MVPPVT125
doing parameter server string = MVPPVT125
doing parameter password server = *
doing parameter realm = 8950HIX.COM
doing parameter realm = MACHINEVISIONPRODUCTS.COM
doing parameter security = ads
doing parameter idmap uid = 10000000-33554431
doing parameter idmap gid = 10000000-33554431
doing parameter template shell = /bin/bash
doing parameter template homedir = /export/home/%D/%U
doing parameter winbind use efault domain = yes
doing parameter winbind offline logon = no
doing parameter idmap backend = rid
doing parameter encrypt passwords = yes
doing parameterlog level = 3
doing parameter log file = /var/log/samba/smbd.log
[2011/01/21 09:50:40.299956, 4] param/loadparm.c:9193(lp_load_ex)
pm_procss() returned Yes
[2011/01/21 09:50:40.299977, 7] param/loadparm.c:9399(lp_servicenumber)
lp_servicenumber: couldn't find homes
[2011/01/21 09:50:40.29999, 10] param/loadparm.c:8403(set_server_role)
set_server_role: role = ROLE_DOMAIN_MEMBER
[2011/01/21 09:50:40.300011, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UCS-2LE
[2011/01/21 09:50:40.300027, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UCS-2LE
[2011/01/21 09:50:40.300040, 5] lb/iconv.c:104(smb_register_charset)
Attempting to register new charset UTF-16LE
[2011/01/21 09:50:40.300056, 5] lib/iconvc:112(smb_register_charset)
Registered charset UTF-16LE
[2011/01/21 09:50:40.300069, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UCS-2BE
[2011/01/21 09:50:40.300082, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UCS-2BE
[2011/01/21 09:50:40.300095, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UTF-16BE
[2011/01/21 09:50:40.300108, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UTF-16BE
[2011/01/21 09:50:40.300121, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UTF8
[2011/01/21 09:50:40.300133, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UTF8
[2011/01/21 09:50:40.300146, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UTF-8
[2011/01/21 09:50:40.300159, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UTF-8
[2011/01/21 09:50:40.300171, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset ASCII
[2011/01/21 09:50:40.300185, 5] lib/iconv.c:112(smb_register_charset)
Registered charset ASCII
[2011/01/21 09:0:40.300198, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset 646
[2011/01/21 09:50:40.300212, 5] lib/icc:112(smb_register_charset)
Registered charset 646
[2011/01/21 09:50:40.300225, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset ISO-8859-1
[2011/01/21 09:50:40.300238, 5] lib/iconv.c:112(smb_register_charset)
Registered charset ISO-8859-1
[2011/01/21 09:50:40.300263, 5] lib/iconv.c:104(smb_register_charset)
Attempting to register new charset UCS2-HEX
[2011/01/21 09:50:40.300276, 5] lib/iconv.c:112(smb_register_charset)
Registered charset UCS2-HEX
[2011/01/21 09:50:40.300305, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300488, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300530, 5] lib/charcnv.c:98(charset_name) Substituting
charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300552, 5] ib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300575, 5] lib/charcnv.c:98(charset_name)
Substituting charset'UTF-8' for LOCALE
[2011/01/21 09:50:40.300594, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300614, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE[2011/01/21 09:50:40.300639,
5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300660, 5] lib/chacnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300679, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300722, 5] lib/charcnv.c:98(charset_name)
Substitting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300770, 5] lib/charcnv.c:98(charset_name)
Subtuting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300805, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300839, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:40.300891, 5] lib/util.c:276(init_names)
Netbios name list:-
my_netbios_names[0]="MVPPVT125"
[2011/01/21 09:50:40.301014, 2] lib/interface.c:340(add_interface)
added interface eth0 ip=fe80::21e:c9ff:fe28:a9a9%eth0
bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff::[2011/01/21
09:50:40.301078, 2] lib/interface.c:340(add_interface)
added interface eth0 ip=10.0.0.125 bcast=10.0.0.255 netmask=255.255.255.0
[2011/01/21 09:50:1.270648, 1] libnet/libnet_join.c:1947(libnet_Join)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
in: struct libnet_JoiCtx
dc_name : NULL
machine_name : 'MVPPVT125'
domain_name : *
domain_name : 'MACHINEVISIONPRODUCTS.COM'
account_ou : NULL
admin_account : 'brian'
admin_password : *
machine_password : NULL
join_flags : 0x00000023 (35)
0: WKSSVC_JOIN_FLAGS_INORE_UNSUPPORTED_FLAGS
0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
0: WKSSVC_JOIN_FLAG_JOIN_DC_ACCOUNT
0: WKSSVC_JOIN_FLAGS_DEFER_SPN
0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
os_vrsion : NULL
os_name : NULL
create_upn : 0x00 (0)
upn : NULL
modify_config : 0x00 (0)
ads : NULL
debug : 0x01 (1)
use_kerberos : 0x00 (0)
secure_channel_type : SEC_CHAN_WKSTA (2)
[2011/01/21 09:50:41.270859, 10] libsmbc:1132(dsgetdcname)
dsgetdcname: domCHINEVISIONPRODUCTS.COM, domain_guid:_name: (null), flags:
0x40001011
[20:41.270901, 10]
libsmb/dsgetdcname.info_flags)
debug_dsdcinfo_fla DS_FORCE_REDISCOVERY DS_DIRECTORY_RED
DS_WRITABLE_REQUIRED DS_RETURN_D01/21 09:50:41.270942, 5] lib/gencacche_init)
Opening cache file at /vencache.tdb
[2011/01/21 09:50:41.2710encache.c:108(gencache_init)
Opening cache filat /var/lib/samba/gencache_notrans.tdb
[2011/01 09:50:41.271065, 10] lib/gencache.c:345(gencache_get_data_blob)
Returning valid cache entr
AD_SITENAME/DOMAIN/MACHINEVISIONPRODUCTS.COMue = MVP, timeout = Mon Jan
18 19:14:07 2038
[201/01/21 09:50:41.271101, 5] libads/dns.ame_fetch)
sitename_fetch: Returning sitenamr MACHINEVISIONPRODUCTS.COM: "MVP"
[2011/01/21 09:50:41.271117, 10]
libsmb/dsgetdcname.c:1045(dsgetdcname_rediscover)
dsgetdcname_rediscover
[2011/01/21 09:50:41.271760, 4] libads/dns.c:432(ads_dns_lookup_srv)
ads_dns_lookup_srv: 5 records returned in the answer section.
[2011/01/21 09:50:41.271790, 10] libads/dns.c:213(ads_dns_parse_rr_srv)
ads_dns_parse_rr_srv: Parsed mvpns119.machinevisionproducts.com [0, 100,
389]
[2011/01/21 09:50:41.271810, 10] libads/dns.c:213(ads_dns_parse_rr_srv)
ads_dns_parse_rr_srv: Parsed spirit.machinevisionproducts.com [0, 100,
389]
[2011/01/21 09:50:41.271832, 10] libads/dns.c:213(ads_dns_parse_rr_srv)
ads_dns_parse_rr_srv: Parsed mvpns112.machinevisionproducts.com [0, 100,
389]
[2011/01/21 09:50:41.271848, 10] libads/dns.c:2ds_dns_parse_rr_srv)
ads_dns_parse_rr_srv: Parsed mvpns122.machinevisionproducts.com [0, 100,
389]
[2011/01/21 09:50:41.271866, 10] libads/dns.c:213(ads_dns_parse_rr_srv)
ads_dns_parse_rr_srv: Parsed chicken [0, 100, 389]
[2011/01/21 09:50:41.274412, 3]
../lib/util/util_net.c:68(interpret_string_addr_internal)
interpret_string_addr_internal: getaddrinfo failed for name chicken [Name
or service not known]
[2011/01/21 09:50:41.274475, 10] libsmb/dsgetdcname.c:859(process_dc_dns)
LDAP ping to mvpns119.machineviionproducts.com
[2011/01/21 09:50:41.276592, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = DSGETDCNAME/DOMAIN/MVP and timeout = Fri Jan
21 10:05:41 2011
(900 seconds ahead)
[2011/01/21 09:50:41.276647, 10] libds/dns.c:775(sitename_store)
sitename_store: realm = [MVP], sitename = [MP], expire = [2147483647]
[2011/01/21 09:50:41.276666, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = AD_SITENAME/DOMAIN/MVP ad timeout = Mon Jan
18 19:14:07 2038
(851851406 seconds ahead)
[2011/01/21 09:50:41.276706, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = DSGETDCNAME/DOMAIN/MACHINEVISIONPRODUCTS.COM
and timeout= Fri Jan 21 10:05:41 2011
(900 seconds ahead)
[2011/01/21 09:50:41.276739, 10] libads/dns.c:775(sitename_store)
sitename_store: realm = [macinevisionproducts.com], sitename = [MVP],
expire = [2147483647]
[2011/01/21 09:50:41.276760, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = AD_SITENAME/DOMAIN/MACHINEVISIONPRODUCTS.COM
and timeout = Mon Jan 18 1914:07 2038
(851851406 seconds ahead)
[2011/01/21 09:50:41.276941, 3]
libsmb/cliconnect.c:2209(cliart_connection)
Connecting to host=mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.276972, 10] lib/gencache.c:345(gencache_get_data_blob)
Returning valid cache entry: key AD_SITENAME/DOMAIN/MACHINEVISIONPRODUCTS.COM,
value = MVP, timeout = Mon Jan
18 19:14:07 2038
[2011/01/21 09:50:41.276992, 5] libads/dns.c:810(sitename_fetch)
sitename_fetch: Returning sitename for MACHINEVISIONPRODUCTS.COM:
"MVP"
[2011/01/21 09:50:41.277009, 10]
libsmb/namequery.c:1400(internal_resolve_name)
internal_resolve_name: looking up mvpns119.machinevsionproducts.com#20
(sitename MVP)
[2011/01/21 09:50:41.277033, 10] lib/gencache.c:345(gencache_get_data_blob)
Returning valid cache entry: key NBT/MVPNS119.MCHINEVISIONPRODUCTS.COM#20,
value = 10.0.0.119:0, timeout Fri Jan 21 09:55:07 2011
[2011/01/21 09:50:41.277066, 5] libsmb/namecache.c:192(naecache_fetch)
name mvpns119.machinevisionproducts.com#20 found.
[2011/01/21 09:50:41.277119, 10] lib/events.c:123(run_events)
Running timed event "teventreq_timedout" 0x2b112d615840
[2011/01/21 09:50:41.277149, 3] lib/util_sock.c:974(open_socket_out_send)
Connecting to 10.0.0.119 at port 445
[2011/01/21 09:50:41.277377, 5] lib/util_sock.c:304(print_socket_options)
Socket options:
SO_KEEPALIVE = 0
SO_REUSEADDR = 0
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT =9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_SNDBUF = 16384
SO_RCVBUF = 87380
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
[2011/01/21 09:50:41.277504, 5] lib/charcnv.c:98(charset_name)
Substitutng charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277529, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277552, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277572, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE[2011/01/21 09:50:41.277592,
5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277611, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277631, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277651, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277670, 5] lib/charcnv.c:98(charset_name)
Substitutingrset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277690, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277712, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277735, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277759, 5] lib/charcnv.c:98(charset_name)
Substituting charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.277781, 5] lib/charcnv.c:98(charset_name)
Substituing charset 'UTF-8' for LOCALE
[2011/01/21 09:50:41.278882, 3]
libsmb/cliconnect.c:991(cli_session_setup_spnego)
Doing spnego session setup (blob length=123)
[2011/01/21 09:50:41.278930, 3]
libsmb/cliconnect.c:1020(cli_session_setup_spnego)
got OID=1.2.840.48018.1.2.2
got OID=1.2.840.113554.1.2.2
got OID=1.2.840113554.1.2.2.3
got OID=1.3.6.1.4.1.311.2.2.10
[2011/01/21 09:50:41.278957, 3]
libsmb/cliconnect.c:1030(cli_session_setup_spnego)
got principal=mvpns119$@ACHINEVISIONPRODUCTS.COM
[2011/01/21 09:50:41.279051, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
&negotiate: struct NEGOTIATE_MESSAGE
Signature : 'NTLMSSP'
MessageType : NtLNegotiate (1)
NegotiateFlags : 0x60088215 (1611170325)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: MSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
0: NTLMSSP_NEGOTIATE_TARGET_INFO
0: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE_56
DomainNameLen : 0x003 (3)
DomainNameMaxLen : 0x0003 (3)
DomainName : *
DomainName : 'MVP'
WorksationLen : 0x0009 (9)
WorkstationMaxLen : 0x0009 (9)
Workstation : *
Workstation : 'MVPPVT125'
[2011/01/21 09:50:41.279299, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.279318, 10] ../lib/util/util.c:278(_dump_data)
[0000] 42 53 52 53 50 59 4C 20 BSRSPYL
[2011/01/21 09:50:41.279356, 6] libsmb/clientgen.c:323(write_socket)
write_socket(7,164)
[2011/01/21 09:50:41.279375, 6] libsmb/clientgen.c:326(write_socket)
write_socket(7,164) wrote 164
[2011/01/21 09:50:41.279708, 10]
lib/util_sock.c:726(read_smb_length_return_keepalive)
got smb length of 494
[2011/01/21 09:50:41.279731, 5] lib/util.c:617(show_msg)
[2011/01/21 09:50:41.279742, 5] lib/util.c:627(show_sg)
size=494
smb_com=0x73
smb_rcls=22
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=51205
smb_tid=0
smb_pid=7156
smb_uid=12291
smb_mid=2
smt_wct=4
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 494 (0x1EE)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 311 (0x137)
smb_bcc=451
[2011/01/21 09:50:41.279831, 10] ../lib/util/til.c:278(_dump_data)
[0000] A1 82 01 33 30 82 01 2F A0 03 0A 01 01 A1 0C 06 ...30../
........
[0010] 0A 2B 06 01 04 01 82 37 02 02 0A A2 82 01 18 04 .+.....7
........
[0020] 82 01 14 4E 54 4C 4D 53 53 50 00 02 00 00 00 06 ...NTLMS
SP......
[0030] 00 06 00 38 00 00 00 15 82 89 62 2E 22 FC 47 70 ...8....
..b.".Gp
[0040] 75 13 7B 00 00 00 00 00 00 00 00 D6 00 D6 00 3E u.{.....
.......>
[0050] 00 00 00 05 02 CE 0E 00 00 00 0F 4D 00 56 00 50 ........
...M.V.P
[0060] 00 02 00 06 00 4D 00 56 00 50 00 01 00 10 00 4D .....M.V
.P.....M
[0070] 00 56 00 50 00 4E 00 53 00 31 00 31 00 39 00 04 .V.P.N.S
.1.1.9..
[0080] 00 32 00 6D 00 61 00 63 00 68 00 69 00 6E 00 65 .2.m.a.c
.h.i.n.e
[0090] 00 76 00 69 00 73 00 69 00 6F 00 6E 00 70 00 72 .v.i.s.i
.o.n.p.r
[00A0] 00 6F 00 64 00 75 00 63 00 74 00 73 00 2E 00 63 .u.c
.t.s...c
[00B0] 00 6F 00 6D 00 03 00 44 00 6D 00 76 00 70 00 6E .o.m...D
.m.v.p.n
[00C0] 00 73 00 31 00 31 00 39 00 2E 00 6D 00 61 00 63 .s.1.1.9
...m.a.c
[00D0] 00 68 00 69 00 6E 00 65 00 76 00 69 00 73 00 69 .h.i.n.e
.v.i.s.i
[00E0] 00 6F 00 6E 00 70 00 72 00 6F 00 64 00 75 00 63 .o.n.p.r
.o.d.u.c
[00F0] 00 74 00 73 00 2E 00 63 00 6F 00 6D 00 05 00 32 .t.s...c
.o.m...2
[0100] 00 6D 00 61 00 63 00 68 00 69 00 6E 00 65 00 76 .m.a.c.h
.i.n.e.v
[0110] 00 69 00 73 00 69 00 6F 00 6E 00 70 00 72 00 6F .i.s.i.o
.n.p.r.o
[0120] 00 64 00 75 00 63 00 74 00 73 00 2E 00 63 00 6F .d.u.c.t
.s...c.o
[0130] 00 6D 00 00 00 00 00 57 00 69 00 6E 00 64 00 6F .m.....W
.i.n.d.o
[0140] 00 77 00 73 00 20 00 53 00 65 0072 00 76 00 65 .w.s. .S
.e.r.v.e
[0150] 00 72 00 20 00 32 00 30 00 3000 33 00 20 00 52 .r. .2.0 .0.3.
.R
[0160] 00 32 00 20 00 33 00 37 00 39 00 30 00 20 00 53 .2. .3.7 .9.0.
.S
[0170] 00 65 00 72 00 76 00 69 00 63 0 65 00 20 00 50 .e.r.v.i .c.e.
.P
[0180] 00 61 00 63 00 6B 00 20 00 32 00 00 00 57 00 69 .a.c.k.
.2...W.i
[0190] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 53 00 65 .n.d.o.w .s.
.S.e
[01A0] 00 72 00 76 00 65 00 72 0 20 00 32 00 30 00 30 .r.v.e.r .
.2.0.0
[01B0] 00 33 00 20 00 52 00 32 00 20 00 35 00 2E 00 32 .3. .R.2 .
.5...2
[01C0] 00 00 00 ...
[2011/01/21 09:50:41.280239, 5] lib/util.c:617(show_msg)
[2011/01/21 09:50:41.280248, 5] lib/util.c:627(show_msg)
size=494
smb_com=0x73
smb_rcls=22
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg=51205
smb_tid=0
smb_pid=7156
smb_uid=12291
smb_mid=2
smt_wct=4
smb_vwv[ 0]= 255 (0xFF)
mb_vwv[ 1]= 494 (0x1EE)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 311 (0x137)
smb_bcc=451
[2011/01/21 09:50:41.280331, 10] ../lib/util/util.c:278(_dump_data)
[0000] A1 82 01 33 30 82 01 2F A0 03 0A 01 01 A1 0C 06 ...30../
........
[0010] 0A 2B 06 01 04 01 82 37 02 02 0A A2 82 01 18 04 .+.....7
........
[0020] 82 01 14 4E 54 4C 4D 53 53 50 00 02 00 00 00 06 ...NTLMS
SP......
[0030] 00 06 00 38 00 00 00 15 82 89 62 2E 22 FC 47 70 ...8....
..b.".Gp
[0040] 75 13 7B 00 00 00 00 00 00 00 00 D6 00 D6 00 3E u.{.....
......>
[0050] 00 00 00 05 02 CE 0E 00 00 00 0F 4D 00 56 00 50 ........
...M.V.P
[0060] 00 02 00 06 00 4D 00 56 00 50 00 01 00 10 00 4D .....M.V
.P.....M
[0070] 00 56 00 50 00 4E 00 53 00 31 00 31 00 39 00 04 .V.P.N.S
.1.1.9..
[0080] 00 32 00 6D 00 61 00 63 00 68 00 69 00 6E 00 65 .2.m..c
.h.i.n.e
[0090] 00 76 00 69 00 73 00 69 00 6F 00 6E 00 70 00 72 .v.i.s.i
.o.n.p.r
[00A0] 00 6F 00 64 00 75 00 63 00 74 00 73 00 2E 00 63 .o.d..c
.t.s...c
[00B0] 00 6F 00 6D 00 03 00 44 00 6D 00 76 00 70 00 6E .o.m...D
.m.v.p.n
[00C0] 00 73 00 31 00 31 00 39 00 2E 00 6D 00 61 00 63 .s.1.1.9
...m.a.c
[00D0] 00 68 00 69 00 6E 00 65 00 76 00 69 00 73 00 69 .h.i.n.e
.v.i.s.i
[00E0] 00 6F 00 6E 00 70 00 72 00 6F 00 64 00 75 00 63 .o.n.p.r
.o.d.u.c
[00F0] 0 74 00 73 00 2E 00 63 00 6F 00 6D 00 05 00 32 .t.s...c
.o.m...2
[0100] 00 6D 00 61 00 63 00 68 00 69 00 6E 00 65 0076 .m.a.c.h
.i.n.e.v
[0110] 00 69 00 73 00 69 00 6F 00 6E 00 70 00 72 00 6F .i.s.i.o
.n.p.r.o
[0120] 00 64 00 75 00 63 00 74 00 73 00 2E 00 63 00 6F .d.u.c.t
.s...c.o
[0130] 00 6D 00 00 00 00 00 57 00 69 00 6E 00 64 00 6F .m.....W
.i.n.d.o
[0140] 00 77 00 73 00 20 00 53 00 65 00 72 00 76 00 65 .w.s. .S
.e.r.v.e
[015] 00 72 00 20 00 32 00 30 00 30 00 33 00 20 00 52 .r. .2.0 .0.3.
.R
[0160] 00 32 00 20 00 33 00 37 00 39 00 30 00 20 00 53 .2. .3.7 .9.0.
.S
[0170] 00 65 00 72 00 76 00 69 00 63 00 65 00 20 00 50 .e.r.v.i .c.e.
.P
[0180] 00 61 00 63 00 6B 00 20 00 32 00 00 00 57 00 69 .a.c.k.
.2...W.i
[0190] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 53 00 65 .n.d.o.w .s.
.00 72 00 76 00 65 00 72 00 20 00 32 00 30 00.r .
.2.0.0
[01B0] 00 33 00 20 00 52 00 32 00 2E 00 32 .3. .R.2 .
.5...2
[01C0] 00 ...
[2011.280800, 1] ../librpc/ndr/ndr.c:214(ndr &challenge: struct
CHALLENGE_MESSAGE
e : 'NTLMSSP'
Messa : NtLmChallenge (0x2)
TargetN : 0x0006 (6)
TargetNameMaxLen006 (6)
TargetName : TargetName : 'MVP'
NegotiateFgs : 0x62898215 (1653178901)
NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARG 1: NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTITE_DATAGRAM
0: NTLMSSP_NEGOTIA 0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
1: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SHARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQEST_NON_NT_SESSION_KEY
1: NTLMSSP_NEGOTIATE_TARGET_INFO
1: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSP_NEGOTIATE56
ServerChallenge : 2e22fc477075137b
Reserved : 0000000000000000
TargetInfoLen : 0x00d6 (214)
TargetNameInfoMaxLen : 0x00d6 (214)
TargetInfo : *
TargetInfo: struct AV_PAIR_LIST
count : 0x00000006 (6)
pair: ARRAY(6)
pair: struct AV_PAIR
AvId : MsvAvNbDomainName (0x2)
AvLen : 0x0006 (6)
Value : union
ntlmssp_AvValue(case 0x2)
AvNbDomainName : 'MVP'
pair: struct AV_PAIR
AvId : MsvAvNbComputerName
(0x1)
AvLen : 0x0010 (16)
Value : un
ntlmssp_AvValue(case 0x1)
AvNbComputerName : 'MVPNS119'
pair: struct AV_PAIR
AvId : MsvAvDnsDomainName
(0x4)
AvLen : 0x0032 (50)
Value : union
ntlmssp_AvValue(case 0x4)
AvDnsDomainName :
'machinevisionproducts.com'
pair: struct AV_PAIR
AvId : MsvAvDnsCompuerName
(0x3)
AvLen : 0x0044 (68)
Value : union
ntlmssp_AvValue(case 0x3
AvDnsComputerName :
'mvpns119.machinevisionproducts.com'
pair: struct AV_PAIR
AvId : MsvAvDnsTreeName (0x5)
AvLen : 0x0032 (50)
Value : union
ntlmssp_AvValue(case 0x5)
AvDnsTreeName :
'machinevisionproducts.com'
pair: struct AV_PAIR
AvId : MsvAvEOL (0x0)
AvLen : 0x0000 (0)
Value : union
ntlmssp_AvValue(case 0x0)
Version: struct VERSION
ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5
(0x5)
ProductMinorVersion : NTLMSSP_WINDOWS_MINO_VERSION_2
(0x2)
ProductBuild : 0x0ece (3790)
Reserved : 000000
NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF)
[2011/01/21 09:50:41.281283, 3]
libsmb/ntlmssp.c:1101(ntlmssp_client_challenge)
Got challenge flags:
[2011/01/21 09:50:41.281297, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
Got NTLMSSP neg_flags0x62898215
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_NEGOTIATE_TARGET_INFO
NTLMSSP_NEGOTIATE_VERSION
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
[2011/01/21 09:50:41.281363, 3]
libsmb/ntlmssp.c:1123(ntlmssp_client_challenge)
NTLMSSP: Set final flags:
[2011/01/21 09:50:41.281376, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x60088215
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
[2011/01/21 09:50:41.281429, 5]
libsmb/ntlmssp.c:1196(ntlmssp_client_challenge)
NTLMSSP challenge set by NTLM2
[2011/01/21 09:50:41.281443, 5]
libsmb/ntlmssp.c:1197(ntlmssp_client_challenge)
challenge is:
[2011/01/21 09:50:41.281465, 5] ../lib/util/util.c:278(_dump_data)
[0000] AB 80 24 ED 76 F6 D3 DD ..$.v...
[2011/01/21 09:50:41.281560, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
&authenticate: struct AUTHENTICATE_MESSAGE
Signatu : 'NTLMSSP'
MessageType : NtLmAuthenticate (3)
LmChallengeResponseLen : 0x0018 (24)
LmChallengeResponseMaxLen: 0x0018 (24)
LmChallengeResponse : *
LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24)
v1: struct LM_RESPONSE
Response :
c9d5ed38c43e920200000000000000000000000000000000
NtChallengeResponseLen : 0x0018 (24)
NtChallengeResponseMaxLen: 0x0018 (4)
NtChallengeResponse : *
NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case
24)
v1: struct NTLM_RESPONSE
Response :
9aef94e899e80eb4bd12c77bba305d325ed9ef61ed93474
DomainNameLen : 0x0000 (0)
DomainNameMaLen : 0x0000 (0)
DomainName : *
DomainName : ''
UserNameLen : 0x000a (10)
UserNameMaxLen : 0x000a (10)
UserName : *
UserName : 'brian'
WorkstationLen : 0x0012 (18)
WorkstationMaxLen : 0x0012 (1)
Workstation : *
Workstation : 'MVPPVT125'
EncryptedRandomSessionKeyLen: 0x0010 (16)
EncryptedRandomSessionKeyMaxLen: 0x0010 (16)
EncryptedRandomSessionKey: *
EncryptedRandomSessionKey: DATA_BLOB length=16
[2011/01/21 09:50:41.281747, 10] ../lib/util/util.c:278(_dump_data)
[0000] B1 05 51 6F C D8 8E 55 F9 B6 65 F7 CF D8 0A 9C ..Qo...U
..e.....
NegotiateFlags : 0x600882(1611170325)
1: NTLMSSP_NEGOTIATE_UNICODE
0: NTLMSSP_NEGOTIATE_OEM
1: NTLMSSP_REQUEST_TARGET
1: NTLMSSP_NEGOTIATE_SIGN
0: NTLMSSP_NEGOTIATE_SEAL
0: NTLMSSP_NEGOTIATE_DATAGRAM
0: NTLMSSP_NEGOTIATE_LM_KEY
0: NTLMSSP_NEGOTIATE_NETWARE
1: NTLMSSP_NEGOTIATE_NTLM
0: NTLMSSP_NEGOTIATE_NT_ONLY
0: NTLMSSP_ANONYMOUS
0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0:
NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
1: NTLMSSP_NEGOTIATE_ALWYS_SIGN
0: NTLMSSP_TARGET_TYPE_DOMAIN
0: NTLMSSP_TARGET_TYPE_SERVER
0: NTLMSSP_TARGET_TYPE_SARE
1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
0: NTLMSSP_NEGOTIATE_IDENTIFY
0: NTLMSSP_REQUEST_NON_NTSESSION_KEY
0: NTLMSSP_NEGOTIATE_TARGET_INFO
0: NTLMSSP_NEGOTIATE_VERSION
1: NTLMSSP_NEGOTIATE_128
1: NTLMSSP_NEGOTIATE_KEY_EXCH
0: NTLMSSPNEGOTIATE_56
[2011/01/21 09:50:41.281918, 3]
libsmb/ntlmssp_sign.c:343(ntlmssp_sign_init)
NTLMSSP Sign/Seal - Initialising with flags:
[2011/01/21 09:50:41.281932, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x60088215
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_ALWAYS_SIGN
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
[2011/01/21 09:50:41.281992, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.282006, 10] ../lib/util/util.c:278(_dump_data)
[0000] 42 53 52 53 50 59 4C 20 BSRSPYL
[2011/01/21 09:50:41.282027, 6] libsmb/clientgen.c:323(write_socket)
write_socket(7,254)
[2011/01/21 09:50:41.282055, 6] libsmb/clientgen.c:326(write_socket)
write_socket(7,254) wrote 254
[2011/01/21 09:50:41.283166, 10]
lib/util_sock.c:726(read_smb_length_return_keepalive)
got smb length of 192
[2011/01/21 09:50:41.283188, 5] lib/util.c:617(show_msg)
[2011/01/21 09:50:41.283199, 5] lib/util.c:627(show_msg)
size=192
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51205
smb_tid=0
smb_pid=7156
smb_uid=12291
smb_mid=3
smt_wct=4
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 192 (0xC0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 9 (0x9)
smb_bcc=149
[2011/01/21 09:50:41.283281, 10] ../lib/util/util.c:278(_dump_data)
[0000] A1 07 30 05 A0 03 0A 01 00 57 00 69 00 6E 00 64 ..0.....
.W.i.n.d
[0010] 00 6F 00 77 00 73 00 20 00 53 00 65 00 72 00 76 .o.w.s.
.S.e.r.v
[0020] 00 65 00 72 00 20 00 32 00 30 00 30 00 33 00 20 .e.r. .2
.0.0.3.
[0030] 00 52 00 32 00 20 00 33 00 37 00 39 00 30 00 20 .R.2. .3
.7.9.0.
[0040] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v
.i.c.e.
[0050] 00 50 00 61 00 63 00 6B 00 20 00 32 00 00 00 57 .P.a.c.k .
.2...W
[0060] 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 53 .i.n.d.o .w.s.
.S
[0070] 00 65 00 72 00 76 00 65 00 72 00 20 00 32 00 30 .e.r.v.e .r.
.2.0
[0080] 00 30 00 33 00 20 00 52 00 32 00 20 00 35 00 2E .0.3. .R .2.
.5..
[0090] 00 32 00 00 00 .2...
[2011/01/21 09:50:41.283426, 5] lib/util.c:617(show_msg)
[2011/01/21 09:50:41.283435, 5] lib/util.c:627(show_msg)
size=192
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51205
smb_tid=0
smb_pid=7156
smb_uid=12291
smb_mid=3
smt_wct=4
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 192 (0xC0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 9 (0x9)
smb_bcc=149
[2011/01/21 09:50:41.283504, 10] ../lib/util/util.c:278(_dump_data)
[0000] A1 07 30 05 A0 03 0A 01 00 57 00 69 00 6E 00 64 ..0.....
.W.i.n.d
[0010] 00 6F 00 77 00 73 00 20 00 53 00 65 00 72 00 76 .o.w.s.
.S.e.r.v
[0020] 00 65 00 72 00 20 00 32 00 30 00 30 00 33 00 20 .e.r. .2
.0.0.3.
[0030] 00 52 00 32 00 20 00 33 00 37 00 39 00 30 00 20 .R.2. .3
.7.9.0.
[0040] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v
.i.c.e.
[0050] 00 50 00 61 00 63 00 6B 00 20 00 32 00 00 00 57 .P.a.c.k .
.2...W
[0060] 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 53 .i.n.d.o .w.s.
.S
[0070] 00 65 00 72 00 76 00 65 00 72 00 20 00 32 00 30 .e.r.v.e .r.
.2.0
[0080] 00 30 00 33 00 20 00 52 00 32 00 20 00 35 00 2E .0.3. .R .2.
.5..
[0090] 00 32 00 00 00 .2...
[2011/01/21 09:50:41.283643, 10]
libsmb/smb_signing.c:320(smb_signing_activate)
smb_signing_activate: user_session_key
[2011/01/21 09:50:41.283657, 10] ../lib/util/util.c:278(_dump_data)
[0000] F2 B7 DD D8 AF 89 8B BD A2 2E 85 B7 B5 37 3C C0 ........
.....7<.
[2011/01/21 09:50:41.283680, 10]
libsmb/smb_signing.c:329(smb_signing_activate)
smb_signing_activate: NULL response_data
[2011/01/21 09:50:41.283697, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 1
[2011/01/21 09:50:41.283712, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 1: got good SMB signature of
[2011/01/21 09:50:41.283725, 10] ../lib/util/util.c:278(_dump_data)
[0000] 6A A1 B5 DF 8B 22 80 F6 j...."..
[2011/01/21 09:50:41.283768, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 2
[2011/01/21 09:50:41.283784, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.283798, 10] ../lib/util/util.c:278(_dump_data)
[0000] 66 A4 80 2C EA 4C 5C E7 f..,.L\.
[2011/01/21 09:50:41.284044, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 3
[2011/01/21 09:50:41.284064, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 3: got good SMB signature of
[2011/01/21 09:50:41.284097, 10] ../lib/util/util.c:278(_dump_data)
[0000] 78 C6 46 5D 88 18 B0 57 x.F]...W
[2011/01/21 09:50:41.284124, 10] libsmb/clientgen.c:553(cli_init_creds)
cli_init_creds: user brian domain
[2011/01/21 09:50:41.284164, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 4
[2011/01/21 09:50:41.284179, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.284192, 10] ../lib/util/util.c:278(_dump_data)
[0000] D8 C1 0F E5 86 58 57 CE .....XW.
[2011/01/21 09:50:41.284546, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 5
[2011/01/21 09:50:41.284566, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 5: got good SMB signature of
[2011/01/21 09:50:41.284582, 10] ../lib/util/util.c:278(_dump_data)
[0000] 93 F6 32 A9 72 8A 2A FF ..2.r.*.
[2011/01/21 09:50:41.284621, 5]
rpc_client/cli_pipe.c:2637(rpc_pipe_bind_send)
Bind RPC Pipe: host mvpns119.machinevisionproducts.com auth_type 0,
auth_level 1
[2011/01/21 09:50:41.284650, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 0b
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0048
000a auth_len : 0000
000c call_id : 00000001
[2011/01/21 09:50:41.284736, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_rb
[2011/01/21 09:50:41.284750, 6] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_bba
0010 max_tsize: 10b8
0012 max_rsize: 10b8
0014 assoc_gid: 00000000
0018 num_contexts: 01
001c context_id : 0000
001e num_transfer_syntaxes: 01
[2011/01/21 09:50:41.284794, 6] rpc_parse/parse_prs.c:89(prs_debug)
00001f smb_io_rpc_iface
[2011/01/21 09:50:41.284808, 7] rpc_parse/parse_prs.c:89(prs_debug)
000020 smb_io_uuid uuid
0020 data : 12345778
0024 data : 1234
0026 data : abcd
0028 data : ef 00
002a data : 01 23 45 67 89 ab
0030 version: 00000000
[2011/01/21 09:50:41.284857, 6] rpc_parse/parse_prs.c:89(prs_debug)
000034 smb_io_rpc_iface
[2011/01/21 09:50:41.284870, 7] rpc_parse/parse_prs.c:89(prs_debug)
000034 smb_io_uuid uuid
0034 data : 8a885d04
0038 data : 1ceb
003a data : 11c9
003c data : 9f e8
003e data : 08 00 2b 10 48 60
0044 version: 00000002
[2011/01/21 09:50:41.284917, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.284943, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=72, this_data=72, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.284971, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 6
[2011/01/21 09:50:41.284987, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.285000, 10] ../lib/util/util.c:278(_dump_data)
[0000] B7 5F 7D 69 01 AD 01 1B ._}i....
[2011/01/21 09:50:41.285302, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 7
[2011/01/21 09:50:41.285319, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 7: got good SMB signature of
[2011/01/21 09:50:41.285332, 10] ../lib/util/util.c:278(_dump_data)
[0000] D3 82 B7 33 B4 C1 ED B9 ...3....
[2011/01/21 09:50:41.285363, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 0c
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0044
000a auth_len : 0000
000c call_id : 00000001
[2011/01/21 09:50:41.285446, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 68 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.285464, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 68 bytes.
[2011/01/21 09:50:41.285480, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 0c
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0044
000a auth_len : 0000
000c call_id : 00000001
[2011/01/21 09:50:41.285543, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_ba
[2011/01/21 09:50:41.285557, 6] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_bba
0010 max_tsize: 10b8
0012 max_rsize: 10b8
0014 assoc_gid: 00017965
[2011/01/21 09:50:41.285585, 6] rpc_parse/parse_prs.c:89(prs_debug)
000018 smb_io_rpc_addr_str
0018 len: 000c
001a str: \PIPE\lsass.
[2011/01/21 09:50:41.285613, 6] rpc_parse/parse_prs.c:89(prs_debug)
000026 smb_io_rpc_results
0028 num_results: 01
002c result : 0000
002e reason : 0000
[2011/01/21 09:50:41.285641, 6] rpc_parse/parse_prs.c:89(prs_debug)
000030 smb_io_rpc_iface
[2011/01/21 09:50:41.285655, 7] rpc_parse/parse_prs.c:89(prs_debug)
000030 smb_io_uuid uuid
0030 data : 8a885d04
0034 data : 1ceb
0036 data : 11c9
0038 data : 9f e8
003a data : 08 00 2b 10 48 60
0040 version: 00000002
[2011/01/21 09:50:41.285700, 5]
rpc_client/cli_pipe.c:2484(check_bind_response)
check_bind_response: accepted!
[2011/01/21 09:50:41.285719, 10]
rpc_client/cli_pipe.c:3801(cli_rpc_pipe_open_noauth_transport)
cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine
mvpns119.machinevisionproducts.com and bound anonymously.
[2011/01/21 09:50:41.285743, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
lsa_OpenPolicy: struct lsa_OpenPolicy
in: struct lsa_OpenPolicy
system_name : *
system_name : 0x005c (92)
attr : *
attr: struct lsa_ObjectAttribute
len : 0x00000018 (24)
root_dir : NULL
object_name : NULL
attributes : 0x00000000 (0)
sec_desc : NULL
sec_qos : *
sec_qos: struct lsa_QosInfo
len : 0x0000000c (12)
impersonation_level : 0x0002 (2)
context_mode : 0x01 (1)
effective_only : 0x00 (0)
access_mask : 0x02000000 (33554432)
0: LSA_POLICY_VIEW_LOCAL_INFORMATION
0: LSA_POLICY_VIEW_AUDIT_INFORMATION
0: LSA_POLICY_GET_PRIVATE_INFORMATION
0: LSA_POLICY_TRUST_ADMIN
0: LSA_POLICY_CREATE_ACCOUNT
0: LSA_POLICY_CREATE_SECRET
0: LSA_POLICY_CREATE_PRIVILEGE
0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
0: LSA_POLICY_SET_AUDIT_REQUIREMENTS
0: LSA_POLICY_AUDIT_LOG_ADMIN
0: LSA_POLICY_SERVER_ADMIN
0: LSA_POLICY_LOOKUP_NAMES
0: LSA_POLICY_NOTIFICATION
[2011/01/21 09:50:41.285978, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0044
000a auth_len : 0000
000c call_id : 00000002
[2011/01/21 09:50:41.286042, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 0000002c
0014 context_id: 0000
0016 opnum : 0006
[2011/01/21 09:50:41.286071, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.286088, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=68, this_data=68, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.286113, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 8
[2011/01/21 09:50:41.286131, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.286146, 10] ../lib/util/util.c:278(_dump_data)
[0000] 9A CC F9 37 3C F5 61 2D ...7<.a-
[2011/01/21 09:50:41.286552, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 9
[2011/01/21 09:50:41.286572, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 9: got good SMB signature of
[2011/01/21 09:50:41.286588, 10] ../lib/util/util.c:278(_dump_data)
[0000] 47 1C DE 68 A7 1D BF 58 G..h...X
[2011/01/21 09:50:41.286618, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 00000002
[2011/01/21 09:50:41.286698, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000018
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.286740, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
[2011/01/21 09:50:41.286756, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.286771, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 48 bytes.
[2011/01/21 09:50:41.286790, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
lsa_OpenPolicy: struct lsa_OpenPolicy
out: struct lsa_OpenPolicy
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
7ad0ecad-99f0-4699-847c-97b769759dc0
result : NT_STATUS_OK
[2011/01/21 09:50:41.286851, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
in: struct lsa_QueryInfoPolicy2
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
7ad0ecad-99f0-4699-847c-97b769759dc0
level : LSA_POLICY_INFO_DNS (12)
[2011/01/21 09:50:41.286922, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 002e
000a auth_len : 0000
000c call_id : 00000003
[2011/01/21 09:50:41.287004, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000016
0014 context_id: 0000
0016 opnum : 002e
[2011/01/21 09:50:41.287033, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.287050, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=46, this_data=46, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.287071, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 10
[2011/01/21 09:50:41.287086, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.287099, 10] ../lib/util/util.c:278(_dump_data)
[0000] 2F 74 9F 79 C4 57 2D 69 /t.y.W-i
[2011/01/21 09:50:41.287398, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 11
[2011/01/21 09:50:41.287419, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 11: got good SMB signature of
[2011/01/21 09:50:41.287435, 10] ../lib/util/util.c:278(_dump_data)
[0000] 9D E1 3F 22 24 16 C7 E1 ..?"$...
[2011/01/21 09:50:41.287465, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0100
000a auth_len : 0000
000c call_id : 00000003
[2011/01/21 09:50:41.287540, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 000000e8
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.287573, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 256, data_len 232, ss_len 0
[2011/01/21 09:50:41.287588, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 256 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.287603, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 464 bytes.
[2011/01/21 09:50:41.287634, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2
out: struct lsa_QueryInfoPolicy2
info : *
info : *
info : union
lsa_PolicyInformation(case 12)
dns: struct lsa_DnsDomainInfo
name: struct lsa_StringLarge
length : 0x0006 (6)
size : 0x0008 (8)
string : *
string : 'MVP'
dns_domain: struct lsa_StringLarge
length : 0x0032 (50)
size : 0x0034 (52)
string : *
string :
'machinevisionproducts.com'
dns_forest: struct lsa_StringLarge
length : 0x0032 (50)
size : 0x0034 (52)
string : *
string :
'machinevisionproducts.com'
domain_guid :
840ba3f1-8a5a-4758-a540-0434622082d9
sid : *
sid :
S-1-5-21-628366763-1421964521-7473742
result : NT_STATUS_OK
[2011/01/21 09:50:41.287847, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
lsa_Close: struct lsa_Close
in: struct lsa_Close
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
7ad0ecad-99f0-4699-847c-97b769759dc0
[2011/01/21 09:50:41.287906, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 002c
000a auth_len : 0000
000c call_id : 00000004
[2011/01/21 09:50:41.287970, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000014
0014 context_id: 0000
0016 opnum : 0000
[2011/01/21 09:50:41.287999, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.288016, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=44, this_data=44, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.288036, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 12
[2011/01/21 09:50:41.288051, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.288064, 10] ../lib/util/util.c:278(_dump_data)
[0000] DB 78 E9 C7 7E 45 3C BD .x..~E<.
[2011/01/21 09:50:41.288358, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 13
[2011/01/21 09:50:41.288375, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 13: got good SMB signature of
[2011/01/21 09:50:41.288392, 10] ../lib/util/util.c:278(_dump_data)
[0000] C0 C8 DA 09 90 CF BF 21 .......!
[2011/01/21 09:50:41.288419, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 00000004
[2011/01/21 09:50:41.288485, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000018
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.288518, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
[2011/01/21 09:50:41.288532, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.288546, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 48 bytes.
[2011/01/21 09:50:41.288569, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
lsa_Close: struct lsa_Close
out: struct lsa_Close
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
00000000-0000-0000-0000-000000000000
result : NT_STATUS_OK
[2011/01/21 09:50:41.288631, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 14
[2011/01/21 09:50:41.288646, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.288659, 10] ../lib/util/util.c:278(_dump_data)
[0000] 78 1B 27 BA D3 F7 3D F0 x.'...=.
[2011/01/21 09:50:41.288898, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 15
[2011/01/21 09:50:41.288917, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 15: got good SMB signature of
[2011/01/21 09:50:41.288933, 10] ../lib/util/util.c:278(_dump_data)
[0000] 55 79 BE 23 55 C0 1F 09 Uy.#U...
[2011/01/21 09:50:41.288966, 10]
rpc_client/rpc_transport_np.c:81(rpc_transport_np_state_destructor)
rpc_pipe_destructor: closed \lsarpc
[2011/01/21 09:50:41.289023, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 16
[2011/01/21 09:50:41.289039, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.289053, 10] ../lib/util/util.c:278(_dump_data)
[0000] B5 79 79 1C 72 56 44 B7 .yy.rVD.
[2011/01/21 09:50:41.289308, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 17
[2011/01/21 09:50:41.289332, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 17: got good SMB signature of
[2011/01/21 09:50:41.289345, 10] ../lib/util/util.c:278(_dump_data)
[0000] 25 3B DB 26 44 43 EF 2F %;.&DC./
[2011/01/21 09:50:41.289374, 5]
rpc_client/cli_pipe.c:2637(rpc_pipe_bind_send)
Bind RPC Pipe: host mvpns119.machinevisionproducts.com auth_type 0,
auth_level 1
[2011/01/21 09:50:41.289394, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 0b
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0048
000a auth_len : 0000
000c call_id : 00000005
[2011/01/21 09:50:41.289457, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_rb
[2011/01/21 09:50:41.289471, 6] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_bba
0010 max_tsize: 10b8
0012 max_rsize: 10b8
0014 assoc_gid: 00000000
0018 num_contexts: 01
001c context_id : 0000
001e num_transfer_syntaxes: 01
[2011/01/21 09:50:41.289513, 6] rpc_parse/parse_prs.c:89(prs_debug)
00001f smb_io_rpc_iface
[2011/01/21 09:50:41.289527, 7] rpc_parse/parse_prs.c:89(prs_debug)
000020 smb_io_uuid uuid
0020 data : 12345778
0024 data : 1234
0026 data : abcd
0028 data : ef 00
002a data : 01 23 45 67 89 ac
0030 version: 00000001
[2011/01/21 09:50:41.289572, 6] rpc_parse/parse_prs.c:89(prs_debug)
000034 smb_io_rpc_iface
[2011/01/21 09:50:41.289586, 7] rpc_parse/parse_prs.c:89(prs_debug)
000034 smb_io_uuid uuid
0034 data : 8a885d04
0038 data : 1ceb
003a data : 11c9
003c data : 9f e8
003e data : 08 00 2b 10 48 60
0044 version: 00000002
[2011/01/21 09:50:41.289631, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.289648, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=72, this_data=72, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.289668, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 18
[2011/01/21 09:50:41.289682, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.289696, 10] ../lib/util/util.c:278(_dump_data)
[0000] 76 C1 89 9E 54 AB EE 4D v...T..M
[2011/01/21 09:50:41.289940, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 19
[2011/01/21 09:50:41.289961, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 19: got good SMB signature of
[2011/01/21 09:50:41.290003, 10] ../lib/util/util.c:278(_dump_data)
[0000] 86 98 1D DB D3 88 60 AD ......`.
[2011/01/21 09:50:41.290030, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 0c
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0044
000a auth_len : 0000
000c call_id : 00000005
[2011/01/21 09:50:41.290101, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 68 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.290115, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 68 bytes.
[2011/01/21 09:50:41.290133, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 0c
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0044
000a auth_len : 0000
000c call_id : 00000005
[2011/01/21 09:50:41.290195, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_ba
[2011/01/21 09:50:41.290209, 6] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_bba
0010 max_tsize: 10b8
0012 max_rsize: 10b8
0014 assoc_gid: 00017966
[2011/01/21 09:50:41.290236, 6] rpc_parse/parse_prs.c:89(prs_debug)
000018 smb_io_rpc_addr_str
0018 len: 000c
001a str: \PIPE\lsass.
[2011/01/21 09:50:41.290262, 6] rpc_parse/parse_prs.c:89(prs_debug)
000026 smb_io_rpc_results
0028 num_results: 01
002c result : 0000
002e reason : 0000
[2011/01/21 09:50:41.290290, 6] rpc_parse/parse_prs.c:89(prs_debug)
000030 smb_io_rpc_iface
[2011/01/21 09:50:41.290303, 7] rpc_parse/parse_prs.c:89(prs_debug)
000030 smb_io_uuid uuid
0030 data : 8a885d04
0034 data : 1ceb
0036 data : 11c9
0038 data : 9f e8
003a data : 08 00 2b 10 48 60
0040 version: 00000002
[2011/01/21 09:50:41.290348, 5]
rpc_client/cli_pipe.c:2484(check_bind_response)
check_bind_response: accepted!
[2011/01/21 09:50:41.290363, 10]
rpc_client/cli_pipe.c:3801(cli_rpc_pipe_open_noauth_transport)
cli_rpc_pipe_open_noauth: opened pipe \samr to machine
mvpns119.machinevisionproducts.com and bound anonymously.
[2011/01/21 09:50:41.290387, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_Connect2: struct samr_Connect2
in: struct samr_Connect2
system_name : *
system_name :
'mvpns119.machinevisionproducts.com'
access_mask : 0x00000030 (48)
0: SAMR_ACCESS_CONNECT_TO_SERVER
0: SAMR_ACCESS_SHUTDOWN_SERVER
0: SAMR_ACCESS_INITIALIZE_SERVER
0: SAMR_ACCESS_CREATE_DOMAIN
1: SAMR_ACCESS_ENUM_DOMAINS
1: SAMR_ACCESS_LOOKUP_DOMAIN
[2011/01/21 09:50:41.290473, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0074
000a auth_len : 0000
000c call_id : 00000006
[2011/01/21 09:50:41.290536, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 0000005c
0014 context_id: 0000
0016 opnum : 0039
[2011/01/21 09:50:41.290565, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.290581, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=116, this_data=116, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.290613, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 20
[2011/01/21 09:50:41.290629, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.290642, 10] ../lib/util/util.c:278(_dump_data)
[0000] 6C 22 D7 66 76 E8 9A E6 l".fv...
[2011/01/21 09:50:41.290987, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 21
[2011/01/21 09:50:41.291004, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 21: got good SMB signature of
[2011/01/21 09:50:41.291018, 10] ../lib/util/util.c:278(_dump_data)
[0000] 41 F1 18 76 AE 72 8B 97 A..v.r..
[2011/01/21 09:50:41.291046, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 00000006
[2011/01/21 09:50:41.291113, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000018
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.291146, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
[2011/01/21 09:50:41.291160, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.291174, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 48 bytes.
[2011/01/21 09:50:41.291196, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_Connect2: struct samr_Connect2
out: struct samr_Connect2
connect_handle : *
connect_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
b491b518-413b-4396-a2bf-bae5ead20775
result : NT_STATUS_OK
[2011/01/21 09:50:41.291253, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_OpenDomain: struct samr_OpenDomain
in: struct samr_OpenDomain
connect_handle : *
connect_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
b491b518-413b-4396-a2bf-bae5ead20775
access_mask : 0x00000211 (529)
1: SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1
0: SAMR_DOMAIN_ACCESS_SET_INFO_1
0: SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2
0: SAMR_DOMAIN_ACCESS_SET_INFO_2
1: SAMR_DOMAIN_ACCESS_CREATE_USER
0: SAMR_DOMAIN_ACCESS_CREATE_GROUP
0: SAMR_DOMAIN_ACCESS_CREATE_ALIAS
0: SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS
0: SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS
1: SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT
0: SAMR_DOMAIN_ACCESS_SET_INFO_3
sid : *
sid :
S-1-5-21-628366763-1421964521-7473742
[2011/01/21 09:50:41.291390, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 004c
000a auth_len : 0000
000c call_id : 00000007
[2011/01/21 09:50:41.291465, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000034
0014 context_id: 0000
0016 opnum : 0007
[2011/01/21 09:50:41.291494, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.291510, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=76, this_data=76, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.291531, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 22
[2011/01/21 09:50:41.291546, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.291559, 10] ../lib/util/util.c:278(_dump_data)
[0000] 8E D0 24 02 D5 22 D3 34 ..$..".4
[2011/01/21 09:50:41.291945, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 23
[2011/01/21 09:50:41.291965, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 23: got good SMB signature of
[2011/01/21 09:50:41.291981, 10] ../lib/util/util.c:278(_dump_data)
[0000] 9C FD BB CA 0A 90 B9 4D .......M
[2011/01/21 09:50:41.292013, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 00000007
[2011/01/21 09:50:41.292093, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000018
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.292126, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
[2011/01/21 09:50:41.292144, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.292158, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 48 bytes.
[2011/01/21 09:50:41.292179, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_OpenDomain: struct samr_OpenDomain
out: struct samr_OpenDomain
domain_handle : *
domain_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
96bb9528-3bcf-4065-8652-d142eb1e4bac
result : NT_STATUS_OK
[2011/01/21 09:50:41.292236, 10]
libnet/libnet_join.c:892(libnet_join_joindomain_rpc)
Creating account with desired access mask: -536543056
[2011/01/21 09:50:41.292252, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_CreateUser2: struct samr_CreateUser2
in: struct samr_CreateUser2
domain_handle : *
domain_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
96bb9528-3bcf-4065-8652-d142eb1e4bac
account_name : *
account_name: struct lsa_String
length : 0x0014 (20)
size : 0x0014 (20)
string : *
string : 'mvppvt125$'
acct_flags : 0x00000080 (128)
0: ACB_DISABLED
0: ACB_HOMDIRREQ
0: ACB_PWNOTREQ
0: ACB_TEMPDUP
0: ACB_NORMAL
0: ACB_MNS
0: ACB_DOMTRUST
1: ACB_WSTRUST
0: ACB_SVRTRUST
0: ACB_PWNOEXP
0: ACB_AUTOLOCK
0: ACB_ENC_TXT_PWD_ALLOWED
0: ACB_SMARTCARD_REQUIRED
0: ACB_TRUSTED_FOR_DELEGATION
0: ACB_NOT_DELEGATED
0: ACB_USE_DES_KEY_ONLY
0: ACB_DONT_REQUIRE_PREAUTH
0: ACB_PW_EXPIRED
0: ACB_NO_AUTH_DATA_REQD
access_mask : 0xe00500b0 (3758424240)
0: SAMR_USER_ACCESS_GET_NAME_ETC
0: SAMR_USER_ACCESS_GET_LOCALE
0: SAMR_USER_ACCESS_SET_LOC_COM
0: SAMR_USER_ACCESS_GET_LOGONINFO
1: SAMR_USER_ACCESS_GET_ATTRIBUTES
1: SAMR_USER_ACCESS_SET_ATTRIBUTES
0: SAMR_USER_ACCESS_CHANGE_PASSWORD
1: SAMR_USER_ACCESS_SET_PASSWORD
0: SAMR_USER_ACCESS_GET_GROUPS
0: SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP
0: SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP
[2011/01/21 09:50:41.292540, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 005c
000a auth_len : 0000
000c call_id : 00000008
[2011/01/21 09:50:41.292604, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000044
0014 context_id: 0000
0016 opnum : 0032
[2011/01/21 09:50:41.292632, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.292649, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=92, this_data=92, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.292669, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 24
[2011/01/21 09:50:41.292684, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.292698, 10] ../lib/util/util.c:278(_dump_data)
[0000] A7 A0 09 BD F5 80 D7 55 .......U
[2011/01/21 09:50:41.293274, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 25
[2011/01/21 09:50:41.293291, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 25: got good SMB signature of
[2011/01/21 09:50:41.293306, 10] ../lib/util/util.c:278(_dump_data)
[0000] 3A 87 3D 3B C6 ED AD A8 :.=;....
[2011/01/21 09:50:41.293333, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0038
000a auth_len : 0000
000c call_id : 00000008
[2011/01/21 09:50:41.293403, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000020
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.293435, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 56, data_len 32, ss_len 0
[2011/01/21 09:50:41.293449, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 56 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.293464, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 64 bytes.
[2011/01/21 09:50:41.293496, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_CreateUser2: struct samr_CreateUser2
out: struct samr_CreateUser2
user_handle : *
user_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
00000000-0000-0000-0000-000000000000
access_granted : *
access_granted : 0x00000000 (0)
rid : *
rid : 0x00000000 (0)
result : NT_STATUS_USER_EXISTS
[2011/01/21 09:50:41.293577, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_LookupNames: struct samr_LookupNames
in: struct samr_LookupNames
domain_handle : *
domain_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
96bb9528-3bcf-4065-8652-d142eb1e4bac
num_names : 0x00000001 (1)
names: ARRAY(1)
names: struct lsa_String
length : 0x0014 (20)
size : 0x0014 (20)
string : *
string : 'mvppvt125$'
[2011/01/21 09:50:41.293676, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0064
000a auth_len : 0000
000c call_id : 00000009
[2011/01/21 09:50:41.293739, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 0000004c
0014 context_id: 0000
0016 opnum : 0011
[2011/01/21 09:50:41.293770, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.293787, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=100, this_data=100, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.293807, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 26
[2011/01/21 09:50:41.293822, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.293835, 10] ../lib/util/util.c:278(_dump_data)
[0000] F4 83 59 8D AD 45 EC 10 ..Y..E..
[2011/01/21 09:50:41.294494, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 27
[2011/01/21 09:50:41.294511, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 27: got good SMB signature of
[2011/01/21 09:50:41.294525, 10] ../lib/util/util.c:278(_dump_data)
[0000] FF 18 22 A0 99 68 CE 82 .."..h..
[2011/01/21 09:50:41.294551, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 003c
000a auth_len : 0000
000c call_id : 00000009
[2011/01/21 09:50:41.294619, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000024
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.294651, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 60, data_len 36, ss_len 0
[2011/01/21 09:50:41.294675, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 60 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.294690, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 72 bytes.
[2011/01/21 09:50:41.294715, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_LookupNames: struct samr_LookupNames
out: struct samr_LookupNames
rids : *
rids: struct samr_Ids
count : 0x00000001 (1)
ids : *
ids: ARRAY(1)
ids : 0x00002b04 (11012)
types : *
types: struct samr_Ids
count : 0x00000001 (1)
ids : *
ids: ARRAY(1)
ids : 0x00000001 (1)
result : NT_STATUS_OK
[2011/01/21 09:50:41.294828, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_OpenUser: struct samr_OpenUser
in: struct samr_OpenUser
domain_handle : *
domain_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
96bb9528-3bcf-4065-8652-d142eb1e4bac
access_mask : 0x02000000 (33554432)
0: SAMR_USER_ACCESS_GET_NAME_ETC
0: SAMR_USER_ACCESS_GET_LOCALE
0: SAMR_USER_ACCESS_SET_LOC_COM
0: SAMR_USER_ACCESS_GET_LOGONINFO
0: SAMR_USER_ACCESS_GET_ATTRIBUTES
0: SAMR_USER_ACCESS_SET_ATTRIBUTES
0: SAMR_USER_ACCESS_CHANGE_PASSWORD
0: SAMR_USER_ACCESS_SET_PASSWORD
0: SAMR_USER_ACCESS_GET_GROUPS
0: SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP
0: SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP
rid : 0x00002b04 (11012)
[2011/01/21 09:50:41.294955, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0034
000a auth_len : 0000
000c call_id : 0000000a
[2011/01/21 09:50:41.295019, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 0000001c
0014 context_id: 0000
0016 opnum : 0022
[2011/01/21 09:50:41.295048, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.295065, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=52, this_data=52, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.295085, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 28
[2011/01/21 09:50:41.295100, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.295114, 10] ../lib/util/util.c:278(_dump_data)
[0000] 57 DB 59 6B 6C 83 41 6B W.Ykl.Ak
[2011/01/21 09:50:41.295704, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 29
[2011/01/21 09:50:41.295726, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 29: got good SMB signature of
[2011/01/21 09:50:41.295742, 10] ../lib/util/util.c:278(_dump_data)
[0000] D6 41 D9 5B 7E 05 12 6F .A.[~..o
[2011/01/21 09:50:41.295777, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 0000000a
[2011/01/21 09:50:41.295862, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000018
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.295897, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
[2011/01/21 09:50:41.295911, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.295925, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 48 bytes.
[2011/01/21 09:50:41.295946, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_OpenUser: struct samr_OpenUser
out: struct samr_OpenUser
user_handle : *
user_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
cd823209-c120-4f0c-9ea9-0ec6762ffbf6
result : NT_STATUS_OK
[2011/01/21 09:50:41.296006, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_SetUserInfo: struct samr_SetUserInfo
in: struct samr_SetUserInfo
user_handle : *
user_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
cd823209-c120-4f0c-9ea9-0ec6762ffbf6
level : UserControlInformation (16)
info : *
info : union samr_UserInfo(case 16)
info16: struct samr_UserInfo16
acct_flags : 0x00000280 (640)
0: ACB_DISABLED
0: ACB_HOMDIRREQ
0: ACB_PWNOTREQ
0: ACB_TEMPDUP
0: ACB_NORMAL
0: ACB_MNS
0: ACB_DOMTRUST
1: ACB_WSTRUST
0: ACB_SVRTRUST
1: ACB_PWNOEXP
0: ACB_AUTOLOCK
0: ACB_ENC_TXT_PWD_ALLOWED
0: ACB_SMARTCARD_REQUIRED
0: ACB_TRUSTED_FOR_DELEGATION
0: ACB_NOT_DELEGATED
0: ACB_USE_DES_KEY_ONLY
0: ACB_DONT_REQUIRE_PREAUTH
0: ACB_PW_EXPIRED
0: ACB_NO_AUTH_DATA_REQD
[2011/01/21 09:50:41.296210, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0034
000a auth_len : 0000
000c call_id : 0000000b
[2011/01/21 09:50:41.296273, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 0000001c
0014 context_id: 0000
0016 opnum : 0025
[2011/01/21 09:50:41.296302, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.296318, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=52, this_data=52, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.296358, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 30
[2011/01/21 09:50:41.296374, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.296390, 10] ../lib/util/util.c:278(_dump_data)
[0000] 34 04 BF D8 3C A2 67 26 4...<.g&
[2011/01/21 09:50:41.316862, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 31
[2011/01/21 09:50:41.316880, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 31: got good SMB signature of
[2011/01/21 09:50:41.316893, 10] ../lib/util/util.c:278(_dump_data)
[0000] 45 23 04 D8 A3 50 BB E6 E#...P..
[2011/01/21 09:50:41.316921, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 001c
000a auth_len : 0000
000c call_id : 0000000b
[2011/01/21 09:50:41.316988, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000004
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.317022, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 28, data_len 4, ss_len 0
[2011/01/21 09:50:41.317036, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 28 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.317050, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 8 bytes.
[2011/01/21 09:50:41.317069, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_SetUserInfo: struct samr_SetUserInfo
out: struct samr_SetUserInfo
result : NT_STATUS_OK
[2011/01/21 09:50:41.317152, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_SetUserInfo2: struct samr_SetUserInfo2
in: struct samr_SetUserInfo2
user_handle : *
user_handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
cd823209-c120-4f0c-9ea9-0ec6762ffbf6
level : UserInternal5InformationNew (26)
info : *
info : union samr_UserInfo(case 26)
info26: struct samr_UserInfo26
password: struct samr_CryptPasswordEx
data :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!
0f6c5bdeb3146b3f276fe57a80647efb7c +>
ced7fbf6354203735ac9577dd163c30b1ee260858c8e9603976f53783d50c5a8f12efcb77a9d
c381d4477a872c648c
password_expired : 0x00 (0)
[2011/01/21 09:50:41.317364, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0245
000a auth_len : 0000
000c call_id : 0000000c
[2011/01/21 09:50:41.317432, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 0000022d
0014 context_id: 0000
0016 opnum : 003a
[2011/01/21 09:50:41.317461, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.317478, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=581, this_data=581, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.317499, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 32
[2011/01/21 09:50:41.317516, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.317529, 10] ../lib/util/util.c:278(_dump_data)
[0000] E1 62 44 B3 41 0A 36 4B .bD.A.6K
[2011/01/21 09:50:41.337912, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 33
[2011/01/21 09:50:41.337933, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 33: got good SMB signature of
[2011/01/21 09:50:41.337949, 10] ../lib/util/util.c:278(_dump_data)
[0000] B9 7F 0D 57 8E 6D 91 47 ...W.m.G
[2011/01/21 09:50:41.337981, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 001c
000a auth_len : 0000
000c call_id : 0000000c
[2011/01/21 09:50:41.338060, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000004
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.338102, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 28, data_len 4, ss_len 0
[2011/01/21 09:50:41.338116, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 28 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.338130, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 8 bytes.
[2011/01/21 09:50:41.338148, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_SetUserInfo2: struct samr_SetUserInfo2
out: struct samr_SetUserInfo2
result : NT_STATUS_OK
[2011/01/21 09:50:41.338184, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_Close: struct samr_Close
in: struct samr_Close
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
b491b518-413b-4396-a2bf-bae5ead20775
[2011/01/21 09:50:41.338238, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 002c
000a auth_len : 0000
000c call_id : 0000000d
[2011/01/21 09:50:41.338303, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000014
0014 context_id: 0000
0016 opnum : 0001
[2011/01/21 09:50:41.338332, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.338373, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=44, this_data=44, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.338396, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 34
[2011/01/21 09:50:41.338411, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.338424, 10] ../lib/util/util.c:278(_dump_data)
[0000] C8 06 1C BE D1 5E AA BA .....^..
[2011/01/21 09:50:41.338841, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 35
[2011/01/21 09:50:41.338864, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 35: got good SMB signature of
[2011/01/21 09:50:41.338883, 10] ../lib/util/util.c:278(_dump_data)
[0000] E6 5C E7 F5 A6 EB 87 EC .\......
[2011/01/21 09:50:41.338910, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 0000000d
[2011/01/21 09:50:41.338977, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000018
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.339010, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
[2011/01/21 09:50:41.339024, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.339038, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 48 bytes.
[2011/01/21 09:50:41.339059, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_Close: struct samr_Close
out: struct samr_Close
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
00000000-0000-0000-0000-000000000000
result : NT_STATUS_OK
[2011/01/21 09:50:41.339117, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_Close: struct samr_Close
in: struct samr_Close
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
96bb9528-3bcf-4065-8652-d142eb1e4bac
[2011/01/21 09:50:41.339167, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 002c
000a auth_len : 0000
000c call_id : 0000000e
[2011/01/21 09:50:41.339230, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000014
0014 context_id: 0000
0016 opnum : 0001
[2011/01/21 09:50:41.339258, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.339275, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=44, this_data=44, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.339294, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 36
[2011/01/21 09:50:41.339309, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.339334, 10] ../lib/util/util.c:278(_dump_data)
[0000] A4 2E 31 73 86 1C C5 DB ..1s....
[2011/01/21 09:50:41.339680, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 37
[2011/01/21 09:50:41.339702, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 37: got good SMB signature of
[2011/01/21 09:50:41.339718, 10] ../lib/util/util.c:278(_dump_data)
[0000] 26 CF 93 1A 38 40 E4 97 &...8 at ..
[2011/01/21 09:50:41.339749, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 0000000e
[2011/01/21 09:50:41.339828, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000018
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.339861, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
[2011/01/21 09:50:41.339875, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.339894, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 48 bytes.
[2011/01/21 09:50:41.339912, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_Close: struct samr_Close
out: struct samr_Close
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
00000000-0000-0000-0000-000000000000
result : NT_STATUS_OK
[2011/01/21 09:50:41.339969, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_Close: struct samr_Close
in: struct samr_Close
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
cd823209-c120-4f0c-9ea9-0ec6762ffbf6
[2011/01/21 09:50:41.340020, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 00
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 002c
000a auth_len : 0000
000c call_id : 0000000f
[2011/01/21 09:50:41.340083, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_req hdr_req
0010 alloc_hint: 00000014
0014 context_id: 0000
0016 opnum : 0001
[2011/01/21 09:50:41.340112, 5]
rpc_client/cli_pipe.c:1372(rpc_api_pipe_send)
rpc_api_pipe: host mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.340129, 10] libsmb/clitrans.c:925(cli_trans_format)
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=44, this_data=44, max_data=4280, param_offset=82, param_disp=0,
data_disp=0
[2011/01/21 09:50:41.340149, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 38
[2011/01/21 09:50:41.340165, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.340178, 10] ../lib/util/util.c:278(_dump_data)
[0000] 90 42 67 EA A9 E8 96 BD .Bg.....
[2011/01/21 09:50:41.340513, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 39
[2011/01/21 09:50:41.340530, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 39: got good SMB signature of
[2011/01/21 09:50:41.340555, 10] ../lib/util/util.c:278(_dump_data)
[0000] 46 A2 FC 7F 21 B6 56 43 F...!.VC
[2011/01/21 09:50:41.340583, 5] rpc_parse/parse_prs.c:89(prs_debug)
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 0000000f
[2011/01/21 09:50:41.340651, 5] rpc_parse/parse_prs.c:89(prs_debug)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000018
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
[2011/01/21 09:50:41.340683, 10]
rpc_client/cli_pipe.c:1002(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
[2011/01/21 09:50:41.340697, 10]
rpc_client/cli_pipe.c:1471(rpc_api_pipe_got_pdu)
rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
[2011/01/21 09:50:41.340713, 10]
rpc_client/cli_pipe.c:1522(rpc_api_pipe_got_pdu)
rpc_api_pipe: host mvpns119.machinevisionproducts.com returned 48 bytes.
[2011/01/21 09:50:41.340731, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
samr_Close: struct samr_Close
out: struct samr_Close
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
00000000-0000-0000-0000-000000000000
result : NT_STATUS_OK
[2011/01/21 09:50:41.340795, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 40
[2011/01/21 09:50:41.340810, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.340823, 10] ../lib/util/util.c:278(_dump_data)
[0000] 9C 5D 20 AC A8 58 C0 1D .] ..X..
[2011/01/21 09:50:41.341040, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 41
[2011/01/21 09:50:41.341059, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 41: got good SMB signature of
[2011/01/21 09:50:41.341075, 10] ../lib/util/util.c:278(_dump_data)
[0000] BC AC 09 2B 00 37 6C 55 ...+.7lU
[2011/01/21 09:50:41.341111, 10]
rpc_client/rpc_transport_np.c:81(rpc_transport_np_state_destructor)
rpc_pipe_destructor: closed \samr
[2011/01/21 09:50:41.341145, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
Locking key 534543524554532F5349
[2011/01/21 09:50:41.341170, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
Allocated locked data 0x0x2b112d6367a0
[2011/01/21 09:50:41.341185, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
Unlocking key 534543524554532F5349
[2011/01/21 09:50:41.341222, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
Locking key 534543524554532F4D41
[2011/01/21 09:50:41.341239, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
Allocated locked data 0x0x2b112d615590
[2011/01/21 09:50:41.341256, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
Unlocking key 534543524554532F4D41
[2011/01/21 09:50:41.342798, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
Locking key 534543524554532F4D41
[2011/01/21 09:50:41.342822, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
Allocated locked data 0x0x2b112d615590
[2011/01/21 09:50:41.342843, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
Unlocking key 534543524554532F4D41
[2011/01/21 09:50:41.343392, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
Locking key 534543524554532F4D41
[2011/01/21 09:50:41.343416, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
Allocated locked data 0x0x2b112d615590
[2011/01/21 09:50:41.343436, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
Unlocking key 534543524554532F4D41
[2011/01/21 09:50:41.343937, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
Locking key 534543524554532F4D41
[2011/01/21 09:50:41.343961, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
Allocated locked data 0x0x2b112d615590
[2011/01/21 09:50:41.344017, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
Unlocking key 534543524554532F4D41
[2011/01/21 09:50:41.344041, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 42
[2011/01/21 09:50:41.344055, 10]
libsmb/smb_signing.c:209(smb_signing_sign_pdu)
smb_signing_sign_pdu: sent SMB signature of
[2011/01/21 09:50:41.344069, 10] ../lib/util/util.c:278(_dump_data)
[0000] F0 38 8E 17 FE A4 24 7A .8....$z
[2011/01/21 09:50:41.344090, 6] libsmb/clientgen.c:323(write_socket)
write_socket(7,39)
[2011/01/21 09:50:41.344109, 6] libsmb/clientgen.c:326(write_socket)
write_socket(7,39) wrote 39
[2011/01/21 09:50:41.344300, 10]
lib/util_sock.c:726(read_smb_length_return_keepalive)
got smb length of 35
[2011/01/21 09:50:41.344321, 5] lib/util.c:617(show_msg)
[2011/01/21 09:50:41.344333, 5] lib/util.c:627(show_msg)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51205
smb_tid=40964
smb_pid=7156
smb_uid=12291
smb_mid=24
smt_wct=0
smb_bcc=0
[2011/01/21 09:50:41.344403, 10] libsmb/smb_signing.c:115(smb_signing_md5)
smb_signing_md5: sequence number 43
[2011/01/21 09:50:41.344417, 10]
libsmb/smb_signing.c:267(smb_signing_check_pdu)
smb_signing_check_pdu: seq 43: got good SMB signature of
[2011/01/21 09:50:41.344430, 10] ../lib/util/util.c:278(_dump_data)
[0000] 2F B9 DF 5F 58 FC BA 16 /.._X...
[2011/01/21 09:50:41.344471, 10] libsmb/namequery.c:112(saf_join_store)
saf_join_store: domain = [MVP], server =
[mvpns119.machinevisionproducts.com], expire = [1295635841]
[2011/01/21 09:50:41.344491, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = SAFJOIN/DOMAIN/MVP and timeout = Fri Jan 21
10:50:41 2011
(3600 seconds ahead)
[2011/01/21 09:50:41.344526, 10] libsmb/namequery.c:112(saf_join_store)
saf_join_store: domain = [machinevisionproducts.com], server =
[mvpns119.machinevisionproducts.com], expire = [1295635841]
[2011/01/21 09:50:41.344543, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = SAFJOIN/DOMAIN/MACHINEVISIONPRODUCTS.COM and
timeout = Fri Jan 21 10:50:41 2011
(3600 seconds ahead)
[2011/01/21 09:50:41.344591, 10] lib/gencache.c:345(gencache_get_data_blob)
Returning valid cache entry: key =
AD_SITENAME/DOMAIN/MACHINEVISIONPRODUCTS.COM, value = MVP, timeout = Mon Jan
18 19:14:07 2038
[2011/01/21 09:50:41.344612, 5] libads/dns.c:810(sitename_fetch)
sitename_fetch: Returning sitename for MACHINEVISIONPRODUCTS.COM:
"MVP"
[2011/01/21 09:50:41.344628, 10]
libsmb/namequery.c:1400(internal_resolve_name)
internal_resolve_name: looking up mvpns119.machinevisionproducts.com#20
(sitename MVP)
[2011/01/21 09:50:41.344666, 10] lib/gencache.c:345(gencache_get_data_blob)
Returning valid cache entry: key =
NBT/MVPNS119.MACHINEVISIONPRODUCTS.COM#20, value = 10.0.0.119:0, timeout =
Fri Jan 21 09:55:07 2011
[2011/01/21 09:50:41.344686, 5] libsmb/namecache.c:192(namecache_fetch)
name mvpns119.machinevisionproducts.com#20 found.
[2011/01/21 09:50:41.344728, 5] libads/ldap.c:226(ads_try_connect)
ads_try_connect: sending CLDAP request to 10.0.0.119 (realm:
machinevisionproducts.com)
[2011/01/21 09:50:41.345233, 10] libads/dns.c:775(sitename_store)
sitename_store: realm = [MVP], sitename = [MVP], expire = [2147483647]
[2011/01/21 09:50:41.345256, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = AD_SITENAME/DOMAIN/MVP and timeout = Mon Jan
18 19:14:07 2038
(851851406 seconds ahead)
[2011/01/21 09:50:41.345298, 10] libads/dns.c:775(sitename_store)
sitename_store: realm = [machinevisionproducts.com], sitename = [MVP],
expire = [2147483647]
[2011/01/21 09:50:41.345315, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = AD_SITENAME/DOMAIN/MACHINEVISIONPRODUCTS.COM
and timeout = Mon Jan 18 19:14:07 2038
(851851406 seconds ahead)
[2011/01/21 09:50:41.345348, 3] libads/ldap.c:634(ads_connect)
Successfully contacted LDAP server 10.0.0.119
[2011/01/21 09:50:41.345386, 10] libads/ldap.c:62(ldap_open_with_timeout)
Opening connection to LDAP server
'mvpns119.machinevisionproducts.com:389', timeout 15 seconds
[2011/01/21 09:50:41.347264, 10] libads/ldap.c:76(ldap_open_with_timeout)
Connected to LDAP server 'mvpns119.machinevisionproducts.com:389'
[2011/01/21 09:50:41.347289, 3] libads/ldap.c:688(ads_connect)
Connected to LDAP server mvpns119.machinevisionproducts.com
[2011/01/21 09:50:41.347306, 10] libads/ldap.c:165(ads_closest_dc)
ads_closest_dc: NBT_SERVER_CLOSEST flag set
[2011/01/21 09:50:41.347328, 10] libsmb/namequery.c:83(saf_store)
saf_store: domain = [MVP], server = [mvpns119.machinevisionproducts.com],
expire = [1295633141]
[2011/01/21 09:50:41.347350, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = SAF/DOMAIN/MVP and timeout = Fri Jan 21
10:05:41 2011
(900 seconds ahead)
[2011/01/21 09:50:41.347394, 10] libsmb/namequery.c:83(saf_store)
saf_store: domain = [machinevisionproducts.com], server =
[mvpns119.machinevisionproducts.com], expire = [1295633141]
[2011/01/21 09:50:41.347412, 10] lib/gencache.c:180(gencache_set_data_blob)
Adding cache entry with key = SAF/DOMAIN/MACHINEVISIONPRODUCTS.COM and
timeout = Fri Jan 21 10:05:41 2011
(900 seconds ahead)
[2011/01/21 09:50:41.347799, 4] libads/ldap.c:2852(ads_current_time)
time offset is 0 seconds
[2011/01/21 09:50:41.348078, 4] libads/sasl.c:1114(ads_sasl_bind)
Found SASL mechanism GSS-SPNEGO
[2011/01/21 09:50:41.348475, 3] libads/sasl.c:782(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got OID=1.2.840.48018.1.2.2
[2011/01/21 09:50:41.348495, 3] libads/sasl.c:782(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2
[2011/01/21 09:50:41.348510, 3] libads/sasl.c:782(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2.3
[2011/01/21 09:50:41.348526, 3] libads/sasl.c:782(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10
[2011/01/21 09:50:41.348541, 3] libads/sasl.c:791(ads_sasl_spnego_bind)
ads_sasl_spnego_bind: got server principal name =
mvpns119$@MACHINEVISIONPRODUCTS.COM
[2011/01/21 09:50:41.348845, 3] libsmb/clikrb5.c:787(ads_krb5_mk_req)
ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2011/01/21 09:50:41.348886, 10] libads/sasl.c:812(ads_sasl_spnego_bind)
ads_sasl_spnego_krb5_bind failed with: No credentials cache found, calling
kinit
[2011/01/21 09:50:41.348991, 10]
libads/kerberos.c:188(kerberos_kinit_password_ext)
kerberos_kinit_password: as brian at MACHINEVISIONPRODUCTS.COM using
[MEMORY:net_ads] as ccache and config [(null)]
[2011/01/21 09:50:41.359472, 3]
libsmb/clikrb5.c:622(ads_cleanup_expired_creds)
ads_cleanup_expired_creds: Ticket in ccache[MEMORY:net_ads] expiration
Fri, 21 Jan 2011 16:30:41 PST
[2011/01/21 09:50:41.359503, 10] libsmb/clikrb5.c:821(ads_krb5_mk_req)
ads_krb5_mk_req: Ticket (mvpns119$@MACHINEVISIONPRODUCTS.COM) in ccache
(MEMORY:net_ads) is valid until: (Fri, 21 Jan 2011 16:30:41 PST -
1295656241)
[2011/01/21 09:50:41.359527, 3] libsmb/clikrb5.c:840(ads_krb5_mk_req)
ads_krb5_mk_req: server marked as OK to delegate to, building forwardable
TGT
[2011/01/21 09:50:41.362383, 10]
libsmb/clikrb5.c:1036(get_krb5_smb_session_key)
Got KRB5 session key of length 16
[2011/01/21 09:50:41.363740, 1] libnet/libnet_join.c:1978(libnet_Join)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name : 'MVP'
dns_domain_name : 'machinevisionproducts.com'
forest_name : 'machinevisionproducts.com'
dn : NULL
domain_sid : *
domain_sid :
S-1-5-21-628366763-1421964521-7473742
modified_config : 0x00 (0)
error_string : 'failed to set machine spn:
Operations error'
domain_is_ad : 0x01 (1)
result : WERR_GENERAL_FAILURE
[2011/01/21 09:50:41.363847, 10] intl/lang_tdb.c:138(lang_tdb_init)
lang_tdb_init: /usr/lib64/samba/en_US.UTF-8.msg: No such file or directory
[2011/01/21 09:50:41.363930, 2] utils/net.c:916(main)
return code = -1
Failed to join domain: failed to set machine spn: Operations error
