Re: samba+ldap
> надо также смотреть внимательно логи в /var/log/samba. Самое важное там.
проделал все, как посоветовали, но проблема по прежнему осталась
вот, что выкидывает log.smbd
################################################################
[2005/11/11 09:23:30, 3] smbd/oplock.c:init_oplocks(1351)
open_oplock_ipc: opening loopback UDP socket.
[2005/11/11 09:23:30, 3] smbd/oplock.c:init_oplocks(1382)
open_oplock ipc: pid = 3335, global_oplock_port = 32768
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 72
[2005/11/11 09:23:30, 2] smbd/reply.c:reply_special(236)
netbios connect: name1=TEST name2=VMWARE
[2005/11/11 09:23:30, 2] smbd/reply.c:reply_special(243)
netbios connect: local=test remote=vmware, name type = 0
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 1 of length 137
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 3335) conn 0x0
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2005/11/11 09:23:30, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2005/11/11 09:23:30, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2005/11/11 09:23:30, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2005/11/11 09:23:30, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2005/11/11 09:23:30, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2005/11/11 09:23:30, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2005/11/11 09:23:30, 3] smbd/negprot.c:reply_negprot(555)
Selected protocol NT LM 0.12
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 2 of length 240
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 3335) conn 0x0
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2005/11/11 09:23:30, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2005/11/11 09:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2005/11/11 09:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2005/11/11 09:23:30, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 3 6 1 4 1 311 2 2 10
[2005/11/11 09:23:30, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
Got secblob of size 40
[2005/11/11 09:23:30, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088297
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 3 of length 344
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 3335) conn 0x0
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2005/11/11 09:23:30, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2005/11/11 09:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2005/11/11 09:23:30, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2005/11/11 09:23:30, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606)
Got user=[admin] domain=[test] workstation=[VMWARE] len1=24 len2=24
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user [test]\[admin]@[VMWARE] with the new password interface
[2005/11/11 09:23:30, 3] auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: [test]\[admin]@[VMWARE]
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 2] lib/smbldap.c:smbldap_open_connection(692)
smbldap_open_connection: connection opened
[2005/11/11 09:23:30, 3] lib/smbldap.c:smbldap_connect_system(866)
ldap_connect_system: succesful connection to the LDAP server
ldap_connect_system: LDAP server does support paged results
[2005/11/11 09:23:30, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
init_sam_from_ldap: Entry found for user: admin
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/11/11 09:23:30, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/11/11 09:23:30, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] auth/auth.c:check_ntlm_password(268)
check_ntlm_password: sam authentication for user [admin] succeeded
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 2] auth/auth.c:check_ntlm_password(305)
check_ntlm_password: authentication for user [admin] -> [admin] -> [admin] succeeded
[2005/11/11 09:23:30, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
NTLMSSP Sign/Seal - Initialising with flags:
[2005/11/11 09:23:30, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0x60088215
[2005/11/11 09:23:30, 3] smbd/password.c:register_vuid(222)
User name: admin Real name: admin
[2005/11/11 09:23:30, 3] smbd/password.c:register_vuid(241)
UNIX uid 10000 is UNIX user admin, and will be vuid 100
[2005/11/11 09:23:30, 3] smbd/password.c:register_vuid(270)
Adding homes service for user 'admin' using home directory: '/home/admin'
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 4 of length 78
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBtconX (pid 3335) conn 0x0
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/service.c:make_connection_snum(479)
Connect path is '/tmp' for service [IPC$]
[2005/11/11 09:23:30, 3] lib/util_seaccess.c:se_access_check(251)
[2005/11/11 09:23:30, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1289144422-1163469304-3487403948-500
se_access_check: also S-1-5-21-1289144422-1163469304-3487403948-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-3350632332-1734803903-1588077325-21001
[2005/11/11 09:23:30, 3] smbd/vfs.c:vfs_init_default(206)
Initialising default vfs hooks
[2005/11/11 09:23:30, 3] lib/util_seaccess.c:se_access_check(251)
[2005/11/11 09:23:30, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1289144422-1163469304-3487403948-500
se_access_check: also S-1-5-21-1289144422-1163469304-3487403948-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-3350632332-1734803903-1588077325-21001
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/service.c:make_connection_snum(642)
vmware (192.168.0.22) connect to service IPC$ initially as user admin (uid=0, gid=10000) (pid 3335)
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/reply.c:reply_tcon_and_X(455)
tconX service=IPC$
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 5 of length 104
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/nttrans.c:nt_open_pipe(514)
nt_open_pipe: Known pipe lsarpc opening.
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 6 of length 140
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:check_bind_req(762)
check_bind_req for \PIPE\lsarpc
[2005/11/11 09:23:30, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=77d5 nwritten=72
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 7 of length 63
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=77d5 min=1024 max=1024 nread=68
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 8 of length 172
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=84 params=0 setup=2
[2005/11/11 09:23:30, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:30, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 77d5)
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2005/11/11 09:23:30, 3] lib/util_seaccess.c:se_access_check(251)
[2005/11/11 09:23:30, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1289144422-1163469304-3487403948-500
se_access_check: also S-1-5-21-1289144422-1163469304-3487403948-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-3350632332-1734803903-1588077325-21001
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 814
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 9 of length 134
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=46 params=0 setup=2
[2005/11/11 09:23:30, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:30, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 77d5)
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 10 of length 134
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=46 params=0 setup=2
[2005/11/11 09:23:30, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:30, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 77d5)
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 10
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 11 of length 104
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/nttrans.c:nt_open_pipe(514)
nt_open_pipe: Known pipe winreg opening.
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 12 of length 140
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:check_bind_req(762)
check_bind_req for \PIPE\winreg
[2005/11/11 09:23:30, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=77d6 nwritten=72
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 13 of length 63
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=77d6 min=1024 max=1024 nread=68
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 14 of length 124
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=36 params=0 setup=2
[2005/11/11 09:23:30, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:30, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77d6)
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_OPEN_HKLM
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 15 of length 272
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=184 params=0 setup=2
[2005/11/11 09:23:30, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:30, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77d6)
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_OPEN_ENTRY
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 110
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 16 of length 236
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=148 params=0 setup=2
[2005/11/11 09:23:30, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:30, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77d6)
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_INFO
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 46
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 17 of length 132
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/11/11 09:23:30, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:30, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77d6)
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_CLOSE
[2005/11/11 09:23:30, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 18 of length 132
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:30, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/11/11 09:23:30, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:30, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77d6)
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_CLOSE
[2005/11/11 09:23:30, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/11/11 09:23:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:30, 3] smbd/process.c:process_smb(1091)
Transaction 19 of length 45
[2005/11/11 09:23:30, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 3335) conn 0x83df650
[2005/11/11 09:23:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 20 of length 108
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/nttrans.c:nt_open_pipe(514)
nt_open_pipe: Known pipe NETLOGON opening.
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 21 of length 140
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:check_bind_req(762)
check_bind_req for \PIPE\NETLOGON
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=77d7 nwritten=72
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 22 of length 63
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=77d7 min=1024 max=1024 nread=68
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 23 of length 178
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=90 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "NETLOGON" (pnum 77d7)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: NET_REQCHAL
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 28
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 24 of length 45
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 25 of length 108
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/nttrans.c:nt_open_pipe(514)
nt_open_pipe: Known pipe NETLOGON opening.
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 26 of length 140
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:check_bind_req(762)
check_bind_req for \PIPE\NETLOGON
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=77d8 nwritten=72
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 27 of length 63
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=77d8 min=1024 max=1024 nread=68
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 28 of length 210
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=122 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "NETLOGON" (pnum 77d8)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: NET_AUTH
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 44
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 29 of length 45
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 30 of length 132
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 77d5)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: LSA_CLOSE
[2005/11/11 09:23:31, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 31 of length 45
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 32 of length 43
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBulogoffX (pid 3335) conn 0x0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/reply.c:reply_ulogoffX(1264)
ulogoffX vuid=100
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 33 of length 39
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtdis (pid 3335) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/service.c:close_cnum(830)
vmware (192.168.0.22) closed connection to service IPC$
[2005/11/11 09:23:31, 3] smbd/connection.c:yield_connection(69)
Yielding connection to IPC$
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:timeout_processing(1334)
timeout_processing: End of file from client (client has disconnected).
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 2] smbd/server.c:exit_server(609)
Closing connections
[2005/11/11 09:23:31, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2005/11/11 09:23:31, 3] smbd/server.c:exit_server(652)
Server exit (normal exit)
[2005/11/11 09:23:31, 3] smbd/oplock.c:init_oplocks(1351)
open_oplock_ipc: opening loopback UDP socket.
[2005/11/11 09:23:31, 3] smbd/oplock.c:init_oplocks(1382)
open_oplock ipc: pid = 3336, global_oplock_port = 32768
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 72
[2005/11/11 09:23:31, 2] smbd/reply.c:reply_special(236)
netbios connect: name1=TEST name2=VMWARE
[2005/11/11 09:23:31, 2] smbd/reply.c:reply_special(243)
netbios connect: local=test remote=vmware, name type = 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 1 of length 137
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 3336) conn 0x0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2005/11/11 09:23:31, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2005/11/11 09:23:31, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2005/11/11 09:23:31, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2005/11/11 09:23:31, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2005/11/11 09:23:31, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2005/11/11 09:23:31, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2005/11/11 09:23:31, 3] smbd/negprot.c:reply_negprot(555)
Selected protocol NT LM 0.12
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 2 of length 240
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 3336) conn 0x0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2005/11/11 09:23:31, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2005/11/11 09:23:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2005/11/11 09:23:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2005/11/11 09:23:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 3 6 1 4 1 311 2 2 10
[2005/11/11 09:23:31, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
Got secblob of size 40
[2005/11/11 09:23:31, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088297
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 3 of length 344
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 3336) conn 0x0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2005/11/11 09:23:31, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2005/11/11 09:23:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2005/11/11 09:23:31, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2005/11/11 09:23:31, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606)
Got user=[admin] domain=[test] workstation=[VMWARE] len1=24 len2=24
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user [test]\[admin]@[VMWARE] with the new password interface
[2005/11/11 09:23:31, 3] auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: [test]\[admin]@[VMWARE]
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 2] lib/smbldap.c:smbldap_open_connection(692)
smbldap_open_connection: connection opened
[2005/11/11 09:23:31, 3] lib/smbldap.c:smbldap_connect_system(866)
ldap_connect_system: succesful connection to the LDAP server
ldap_connect_system: LDAP server does support paged results
[2005/11/11 09:23:31, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
init_sam_from_ldap: Entry found for user: admin
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/11/11 09:23:31, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/11/11 09:23:31, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] auth/auth.c:check_ntlm_password(268)
check_ntlm_password: sam authentication for user [admin] succeeded
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 2] auth/auth.c:check_ntlm_password(305)
check_ntlm_password: authentication for user [admin] -> [admin] -> [admin] succeeded
[2005/11/11 09:23:31, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
NTLMSSP Sign/Seal - Initialising with flags:
[2005/11/11 09:23:31, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0x60088215
[2005/11/11 09:23:31, 3] smbd/password.c:register_vuid(222)
User name: admin Real name: admin
[2005/11/11 09:23:31, 3] smbd/password.c:register_vuid(241)
UNIX uid 10000 is UNIX user admin, and will be vuid 100
[2005/11/11 09:23:31, 3] smbd/password.c:register_vuid(270)
Adding homes service for user 'admin' using home directory: '/home/admin'
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 4 of length 78
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtconX (pid 3336) conn 0x0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/service.c:make_connection_snum(479)
Connect path is '/tmp' for service [IPC$]
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(251)
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1289144422-1163469304-3487403948-500
se_access_check: also S-1-5-21-1289144422-1163469304-3487403948-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-3350632332-1734803903-1588077325-21001
[2005/11/11 09:23:31, 3] smbd/vfs.c:vfs_init_default(206)
Initialising default vfs hooks
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(251)
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1289144422-1163469304-3487403948-500
se_access_check: also S-1-5-21-1289144422-1163469304-3487403948-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-3350632332-1734803903-1588077325-21001
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/service.c:make_connection_snum(642)
vmware (192.168.0.22) connect to service IPC$ initially as user admin (uid=0, gid=10000) (pid 3336)
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/reply.c:reply_tcon_and_X(455)
tconX service=IPC$
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 5 of length 104
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/nttrans.c:nt_open_pipe(514)
nt_open_pipe: Known pipe lsarpc opening.
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 6 of length 140
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:check_bind_req(762)
check_bind_req for \PIPE\lsarpc
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=77db nwritten=72
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 7 of length 63
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=77db min=1024 max=1024 nread=68
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 8 of length 172
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=84 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 77db)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(251)
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1289144422-1163469304-3487403948-500
se_access_check: also S-1-5-21-1289144422-1163469304-3487403948-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-3350632332-1734803903-1588077325-21001
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 814
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 9 of length 134
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=46 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 77db)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 10 of length 134
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=46 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 77db)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 10
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 11 of length 104
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/nttrans.c:nt_open_pipe(514)
nt_open_pipe: Known pipe winreg opening.
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 12 of length 140
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:check_bind_req(762)
check_bind_req for \PIPE\winreg
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=77dc nwritten=72
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 13 of length 63
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=77dc min=1024 max=1024 nread=68
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 14 of length 124
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=36 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77dc)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_OPEN_HKLM
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 15 of length 272
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=184 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77dc)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_OPEN_ENTRY
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 110
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 16 of length 236
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=148 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77dc)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_INFO
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 46
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 17 of length 132
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77dc)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_CLOSE
[2005/11/11 09:23:31, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 18 of length 132
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "winreg" (pnum 77dc)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: REG_CLOSE
[2005/11/11 09:23:31, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 19 of length 45
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 20 of length 100
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/nttrans.c:nt_open_pipe(514)
nt_open_pipe: Known pipe samr opening.
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 21 of length 140
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
api_pipe_bind_req: \PIPE\samr -> \PIPE\lsass
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:check_bind_req(762)
check_bind_req for \PIPE\samr
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=77dd nwritten=72
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 22 of length 63
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=77dd min=1024 max=1024 nread=68
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 23 of length 164
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=76 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 77dd)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 24 of length 45
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 25 of length 100
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/nttrans.c:nt_open_pipe(514)
nt_open_pipe: Known pipe samr opening.
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 26 of length 140
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
api_pipe_bind_req: \PIPE\samr -> \PIPE\lsass
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:check_bind_req(762)
check_bind_req for \PIPE\samr
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=77de nwritten=72
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 27 of length 63
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=77de min=1024 max=1024 nread=68
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 28 of length 152
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=64 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 77de)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: SAMR_CONNECT4
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(251)
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1289144422-1163469304-3487403948-500
se_access_check: also S-1-5-21-1289144422-1163469304-3487403948-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-3350632332-1734803903-1588077325-21001
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 970
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 29 of length 140
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=52 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 77de)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: SAMR_ENUM_DOMAINS
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 82
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 30 of length 160
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=72 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 77de)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: SAMR_LOOKUP_DOMAIN
[2005/11/11 09:23:31, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2580)
Returning domain sid for domain TEST -> S-1-5-21-3350632332-1734803903-1588077325
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 8
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 31 of length 164
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=76 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 77de)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: SAMR_OPEN_DOMAIN
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(251)
[2005/11/11 09:23:31, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1289144422-1163469304-3487403948-500
se_access_check: also S-1-5-21-1289144422-1163469304-3487403948-512
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-3350632332-1734803903-1588077325-21001
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 956
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 32 of length 176
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=88 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 77de)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: SAMR_CREATE_USER
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 10000) : sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] rpc_server/srv_samr_nt.c:_samr_create_user(2330)
_samr_create_user: winbind_create_user(vmware$) failed
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 16
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 33 of length 132
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 77de)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2005/11/11 09:23:31, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 34 of length 132
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "samr" (pnum 77de)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: SAMR_CLOSE_HND
[2005/11/11 09:23:31, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 35 of length 45
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 36 of length 132
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/ipc.c:reply_trans(539)
trans <\PIPE\> data=44 params=0 setup=2
[2005/11/11 09:23:31, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2005/11/11 09:23:31, 3] smbd/ipc.c:api_fd_reply(294)
Got API command 0x26 on pipe "lsarpc" (pnum 77db)
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
api_rpcTNP: rpc command: LSA_CLOSE
[2005/11/11 09:23:31, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2005/11/11 09:23:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 37 of length 45
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 10000) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 38 of length 43
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBulogoffX (pid 3336) conn 0x0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/reply.c:reply_ulogoffX(1264)
ulogoffX vuid=100
[2005/11/11 09:23:31, 3] smbd/process.c:process_smb(1091)
Transaction 39 of length 39
[2005/11/11 09:23:31, 3] smbd/process.c:switch_message(886)
switch message SMBtdis (pid 3336) conn 0x83df650
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/service.c:close_cnum(830)
vmware (192.168.0.22) closed connection to service IPC$
[2005/11/11 09:23:31, 3] smbd/connection.c:yield_connection(69)
Yielding connection to IPC$
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 3] smbd/process.c:timeout_processing(1334)
timeout_processing: End of file from client (client has disconnected).
[2005/11/11 09:23:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/11 09:23:31, 2] smbd/server.c:exit_server(609)
Closing connections
[2005/11/11 09:23:31, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2005/11/11 09:23:31, 3] smbd/server.c:exit_server(652)
Server exit (normal exit)
Reply to: