I'm working throught he samba 3 HOWTO on create a samba PDC and I have
to admit to being completely stuck. The samba server seems fine and I
can get an XP machine to join the domain with no problem. However no
user can log in. The XP machine claims that the domain controller is
not available to authenticate the password.

I've attached the rather long debug output from the authentication
attempt and I would appreciate any help you can offer in finding what
went wrong. All I can see is that everything was burbling along happily
when the client disconnected unexpectedly.

This is samba on FEDORA-1 with a client system called "jon" and me
trying to log in as csa01.

--
______ jonathan@cs.keele.ac.uk Jonathan Knight,
/ Department of Computer Science
/ _ __ Telephone: +44 1782 583437 University of Keele, Keele,
(_/ (_) / / Fax : +44 1782 713082 Staffordshire. ST5 5BG. U.K.



[2004/04/27 10:34:51, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1297)
getsampwnam (smbpasswd): search by name: csa01
[2004/04/27 10:34:51, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(179)
startsmbfilepwent_internal: opening file /etc/samba/smbpasswd
[2004/04/27 10:34:51, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user root, uid 0
[2004/04/27 10:34:51, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user jon$, uid 200
[2004/04/27 10:34:51, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user csa01, uid 732
[2004/04/27 10:34:51, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(291)
endsmbfilepwent_internal: closed password file.
[2004/04/27 10:34:51, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1319)
getsampwnam (smbpasswd): found by name: csa01
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_username(593)
pdb_set_username: setting username csa01, was
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 11 -> now SET
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_fullname(674)
pdb_set_full_name: setting full name J. Knight, was
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 12 -> now SET
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_unix_homedir(809)
pdb_set_unix_homedir: setting home dir /users/cs/csa01, was NULL
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 21 -> now SET
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_domain(620)
pdb_set_domain: setting domain XPTEST, was
[2004/04/27 10:34:51, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 13 -> now DEFAULT
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_user_sid(520)
pdb_set_user_sid: setting user sid
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 17 -> now SET
[2004/04/27 10:34:51, 10]
passdb/pdb_compat.cdb_set_user_sid_from_rid(73)
pdb_set_user_sid_from_rid:
setting user sid S-1-5-21-2324681465-600362970-2274977070-2464 from
rid 2464
[2004/04/27 10:34:51, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2004/04/27 10:34:51, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2004/04/27 10:34:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2004/04/27 10:34:51, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:51, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 16) -> 16
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 22) -> 22
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 25) -> 25
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 24) -> 24
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 27) -> 27
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:51, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 15) -> 15
[2004/04/27 10:34:51, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_group_sid(556)
pdb_set_group_sid: setting group sid
S-1-5-21-2324681465-600362970-2274977070-1853
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 18 -> now SET
[2004/04/27 10:34:51, 10]
passdb/pdb_compat.cdb_set_group_sid_from_rid(100)
pdb_set_group_sid_from_rid:
setting group sid S-1-5-21-2324681465-600362970-2274977070-1853 from
rid 1853
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_profile_path(728)
pdb_set_profile_path: setting profile path \\matthews.kis\Profiles,
was
[2004/04/27 10:34:51, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 2 -> now DEFAULT
[2004/04/27 10:34:51, 4] lib/substitute.c:automount_server(318)
Home server: mitchell
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_homedir(782)
pdb_set_homedir: setting home dir \\mitchell\csa01, was
[2004/04/27 10:34:51, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 1 -> now DEFAULT
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_dir_drive(755)
pdb_set_dir_drive: setting dir drive , was NULL
[2004/04/27 10:34:51, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 3 -> now DEFAULT
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_logon_script(701)
pdb_set_logon_script: setting logon script logon.bat, was
[2004/04/27 10:34:51, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 4 -> now DEFAULT
[2004/04/27 10:34:51, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 19 -> now DEFAULT
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 32 -> now SET
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 31 -> now SET
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 19 -> now SET
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 20 -> now SET
[2004/04/27 10:34:51, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 8 -> now SET
[2004/04/27 10:34:51, 11] passdb/pdb_get_set.cdb_get_init_flags(189)
element 20: SET
[2004/04/27 10:34:51, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (732, 426) - sec_ctx_stack_ndx = 0
[2004/04/27 10:34:51, 5]
rpc_parse/parse_samr.c:init_samr_r_lookup_names(4709)
init_samr_r_lookup_names
[2004/04/27 10:34:51, 5]
rpc_server/srv_samr_nt.c:_samr_lookup_names(1429)
_samr_lookup_names: 1429
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_lookup_names
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 num_rids1: 00000001
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 ptr_rids : 00000001
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
0008 num_rids2: 00000001
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
000c rid[00] : 000009a0
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 num_types1: 00000001
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
0014 ptr_types : 00000001
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
0018 num_types2: 00000001
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
001c type[00] : 00000001
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_ntstatus(665)
0020 status: NT_STATUS_OK
[2004/04/27 10:34:51, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:51, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 44
[2004/04/27 10:34:51, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 74
[2004/04/27 10:34:51, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:51, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 36.
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 003c
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 00000006
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 00000024
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:51, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:51, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..60]
[2004/04/27 10:34:51, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:51, 5] lib/util.c:show_msg(488)
size=116
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1088
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 60 (0x3C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 60 (0x3C)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=61
[2004/04/27 10:34:51, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 3C 00 00 00 06 00 00 ........
..<......
[010] 00 24 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .$......
.........
[020] 00 01 00 00 00 A0 09 00 00 01 00 00 00 01 00 00 ........
.........
[030] 00 01 00 00 00 01 00 00 00 00 00 00 00 ........ .....
[2004/04/27 10:34:51, 6] lib/util_sock.c:write_socket(407)
write_socket(16,120)
[2004/04/27 10:34:51, 6] lib/util_sock.c:write_socket(410)
write_socket(16,120) wrote 120
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 136
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x88
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 19 of length 140
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=136
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1152
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 52 (0x34)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 52 (0x34)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29220 (0x7224)
smb_bcc=69
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] BE 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 54 .\.P.I.P
..E.\...T
[010] E1 05 00 00 03 10 00 00 00 34 00 00 00 07 00 00 ........
..4......
[020] 00 1C 00 00 00 00 00 22 00 00 00 00 00 02 00 00 ......."
.........
[030] 00 00 00 00 00 3B 29 8E 40 18 63 00 00 1B 01 02 ......
@.c.....
[040] 00 A0 09 00 00 .....
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=52 params=0 setup=2
[2004/04/27 10:34:52, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2004/04/27 10:34:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2004/04/27 10:34:52, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7224)api_fd_reply:
p:0x8a02e90 max_trans_reply: 1024
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
write_to_pipe: 7224 name: samr open: Yes len: 52
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 52
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
0, incoming data = 52
[2004/04/27 10:34:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 52, len_needed_to_complete_hdr = 16,
receive_len = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 16
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 36
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len =
0, incoming data = 36
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0034
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 00000007
[2004/04/27 10:34:52, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 36
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
36, incoming data = 36
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr_req req
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 alloc_hint: 0000001c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0006 opnum : 0022
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1468)
Requested \PIPE\samr
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502)
api_rpcTNP: samr op 0x22 - api_rpcTNP: rpc command: SAMR_OPEN_USER
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528)
api_rpc_cmds[20].fn == 0x402dd0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_q_open_user
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd domain_pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000002
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3b 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0014 access_mask: 0002011b
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0018 user_rid : 000009a0
[2004/04/27 10:34:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[1] [000] 00 00 00 00 02 00 00 00 00 00 00 00 3B 29
8E 40 ........ .....@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 5]
rpc_server/srv_samr_nt.c:access_check_samr_function(106)
_samr_open_user: access check ((granted: 0x00000200; required:
0x00000200)
[2004/04/27 10:34:52, 10] lib/util_seaccess.c:se_access_check(234)
se_access_check: requested access 0x0002011b, for NT token with 5
entries and first sid S-1-5-21-2324681465-600362970-2274977070-2464.
[2004/04/27 10:34:52, 3] lib/util_seaccess.c:se_access_check(251)
[2004/04/27 10:34:52, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is
S-1-5-21-2324681465-600362970-2274977070-2464
se_access_check: also S-1-5-21-2324681465-600362970-2274977070-1853
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask =
2035b, current desired = 2011b
[2004/04/27 10:34:52, 5] lib/util_seaccess.c:se_access_check(309)
se_access_check: access (2011b) granted.
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(732, 426) : sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1346)
smbpasswd_getsampwrid: search by sid:
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(179)
startsmbfilepwent_internal: opening file /etc/samba/smbpasswd
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user root, uid 0
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user jon$, uid 200
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user csa01, uid 732
[2004/04/27 10:34:52, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(291)
endsmbfilepwent_internal: closed password file.
[2004/04/27 10:34:52, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1379)
getsampwrid (smbpasswd): found by name: csa01
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_username(593)
pdb_set_username: setting username csa01, was
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 11 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_fullname(674)
pdb_set_full_name: setting full name J. Knight, was
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 12 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_unix_homedir(809)
pdb_set_unix_homedir: setting home dir /users/cs/csa01, was NULL
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 21 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_domain(620)
pdb_set_domain: setting domain XPTEST, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 13 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_user_sid(520)
pdb_set_user_sid: setting user sid
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 17 -> now SET
[2004/04/27 10:34:52, 10]
passdb/pdb_compat.cdb_set_user_sid_from_rid(73)
pdb_set_user_sid_from_rid:
setting user sid S-1-5-21-2324681465-600362970-2274977070-2464 from
rid 2464
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 16) -> 16
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 22) -> 22
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 25) -> 25
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 24) -> 24
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 27) -> 27
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 15) -> 15
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_group_sid(556)
pdb_set_group_sid: setting group sid
S-1-5-21-2324681465-600362970-2274977070-1853
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 18 -> now SET
[2004/04/27 10:34:52, 10]
passdb/pdb_compat.cdb_set_group_sid_from_rid(100)
pdb_set_group_sid_from_rid:
setting group sid S-1-5-21-2324681465-600362970-2274977070-1853 from
rid 1853
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_profile_path(728)
pdb_set_profile_path: setting profile path \\matthews.kis\Profiles,
was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 2 -> now DEFAULT
[2004/04/27 10:34:52, 4] lib/substitute.c:automount_server(318)
Home server: mitchell
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_homedir(782)
pdb_set_homedir: setting home dir \\mitchell\csa01, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 1 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_dir_drive(755)
pdb_set_dir_drive: setting dir drive , was NULL
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 3 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_logon_script(701)
pdb_set_logon_script: setting logon script logon.bat, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 4 -> now DEFAULT
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 19 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 32 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 31 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 19 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 20 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 8 -> now SET
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_get_init_flags(189)
element 20: SET
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (732, 426) - sec_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_samr_nt.c:get_samr_info_by_sid(144)
get_samr_info_by_sid: created new info for sid
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 4] rpc_server/srv_lsa_hnd.c:create_policy_hnd(142)
Opened policy hnd[4] [000] 00 00 00 00 04 00 00 00 00 00 00 00 3C 29
8E 40 ........ ....<).@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_open_user
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd user_pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000004
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3c 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_ntstatus(665)
0014 status: NT_STATUS_OK
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 1459
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 36
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 24.
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0030
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 00000007
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 00000018
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:52, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..48]
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=104
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1152
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 48 (0x30)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=49
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 30 00 00 00 07 00 00 ........
..0......
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 04 00 00 ........
.........
[020] 00 00 00 00 00 3C 29 8E 40 18 63 00 00 00 00 00 .....<).
@.c.....
[030] 00 .
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,108)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,108) wrote 108
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 130
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x82
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 20 of length 134
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=130
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1216
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 46 (0x2E)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 46 (0x2E)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29220 (0x7224)
smb_bcc=63
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] BE 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 54 .\.P.I.P
..E.\...T
[010] E1 05 00 00 03 10 00 00 00 2E 00 00 00 08 00 00 ........
.........
[020] 00 16 00 00 00 00 00 24 00 00 00 00 00 04 00 00 .......$
.........
[030] 00 00 00 00 00 3C 29 8E 40 18 63 00 00 15 00 .....<).
@.c....
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=46 params=0 setup=2
[2004/04/27 10:34:52, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2004/04/27 10:34:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2004/04/27 10:34:52, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7224)api_fd_reply:
p:0x8a02e90 max_trans_reply: 1024
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
write_to_pipe: 7224 name: samr open: Yes len: 46
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 46
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
0, incoming data = 46
[2004/04/27 10:34:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 46, len_needed_to_complete_hdr = 16,
receive_len = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 16
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 30
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len =
0, incoming data = 30
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 002e
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 00000008
[2004/04/27 10:34:52, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 30
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
30, incoming data = 30
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr_req req
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 alloc_hint: 00000016
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0006 opnum : 0024
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1468)
Requested \PIPE\samr
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502)
api_rpcTNP: samr op 0x24 - api_rpcTNP: rpc command:
SAMR_QUERY_USERINFO
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528)
api_rpc_cmds[21].fn == 0x402f60
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_q_query_userinfo
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000004
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3c 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 switch_value: 0015
[2004/04/27 10:34:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 04 00 00 00 00 00 00 00 3C 29
8E 40 ........ ....<).@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 5]
rpc_server/srv_samr_nt.c:_samr_query_userinfo(1829)
_samr_query_userinfo:
sid:S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(732, 426) : sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1346)
smbpasswd_getsampwrid: search by sid:
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(179)
startsmbfilepwent_internal: opening file /etc/samba/smbpasswd
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user root, uid 0
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user jon$, uid 200
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user csa01, uid 732
[2004/04/27 10:34:52, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(291)
endsmbfilepwent_internal: closed password file.
[2004/04/27 10:34:52, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1379)
getsampwrid (smbpasswd): found by name: csa01
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_username(593)
pdb_set_username: setting username csa01, was
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 11 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_fullname(674)
pdb_set_full_name: setting full name J. Knight, was
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 12 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_unix_homedir(809)
pdb_set_unix_homedir: setting home dir /users/cs/csa01, was NULL
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 21 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_domain(620)
pdb_set_domain: setting domain XPTEST, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 13 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_user_sid(520)
pdb_set_user_sid: setting user sid
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 17 -> now SET
[2004/04/27 10:34:52, 10]
passdb/pdb_compat.cdb_set_user_sid_from_rid(73)
pdb_set_user_sid_from_rid:
setting user sid S-1-5-21-2324681465-600362970-2274977070-2464 from
rid 2464
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 16) -> 16
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 22) -> 22
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 25) -> 25
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 24) -> 24
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 27) -> 27
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 15) -> 15
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_group_sid(556)
pdb_set_group_sid: setting group sid
S-1-5-21-2324681465-600362970-2274977070-1853
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 18 -> now SET
[2004/04/27 10:34:52, 10]
passdb/pdb_compat.cdb_set_group_sid_from_rid(100)
pdb_set_group_sid_from_rid:
setting group sid S-1-5-21-2324681465-600362970-2274977070-1853 from
rid 1853
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_profile_path(728)
pdb_set_profile_path: setting profile path \\matthews.kis\Profiles,
was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 2 -> now DEFAULT
[2004/04/27 10:34:52, 4] lib/substitute.c:automount_server(318)
Home server: mitchell
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_homedir(782)
pdb_set_homedir: setting home dir \\mitchell\csa01, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 1 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_dir_drive(755)
pdb_set_dir_drive: setting dir drive , was NULL
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 3 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_logon_script(701)
pdb_set_logon_script: setting logon script logon.bat, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 4 -> now DEFAULT
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 19 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 32 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 31 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 19 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 20 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 8 -> now SET
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_get_init_flags(189)
element 20: SET
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (732, 426) - sec_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 31 -> now DEFAULT
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 32 -> now DEFAULT
[2004/04/27 10:34:52, 3] rpc_server/srv_samr_nt.c:get_user_info_21(1795)
User:[csa01]
[2004/04/27 10:34:52, 5]
rpc_parse/parse_samr.c:init_samr_r_query_userinfo(6456)
init_samr_r_query_userinfo
[2004/04/27 10:34:52, 5]
rpc_server/srv_samr_nt.c:_samr_query_userinfo(1908)
_samr_query_userinfo: 1908
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_query_userinfo
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 ptr: 00000001
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000004 samr_io_userinfo_ctr ctr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 switch_value: 0015
[2004/04/27 10:34:52, 7] rpc_parse/parse_prs.crs_debug(82)
000008 sam_io_user_info21
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000008 smb_io_time logon_time
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0008 low : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c high: 00000000
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_time logoff_time
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 low : ffffffff
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0014 high: 7fffffff
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000018 smb_io_time pass_last_set_time
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0018 low : 46df6c00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
001c high: 01c41bbe
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000020 smb_io_time kickoff_time
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0020 low : ffffffff
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0024 high: 7fffffff
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000028 smb_io_time pass_can_change_time
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0028 low : 46df6c00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
002c high: 01c41bbe
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000030 smb_io_time pass_must_change_time
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0030 low : ffffffff
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0034 high: 7fffffff
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000038 smb_io_unihdr hdr_user_name
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0038 uni_str_len: 000c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
003a uni_max_len: 000c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
003c buffer : 00000001
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000040 smb_io_unihdr hdr_full_name
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0040 uni_str_len: 0014
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0042 uni_max_len: 0014
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0044 buffer : 00000001
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000048 smb_io_unihdr hdr_home_dir
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0048 uni_str_len: 0022
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
004a uni_max_len: 0022
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
004c buffer : 00000001
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000050 smb_io_unihdr hdr_dir_drive
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0050 uni_str_len: 0002
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0052 uni_max_len: 0002
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0054 buffer : 00000001
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000058 smb_io_unihdr hdr_logon_script
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0058 uni_str_len: 0014
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
005a uni_max_len: 0014
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
005c buffer : 00000001
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000060 smb_io_unihdr hdr_profile_path
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0060 uni_str_len: 0030
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0062 uni_max_len: 0030
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0064 buffer : 00000001
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000068 smb_io_unihdr hdr_acct_desc
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0068 uni_str_len: 0002
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
006a uni_max_len: 0002
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
006c buffer : 00000001
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000070 smb_io_unihdr hdr_workstations
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0070 uni_str_len: 0002
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0072 uni_max_len: 0002
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0074 buffer : 00000001
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000078 smb_io_unihdr hdr_unknown_str
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0078 uni_str_len: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
007a uni_max_len: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
007c buffer : 00000000
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000080 smb_io_unihdr hdr_munged_dial
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0080 uni_str_len: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0082 uni_max_len: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0084 buffer : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
0088 lm_pwd : 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
0098 nt_pwd : 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00a8 user_rid : 000009a0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00ac group_rid : 0000073d
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00b0 acb_info : 00000010
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00b4 unknown_3 : 00ffffff
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
00b8 logon_divs : 00a8
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00bc ptr_logon_hrs : 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
00c0 bad_password_count : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
00c2 logon_count : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
00c4 padding1 : 00 00 00 00 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
00ca passmustchange : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
00cb padding2 : 00
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
0000cc smb_io_unistr2 uni_user_name
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00cc uni_max_len: 00000006
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00d0 offset : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00d4 uni_str_len: 00000006
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
00d8 buffer : c.s.a.0.1...
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
0000e4 smb_io_unistr2 uni_full_name
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00e4 uni_max_len: 0000000a
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00e8 offset : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
00ec uni_str_len: 0000000a
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
00f0 buffer : J... .K.n.i.g.h.t...
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000104 smb_io_unistr2 uni_home_dir
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0104 uni_max_len: 00000011
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0108 offset : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
010c uni_str_len: 00000011
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
0110 buffer : \.\.m.i.t.c.h.e.l.l.\.c.s.a.0.1...
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000132 smb_io_unistr2 uni_dir_drive
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0134 uni_max_len: 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0138 offset : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
013c uni_str_len: 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
0140 buffer : ..
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000142 smb_io_unistr2 uni_logon_script
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0144 uni_max_len: 0000000a
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0148 offset : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
014c uni_str_len: 0000000a
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
0150 buffer : l.o.g.o.n...b.a.t...
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000164 smb_io_unistr2 uni_profile_path
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0164 uni_max_len: 00000018
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0168 offset : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
016c uni_str_len: 00000018
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
0170 buffer :
\.\.m.a.t.t.h.e.w.s...k.i.s.\.P.r.o.f.i.l.e.s...
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
0001a0 smb_io_unistr2 uni_acct_desc
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
01a0 uni_max_len: 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
01a4 offset : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
01a8 uni_str_len: 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
01ac buffer : ..
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
0001ae smb_io_unistr2 uni_workstations
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
01b0 uni_max_len: 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
01b4 offset : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
01b8 uni_str_len: 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
01bc buffer : ..
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
0001be smb_io_unistr2 - NULL uni_unknown_str
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
0001be smb_io_unistr2 - NULL uni_munged_dial
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
01c0 unknown_6 : 000004ec
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
01c4 padding4 : 00000000
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
0001c8 sam_io_logon_hrs logon_hrs
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
01c8 len : 00000015
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
01cc hours: ff ff ff ff ff ff ff ff ff ff ff ff ff ff
ff ff ff ff ff ff ff
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_ntstatus(665)
01e4 status: NT_STATUS_OK
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 6031
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 30
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 488.
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0200
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 00000008
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 000001e8
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:52, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..512]
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=568
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1216
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 512 (0x200)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 512 (0x200)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=513
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 00 02 00 00 08 00 00 ........
.........
[010] 00 E8 01 00 00 00 00 00 00 01 00 00 00 15 00 00 ........
.........
[020] 00 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF ........
.........
[030] 7F 00 6C DF 46 BE 1B C4 01 FF FF FF FF FF FF FF ..l.F...
.........
[040] 7F 00 6C DF 46 BE 1B C4 01 FF FF FF FF FF FF FF ..l.F...
.........
[050] 7F 0C 00 0C 00 01 00 00 00 14 00 14 00 01 00 00 ........
.........
[060] 00 22 00 22 00 01 00 00 00 02 00 02 00 01 00 00 ."."....
.........
[070] 00 14 00 14 00 01 00 00 00 30 00 30 00 01 00 00 ........
..0.0....
[080] 00 02 00 02 00 01 00 00 00 02 00 02 00 01 00 00 ........
.........
[090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[0C0] 00 A0 09 00 00 3D 07 00 00 10 00 00 00 FF FF FF .....=..
.........
[0D0] 00 A8 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ........
.........
[0E0] 00 00 00 00 00 06 00 00 00 00 00 00 00 06 00 00 ........
.........
[0F0] 00 63 00 73 00 61 00 30 00 31 00 00 00 0A 00 00 .c.s.a.0
..1......
[100] 00 00 00 00 00 0A 00 00 00 4A 00 2E 00 20 00 4B ........ .J...
..K
[110] 00 6E 00 69 00 67 00 68 00 74 00 00 00 11 00 00 .n.i.g.h
..t......
[120] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 6D 00 69 ........
..\.\.m.i
[130] 00 74 00 63 00 68 00 65 00 6C 00 6C 00 5C 00 63 .t.c.h.e
..l.l.\.c
[140] 00 73 00 61 00 30 00 31 00 00 00 00 00 01 00 00 .s.a.0.1
.........
[150] 00 00 00 00 00 01 00 00 00 00 00 00 00 0A 00 00 ........
.........
[160] 00 00 00 00 00 0A 00 00 00 6C 00 6F 00 67 00 6F ........
..l.o.g.o
[170] 00 6E 00 2E 00 62 00 61 00 74 00 00 00 18 00 00 .n...b.a
..t......
[180] 00 00 00 00 00 18 00 00 00 5C 00 5C 00 6D 00 61 ........
..\.\.m.a
[190] 00 74 00 74 00 68 00 65 00 77 00 73 00 2E 00 6B .t.t.h.e
..w.s...k
[1A0] 00 69 00 73 00 5C 00 50 00 72 00 6F 00 66 00 69 .i.s.\.P
..r.o.f.i
[1B0] 00 6C 00 65 00 73 00 00 00 01 00 00 00 00 00 00 .l.e.s..
.........
[1C0] 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........
.........
[1D0] 00 01 00 00 00 00 00 00 00 EC 04 00 00 00 00 00 ........
.........
[1E0] 00 15 00 00 00 FF FF FF FF FF FF FF FF FF FF FF ........
.........
[1F0] FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 ........
.........
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,572)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,572) wrote 572
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 132
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x84
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 21 of length 136
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=132
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1280
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 48 (0x30)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29220 (0x7224)
smb_bcc=65
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] BE 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 54 .\.P.I.P
..E.\...T
[010] E1 05 00 00 03 10 00 00 00 30 00 00 00 09 00 00 ........
..0......
[020] 00 18 00 00 00 00 00 03 00 00 00 00 00 04 00 00 ........
.........
[030] 00 00 00 00 00 3C 29 8E 40 18 63 00 00 04 00 00 .....<).
@.c.....
[040] 00 .
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=48 params=0 setup=2
[2004/04/27 10:34:52, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2004/04/27 10:34:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2004/04/27 10:34:52, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7224)api_fd_reply:
p:0x8a02e90 max_trans_reply: 1024
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
write_to_pipe: 7224 name: samr open: Yes len: 48
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 48
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
0, incoming data = 48
[2004/04/27 10:34:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 48, len_needed_to_complete_hdr = 16,
receive_len = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 16
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 32
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len =
0, incoming data = 32
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0030
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 00000009
[2004/04/27 10:34:52, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 32
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
32, incoming data = 32
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr_req req
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 alloc_hint: 00000018
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0006 opnum : 0003
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1468)
Requested \PIPE\samr
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502)
api_rpcTNP: samr op 0x3 - api_rpcTNP: rpc command:
SAMR_QUERY_SEC_OBJECT
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528)
api_rpc_cmds[42].fn == 0x401f40
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_q_query_sec_obj
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd user_pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000004
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3c 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0014 sec_info: 00000004
[2004/04/27 10:34:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 04 00 00 00 00 00 00 00 3C 29
8E 40 ........ ....<).@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 10]
rpc_server/srv_samr_nt.c:_samr_query_sec_obj(646)
_samr_query_sec_obj: querying security on SID:
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 10]
rpc_server/srv_samr_nt.c:_samr_query_sec_obj(673)
_samr_query_sec_obj: querying security on Object with SID:
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_query_sec_obj
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 ptr: 00000001
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000004 sec_io_desc_buf sec
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0008 ptr : 00000001
[2004/04/27 10:34:52, 7] rpc_parse/parse_prs.crs_debug(82)
000010 sec_io_desc sec
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0010 revision : 0001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0012 type : 8004
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0014 off_owner_sid: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0018 off_grp_sid : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
001c off_sacl : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0020 off_dacl : 00000014
[2004/04/27 10:34:52, 8] rpc_parse/parse_prs.crs_debug(82)
000024 sec_io_acl dacl
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0024 revision: 0002
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0028 num_aces : 00000004
[2004/04/27 10:34:52, 9] rpc_parse/parse_prs.crs_debug(82)
00002c sec_io_ace ace_list[00]:
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
002c type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
002d flags: 00
[2004/04/27 10:34:52, 10] rpc_parse/parse_prs.crs_debug(82)
000030 sec_io_access info
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0030 mask: 0002035b
[2004/04/27 10:34:52, 10] rpc_parse/parse_prs.crs_debug(82)
000034 smb_io_dom_sid trustee
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0034 sid_rev_num: 01
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0035 num_auths : 01
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0036 id_auth[0] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0037 id_auth[1] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0038 id_auth[2] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0039 id_auth[3] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
003a id_auth[4] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
003b id_auth[5] : 01
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32s(862)
003c sub_auths : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
002e size : 0014
[2004/04/27 10:34:52, 9] rpc_parse/parse_prs.crs_debug(82)
000040 sec_io_ace ace_list[01]:
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0040 type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0041 flags: 00
[2004/04/27 10:34:52, 10] rpc_parse/parse_prs.crs_debug(82)
000044 sec_io_access info
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0044 mask: 000f07ff
[2004/04/27 10:34:52, 10] rpc_parse/parse_prs.crs_debug(82)
000048 smb_io_dom_sid trustee
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0048 sid_rev_num: 01
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0049 num_auths : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
004a id_auth[0] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
004b id_auth[1] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
004c id_auth[2] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
004d id_auth[3] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
004e id_auth[4] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
004f id_auth[5] : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32s(862)
0050 sub_auths : 00000020 00000220
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0042 size : 0018
[2004/04/27 10:34:52, 9] rpc_parse/parse_prs.crs_debug(82)
000058 sec_io_ace ace_list[02]:
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0058 type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0059 flags: 00
[2004/04/27 10:34:52, 10] rpc_parse/parse_prs.crs_debug(82)
00005c sec_io_access info
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
005c mask: 000f07ff
[2004/04/27 10:34:52, 10] rpc_parse/parse_prs.crs_debug(82)
000060 smb_io_dom_sid trustee
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0060 sid_rev_num: 01
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0061 num_auths : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0062 id_auth[0] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0063 id_auth[1] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0064 id_auth[2] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0065 id_auth[3] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0066 id_auth[4] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0067 id_auth[5] : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32s(862)
0068 sub_auths : 00000020 00000224
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
005a size : 0018
[2004/04/27 10:34:52, 9] rpc_parse/parse_prs.crs_debug(82)
000070 sec_io_ace ace_list[03]:
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0070 type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0071 flags: 00
[2004/04/27 10:34:52, 10] rpc_parse/parse_prs.crs_debug(82)
000074 sec_io_access info
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0074 mask: 00020044
[2004/04/27 10:34:52, 10] rpc_parse/parse_prs.crs_debug(82)
000078 smb_io_dom_sid trustee
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0078 sid_rev_num: 01
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0079 num_auths : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
007a id_auth[0] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
007b id_auth[1] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
007c id_auth[2] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
007d id_auth[3] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
007e id_auth[4] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
007f id_auth[5] : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32s(862)
0080 sub_auths : 00000015 8a8fd2f9 23c8cfda
8799652e 000009a0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0072 size : 0024
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0026 size : 0070
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 max_len: 00000084
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c len : 00000084
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_ntstatus(665)
0094 status: NT_STATUS_OK
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 1468
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 32
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 152.
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 00b0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 00000009
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 00000098
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:52, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..176]
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=232
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1280
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 176 (0xB0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 176 (0xB0)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=177
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 B0 00 00 00 09 00 00 ........
.........
[010] 00 98 00 00 00 00 00 00 00 01 00 00 00 84 00 00 ........
.........
[020] 00 01 00 00 00 84 00 00 00 01 00 04 80 00 00 00 ........
.........
[030] 00 00 00 00 00 00 00 00 00 14 00 00 00 02 00 70 ........
........p
[040] 00 04 00 00 00 00 00 14 00 5B 03 02 00 01 01 00 ........
..[......
[050] 00 00 00 00 01 00 00 00 00 00 00 18 00 FF 07 0F ........
.........
[060] 00 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 ........ . ...
...
[070] 00 00 00 18 00 FF 07 0F 00 01 02 00 00 00 00 00 ........
.........
[080] 05 20 00 00 00 24 02 00 00 00 00 24 00 44 00 02 . ...$..
....$.D..
[090] 00 01 05 00 00 00 00 00 05 15 00 00 00 F9 D2 8F ........
.........
[0A0] 8A DA CF C8 23 2E 65 99 87 A0 09 00 00 00 00 00 ....#.e.
.........
[0B0] 00 .
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,236)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,236) wrote 236
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 128
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x80
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 22 of length 132
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=128
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1344
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 44 (0x2C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 44 (0x2C)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29220 (0x7224)
smb_bcc=61
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] BE 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 54 .\.P.I.P
..E.\...T
[010] E1 05 00 00 03 10 00 00 00 2C 00 00 00 0A 00 00 ........
..,......
[020] 00 14 00 00 00 00 00 27 00 00 00 00 00 04 00 00 .......'
.........
[030] 00 00 00 00 00 3C 29 8E 40 18 63 00 00 .....<). @.c..
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=44 params=0 setup=2
[2004/04/27 10:34:52, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2004/04/27 10:34:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2004/04/27 10:34:52, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7224)api_fd_reply:
p:0x8a02e90 max_trans_reply: 1024
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
write_to_pipe: 7224 name: samr open: Yes len: 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
0, incoming data = 44
[2004/04/27 10:34:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16,
receive_len = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 16
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len =
0, incoming data = 28
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 002c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000a
[2004/04/27 10:34:52, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
28, incoming data = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr_req req
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 alloc_hint: 00000014
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0006 opnum : 0027
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1468)
Requested \PIPE\samr
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502)
api_rpcTNP: samr op 0x27 - api_rpcTNP: rpc command:
SAMR_QUERY_USERGROUPS
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528)
api_rpc_cmds[25].fn == 0x403100
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_q_query_usergroups
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000004
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3c 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 5]
rpc_server/srv_samr_nt.c:_samr_query_usergroups(1940)
_samr_query_usergroups: 1940
[2004/04/27 10:34:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 04 00 00 00 00 00 00 00 3C 29
8E 40 ........ ....<).@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 5]
rpc_server/srv_samr_nt.c:access_check_samr_function(106)
_samr_query_usergroups: access check ((granted: 0x0002011b; required:
0x00000100)
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(732, 426) : sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1346)
smbpasswd_getsampwrid: search by sid:
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(179)
startsmbfilepwent_internal: opening file /etc/samba/smbpasswd
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user root, uid 0
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user jon$, uid 200
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user csa01, uid 732
[2004/04/27 10:34:52, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(291)
endsmbfilepwent_internal: closed password file.
[2004/04/27 10:34:52, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1379)
getsampwrid (smbpasswd): found by name: csa01
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_username(593)
pdb_set_username: setting username csa01, was
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 11 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_fullname(674)
pdb_set_full_name: setting full name J. Knight, was
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 12 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_unix_homedir(809)
pdb_set_unix_homedir: setting home dir /users/cs/csa01, was NULL
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 21 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_domain(620)
pdb_set_domain: setting domain XPTEST, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 13 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_user_sid(520)
pdb_set_user_sid: setting user sid
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 17 -> now SET
[2004/04/27 10:34:52, 10]
passdb/pdb_compat.cdb_set_user_sid_from_rid(73)
pdb_set_user_sid_from_rid:
setting user sid S-1-5-21-2324681465-600362970-2274977070-2464 from
rid 2464
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 16) -> 16
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 22) -> 22
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 25) -> 25
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 24) -> 24
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 27) -> 27
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 15) -> 15
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_group_sid(556)
pdb_set_group_sid: setting group sid
S-1-5-21-2324681465-600362970-2274977070-1853
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 18 -> now SET
[2004/04/27 10:34:52, 10]
passdb/pdb_compat.cdb_set_group_sid_from_rid(100)
pdb_set_group_sid_from_rid:
setting group sid S-1-5-21-2324681465-600362970-2274977070-1853 from
rid 1853
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_profile_path(728)
pdb_set_profile_path: setting profile path \\matthews.kis\Profiles,
was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 2 -> now DEFAULT
[2004/04/27 10:34:52, 4] lib/substitute.c:automount_server(318)
Home server: mitchell
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_homedir(782)
pdb_set_homedir: setting home dir \\mitchell\csa01, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 1 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_dir_drive(755)
pdb_set_dir_drive: setting dir drive , was NULL
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 3 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_logon_script(701)
pdb_set_logon_script: setting logon script logon.bat, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 4 -> now DEFAULT
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 19 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 32 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 31 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 19 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 20 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 8 -> now SET
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_get_init_flags(189)
element 20: SET
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (732, 426) - sec_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_util.c:get_domain_user_groups(285)
get_domain_user_groups: searching domain groups [csa01] is a member of
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(732, 426) : sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(454)
enum_group_mapping: group System Operators is not of the requested
type
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(454)
enum_group_mapping: group Replicators is not of the requested type
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 16) -> 16
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(454)
enum_group_mapping: group Guests is not of the requested type
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(459)
enum_group_mapping: group Domain Admins is non mapped
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(459)
enum_group_mapping: group Domain Guests is non mapped
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 22) -> 22
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(459)
enum_group_mapping: group Domain Users is non mapped
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(454)
enum_group_mapping: group Power Users is not of the requested type
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 25) -> 25
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(454)
enum_group_mapping: group Print Operators is not of the requested type
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 24) -> 24
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(454)
enum_group_mapping: group Administrators is not of the requested type
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 27) -> 27
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(454)
enum_group_mapping: group Account Operators is not of the requested
type
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(454)
enum_group_mapping: group Backup Operators is not of the requested
type
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 15) -> 15
[2004/04/27 10:34:52, 11] groupdb/mapping.c:enum_group_mapping(454)
enum_group_mapping: group Users is not of the requested type
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (732, 426) - sec_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_util.c:get_domain_user_groups(301)
get_domain_user_groups: there are 0 mapped groups
[2004/04/27 10:34:52, 0]
rpc_server/srv_util.c:get_domain_user_groups(372)
get_domain_user_groups: primary gid of user [csa01] is not a Domain
group !
get_domain_user_groups: You should fix it, NT doesn't like that
[2004/04/27 10:34:52, 5]
rpc_parse/parse_samr.c:init_samr_r_query_usergroups(2962)
init_samr_r_query_usergroups
[2004/04/27 10:34:52, 5]
rpc_server/srv_samr_nt.c:_samr_query_usergroups(1972)
_samr_query_usergroups: 1972
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_query_usergroups
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 ptr_0 : 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 num_entries : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0008 ptr_1 : 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_ntstatus(665)
000c status: NT_STATUS_OK
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 28
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 16.
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0028
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000a
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 00000010
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:52, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..40]
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=96
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1344
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 40 (0x28)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 40 (0x28)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=41
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 28 00 00 00 0A 00 00 ........
..(......
[010] 00 10 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........
.........
[020] 00 00 00 00 00 00 00 00 00 ........ .
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,100)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,100) wrote 100
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 176
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0xb0
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 23 of length 180
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=176
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1408
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 92 (0x5C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 92 (0x5C)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29220 (0x7224)
smb_bcc=109
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] BE 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 54 .\.P.I.P
..E.\...T
[010] E1 05 00 00 03 10 00 00 00 5C 00 00 00 0B 00 00 ........
..\......
[020] 00 44 00 00 00 00 00 10 00 00 00 00 00 03 00 00 .D......
.........
[030] 00 00 00 00 00 3B 29 8E 40 18 63 00 00 01 00 00 ......
@.c.....
[040] 00 98 49 E5 00 01 00 00 00 58 FD E7 00 05 00 00 ..I.....
..X......
[050] 00 01 05 00 00 00 00 00 05 15 00 00 00 F9 D2 8F ........
.........
[060] 8A DA CF C8 23 2E 65 99 87 A0 09 00 00 ....#.e. .....
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=92 params=0 setup=2
[2004/04/27 10:34:52, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2004/04/27 10:34:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2004/04/27 10:34:52, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7224)api_fd_reply:
p:0x8a02e90 max_trans_reply: 1024
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
write_to_pipe: 7224 name: samr open: Yes len: 92
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 92
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
0, incoming data = 92
[2004/04/27 10:34:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 92, len_needed_to_complete_hdr = 16,
receive_len = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 16
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 76
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len =
0, incoming data = 76
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 005c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000b
[2004/04/27 10:34:52, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 76
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
76, incoming data = 76
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr_req req
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 alloc_hint: 00000044
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0006 opnum : 0010
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1468)
Requested \PIPE\samr
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502)
api_rpcTNP: samr op 0x10 - api_rpcTNP: rpc command:
SAMR_QUERY_USERALIASES
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528)
api_rpc_cmds[7].fn == 0x4042c0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_q_query_useraliases
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000003
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3b 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0014 num_sids1: 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0018 ptr : 00e54998
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
001c num_sids2: 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0020 ptr[00]: 00e7fd58
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000024 smb_io_dom_sid2 sid[00]
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0024 num_auths: 00000005
[2004/04/27 10:34:52, 7] rpc_parse/parse_prs.crs_debug(82)
000028 smb_io_dom_sid sid
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0028 sid_rev_num: 01
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0029 num_auths : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
002a id_auth[0] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
002b id_auth[1] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
002c id_auth[2] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
002d id_auth[3] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
002e id_auth[4] : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
002f id_auth[5] : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32s(862)
0030 sub_auths : 00000015 8a8fd2f9 23c8cfda 8799652e
000009a0
[2004/04/27 10:34:52, 5]
rpc_server/srv_samr_nt.c:_samr_query_useraliases(3112)
_samr_query_useraliases: 3112
[2004/04/27 10:34:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[1] [000] 00 00 00 00 03 00 00 00 00 00 00 00 3B 29
8E 40 ........ .....@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 5]
rpc_server/srv_samr_nt.c:access_check_samr_function(106)
_samr_query_useraliases: access check ((granted: 0x00000280;
required: 0x00000080)
[2004/04/27 10:34:52, 5]
rpc_server/srv_samr_nt.c:access_check_samr_function(106)
_samr_query_useraliases: access check ((granted: 0x00000280;
required: 0x00000200)
[2004/04/27 10:34:52, 10]
rpc_server/srv_util.c:get_alias_user_groups(119)
get_alias_user_groups: looking if SID
S-1-5-21-2324681465-600362970-2274977070-2464 is a member of groups in
the SID domain S-1-5-32
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(732, 426) : sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1346)
smbpasswd_getsampwrid: search by sid:
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(179)
startsmbfilepwent_internal: opening file /etc/samba/smbpasswd
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user root, uid 0
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user jon$, uid 200
[2004/04/27 10:34:52, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(468)
getsmbfilepwent: returning passwd entry for user csa01, uid 732
[2004/04/27 10:34:52, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(291)
endsmbfilepwent_internal: closed password file.
[2004/04/27 10:34:52, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1379)
getsampwrid (smbpasswd): found by name: csa01
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_username(593)
pdb_set_username: setting username csa01, was
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 11 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_fullname(674)
pdb_set_full_name: setting full name J. Knight, was
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 12 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_unix_homedir(809)
pdb_set_unix_homedir: setting home dir /users/cs/csa01, was NULL
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 21 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_domain(620)
pdb_set_domain: setting domain XPTEST, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 13 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_user_sid(520)
pdb_set_user_sid: setting user sid
S-1-5-21-2324681465-600362970-2274977070-2464
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 17 -> now SET
[2004/04/27 10:34:52, 10]
passdb/pdb_compat.cdb_set_user_sid_from_rid(73)
pdb_set_user_sid_from_rid:
setting user sid S-1-5-21-2324681465-600362970-2274977070-2464 from
rid 2464
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 16) -> 16
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 22) -> 22
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 25) -> 25
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 24) -> 24
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 27) -> 27
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 15) -> 15
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_group_sid(556)
pdb_set_group_sid: setting group sid
S-1-5-21-2324681465-600362970-2274977070-1853
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 18 -> now SET
[2004/04/27 10:34:52, 10]
passdb/pdb_compat.cdb_set_group_sid_from_rid(100)
pdb_set_group_sid_from_rid:
setting group sid S-1-5-21-2324681465-600362970-2274977070-1853 from
rid 1853
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_profile_path(728)
pdb_set_profile_path: setting profile path \\matthews.kis\Profiles,
was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 2 -> now DEFAULT
[2004/04/27 10:34:52, 4] lib/substitute.c:automount_server(318)
Home server: mitchell
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_homedir(782)
pdb_set_homedir: setting home dir \\mitchell\csa01, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 1 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_dir_drive(755)
pdb_set_dir_drive: setting dir drive , was NULL
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 3 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_logon_script(701)
pdb_set_logon_script: setting logon script logon.bat, was
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 4 -> now DEFAULT
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_set_init_flags(505)
element 19 -> now DEFAULT
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 32 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 31 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 19 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 20 -> now SET
[2004/04/27 10:34:52, 10] passdb/pdb_get_set.cdb_set_init_flags(493)
element 8 -> now SET
[2004/04/27 10:34:52, 11] passdb/pdb_get_set.cdb_get_init_flags(189)
element 20: SET
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (732, 426) - sec_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] passdb/lookup_sid.c:fetch_gid_from_cache(256)
fetch uid from cache 426 ->
S-1-5-21-2324681465-600362970-2274977070-1853
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(732, 426) : sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 10] lib/system_smbd.c:sys_getgrouplist(113)
sys_getgrouplist: user [csa01]
[2004/04/27 10:34:52, 10] lib/system_smbd.c:sys_getgrouplist(122)
sys_getgrouplist(): disabled winbindd for group lookup [user == csa01]
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (732, 426) - sec_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(732, 426) : sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 16) -> 16
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 22) -> 22
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 25) -> 25
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 24) -> 24
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 27) -> 27
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 15) -> 15
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (732, 426) - sec_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_util.c:get_alias_user_groups(168)
get_alias_user_groups: not returing cs, not in the domain SID.
[2004/04/27 10:34:52, 10]
rpc_server/srv_util.c:get_alias_user_groups(211)
get_alias_user_groups: looking for gid 426 of user csa01
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cush_sec_ctx(256)
push_sec_ctx(732, 426) : sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 3] smbd/uid.cush_conn_ctx(287)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:34:52, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 16) -> 16
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 23) -> 23
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 22) -> 22
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 21) -> 21
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 25) -> 25
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 24) -> 24
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 27) -> 27
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 26) -> 26
[2004/04/27 10:34:52, 18] tdb/tdbutil.c:tdb_unpack(576)
tdb_unpack(ddff, 15) -> 15
[2004/04/27 10:34:52, 3] smbd/sec_ctx.cop_sec_ctx(386)
pop_sec_ctx (732, 426) - sec_ctx_stack_ndx = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_util.c:get_alias_user_groups(230)
get_alias_user_groups: not returing cs, not in the domain SID.
[2004/04/27 10:34:52, 10]
rpc_server/srv_samr_nt.c:_samr_query_useraliases(3147)
_samr_query_useraliases: no groups found
[2004/04/27 10:34:52, 5]
rpc_parse/parse_samr.c:init_samr_r_query_useraliases(3823)
init_samr_r_query_useraliases
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_query_useraliases
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 num_entries: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 ptr : 00000001
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000008 samr_io_rids rids
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0008 num_rids: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_ntstatus(665)
000c status: NT_STATUS_OK
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 76
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 76
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 16.
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0028
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000b
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 00000010
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:52, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..40]
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=96
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1408
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 40 (0x28)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 40 (0x28)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=41
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 28 00 00 00 0B 00 00 ........
..(......
[010] 00 10 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........
.........
[020] 00 00 00 00 00 00 00 00 00 ........ .
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,100)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,100) wrote 100
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 128
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x80
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 24 of length 132
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=128
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1472
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 44 (0x2C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 44 (0x2C)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29220 (0x7224)
smb_bcc=61
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] BE 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 54 .\.P.I.P
..E.\...T
[010] E1 05 00 00 03 10 00 00 00 2C 00 00 00 0C 00 00 ........
..,......
[020] 00 14 00 00 00 00 00 01 00 00 00 00 00 04 00 00 ........
.........
[030] 00 00 00 00 00 3C 29 8E 40 18 63 00 00 .....<). @.c..
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=44 params=0 setup=2
[2004/04/27 10:34:52, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2004/04/27 10:34:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2004/04/27 10:34:52, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7224)api_fd_reply:
p:0x8a02e90 max_trans_reply: 1024
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
write_to_pipe: 7224 name: samr open: Yes len: 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
0, incoming data = 44
[2004/04/27 10:34:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16,
receive_len = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 16
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len =
0, incoming data = 28
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 002c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000c
[2004/04/27 10:34:52, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
28, incoming data = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr_req req
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 alloc_hint: 00000014
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0006 opnum : 0001
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1468)
Requested \PIPE\samr
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502)
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528)
api_rpc_cmds[0].fn == 0x4018b0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_q_close_hnd
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000004
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3c 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 04 00 00 00 00 00 00 00 3C 29
8E 40 ........ ....<).@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2004/04/27 10:34:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(358)
samr_reply_close_hnd: 358
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_close_hnd
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 00 00 00 00 00 00 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_ntstatus(665)
0014 status: NT_STATUS_OK
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 28
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 24.
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0030
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 00000018
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:52, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..48]
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=104
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1472
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 48 (0x30)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=49
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 30 00 00 00 0C 00 00 ........
..0......
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[030] 00 .
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,108)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,108) wrote 108
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 128
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x80
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 25 of length 132
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=128
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1536
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 44 (0x2C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 44 (0x2C)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29220 (0x7224)
smb_bcc=61
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] BE 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 54 .\.P.I.P
..E.\...T
[010] E1 05 00 00 03 10 00 00 00 2C 00 00 00 0D 00 00 ........
..,......
[020] 00 14 00 00 00 00 00 01 00 00 00 00 00 02 00 00 ........
.........
[030] 00 00 00 00 00 3B 29 8E 40 18 63 00 00 ...... @.c..
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=44 params=0 setup=2
[2004/04/27 10:34:52, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2004/04/27 10:34:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2004/04/27 10:34:52, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7224)api_fd_reply:
p:0x8a02e90 max_trans_reply: 1024
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
write_to_pipe: 7224 name: samr open: Yes len: 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
0, incoming data = 44
[2004/04/27 10:34:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16,
receive_len = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 16
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len =
0, incoming data = 28
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 002c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000d
[2004/04/27 10:34:52, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
28, incoming data = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr_req req
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 alloc_hint: 00000014
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0006 opnum : 0001
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1468)
Requested \PIPE\samr
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502)
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528)
api_rpc_cmds[0].fn == 0x4018b0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_q_close_hnd
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000002
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3b 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[1] [000] 00 00 00 00 02 00 00 00 00 00 00 00 3B 29
8E 40 ........ .....@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2004/04/27 10:34:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(358)
samr_reply_close_hnd: 358
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_close_hnd
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 00 00 00 00 00 00 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_ntstatus(665)
0014 status: NT_STATUS_OK
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 28
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 24.
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0030
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000d
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 00000018
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:52, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..48]
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=104
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1536
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 48 (0x30)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=49
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 30 00 00 00 0D 00 00 ........
..0......
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[030] 00 .
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,108)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,108) wrote 108
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 128
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x80
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 26 of length 132
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=128
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1600
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 44 (0x2C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 44 (0x2C)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29220 (0x7224)
smb_bcc=61
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] BE 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 54 .\.P.I.P
..E.\...T
[010] E1 05 00 00 03 10 00 00 00 2C 00 00 00 0E 00 00 ........
..,......
[020] 00 14 00 00 00 00 00 01 00 00 00 00 00 03 00 00 ........
.........
[030] 00 00 00 00 00 3B 29 8E 40 18 63 00 00 ...... @.c..
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=44 params=0 setup=2
[2004/04/27 10:34:52, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2004/04/27 10:34:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2004/04/27 10:34:52, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7224)api_fd_reply:
p:0x8a02e90 max_trans_reply: 1024
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
write_to_pipe: 7224 name: samr open: Yes len: 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
0, incoming data = 44
[2004/04/27 10:34:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16,
receive_len = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 16
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len =
0, incoming data = 28
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 002c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000e
[2004/04/27 10:34:52, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
28, incoming data = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr_req req
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 alloc_hint: 00000014
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0006 opnum : 0001
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1468)
Requested \PIPE\samr
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502)
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528)
api_rpc_cmds[0].fn == 0x4018b0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_q_close_hnd
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000003
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3b 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 03 00 00 00 00 00 00 00 3B 29
8E 40 ........ .....@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2004/04/27 10:34:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(358)
samr_reply_close_hnd: 358
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_close_hnd
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 00 00 00 00 00 00 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_ntstatus(665)
0014 status: NT_STATUS_OK
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 28
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 24.
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0030
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000e
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 00000018
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:52, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..48]
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=104
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1600
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 48 (0x30)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=49
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 30 00 00 00 0E 00 00 ........
..0......
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[030] 00 .
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,108)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,108) wrote 108
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 128
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x80
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 27 of length 132
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=128
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1664
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 44 (0x2C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 84 (0x54)
smb_vwv[11]= 44 (0x2C)
smb_vwv[12]= 84 (0x54)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]=29220 (0x7224)
smb_bcc=61
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] BE 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 54 .\.P.I.P
..E.\...T
[010] E1 05 00 00 03 10 00 00 00 2C 00 00 00 0F 00 00 ........
..,......
[020] 00 14 00 00 00 00 00 01 00 00 00 00 00 01 00 00 ........
.........
[030] 00 00 00 00 00 3B 29 8E 40 18 63 00 00 ...... @.c..
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBtrans (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=44 params=0 setup=2
[2004/04/27 10:34:52, 5] smbd/ipc.c:reply_trans(557)
calling named_pipe
[2004/04/27 10:34:52, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2004/04/27 10:34:52, 5] smbd/ipc.c:api_fd_reply(267)
api_fd_reply
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "samr" (pnum 7224)api_fd_reply:
p:0x8a02e90 max_trans_reply: 1024
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
write_to_pipe: 7224 name: samr open: Yes len: 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 44
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
0, incoming data = 44
[2004/04/27 10:34:52, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16,
receive_len = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 16
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len =
0, incoming data = 28
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 002c
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000f
[2004/04/27 10:34:52, 5]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
unmarshall_rpc_header: using little-endian RPC
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
unmarshall_rpc_header: type = 0, flags = 3
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
write_to_pipe: data_left = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_incoming_data(779)
process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len =
28, incoming data = 28
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.crocess_complete_pdu(722)
process_complete_pdu: processing packet type 0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr_req req
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 alloc_hint: 00000014
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0004 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0006 opnum : 0001
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_pipe_request(1468)
Requested \PIPE\samr
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe.c:api_rpcTNP(1502)
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe.c:api_rpcTNP(1528)
api_rpc_cmds[0].fn == 0x4018b0
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_q_close_hnd
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000001
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 3b 29 8e 40 18 63 00 00
[2004/04/27 10:34:52, 4]
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162)
Found policy hnd[0] [000] 00 00 00 00 01 00 00 00 00 00 00 00 3B 29
8E 40 ........ .....@
[010] 18 63 00 00 .c..
[2004/04/27 10:34:52, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2004/04/27 10:34:52, 5] rpc_server/srv_samr_nt.c:_samr_close_hnd(358)
samr_reply_close_hnd: 358
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 samr_io_r_close_hnd
[2004/04/27 10:34:52, 6] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_pol_hnd pol
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0000 data1: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0004 data2: 00000000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 data3: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a data4: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8s(722)
000c data5: 00 00 00 00 00 00 00 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_ntstatus(665)
0014 status: NT_STATUS_OK
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
api_rpcTNP: called samr successfully
[2004/04/27 10:34:52, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
free_pipe_context: destroying talloc pool of size 0
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
write_to_pipe: data_used = 28
[2004/04/27 10:34:52, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
read_from_pipe: 7224 name: samr len: 1024
[2004/04/27 10:34:52, 10]
rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
read_from_pipe: samr: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 24.
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000000 smb_io_rpc_hdr hdr
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0000 major : 05
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0001 minor : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0002 pkt_type : 02
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0003 flags : 03
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0004 pack_type0: 10
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0005 pack_type1: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0006 pack_type2: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0007 pack_type3: 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0008 frag_len : 0030
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
000a auth_len : 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
000c call_id : 0000000f
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_debug(82)
000010 smb_io_rpc_hdr_resp resp
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint32(635)
0010 alloc_hint: 00000018
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint16(606)
0014 context_id: 0000
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0016 cancel_ct : 00
[2004/04/27 10:34:52, 5] rpc_parse/parse_prs.crs_uint8(577)
0017 reserved : 00
[2004/04/27 10:34:52, 5] smbd/ipc.c:copy_trans_params_and_data(62)
copy_trans_params_and_data: params[0..0] data[0..48]
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=104
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=680
smb_uid=100
smb_mid=1664
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 48 (0x30)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=49
[2004/04/27 10:34:52, 10] lib/util.c:dump_data(1852)
[000] 00 05 00 02 03 10 00 00 00 30 00 00 00 0F 00 00 ........
..0......
[010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
.........
[030] 00 .
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,108)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,108) wrote 108
[2004/04/27 10:34:52, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 41
[2004/04/27 10:34:52, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x29
[2004/04/27 10:34:52, 3] smbd/process.crocess_smb(890)
Transaction 28 of length 45
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=41
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=1728
smt_wct=3
smb_vwv[ 0]=29220 (0x7224)
smb_vwv[ 1]=65535 (0xFFFF)
smb_vwv[ 2]=65535 (0xFFFF)
smb_bcc=0
[2004/04/27 10:34:52, 3] smbd/process.c:switch_message(685)
switch message SMBclose (pid 25368)
[2004/04/27 10:34:52, 4] smbd/uid.c:change_to_user(122)
change_to_user: Skipping user change - already user
[2004/04/27 10:34:52, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1153)
search for pipe pnum=7224
[2004/04/27 10:34:52, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1157)
pipe name samr pnum=7224 (pipes_open=1)
[2004/04/27 10:34:52, 5] smbd/pipes.c:reply_pipe_close(258)
reply_pipe_close: pnum:7224
[2004/04/27 10:34:52, 10]
rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235)
close_policy_by_pipe: deleted handle list for pipe samr
[2004/04/27 10:34:52, 4]
rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083)
closed pipe name samr pnum=7224 (pipes_open=0)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(478)
[2004/04/27 10:34:52, 5] lib/util.c:show_msg(488)
size=35
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=1728
smt_wct=0
smb_bcc=0
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(407)
write_socket(16,39)
[2004/04/27 10:34:52, 6] lib/util_sock.c:write_socket(410)
write_socket(16,39) wrote 39
[2004/04/27 10:35:03, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 39
[2004/04/27 10:35:03, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x27
[2004/04/27 10:35:03, 3] smbd/process.crocess_smb(890)
Transaction 29 of length 43
[2004/04/27 10:35:03, 5] lib/util.c:show_msg(478)
[2004/04/27 10:35:03, 5] lib/util.c:show_msg(488)
size=39
smb_com=0x74
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=0
smb_pid=65279
smb_uid=100
smb_mid=1792
smt_wct=2
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_bcc=0
[2004/04/27 10:35:03, 3] smbd/process.c:switch_message(685)
switch message SMBulogoffX (pid 25368)
[2004/04/27 10:35:03, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:35:03, 5] smbd/uid.c:change_to_root_user(218)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2004/04/27 10:35:03, 5] auth/auth_util.c:free_server_info(1303)
attempting to free (and zero) a server_info structure
[2004/04/27 10:35:03, 3] smbd/reply.c:reply_ulogoffX(1108)
ulogoffX vuid=100
[2004/04/27 10:35:03, 5] lib/util.c:show_msg(478)
[2004/04/27 10:35:03, 5] lib/util.c:show_msg(488)
size=39
smb_com=0x74
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=65279
smb_uid=100
smb_mid=1792
smt_wct=2
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_bcc=0
[2004/04/27 10:35:03, 6] lib/util_sock.c:write_socket(407)
write_socket(16,43)
[2004/04/27 10:35:03, 6] lib/util_sock.c:write_socket(410)
write_socket(16,43) wrote 43
[2004/04/27 10:35:03, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 35
[2004/04/27 10:35:03, 6] smbd/process.crocess_smb(889)
got message type 0x0 of len 0x23
[2004/04/27 10:35:03, 3] smbd/process.crocess_smb(890)
Transaction 30 of length 39
[2004/04/27 10:35:03, 5] lib/util.c:show_msg(478)
[2004/04/27 10:35:03, 5] lib/util.c:show_msg(488)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=51207
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=1856
smt_wct=0
smb_bcc=0
[2004/04/27 10:35:03, 3] smbd/process.c:switch_message(685)
switch message SMBtdis (pid 25368)
[2004/04/27 10:35:03, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:35:03, 5] smbd/uid.c:change_to_root_user(218)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2004/04/27 10:35:03, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:35:03, 5] smbd/uid.c:change_to_root_user(218)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2004/04/27 10:35:03, 3] smbd/service.c:close_cnum(887)
jon (160.5.100.1) closed connection to service IPC$
[2004/04/27 10:35:03, 3] smbd/connection.c:yield_connection(69)
Yielding connection to IPC$
[2004/04/27 10:35:03, 4] smbd/vfs.c:vfs_ChDir(654)
vfs_ChDir to /
[2004/04/27 10:35:03, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:35:03, 5] smbd/uid.c:change_to_root_user(218)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2004/04/27 10:35:03, 5] lib/util.c:show_msg(478)
[2004/04/27 10:35:03, 5] lib/util.c:show_msg(488)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=65279
smb_uid=100
smb_mid=1856
smt_wct=0
smb_bcc=0
[2004/04/27 10:35:03, 6] lib/util_sock.c:write_socket(407)
write_socket(16,39)
[2004/04/27 10:35:03, 6] lib/util_sock.c:write_socket(410)
write_socket(16,39) wrote 39
[2004/04/27 10:35:03, 10] lib/util_sock.c:read_socket_data(336)
read_socket_data: recv of 4 returned 0. Error = Success
[2004/04/27 10:35:03, 10] lib/util_sock.c:receive_smb_raw(514)
receive_smb_raw: length < 0!
[2004/04/27 10:35:03, 3] smbd/process.c:timeout_processing(1104)
timeout_processing: End of file from client (client has disconnected).
[2004/04/27 10:35:03, 5] lib/gencache.c:gencache_shutdown(88)
Closing cache file
[2004/04/27 10:35:03, 5] libsmb/namecache.c:namecache_shutdown(79)
namecache_shutdown: netbios namecache closed successfully.
[2004/04/27 10:35:03, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_nt_user_token(486)
NT user token: (NULL)
[2004/04/27 10:35:03, 5] auth/auth_util.c:debug_unix_user_token(505)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2004/04/27 10:35:03, 5] smbd/uid.c:change_to_root_user(218)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2004/04/27 10:35:03, 2] smbd/server.c:exit_server(558)
Closing connections
[2004/04/27 10:35:03, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2004/04/27 10:35:03, 5] smbd/oplock.c:receive_local_message(107)
receive_local_message: doing select with timeout of 1 ms
[2004/04/27 10:35:03, 3] smbd/server.c:exit_server(601)
Server exit (normal exit)