[Pkg-samba-maint] Bug#526905: samba log and vista memdump
m.czub at newcomo.pl
m.czub at newcomo.pl
Mon May 4 12:59:48 UTC 2009
Attachments:
log.oxygen - Samba log file (log level 3) for Vista x64 machine (right
fragment, I hope)
vistadump.zip - Windows memory dump files from system error report
-------------- next part --------------
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 0 of length 148 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBnegprot (pid 19049) conn 0x0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/05/04 12:52:56, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [LANMAN1.0]
[2009/05/04 12:52:56, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [Windows for Workgroups 3.1a]
[2009/05/04 12:52:56, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [LM1.2X002]
[2009/05/04 12:52:56, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [LANMAN2.1]
[2009/05/04 12:52:56, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [NT LM 0.12]
[2009/05/04 12:52:56, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [SMB 2.002]
[2009/05/04 12:52:56, 3] smbd/negprot.c:reply_nt1(392)
using SPNEGO
[2009/05/04 12:52:56, 3] smbd/negprot.c:reply_negprot(674)
Selected protocol NT LM 0.12
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 1 of length 142 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBsesssetupX (pid 19049) conn 0x0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1412)
wct=12 flg2=0xc807
[2009/05/04 12:52:56, 2] smbd/sesssetup.c:setup_new_vc_session(1368)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/05/04 12:52:56, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1175)
Doing spnego session setup
[2009/05/04 12:52:56, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1210)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2009/05/04 12:52:56, 3] smbd/sesssetup.c:reply_spnego_negotiate(802)
reply_spnego_negotiate: Got secblob of size 40
[2009/05/04 12:52:56, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088297
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 2 of length 192 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBsesssetupX (pid 19049) conn 0x0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1412)
wct=12 flg2=0xc807
[2009/05/04 12:52:56, 2] smbd/sesssetup.c:setup_new_vc_session(1368)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/05/04 12:52:56, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1175)
Doing spnego session setup
[2009/05/04 12:52:56, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1210)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2009/05/04 12:52:56, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(747)
Got user=[] domain=[] workstation=[OXYGEN] len1=1 len2=0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] auth/auth.c:check_ntlm_password(220)
check_ntlm_password: Checking password for unmapped user []\[]@[OXYGEN] with the new password interface
[2009/05/04 12:52:56, 3] auth/auth.c:check_ntlm_password(223)
check_ntlm_password: mapped user is: [MENDELEEV]\[]@[OXYGEN]
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] auth/auth.c:check_ntlm_password(269)
check_ntlm_password: guest authentication for user [] succeeded
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-21-4154945582-1968121848-1808505519-501]
[2009/05/04 12:52:56, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2009/05/04 12:52:56, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-32-546]
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337)
NTLMSSP Sign/Seal - Initialising with flags:
[2009/05/04 12:52:56, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088215
[2009/05/04 12:52:56, 3] smbd/password.c:register_existing_vuid(289)
register_existing_vuid: User name: nobody Real name: nobody
[2009/05/04 12:52:56, 3] smbd/password.c:register_existing_vuid(299)
register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 3 of length 82 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBtconX (pid 19049) conn 0x0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/service.c:make_connection_snum(871)
Connect path is '/tmp' for service [IPC$]
[2009/05/04 12:52:56, 3] smbd/vfs.c:vfs_init_default(96)
Initialising default vfs hooks
[2009/05/04 12:52:56, 3] smbd/vfs.c:vfs_init_custom(130)
Initialising custom vfs hooks from [/[Default VFS]/]
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/service.c:make_connection_snum(1111)
oxygen (192.168.0.103) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 19049)
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/reply.c:reply_tcon_and_X(794)
tconX service=IPC$
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 4 of length 108 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBntcreateX (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/nttrans.c:nt_open_pipe(286)
nt_open_pipe: Known pipe NETLOGON opening.
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 5 of length 76 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans2 (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 6 of length 228 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1618)
api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for netlogon
[2009/05/04 12:52:56, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7361 nwritten=160
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 7 of length 63 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7361 min=1024 max=1024 nread=72
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 8 of length 162 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 168
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:52:56, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7361 nwritten=94
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 9 of length 63 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7361 min=1024 max=1024 nread=36
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 10 of length 200 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:52:56, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7361 nwritten=132
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 11 of length 63 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7361 min=1024 max=1024 nread=32
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 12 of length 200 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE2
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:52:56, 3] passdb/secrets.c:secrets_store_schannel_session_info(1217)
secrets_store_schannel_session_info: stored schannel info with key SECRETS/SCHANNEL/OXYGEN
[2009/05/04 12:52:56, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:52:56, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:52:56, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7361 nwritten=132
[2009/05/04 12:52:56, 3] smbd/process.c:process_smb(1554)
Transaction 13 of length 63 (0 toread)
[2009/05/04 12:52:56, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x9574478
[2009/05/04 12:52:56, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7361 min=1024 max=1024 nread=40
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 14 of length 142 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBsesssetupX (pid 19049) conn 0x0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1412)
wct=12 flg2=0xc807
[2009/05/04 12:53:04, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1175)
Doing spnego session setup
[2009/05/04 12:53:04, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1210)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2009/05/04 12:53:04, 3] smbd/sesssetup.c:reply_spnego_negotiate(802)
reply_spnego_negotiate: Got secblob of size 40
[2009/05/04 12:53:04, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088297
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 15 of length 192 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBsesssetupX (pid 19049) conn 0x0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1412)
wct=12 flg2=0xc807
[2009/05/04 12:53:04, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1175)
Doing spnego session setup
[2009/05/04 12:53:04, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1210)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2009/05/04 12:53:04, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(747)
Got user=[] domain=[] workstation=[OXYGEN] len1=1 len2=0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] auth/auth.c:check_ntlm_password(220)
check_ntlm_password: Checking password for unmapped user []\[]@[OXYGEN] with the new password interface
[2009/05/04 12:53:04, 3] auth/auth.c:check_ntlm_password(223)
check_ntlm_password: mapped user is: [MENDELEEV]\[]@[OXYGEN]
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] auth/auth.c:check_ntlm_password(269)
check_ntlm_password: guest authentication for user [] succeeded
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-21-4154945582-1968121848-1808505519-501]
[2009/05/04 12:53:04, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2009/05/04 12:53:04, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-32-546]
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337)
NTLMSSP Sign/Seal - Initialising with flags:
[2009/05/04 12:53:04, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088215
[2009/05/04 12:53:04, 3] smbd/password.c:register_existing_vuid(289)
register_existing_vuid: User name: nobody Real name: nobody
[2009/05/04 12:53:04, 3] smbd/password.c:register_existing_vuid(299)
register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 101
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 16 of length 82 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtconX (pid 19049) conn 0x0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/service.c:make_connection_snum(871)
Connect path is '/tmp' for service [IPC$]
[2009/05/04 12:53:04, 3] smbd/vfs.c:vfs_init_default(96)
Initialising default vfs hooks
[2009/05/04 12:53:04, 3] smbd/vfs.c:vfs_init_custom(130)
Initialising custom vfs hooks from [/[Default VFS]/]
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/service.c:make_connection_snum(1111)
oxygen (192.168.0.103) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 19049)
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/reply.c:reply_tcon_and_X(794)
tconX service=IPC$
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 17 of length 104 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBntcreateX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/nttrans.c:nt_open_pipe(286)
nt_open_pipe: Known pipe lsarpc opening.
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 18 of length 76 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans2 (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 19 of length 228 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1618)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for lsarpc
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7362 nwritten=160
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 20 of length 63 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7362 min=1024 max=1024 nread=68
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 21 of length 156 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 166
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 820
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7362 nwritten=88
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 22 of length 63 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7362 min=1024 max=1024 nread=48
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 23 of length 120 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_ENUMTRUSTDOM
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 4
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7362 nwritten=52
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 24 of length 63 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7362 min=1024 max=1024 nread=44
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 25 of length 112 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_CLOSE
[2009/05/04 12:53:04, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(209)
Closed policy
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7362 nwritten=44
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 26 of length 63 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7362 min=1024 max=1024 nread=48
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 27 of length 45 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBclose (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 28 of length 104 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBntcreateX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/nttrans.c:nt_open_pipe(286)
nt_open_pipe: Known pipe lsarpc opening.
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 29 of length 104 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBntcreateX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/nttrans.c:nt_open_pipe(286)
nt_open_pipe: Known pipe lsarpc opening.
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 30 of length 76 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans2 (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 31 of length 104 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBntcreateX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/nttrans.c:nt_open_pipe(286)
nt_open_pipe: Known pipe lsarpc opening.
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 32 of length 76 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans2 (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 33 of length 228 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1618)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for lsarpc
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7365 nwritten=160
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 34 of length 63 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7365 min=1024 max=1024 nread=68
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 35 of length 184 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/ipc.c:handle_trans(439)
trans <\PIPE\> data=96 params=0 setup=2
[2009/05/04 12:53:04, 3] smbd/ipc.c:named_pipe(390)
named pipe command on <> name
[2009/05/04 12:53:04, 3] smbd/ipc.c:api_fd_reply(348)
Got API command 0x26 on pipe "lsarpc" (pnum 7365)
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 166
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 820
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 36 of length 184 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1618)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for lsarpc
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7363 nwritten=116
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 37 of length 184 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1618)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for lsarpc
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=7364 nwritten=116
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 38 of length 63 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7363 min=1024 max=1024 nread=68
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 39 of length 63 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=7364 min=1024 max=1024 nread=68
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 40 of length 196 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/ipc.c:handle_trans(439)
trans <\PIPE\> data=108 params=0 setup=2
[2009/05/04 12:53:04, 3] smbd/ipc.c:named_pipe(390)
named pipe command on <> name
[2009/05/04 12:53:04, 3] smbd/ipc.c:api_fd_reply(348)
Got API command 0x26 on pipe "lsarpc" (pnum 7365)
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_LOOKUPSIDS
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 2880
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 41 of length 184 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/ipc.c:handle_trans(439)
trans <\PIPE\> data=96 params=0 setup=2
[2009/05/04 12:53:04, 3] smbd/ipc.c:named_pipe(390)
named pipe command on <> name
[2009/05/04 12:53:04, 3] smbd/ipc.c:api_fd_reply(348)
Got API command 0x26 on pipe "lsarpc" (pnum 7363)
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 118
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 820
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 42 of length 184 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/ipc.c:handle_trans(439)
trans <\PIPE\> data=96 params=0 setup=2
[2009/05/04 12:53:04, 3] smbd/ipc.c:named_pipe(390)
named pipe command on <> name
[2009/05/04 12:53:04, 3] smbd/ipc.c:api_fd_reply(348)
Got API command 0x26 on pipe "lsarpc" (pnum 7364)
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 118
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 820
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 43 of length 132 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/ipc.c:handle_trans(439)
trans <\PIPE\> data=44 params=0 setup=2
[2009/05/04 12:53:04, 3] smbd/ipc.c:named_pipe(390)
named pipe command on <> name
[2009/05/04 12:53:04, 3] smbd/ipc.c:api_fd_reply(348)
Got API command 0x26 on pipe "lsarpc" (pnum 7365)
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_CLOSE
[2009/05/04 12:53:04, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(209)
Closed policy
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 44 of length 196 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/ipc.c:handle_trans(439)
trans <\PIPE\> data=108 params=0 setup=2
[2009/05/04 12:53:04, 3] smbd/ipc.c:named_pipe(390)
named pipe command on <> name
[2009/05/04 12:53:04, 3] smbd/ipc.c:api_fd_reply(348)
Got API command 0x26 on pipe "lsarpc" (pnum 7363)
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_LOOKUPSIDS
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 2880
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 45 of length 196 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/ipc.c:handle_trans(439)
trans <\PIPE\> data=108 params=0 setup=2
[2009/05/04 12:53:04, 3] smbd/ipc.c:named_pipe(390)
named pipe command on <> name
[2009/05/04 12:53:04, 3] smbd/ipc.c:api_fd_reply(348)
Got API command 0x26 on pipe "lsarpc" (pnum 7364)
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_LOOKUPSIDS
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:53:04, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 2880
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 46 of length 132 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/ipc.c:handle_trans(439)
trans <\PIPE\> data=44 params=0 setup=2
[2009/05/04 12:53:04, 3] smbd/ipc.c:named_pipe(390)
named pipe command on <> name
[2009/05/04 12:53:04, 3] smbd/ipc.c:api_fd_reply(348)
Got API command 0x26 on pipe "lsarpc" (pnum 7363)
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_CLOSE
[2009/05/04 12:53:04, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(209)
Closed policy
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 47 of length 132 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/ipc.c:handle_trans(439)
trans <\PIPE\> data=44 params=0 setup=2
[2009/05/04 12:53:04, 3] smbd/ipc.c:named_pipe(390)
named pipe command on <> name
[2009/05/04 12:53:04, 3] smbd/ipc.c:api_fd_reply(348)
Got API command 0x26 on pipe "lsarpc" (pnum 7364)
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_CLOSE
[2009/05/04 12:53:04, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(209)
Closed policy
[2009/05/04 12:53:04, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 48 of length 45 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBclose (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 49 of length 45 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBclose (pid 19049) conn 0x957af40
[2009/05/04 12:53:04, 3] smbd/process.c:process_smb(1554)
Transaction 50 of length 45 (0 toread)
[2009/05/04 12:53:04, 3] smbd/process.c:switch_message(1378)
switch message SMBclose (pid 19049) conn 0x957af40
[2009/05/04 12:53:07, 3] smbd/process.c:process_smb(1554)
Transaction 51 of length 45 (0 toread)
[2009/05/04 12:53:07, 3] smbd/process.c:switch_message(1378)
switch message SMBclose (pid 19049) conn 0x9574478
[2009/05/04 12:53:07, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:14, 3] smbd/process.c:process_smb(1554)
Transaction 52 of length 39 (0 toread)
[2009/05/04 12:53:14, 3] smbd/process.c:switch_message(1378)
switch message SMBtdis (pid 19049) conn 0x957af40
[2009/05/04 12:53:14, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:14, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:14, 3] smbd/service.c:close_cnum(1323)
oxygen (192.168.0.103) closed connection to service IPC$
[2009/05/04 12:53:14, 3] smbd/connection.c:yield_connection(31)
Yielding connection to IPC$
[2009/05/04 12:53:14, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:14, 3] smbd/process.c:process_smb(1554)
Transaction 53 of length 43 (0 toread)
[2009/05/04 12:53:14, 3] smbd/process.c:switch_message(1378)
switch message SMBulogoffX (pid 19049) conn 0x0
[2009/05/04 12:53:14, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:14, 3] smbd/reply.c:reply_ulogoffX(1977)
ulogoffX vuid=101
[2009/05/04 12:53:20, 3] smbd/process.c:process_smb(1554)
Transaction 54 of length 39 (0 toread)
[2009/05/04 12:53:20, 3] smbd/process.c:switch_message(1378)
switch message SMBtdis (pid 19049) conn 0x9574478
[2009/05/04 12:53:20, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:20, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:20, 3] smbd/service.c:close_cnum(1323)
oxygen (192.168.0.103) closed connection to service IPC$
[2009/05/04 12:53:20, 3] smbd/connection.c:yield_connection(31)
Yielding connection to IPC$
[2009/05/04 12:53:20, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:20, 3] smbd/process.c:process_smb(1554)
Transaction 55 of length 43 (0 toread)
[2009/05/04 12:53:20, 3] smbd/process.c:switch_message(1378)
switch message SMBulogoffX (pid 19049) conn 0x0
[2009/05/04 12:53:20, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:20, 3] smbd/reply.c:reply_ulogoffX(1977)
ulogoffX vuid=100
[2009/05/04 12:53:20, 3] smbd/process.c:smbd_process(1930)
receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
[2009/05/04 12:53:20, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:53:20, 3] smbd/connection.c:yield_connection(31)
Yielding connection to
[2009/05/04 12:53:20, 3] smbd/server.c:exit_server_common(975)
Server exit (normal exit)
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 0 of length 148 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBnegprot (pid 19061) conn 0x0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/05/04 12:55:15, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [LANMAN1.0]
[2009/05/04 12:55:15, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [Windows for Workgroups 3.1a]
[2009/05/04 12:55:15, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [LM1.2X002]
[2009/05/04 12:55:15, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [LANMAN2.1]
[2009/05/04 12:55:15, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [NT LM 0.12]
[2009/05/04 12:55:15, 3] smbd/negprot.c:reply_negprot(569)
Requested protocol [SMB 2.002]
[2009/05/04 12:55:15, 3] smbd/negprot.c:reply_nt1(392)
using SPNEGO
[2009/05/04 12:55:15, 3] smbd/negprot.c:reply_negprot(674)
Selected protocol NT LM 0.12
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 1 of length 142 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBsesssetupX (pid 19061) conn 0x0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1412)
wct=12 flg2=0xc807
[2009/05/04 12:55:15, 2] smbd/sesssetup.c:setup_new_vc_session(1368)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/05/04 12:55:15, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1175)
Doing spnego session setup
[2009/05/04 12:55:15, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1210)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2009/05/04 12:55:15, 3] smbd/sesssetup.c:reply_spnego_negotiate(802)
reply_spnego_negotiate: Got secblob of size 40
[2009/05/04 12:55:15, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088297
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 2 of length 192 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBsesssetupX (pid 19061) conn 0x0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1412)
wct=12 flg2=0xc807
[2009/05/04 12:55:15, 2] smbd/sesssetup.c:setup_new_vc_session(1368)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/05/04 12:55:15, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1175)
Doing spnego session setup
[2009/05/04 12:55:15, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1210)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2009/05/04 12:55:15, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(747)
Got user=[] domain=[] workstation=[OXYGEN] len1=1 len2=0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] auth/auth.c:check_ntlm_password(220)
check_ntlm_password: Checking password for unmapped user []\[]@[OXYGEN] with the new password interface
[2009/05/04 12:55:15, 3] auth/auth.c:check_ntlm_password(223)
check_ntlm_password: mapped user is: [MENDELEEV]\[]@[OXYGEN]
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] auth/auth.c:check_ntlm_password(269)
check_ntlm_password: guest authentication for user [] succeeded
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-21-4154945582-1968121848-1808505519-501]
[2009/05/04 12:55:15, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2009/05/04 12:55:15, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-32-546]
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337)
NTLMSSP Sign/Seal - Initialising with flags:
[2009/05/04 12:55:15, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088215
[2009/05/04 12:55:15, 3] smbd/password.c:register_existing_vuid(289)
register_existing_vuid: User name: nobody Real name: nobody
[2009/05/04 12:55:15, 3] smbd/password.c:register_existing_vuid(299)
register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 3 of length 82 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBtconX (pid 19061) conn 0x0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/service.c:make_connection_snum(871)
Connect path is '/tmp' for service [IPC$]
[2009/05/04 12:55:15, 3] smbd/vfs.c:vfs_init_default(96)
Initialising default vfs hooks
[2009/05/04 12:55:15, 3] smbd/vfs.c:vfs_init_custom(130)
Initialising custom vfs hooks from [/[Default VFS]/]
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/service.c:make_connection_snum(1111)
oxygen (192.168.0.103) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 19061)
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/reply.c:reply_tcon_and_X(794)
tconX service=IPC$
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 4 of length 108 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBntcreateX (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/nttrans.c:nt_open_pipe(286)
nt_open_pipe: Known pipe NETLOGON opening.
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 5 of length 76 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans2 (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 6 of length 228 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1618)
api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for netlogon
[2009/05/04 12:55:15, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=73e6 nwritten=160
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 7 of length 63 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=73e6 min=1024 max=1024 nread=72
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 8 of length 162 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 168
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:55:15, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=73e6 nwritten=94
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 9 of length 63 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=73e6 min=1024 max=1024 nread=36
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 10 of length 200 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:55:15, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=73e6 nwritten=132
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 11 of length 63 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=73e6 min=1024 max=1024 nread=32
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 12 of length 200 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE2
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:15, 3] passdb/secrets.c:secrets_store_schannel_session_info(1217)
secrets_store_schannel_session_info: stored schannel info with key SECRETS/SCHANNEL/OXYGEN
[2009/05/04 12:55:15, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:15, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:55:15, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=73e6 nwritten=132
[2009/05/04 12:55:15, 3] smbd/process.c:process_smb(1554)
Transaction 13 of length 63 (0 toread)
[2009/05/04 12:55:15, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19061) conn 0x9574478
[2009/05/04 12:55:15, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=73e6 min=1024 max=1024 nread=40
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 14 of length 142 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBsesssetupX (pid 19061) conn 0x0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1412)
wct=12 flg2=0xc807
[2009/05/04 12:55:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1175)
Doing spnego session setup
[2009/05/04 12:55:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1210)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2009/05/04 12:55:22, 3] smbd/sesssetup.c:reply_spnego_negotiate(802)
reply_spnego_negotiate: Got secblob of size 40
[2009/05/04 12:55:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088297
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 15 of length 192 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBsesssetupX (pid 19061) conn 0x0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1412)
wct=12 flg2=0xc807
[2009/05/04 12:55:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1175)
Doing spnego session setup
[2009/05/04 12:55:22, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1210)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2009/05/04 12:55:22, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(747)
Got user=[] domain=[] workstation=[OXYGEN] len1=1 len2=0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] auth/auth.c:check_ntlm_password(220)
check_ntlm_password: Checking password for unmapped user []\[]@[OXYGEN] with the new password interface
[2009/05/04 12:55:22, 3] auth/auth.c:check_ntlm_password(223)
check_ntlm_password: mapped user is: [MENDELEEV]\[]@[OXYGEN]
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] auth/auth.c:check_ntlm_password(269)
check_ntlm_password: guest authentication for user [] succeeded
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-21-4154945582-1968121848-1808505519-501]
[2009/05/04 12:55:22, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-2]
[2009/05/04 12:55:22, 3] lib/privileges.c:get_privileges(63)
get_privileges: No privileges assigned to SID [S-1-5-32-546]
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337)
NTLMSSP Sign/Seal - Initialising with flags:
[2009/05/04 12:55:22, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
Got NTLMSSP neg_flags=0xe2088215
[2009/05/04 12:55:22, 3] smbd/password.c:register_existing_vuid(289)
register_existing_vuid: User name: nobody Real name: nobody
[2009/05/04 12:55:22, 3] smbd/password.c:register_existing_vuid(299)
register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 101
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 16 of length 82 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBtconX (pid 19061) conn 0x0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/service.c:make_connection_snum(871)
Connect path is '/tmp' for service [IPC$]
[2009/05/04 12:55:22, 3] smbd/vfs.c:vfs_init_default(96)
Initialising default vfs hooks
[2009/05/04 12:55:22, 3] smbd/vfs.c:vfs_init_custom(130)
Initialising custom vfs hooks from [/[Default VFS]/]
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/service.c:make_connection_snum(1111)
oxygen (192.168.0.103) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 19061)
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/reply.c:reply_tcon_and_X(794)
tconX service=IPC$
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 17 of length 104 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBntcreateX (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/nttrans.c:nt_open_pipe(286)
nt_open_pipe: Known pipe lsarpc opening.
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 18 of length 76 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBtrans2 (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 19 of length 228 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1618)
api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe.c:check_bind_req(991)
check_bind_req for lsarpc
[2009/05/04 12:55:22, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=73e7 nwritten=160
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 20 of length 63 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=73e7 min=1024 max=1024 nread=68
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 21 of length 156 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 166
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_OPENPOLICY2
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 820
[2009/05/04 12:55:22, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=73e7 nwritten=88
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 22 of length 63 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=73e7 min=1024 max=1024 nread=48
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 23 of length 120 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_ENUMTRUSTDOM
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:push_sec_ctx(224)
push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/uid.c:push_conn_ctx(388)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/05/04 12:55:22, 3] smbd/sec_ctx.c:pop_sec_ctx(432)
pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 4
[2009/05/04 12:55:22, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=73e7 nwritten=52
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 24 of length 63 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=73e7 min=1024 max=1024 nread=44
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 25 of length 112 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBwriteX (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe.c:api_rpcTNP(2360)
api_rpcTNP: rpc command: LSA_CLOSE
[2009/05/04 12:55:22, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(209)
Closed policy
[2009/05/04 12:55:22, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(500)
free_pipe_context: destroying talloc pool of size 0
[2009/05/04 12:55:22, 3] smbd/pipes.c:reply_pipe_write_and_X(241)
writeX-IPC pnum=73e7 nwritten=44
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 26 of length 63 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBreadX (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:22, 3] smbd/pipes.c:reply_pipe_read_and_X(291)
readX-IPC pnum=73e7 min=1024 max=1024 nread=48
[2009/05/04 12:55:22, 3] smbd/process.c:process_smb(1554)
Transaction 27 of length 45 (0 toread)
[2009/05/04 12:55:22, 3] smbd/process.c:switch_message(1378)
switch message SMBclose (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:33, 3] smbd/process.c:process_smb(1554)
Transaction 28 of length 39 (0 toread)
[2009/05/04 12:55:33, 3] smbd/process.c:switch_message(1378)
switch message SMBtdis (pid 19061) conn 0x957aeb8
[2009/05/04 12:55:33, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:33, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:33, 3] smbd/service.c:close_cnum(1323)
oxygen (192.168.0.103) closed connection to service IPC$
[2009/05/04 12:55:33, 3] smbd/connection.c:yield_connection(31)
Yielding connection to IPC$
[2009/05/04 12:55:33, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:33, 3] smbd/process.c:process_smb(1554)
Transaction 29 of length 43 (0 toread)
[2009/05/04 12:55:33, 3] smbd/process.c:switch_message(1378)
switch message SMBulogoffX (pid 19061) conn 0x0
[2009/05/04 12:55:33, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:55:33, 3] smbd/reply.c:reply_ulogoffX(1977)
ulogoffX vuid=101
[2009/05/04 12:55:50, 3] smbd/process.c:process_smb(1554)
Transaction 30 of length 45 (0 toread)
[2009/05/04 12:55:50, 3] smbd/process.c:switch_message(1378)
switch message SMBclose (pid 19061) conn 0x9574478
[2009/05/04 12:55:50, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/05/04 12:56:00, 3] smbd/process.c:process_smb(1554)
Transaction 31 of length 39 (0 toread)
[2009/05/04 12:56:00, 3] smbd/process.c:switch_message(1378)
switch message SMBtdis (pid 19061) conn 0x9574478
[2009/05/04 12:56:00, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:56:00, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:56:00, 3] smbd/service.c:close_cnum(1323)
oxygen (192.168.0.103) closed connection to service IPC$
[2009/05/04 12:56:00, 3] smbd/connection.c:yield_connection(31)
Yielding connection to IPC$
[2009/05/04 12:56:00, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:56:00, 3] smbd/process.c:process_smb(1554)
Transaction 32 of length 43 (0 toread)
[2009/05/04 12:56:00, 3] smbd/process.c:switch_message(1378)
switch message SMBulogoffX (pid 19061) conn 0x0
[2009/05/04 12:56:00, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:56:00, 3] smbd/reply.c:reply_ulogoffX(1977)
ulogoffX vuid=100
[2009/05/04 12:56:00, 3] smbd/process.c:smbd_process(1930)
receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
[2009/05/04 12:56:00, 3] smbd/sec_ctx.c:set_sec_ctx(324)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/05/04 12:56:00, 3] smbd/connection.c:yield_connection(31)
Yielding connection to
[2009/05/04 12:56:00, 3] smbd/server.c:exit_server_common(975)
Server exit (normal exit)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vistadump.zip
Type: application/x-zip
Size: 445520 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20090504/4bd75ed2/attachment-0001.bin>
More information about the Pkg-samba-maint
mailing list