search for: lsass

...e: Known pipe NETLOGON opening. [2005/07/05 15:35:23, 3] smbd/process.c:(858) Transaction 7269 of length 140 [2005/07/05 15:35:23, 3] smbd/process.c:(696) switch message SMBwriteX (pid 26434) [2005/07/05 15:35:23, 3] rpc_server/srv_pipe.c:(796) api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass [2005/07/05 15:35:23, 3] smbd/pipes.c:(197) writeX-IPC pnum=74a9 nwritten=72 [2005/07/05 15:35:23, 3] smbd/process.c:(858) Transaction 7270 of length 63 [2005/07/05 15:35:23, 3] smbd/process.c:(696) switch message SMBreadX (pid 26434) [2005/07/05 15:35:23, 3] smbd/pipes.c:(238) readX-IP...

...account for the associated mailbox in the Exchange admin program. So i though, Maybe exchange is somehow looking on the old PDC for account data. I was able to confirm my suspicion using an application called regmon which records access to the registry. From the following out put i can see the lsass.exe program searching the SAM portion of the registry for the user account. Output using the regmon utility ------- 20490 160.25828604 lsass.exe:48 OpenKey HKLM\SAM\SAM\DOMAINS\Account\Groups\00002F6A NOTFOUND 20491 160.25839958 lsass.exe:48 OpenKey HKLM\SAM\SAM\DOMAINS\Accou...

...I get the following error in my /var/log/syslog on client side message repeated 10 times: [ [LwKrb5GetTgtImpl /builder/src-buildserver/Platform-8.2/src/linux/lwadvapi/threaded/krbtgt.c:276] KRB5 Error code: -1765328161 (Message: Looping detected inside krb5_get_in_tkt)] Jul 8 12:23:48 ba-tec-06 lsass: [lsass] Failed to authenticate user (name = 'usertest') -> error = 41956, symbol = LW_ERROR_KRB5_GET_IN_TKT_LOOP, client pid = 15191 I have no errors on the server side. Few desktops face the issue and I can't get the reason of the kerberos looping ticket. Thanks for your help...

...ation Eventlog: Log Name: Application Source: Application Error Date: 27/07/2011 16:25:07 Event ID: 1000 Task Category: (100) Level: Error Keywords: Classic User: N/A Computer: LIVEDC.ad.gordian.co.uk Description: Faulting application lsass.exe, version 6.0.6002.18005, time stamp 0x49e01c84, faulting module ntdll.dll, version 6.0.6002.18005, time stamp 0x49e02d47, exception code 0x80000003, fault offset 0x000348d8, process id 0x244, application start time 0x01cc41619f198970. Event Xml: <Event xmlns="http://schemas.microso...

Dear I have one virtual machine running Windows Server 2003 with 64 for role Domain Controller. A two weeks ago I see by task manager CPU graph is always using 100%, list the process on running are Taskmgr.exe , tcpsvsc.exe lsass.exe and others process . I never see before process like that using a lot CPU . Is possible there is issues between XEN source and Windows Server 2003 ? I did test with antivirus and update windows for last update for 2003, but the still problem. Somebody have idea for solve this ? Information...

...nto a XP machine (Domain controller not found or machine account not valid ...) Samba shows: eb 6 09:48:03 rk01 smbd[14115]: [2007/02/06 09:48:03, 0] rpc_server/srv_dce_funnel.c:ncalrpc_open_funnel_socket(68) Feb 6 09:48:03 rk01 smbd[14115]: ncalrpc_open_funnel_socket: could not access /PIPE/lsass Feb 6 09:48:03 rk01 smbd[14115]: [2007/02/06 09:48:03, 0] rpc_server/srv_dce_funnel.c:ncalrpc_make_funnel(237) Feb 6 09:48:03 rk01 smbd[14115]: ncalrpc_make_funnel: could not open socket for funnel pipe NETLOGON Feb 6 09:48:03 rk01 smbd[14115]: [2007/02/06 09:48:03, 0] rpc_server/srv_pipe_h...

...[covers] comment = cover images for manuals path = /srv/mediawiki/local/covers browsable = yes writeable = yes read list = @wikiread write list = @wikiwrite guest ok = no create mask = 0775 /etc/nsswitch.conf: passwd: compat lsass winbind group: compat lsass winbind shadow: compat hosts: files dns winbind wins networks: files protocols: db files services: db files ethers: db files rpc: db files netgroup: nis

...ll support (nice fellow, not his fault) I find that now the 2008 Server is too *new* for the Samba NT4 PDC model. I got this box joined fine with my domain, but any time I try to log into it over RDP, and the new box authenticates with samba (and samba talks to OpenLDAP) the box boots with an 'lsass' error. The Dell fellow has two suggestions, either redesign my network to use AD instead of OpenLDAP moving the PDC away from samba, or create and use local accounts on the new box. Local accounts is what I've been getting away from. Any thoughts, suggestions, help on how to make this ne...

Dear I have connected samba 3.6.8 to my Active Directory in the lsass.exe run to 100% When stopping winbind the lsass.exe CPU is down to 0% When set winbindd to debug mode, it seems it try to scan the root user every time. I would to know how to ban nsswitch to query winbindd for system internal users such has root, apache..... Here it is my nsswitch.conf : # #...

On Thu, 1 Dec 2016 14:08:55 +0100 Fujisan via samba <samba at lists.samba.org> wrote: > I have: > A/ 1 F25 freeipa server > B/ 1 F25 freeipa client > C/ 1 F24 freeipa client > D/ 1 windows desktop > > I can access linux shares of A from D. > I can access linux shares of C from D. > I *cannot* access linux shares of B from D. > So, ignoring

...up for name LDAPS<0x20> getlmhostsent: lmhost entry: 127.0.0.1 localhost getlmhostsent: lmhost entry: 157.27.241.11 LDAPS Connecting to 157.27.241.11 at port 445 error connecting to 157.27.241.11:445 (Connection refused) Connecting to 157.27.241.11 at port 139 bind_rpc_pipe: pipe_name \PIPE\lsass != expected pipe \PIPE\lsarpcd. oh well! resolve_lmhosts: Attempting lmhosts lookup for name LDAPS<0x20> getlmhostsent: lmhost entry: 127.0.0.1 localhost getlmhostsent: lmhost entry: 157.27.241.11 LDAPS Connecting to 157.27.241.11 at port 445 error connecting to 157.27.241.11:445 (Connecti...

...ldapsam:trusted = yes ldap ssl = off ldap suffix = dc=mydomain ldap user suffix = cn=users,cn=accounts ldap group suffix = cn=groups,cn=accounts ldap machine suffix = cn=computers,cn=accounts rpc_server:epmapper = external rpc_server:lsarpc = external rpc_server:lsass = external rpc_server:lsasd = external rpc_server:samr = external rpc_server:netlogon = external rpc_server:tcpip = yes rpc_daemon:epmd = fork rpc_daemon:lsasd = fork security = user enable core files = no log level = 2 [homes] comment = Home Directories...

...x0) smb_vwv[6]=68 (0x44) smb_vwv[7]=56 (0x38) smb_vwv[8]=0 (0x0) smb_vwv[9]=0 (0x0) smb_bcc=69 [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 05 00 00 ........ .D...... [010] 00 B8 10 B8 10 F8 85 03 00 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=12290 smb_pid=12371 smb_uid=28674 smb_mid=1 smt_wct=10 smb_vwv[0...

...= MYDOMAIN netbios name = F25SERVER server string = Samba Server Version %v kerberos method = dedicated keytab dedicated keytab file = FILE:/etc/samba/samba.keytab log file = /var/log/samba/log.%m rpc_server:epmapper = external rpc_server:lsarpc = external rpc_server:lsass = external rpc_server:lsasd = external rpc_server:samr = external rpc_server:netlogon = external rpc_server:tcpip = yes rpc_daemon:epmd = fork rpc_daemon:lsasd = fork security = user map untrusted to domain = Yes smb ports = 139 445 ntlm auth = yes log le...

...ussinovich > http://www.sysinternals.com > > Pipe Name????????????????????????????????????Instances???????Max > Instances > ---------????????????????????????????????????---------???????-------- > ----- > InitShutdown??????????????????????????????????????3???????????????-1 > lsass?????????????????????????????????????????????4???????????????-1 > ntsvcs????????????????????????????????????????????3???????????????-1 > scerpc????????????????????????????????????????????3???????????????-1 > Winsock2\CatalogChangeListener-2b8-0??????????????1????????????????1 > epmapper?...

...x0) smb_vwv[6]=68 (0x44) smb_vwv[7]=56 (0x38) smb_vwv[8]=0 (0x0) smb_vwv[9]=0 (0x0) smb_bcc=69 [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 A9 8B 00 00 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=8198 smb_pid=29260 smb_uid=10241 smb_mid=1 smt_wct=10 smb_vwv[0...

...= MYDOMAIN netbios name = F25SERVER server string = Samba Server Version %v kerberos method = dedicated keytab dedicated keytab file = FILE:/etc/samba/samba.keytab log file = /var/log/samba/log.%m rpc_server:epmapper = external rpc_server:lsarpc = external rpc_server:lsass = external rpc_server:lsasd = external rpc_server:samr = external rpc_server:netlogon = external rpc_server:tcpip = yes rpc_daemon:epmd = fork rpc_daemon:lsasd = fork security = user map untrusted to domain = Yes smb ports = 139 445 log level = 2 [data]...

...x0) smb_vwv[6]=68 (0x44) smb_vwv[7]=56 (0x38) smb_vwv[8]=0 (0x0) smb_vwv[9]=0 (0x0) smb_bcc=69 [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [010] 00 30 16 30 16 6F D4 00 00 0C 00 5C 50 49 50 45 .0.0.o.. ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=32769 smb_tid=6149 smb_pid=23279 smb_uid=10243 smb_mid=1 smt_wct=10 smb_vwv[0]...

Rowland penny via samba ha scritto il 27/08/20 alle 16:43: > [...] > Netbios is intrinsically tied to SMBv1 and? LLMNR (Link-Local Multicast > Name Resolution) is also connected in a way, it allows name resolutions > without a nameserver. So, if you are using it, I personally wouldn't, > ever heard of MITM ? Just to understand a little more... NetBIOS with a wins server

...dap ssl = off ldap suffix = dc=bolls,dc=lan ldap user suffix = cn=users,cn=accounts ldap group suffix = cn=groups,cn=accounts ldap machine suffix = cn=computers,cn=accounts rpc_server:epmapper = external rpc_server:lsarpc = external rpc_server:lsass = external rpc_server:lsasd = external rpc_server:samr = external rpc_server:netlogon = external rpc_server:tcpip = yes rpc_daemon:epmd = fork rpc_daemon:lsasd = fork logon path = \\%L\Profiles\%U logon drive = H: logon home =...